Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:05-03-2016 01
Uruchomiony przez Marcin (administrator)  MISTRZ (31-03-2016 14:17:44)
Uruchomiony z C:\Users\Marcin\Downloads
Załadowane profile: Marcin (Dostępne profile: Marcin)
Platform: Windows 8.1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\avfaudiosw.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Lenovo) C:\Program Files\Lenovo\OneKey Optimizer\bin\FbService.exe
() C:\Users\Marcin\AppData\Roaming\Wyblifubyi\Wyblifubyi.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOUpdataService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
() C:\Program Files\Lenovo PhoneCompanion\LPAWDService.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Settings\x86\LenovoSetSvr.exe
(Lenovo(beijing) Limited) C:\Windows\System32\LenovoWiFiHotspotSvr.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfemms.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe
() C:\Users\Marcin\AppData\Roaming\Cemmueyk\Cemmueyk.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOControlSvc.exe
(Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Users\Marcin\AppData\Roaming\MynculLinn\Kyrnoete.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.8.267.0\McCSPServiceHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Users\Marcin\AppData\Roaming\Cemmueyk\Adoro.exe
() C:\Users\Marcin\AppData\Roaming\Cemmueyk\Tugmuirsoh.exe
() C:\Users\Marcin\AppData\Roaming\Wyblifubyi\Ponlopduo.exe
() C:\Users\Marcin\AppData\Roaming\Wyblifubyi\Qotmai.exe
(DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCTray.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCTray64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\LenovoUtility\utility.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\OneKey Optimizer\bin\OneKeyOptimizerTray.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\OneKey Optimizer\bin\OnekeyOptimizerUpdata.exe
(Spotify Ltd) C:\Users\Marcin\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\tpknrres.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\OneKey Optimizer\bin\OneKeyOptimizer.exe
() C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\ui\updateui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Lenovo) C:\ProgramData\Lenovo App Services\Engine\LenovoAppServices.exe
() C:\Program Files\Lenovo PhoneCompanion\adb.exe
(McAfee, Inc.) C:\Program Files\mcafee\virusscan\McVsMap.exe
(McAfee, Inc.) C:\Program Files\mcafee\virusscan\McVsShld.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320360 2014-06-25] (Intel Corporation)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2015-04-29] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2015-04-29] (Conexant Systems, Inc.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [916184 2014-07-02] (Conexant Systems, Inc.)
HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [6340312 2014-03-25] (Realtek semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2808560 2014-08-07] (Synaptics Incorporated)
HKLM\...\Run: [LenovoUtility] => C:\Program Files\Lenovo\LenovoUtility\utility.exe [10828056 2015-06-05] (Lenovo(beijing) Limited)
HKLM\...\Run: [PhoneCompanion] => C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe [802800 2015-06-05] (Lenovo)
HKLM\...\Run: [OneKeyOptimizer] => C:\Program Files\Lenovo\OneKey Optimizer\bin\OneKeyOptimizerTray.exe [559896 2014-11-18] (Lenovo(beijing) Limited)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [LMCSSTART1] => C:\Program Files\Lenovo\Communications Utility\lmcsctrl.exe [30152 2015-03-23] (Lenovo Corporation)
HKLM\...\Run: [LMCSSTART2] => C:\Program Files\Lenovo\Communications Utility\lmcsctrl.exe [30152 2015-03-23] (Lenovo Corporation)
HKLM\...\Run: [LMCSSTART3] => C:\Program Files\Lenovo\Communications Utility\lmcsctrl.exe [30152 2015-03-23] (Lenovo Corporation)
HKLM\...\Run: [WINCOMVVP] => "C:\Program Files (x86)\sunnyday\wincom_VVP.exe"
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-06] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKLM-x32\...\Run: [win_en_77] => "C:\Program Files (x86)\win_en_77\win_en_77.exe"
HKLM-x32\...\Run: [mpck_en_005030281] => "C:\Program Files (x86)\mpck_en_005030281\mpck_en_005030281.exe"
HKLM-x32\...\Run: [rec_pl_237] => "C:\Program Files (x86)\rec_pl_237\rec_pl_237.exe"
HKU\S-1-5-21-3990597668-3980982948-3345965999-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3077712 2016-03-28] (Valve Corporation)
HKU\S-1-5-21-3990597668-3980982948-3345965999-1001\...\Run: [Spotify Web Helper] => C:\Users\Marcin\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-03-19] (Spotify Ltd)
HKU\S-1-5-21-3990597668-3980982948-3345965999-1001\...\Run: [Spotify] => C:\Users\Marcin\AppData\Roaming\Spotify\Spotify.exe [6805616 2016-03-19] (Spotify Ltd)
HKU\S-1-5-21-3990597668-3980982948-3345965999-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8641240 2016-02-12] (Piriform Ltd)
HKU\S-1-5-21-3990597668-3980982948-3345965999-1001\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft Development Team)
HKU\S-1-5-21-3990597668-3980982948-3345965999-1001\...\MountPoints2: {a0ad7a68-f1ec-11e5-8275-806e6f6e6963} - "F:\setup.exe" 

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{0449E558-69DA-4EBA-8BF8-13522C5AC885}: [NameServer] 104.197.191.4
Tcpip\..\Interfaces\{150C086D-8B79-42CA-BA1B-C8A311E9B6BC}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{52F267D3-80F1-4B60-A55F-15289AE5741E}: [NameServer] 104.197.191.4
Tcpip\..\Interfaces\{771CAF50-BED5-442D-BBD2-471CC2920EB8}: [NameServer] 104.197.191.4
Tcpip\..\Interfaces\{771CAF50-BED5-442D-BBD2-471CC2920EB8}: [DhcpNameServer] 150.211.1.3
Tcpip\..\Interfaces\{8718928D-CBEB-45EA-A621-800A9249001D}: [NameServer] 104.197.191.4
Tcpip\..\Interfaces\{93850D70-8E09-4DBD-9913-5B5C8A6B0EBA}: [NameServer] 104.197.191.4
Tcpip\..\Interfaces\{bbed3e08-0b41-11e3-8249-806e6f6e6963}: [NameServer] 104.197.191.4

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3990597668-3980982948-3345965999-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3990597668-3980982948-3345965999-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-3990597668-3980982948-3345965999-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKU\S-1-5-21-3990597668-3980982948-3345965999-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3990597668-3980982948-3345965999-1001 -> DefaultScope {93765662-4D05-4E19-91C8-CB83C3482FB2} URL = 
SearchScopes: HKU\S-1-5-21-3990597668-3980982948-3345965999-1001 -> {93765662-4D05-4E19-91C8-CB83C3482FB2} URL = 
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-03-03] (Oracle Corporation)
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Arc\Plugins\ArcPluginIE.dll [2016-02-24] (Perfect World Entertainment Inc)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-03-03] (Oracle Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2016-03-03] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2016-03-03] (McAfee, Inc.)

FireFox:
========
FF ProfilePath: C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\yv4mlldp.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_21_0_0_197.dll [2016-03-24] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2016-03-03] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-03-24] ()
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [Brak pliku]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-09-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-09-03] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-03-03] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-03-03] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2016-03-03] ()
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Arc\Plugins\npArcPluginFF.dll [2016-02-24] (Perfect World Entertainment Inc)
FF Extension: Adblock Plus - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\yv4mlldp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-02-23]
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-19] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2016-02-17] [Brak podpisu cyfrowego]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 ArcService; C:\Program Files (x86)\Arc\ArcService.exe [88024 2016-02-24] (Perfect World Entertainment Inc)
R2 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [560584 2015-03-23] (Lenovo Corporation)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft Development Team)
R2 FastbootService; C:\Program Files\Lenovo\OneKey Optimizer\bin\FbService.exe [191512 2014-11-20] (Lenovo) [Brak podpisu cyfrowego]
R2 Fokpelil; C:\Users\Marcin\AppData\Roaming\Wyblifubyi\Wyblifubyi.exe [174424 2016-03-28] ()
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-06-25] (Intel Corporation)
R2 ibtsiva.exe; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [121288 2014-08-13] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [326760 2014-09-23] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2014-09-03] (Intel Corporation)
R3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-04-09] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-09-03] (Intel Corporation)
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [533760 2014-06-03] (Lenovo)
R2 Lenovo OKO Service; C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOUpdataService.exe [2544408 2014-11-18] (Lenovo(beijing) Limited)
R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2016040 2015-04-10] (Lenovo Group Limited)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584664 2015-12-14] (LENOVO INCORPORATED.)
S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [625608 2015-03-23] (Lenovo Corporation)
R2 LenovoPAWDService; C:\Program Files\Lenovo PhoneCompanion\LPAWDService.exe [133440 2015-06-05] ()
R2 LenovoSetSvr; C:\Program Files (x86)\Lenovo\Lenovo Settings\x86\LenovoSetSvr.exe [258544 2014-06-19] (Lenovo(beijing) Limited)
R2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [218952 2014-08-25] (Lenovo(beijing) Limited)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [863448 2016-03-03] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [332528 2014-03-12] (McAfee, Inc.)
R2 mcbootdelaystartsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.8.267.0\McCSPServiceHost.exe [1696712 2016-02-23] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [681680 2016-02-26] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [234192 2015-11-18] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [380896 2016-01-21] (McAfee, Inc.)
R2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [275368 2015-11-18] (McAfee, Inc.)
R2 MPCProtectService; C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe [350688 2016-03-28] (DotC United Inc)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.)
R2 Mulrot; C:\Users\Marcin\AppData\Roaming\Cemmueyk\Cemmueyk.exe [174440 2016-03-27] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2014-11-19] ()
S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [3643520 2016-01-07] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation)
R2 OKOControlSvc; C:\Program Files\Lenovo\OneKey Optimizer\bin\OKOControlSvc.exe [113944 2014-11-17] (Lenovo(beijing) Limited)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-12] (Electronic Arts)
R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [902112 2015-12-14] (Intel Security, Inc.)
R2 PhoneCompanionPusher; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe [321520 2015-06-05] (Lenovo)
S3 PhoneCompanionVap; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe [338416 2015-06-05] (Lenovo)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2016-03-26] ()
R2 Sajji; C:\Users\Marcin\AppData\Roaming\MynculLinn\Kyrnoete.exe [125800 2016-03-27] ()
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [Brak podpisu cyfrowego]
S3 Survarium Update Service; C:\Program Files (x86)\Survarium\game\binaries\x86\survarium_service.exe [214104 2016-03-18] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [190704 2014-08-07] (Synaptics Incorporated)
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe [68880 2015-06-05] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3820960 2014-11-19] (Intel® Corporation)
S2 Adorbapa; "C:\Users\Marcin\AppData\Roaming\BykwSoacmo\Fesuiie.exe" -cms [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

U3 axscsidrv; C:\Windows\System32\Drivers\axscsidrv.sys [304296 2016-03-24] (Alcohol Soft Development Team)
R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [132608 2015-01-30] (Microsoft Corporation)
R3 BthHFAud; C:\Windows\System32\drivers\BthHfAud.sys [32768 2014-11-21] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [79248 2015-11-25] (McAfee, Inc.)
S3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-03-24] (Disc Soft Ltd)
S3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-03-24] (Disc Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R0 Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [70168 2014-11-20] (Windows (R) Win 7 DDK provider) [Brak podpisu cyfrowego]
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207208 2015-05-19] (McAfee, Inc.)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [219592 2014-08-13] (Intel Corporation)
R3 KMDFVirtualKbd; C:\Windows\System32\drivers\KMDFVirtualKbd.sys [22264 2014-08-04] ()
R3 KMDFVirtualMouse; C:\Windows\System32\drivers\KMDFVirtualMouse.sys [21240 2014-08-04] ()
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [126976 2014-09-03] (Intel Corporation)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [419624 2015-11-25] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [351144 2015-11-25] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [83096 2015-11-25] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [496368 2015-11-25] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [846080 2015-11-25] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [539496 2015-11-20] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [109480 2015-11-20] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [245096 2015-11-25] (McAfee, Inc.)
R1 MPCKpt; C:\Windows\System32\DRIVERS\MPCKpt.sys [60136 2016-03-28] (DotC United Inc)
R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3494680 2015-01-20] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [9113304 2014-03-25] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-08-07] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [394296 2016-03-24] (Duplex Secure Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
U3 pwrdypow; \??\C:\Users\Marcin\AppData\Local\Temp\pwrdypow.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-03-31 14:17 - 2016-03-31 14:17 - 00026273 _____ C:\Users\Marcin\Downloads\FRST.txt
2016-03-31 14:17 - 2016-03-31 14:17 - 00000000 ____D C:\FRST
2016-03-31 13:04 - 2016-03-31 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2016-03-31 12:59 - 2016-03-31 12:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC
2016-03-31 12:23 - 2016-03-31 12:23 - 1204456928 _____ C:\WINDOWS\MEMORY.DMP
2016-03-31 12:23 - 2016-03-31 12:23 - 00478480 _____ C:\WINDOWS\Minidump\033116-26171-01.dmp
2016-03-31 12:23 - 2016-03-31 12:23 - 00000000 ____D C:\WINDOWS\Minidump
2016-03-31 12:03 - 2016-03-31 12:03 - 00380928 _____ C:\Users\Marcin\Downloads\ns8yuh0x.exe
2016-03-31 12:02 - 2016-03-31 12:02 - 02374144 _____ (Farbar) C:\Users\Marcin\Downloads\FRST64.exe
2016-03-30 21:53 - 2016-03-31 11:35 - 00003846 _____ C:\WINDOWS\System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse
2016-03-28 19:09 - 2016-03-28 19:09 - 00812344 _____ (Trend Micro Inc.) C:\Users\Marcin\Downloads\HJTInstall.exe
2016-03-28 19:09 - 2016-03-28 19:09 - 00002124 _____ C:\Users\Marcin\Desktop\HijackThis.lnk
2016-03-28 19:09 - 2016-03-28 19:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis
2016-03-28 19:09 - 2016-03-28 19:09 - 00000000 ____D C:\Program Files (x86)\Trend Micro
2016-03-28 18:55 - 2016-03-31 12:59 - 00001752 _____ C:\Users\Public\Desktop\MPC Cleaner.lnk
2016-03-28 18:54 - 2016-03-28 18:54 - 00000000 ____D C:\WINDOWS\system32\cepl
2016-03-28 18:49 - 2016-03-28 18:49 - 00032256 ___SH C:\Users\Marcin\Desktop\Thumbs.db
2016-03-28 18:46 - 2016-03-28 18:46 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\MCorp
2016-03-28 17:27 - 2016-03-28 17:27 - 00000000 ____D C:\WINDOWS\system32\los
2016-03-28 17:23 - 2016-03-28 17:23 - 00003338 _____ C:\WINDOWS\System32\Tasks\Imosfadp
2016-03-28 17:23 - 2016-03-28 17:23 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\Wyblifubyi
2016-03-28 17:23 - 2016-03-28 17:23 - 00000000 ____D C:\Users\Marcin\AppData\Local\tuto_monetize_220160328
2016-03-28 17:23 - 2016-03-28 17:23 - 00000000 ____D C:\Users\Marcin\AppData\Local\tuto_monetize_120160328
2016-03-28 17:22 - 2016-03-28 18:41 - 00000000 ____D C:\Program Files (x86)\MPC Cleaner
2016-03-28 17:22 - 2016-03-28 17:23 - 00000000 ____D C:\Users\Marcin\AppData\Local\Tempfolder
2016-03-28 17:22 - 2016-03-28 17:22 - 00060136 ____N (DotC United Inc) C:\WINDOWS\system32\Drivers\MPCKpt.sys
2016-03-28 17:22 - 2016-03-28 17:22 - 00003342 _____ C:\WINDOWS\System32\Tasks\Pepim
2016-03-28 17:22 - 2016-03-28 17:22 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\MynculLinn
2016-03-28 17:22 - 2016-03-28 17:22 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\Cemmueyk
2016-03-28 17:22 - 2016-03-28 17:22 - 00000000 ____D C:\Users\Marcin\AppData\LocalLow\Company
2016-03-28 17:22 - 2016-03-28 17:22 - 00000000 ____D C:\uninst
2016-03-28 17:21 - 2016-03-28 17:21 - 00000000 _____ C:\WINDOWS\SysWOW64\Number of results
2016-03-28 16:51 - 2016-03-28 16:49 - 00001082 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2016-03-28 16:49 - 2016-03-28 16:52 - 00000000 ____D C:\Users\Marcin\AppData\Local\app
2016-03-28 16:47 - 2016-03-28 16:47 - 00755890 _____ (DotaPit) C:\Users\Marcin\Downloads\FirewatchSpolszczenie__7934_il49169.exe
2016-03-28 16:35 - 2016-03-28 16:35 - 00000000 ____D C:\Users\Marcin\AppData\LocalLow\CampoSanto
2016-03-28 16:31 - 2016-03-28 16:31 - 00000000 ____D C:\Users\Marcin\Downloads\Firewatch.2016.Soundtrack.Edition.With.Update.5.X64-ALI213
2016-03-27 13:29 - 2016-03-27 14:12 - 1842941317 _____ C:\Users\Marcin\Downloads\Firewatch.2016.Soundtrack.Edition.With.Update.5.X64-ALI213.rar
2016-03-26 21:38 - 2016-03-26 21:38 - 00711649 _____ C:\Users\Marcin\Downloads\pbsetup.zip
2016-03-26 21:06 - 2016-03-26 21:40 - 00348360 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2016-03-26 21:05 - 2016-03-26 21:05 - 00000000 ____D C:\Users\Marcin\AppData\Local\PunkBuster
2016-03-26 21:04 - 2016-03-26 21:04 - 00000000 ____D C:\Users\Marcin\AppData\Local\ESN
2016-03-26 20:59 - 2016-03-28 17:27 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2016-03-26 20:59 - 2016-03-26 20:59 - 01640768 _____ C:\Users\Marcin\Downloads\battlelog-web-plugins_2.7.1_162.exe
2016-03-26 20:58 - 2016-03-26 21:05 - 00000000 ____D C:\Users\Marcin\Documents\Battlefield 3
2016-03-26 20:58 - 2016-03-26 20:58 - 00000000 ____D C:\ProgramData\EA Core
2016-03-26 20:57 - 2016-03-26 21:40 - 00000000 ____D C:\ProgramData\EA Logs
2016-03-26 20:53 - 2016-03-26 20:53 - 00001201 _____ C:\Users\Public\Desktop\Battlefield 3.lnk
2016-03-26 20:53 - 2016-03-26 20:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
2016-03-26 20:52 - 2016-03-26 21:40 - 00348360 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2016-03-26 20:52 - 2016-03-26 21:40 - 00076152 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2016-03-26 20:52 - 2016-03-26 21:36 - 00280904 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2016-03-26 20:37 - 2016-03-30 22:07 - 00004020 _____ C:\WINDOWS\System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse
2016-03-25 15:10 - 2016-03-25 15:10 - 00000000 ____D C:\Users\Marcin\Documents\Diablo III
2016-03-25 15:09 - 2016-03-25 15:09 - 00001153 _____ C:\Users\Public\Desktop\Diablo III.lnk
2016-03-25 15:09 - 2016-03-25 15:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2016-03-25 14:54 - 2016-03-25 14:54 - 00000000 ____D C:\Users\Marcin\AppData\LocalLow\Krillbite Studio
2016-03-25 14:47 - 2016-03-25 14:47 - 00000000 ____D C:\Users\Marcin\Documents\Assassin's Creed III
2016-03-25 14:47 - 2016-03-25 14:47 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\Theta
2016-03-25 14:29 - 2016-03-26 22:58 - 00000000 ____D C:\Program Files (x86)\Diablo III
2016-03-25 14:08 - 2016-03-26 15:36 - 00000000 ____D C:\Users\Marcin\Documents\Survarium
2016-03-25 14:08 - 2016-03-25 19:16 - 00000000 ____D C:\Program Files (x86)\Survarium
2016-03-25 14:08 - 2016-03-25 14:08 - 02466600 _____ ( ) C:\Users\Marcin\Downloads\survarium-web-installer-040a6.exe
2016-03-25 14:08 - 2016-03-25 14:08 - 00002325 _____ C:\Users\Public\Desktop\Survarium.lnk
2016-03-25 14:08 - 2016-03-25 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Survarium
2016-03-25 01:00 - 2016-03-25 01:00 - 00000321 _____ C:\Users\Marcin\Documents\ax_files.xml
2016-03-24 20:36 - 2016-03-24 20:36 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\uplay
2016-03-24 20:35 - 2016-03-24 20:35 - 00000000 ____D C:\Users\Marcin\Documents\My Games
2016-03-24 20:34 - 2016-03-24 20:34 - 00000789 _____ C:\Users\Marcin\Desktop\Tom Clancys Rainbow Six Siege.lnk
2016-03-24 20:34 - 2016-03-24 20:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tom Clancys Rainbow Six Siege
2016-03-24 20:20 - 2016-03-24 20:20 - 00304296 _____ (Alcohol Soft Development Team) C:\WINDOWS\system32\Drivers\axscsidrv.sys
2016-03-24 20:18 - 2016-03-24 20:18 - 00001211 _____ C:\Users\Public\Desktop\Alcohol 120%.lnk
2016-03-24 20:18 - 2016-03-24 20:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120%
2016-03-24 20:18 - 2016-03-24 20:18 - 00000000 ____D C:\Program Files (x86)\Alcohol Soft
2016-03-24 20:16 - 2016-03-24 20:16 - 00394296 _____ (Duplex Secure Ltd.) C:\WINDOWS\system32\Drivers\sptd.sys
2016-03-24 20:14 - 2016-03-24 20:14 - 07983488 _____ (Alcohol Soft Development Team) C:\Users\Marcin\Downloads\Alcohol120_trial_2.0.3.8703.exe
2016-03-24 20:14 - 2016-03-24 20:14 - 00000000 ____D C:\Users\Marcin\AppData\Local\Disc_Soft_Ltd
2016-03-24 20:13 - 2016-03-24 20:14 - 01023280 _____ (Hesudemo ) C:\Users\Marcin\Downloads\Alcohol-120-12712-dp.exe
2016-03-24 20:11 - 2016-03-24 20:11 - 00047672 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtliteusbbus.sys
2016-03-24 20:06 - 2016-03-24 20:06 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2016-03-24 20:05 - 2016-03-28 18:44 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\DAEMON Tools Lite
2016-03-24 20:05 - 2016-03-24 20:11 - 00030264 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtlitescsibus.sys
2016-03-24 20:05 - 2016-03-24 20:05 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2016-03-24 20:04 - 2016-03-24 20:04 - 00692072 _____ (Disc Soft Ltd.) C:\Users\Marcin\Downloads\DTLiteInstaller.exe
2016-03-24 19:53 - 2016-03-24 19:53 - 00000000 ____D C:\Users\Marcin\Downloads\Tom.Clancys.Rainbow.Six.Siege.2015-CX
2016-03-24 18:56 - 2016-03-24 19:52 - 2510082928 _____ C:\Users\Marcin\Downloads\Tom.Clancys.Rainbow.Six.Siege.2015-CX.part5.rar
2016-03-24 17:14 - 2016-03-24 17:14 - 05306560 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2016-03-24 17:13 - 2016-03-24 18:07 - 2684354560 _____ C:\Users\Marcin\Downloads\Tom.Clancys.Rainbow.Six.Siege.2015-CX.part4.rar
2016-03-23 18:02 - 2016-03-23 18:48 - 2684354560 _____ C:\Users\Marcin\Downloads\Tom.Clancys.Rainbow.Six.Siege.2015-CX.part3.rar
2016-03-23 17:46 - 2016-03-23 17:55 - 380686826 _____ C:\Users\Marcin\Downloads\Tom.Clancys.Rainbow.Six.Siege.2015-Update.v1.1-v1.3-CX.rar
2016-03-23 16:40 - 2016-03-23 17:35 - 2684354560 _____ C:\Users\Marcin\Downloads\Tom.Clancys.Rainbow.Six.Siege.2015-CX.part2.rar
2016-03-19 17:39 - 2016-03-21 18:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-03-13 21:50 - 2016-03-28 18:53 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-13 21:50 - 2016-03-13 21:50 - 01527296 _____ C:\Users\Marcin\Downloads\adwcleaner_5.102.exe
2016-03-13 21:46 - 2016-03-13 21:46 - 06837784 _____ (Piriform Ltd) C:\Users\Marcin\Downloads\ccsetup515.exe
2016-03-13 21:46 - 2016-03-13 21:46 - 00002788 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2016-03-13 21:46 - 2016-03-13 21:46 - 00000845 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-03-13 21:46 - 2016-03-13 21:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-03-13 21:46 - 2016-03-13 21:46 - 00000000 ____D C:\Program Files\CCleaner
2016-03-10 15:36 - 2016-03-10 15:36 - 00000000 ____D C:\Users\Marcin\Downloads\hexera
2016-03-10 15:34 - 2016-03-10 15:35 - 49313460 _____ C:\Users\Marcin\Downloads\hexera.zip
2016-03-10 15:34 - 2016-03-10 15:34 - 00000000 ____D C:\Users\Marcin\AppData\Local\OTLand
2016-03-10 15:33 - 2016-03-10 15:33 - 00119296 _____ (OTLand) C:\Users\Marcin\Downloads\ipchanger.exe
2016-03-10 15:32 - 2016-03-10 15:32 - 00901766 _____ C:\Users\Marcin\Downloads\IP Changer.rar
2016-03-10 15:32 - 2016-03-10 15:32 - 00000000 ____D C:\Users\Marcin\Downloads\IP Changer
2016-03-10 14:10 - 2016-03-10 14:10 - 00000990 _____ C:\Users\Public\Desktop\Tibia.lnk
2016-03-10 14:10 - 2016-03-10 14:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tibia
2016-03-10 14:10 - 2016-03-10 14:10 - 00000000 ____D C:\Program Files (x86)\Tibia
2016-03-10 14:08 - 2016-03-10 14:09 - 34146362 _____ (CipSoft GmbH ) C:\Users\Marcin\Downloads\tibia1091.exe
2016-03-09 20:51 - 2016-02-20 17:45 - 01373184 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-03-09 20:51 - 2016-02-20 17:45 - 01168896 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-03-09 20:51 - 2016-02-20 17:45 - 00696832 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-03-09 20:51 - 2016-02-20 17:45 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-03-09 20:51 - 2016-02-20 17:45 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-03-09 20:51 - 2016-02-20 17:45 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-03-09 20:51 - 2016-02-08 23:05 - 20352512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-03-09 20:51 - 2016-02-08 22:39 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-03-09 20:51 - 2016-02-08 22:34 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-03-09 20:51 - 2016-02-08 22:29 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-03-09 20:51 - 2016-02-08 22:28 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-03-09 20:51 - 2016-02-08 22:10 - 04611072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-03-09 20:51 - 2016-02-08 22:07 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-03-09 20:51 - 2016-02-08 22:05 - 25816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-03-09 20:51 - 2016-02-08 22:03 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2016-03-09 20:51 - 2016-02-08 22:02 - 13012480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-03-09 20:51 - 2016-02-08 22:02 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-03-09 20:51 - 2016-02-08 22:01 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-03-09 20:51 - 2016-02-08 21:43 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-03-09 20:51 - 2016-02-08 21:39 - 01311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-03-09 20:51 - 2016-02-08 21:38 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-03-09 20:51 - 2016-02-08 20:27 - 02887680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-03-09 20:51 - 2016-02-08 20:26 - 00571904 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-03-09 20:51 - 2016-02-08 20:16 - 06052352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-03-09 20:51 - 2016-02-08 20:14 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-03-09 20:51 - 2016-02-08 20:13 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-03-09 20:51 - 2016-02-08 19:51 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-03-09 20:51 - 2016-02-08 19:42 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-03-09 20:51 - 2016-02-08 19:37 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2016-03-09 20:51 - 2016-02-08 19:34 - 00798720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-03-09 20:51 - 2016-02-08 19:33 - 14613504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-03-09 20:51 - 2016-02-08 19:33 - 02123264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-03-09 20:51 - 2016-02-08 19:19 - 02597376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-03-09 20:51 - 2016-02-08 19:15 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-03-09 20:51 - 2016-02-08 19:07 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-03-09 20:51 - 2016-02-08 18:55 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-03-09 20:51 - 2016-02-05 21:06 - 00046768 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-03-09 20:51 - 2016-01-06 20:25 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-03-09 20:51 - 2015-12-30 23:53 - 02017624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-03-09 20:49 - 2016-02-11 16:21 - 00869576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2016-03-09 20:49 - 2016-02-11 16:21 - 00678600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll
2016-03-09 20:49 - 2016-02-11 16:20 - 00875720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2016-03-09 20:49 - 2016-02-11 16:20 - 00536776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll
2016-03-09 20:49 - 2016-02-05 16:59 - 07784960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-09 20:49 - 2016-02-05 16:55 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-03-09 20:49 - 2016-02-05 16:48 - 07075840 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2016-03-09 20:49 - 2016-02-05 16:47 - 05268480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2016-03-09 20:49 - 2016-01-24 20:19 - 00419160 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2016-03-09 20:49 - 2016-01-24 20:19 - 00378712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2016-03-09 20:49 - 2016-01-24 20:19 - 00331608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2016-03-09 20:49 - 2016-01-24 13:57 - 01335296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2016-03-09 20:49 - 2016-01-24 13:45 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2016-03-09 20:49 - 2016-01-09 03:49 - 00218448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2016-03-09 20:49 - 2016-01-09 03:49 - 00192120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2016-03-09 20:49 - 2016-01-09 03:38 - 00091992 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2016-03-09 20:48 - 2016-02-12 21:14 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-03-09 20:48 - 2016-02-12 17:14 - 03708416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-03-09 20:48 - 2016-02-12 16:55 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2016-03-09 20:48 - 2016-02-12 16:54 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2016-03-09 20:48 - 2016-02-12 16:54 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2016-03-09 20:48 - 2016-02-12 16:54 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2016-03-09 20:48 - 2016-02-12 16:51 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2016-03-09 20:48 - 2016-02-12 16:51 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2016-03-09 20:48 - 2016-02-12 16:51 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2016-03-09 20:48 - 2016-02-12 16:48 - 02244096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2016-03-09 20:48 - 2016-02-12 16:47 - 00897024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-03-09 20:48 - 2016-02-12 16:46 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-03-09 20:48 - 2016-02-06 20:08 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2016-03-09 20:48 - 2016-02-06 18:58 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-03-09 20:48 - 2016-02-06 18:32 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-03-09 20:48 - 2016-02-05 21:07 - 00292696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMASF.DLL
2016-03-09 20:48 - 2016-02-05 21:07 - 00243032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMASF.DLL
2016-03-09 20:48 - 2016-02-05 17:03 - 15432704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-03-09 20:48 - 2016-02-05 17:00 - 13318144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-03-09 20:48 - 2016-02-04 20:18 - 04174336 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-03-09 20:48 - 2016-02-04 20:18 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-03-09 20:48 - 2016-02-04 20:12 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-03-09 20:48 - 2016-02-04 19:44 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-03-09 20:48 - 2016-02-04 19:39 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-03-09 20:48 - 2016-02-04 19:24 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-03-09 20:48 - 2016-02-04 19:02 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-03-09 20:48 - 2016-02-03 22:37 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-03-09 20:48 - 2016-02-03 22:36 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-03-09 20:48 - 2016-02-03 17:09 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-03-09 20:48 - 2016-02-03 17:00 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-03-09 20:48 - 2016-02-03 17:00 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-03-09 20:48 - 2016-01-31 21:16 - 00148832 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2016-03-09 20:48 - 2016-01-15 18:56 - 02487296 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2016-03-09 20:48 - 2016-01-15 18:45 - 01482240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2016-03-09 20:48 - 2016-01-10 18:41 - 01707008 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2016-03-09 20:48 - 2016-01-10 18:31 - 01344512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2016-03-09 20:48 - 2016-01-07 01:46 - 00148752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2016-03-09 20:48 - 2016-01-07 01:45 - 00177712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2016-03-09 20:48 - 2016-01-06 18:47 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-03-09 20:48 - 2016-01-05 17:00 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-03-09 20:48 - 2015-12-30 22:49 - 00470360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2016-03-09 20:48 - 2015-12-20 16:57 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2016-03-09 20:48 - 2015-12-20 16:56 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe
2016-03-09 20:48 - 2015-12-20 16:43 - 00696320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2016-03-09 20:48 - 2015-11-19 16:33 - 00994760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2016-03-09 20:48 - 2015-11-19 16:26 - 00922432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2016-03-04 15:06 - 2016-03-04 15:06 - 00000021 _____ C:\ProgramData\settings.cfg
2016-03-04 15:06 - 2016-03-04 15:06 - 00000018 _____ C:\WINDOWS\SysWOW64\taskSchedularLog.txt
2016-03-04 14:33 - 2016-03-04 14:33 - 00000000 ____D C:\Users\Marcin\Downloads\Paczka Best Of February 2016 - Part1
2016-03-04 14:31 - 2016-03-04 14:33 - 192820337 _____ C:\Users\Marcin\Downloads\Paczka Best Of February 2016 - Part1.rar
2016-03-04 12:44 - 2016-03-04 12:44 - 00000000 ____D C:\Users\Marcin\Downloads\1454361357_OHMYMODZ Essential 4.0
2016-03-04 12:43 - 2016-03-04 12:43 - 00983340 _____ C:\Users\Marcin\Downloads\1454361357_OHMYMODZ Essential 4.0.rar
2016-03-04 12:25 - 2016-03-04 12:25 - 00001184 _____ C:\Users\Public\Desktop\AION Free-to-Play.lnk
2016-03-04 12:21 - 2016-03-04 12:21 - 20248088 _____ (Gameforge ) C:\Users\Marcin\Downloads\AION_GameforgeLiveSetup.exe
2016-03-03 21:03 - 2016-03-28 16:31 - 00029184 ___SH C:\Users\Marcin\Downloads\Thumbs.db
2016-03-03 14:58 - 2016-03-04 11:05 - 00000000 ____D C:\Program Files (x86)\Neverwinter_pl
2016-03-03 14:58 - 2016-03-03 14:58 - 00001950 _____ C:\Users\Public\Desktop\Neverwinter.lnk
2016-03-03 14:53 - 2016-03-03 14:53 - 00001345 _____ C:\Users\Marcin\Desktop\GameClient — skrót.lnk
2016-03-03 14:49 - 2016-02-24 01:58 - 42983992 _____ C:\WINDOWS\system32\nvcompiler.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 37616184 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 31081920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 24914880 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 21193032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 20733832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 18758400 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 17625136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 17218792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 16995384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 16328088 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 14016768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 12381632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2016-03-03 14:49 - 2016-02-24 01:58 - 03143616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 02722872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 01922496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436200.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 01571776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436200.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 00950328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 00880576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 00747064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 00689600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 00502080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 00425016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 00423080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 00377792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 00175368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2016-03-03 14:49 - 2016-02-24 01:58 - 00153392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2016-03-03 14:30 - 2016-03-03 14:31 - 00000000 ____D C:\ProgramData\Oracle
2016-03-03 14:30 - 2016-03-03 14:30 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-03-03 14:30 - 2016-03-03 14:30 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\Sun
2016-03-03 14:30 - 2016-03-03 14:30 - 00000000 ____D C:\Users\Marcin\AppData\LocalLow\Sun
2016-03-03 14:30 - 2016-03-03 14:30 - 00000000 ____D C:\Users\Marcin\.oracle_jre_usage
2016-03-03 14:30 - 2016-03-03 14:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-03-03 14:30 - 2016-03-03 14:30 - 00000000 ____D C:\Program Files (x86)\Java
2016-03-03 14:29 - 2016-03-03 14:29 - 00735328 _____ (Oracle Corporation) C:\Users\Marcin\Downloads\jxpiinstall.exe
2016-03-03 14:29 - 2016-03-03 14:29 - 00000000 ____D C:\Users\Marcin\AppData\LocalLow\Oracle
2016-03-02 14:45 - 2016-03-03 14:58 - 00000000 ___HD C:\ArcTemp
2016-03-02 14:42 - 2016-03-02 14:45 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\Arc
2016-03-02 14:42 - 2016-03-02 14:42 - 00000000 ____D C:\Users\Public\Documents\Arc
2016-03-02 14:41 - 2016-03-04 11:05 - 00000000 ____D C:\Program Files (x86)\Arc
2016-03-02 14:41 - 2016-03-03 14:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2016-03-02 14:41 - 2016-03-02 14:41 - 00001604 _____ C:\Users\Public\Desktop\Arc.lnk
2016-03-02 14:40 - 2016-03-02 14:40 - 00999096 _____ (Perfect World Entertainment) C:\Users\Marcin\Downloads\Neverwinter_ArcSetup.exe
2016-03-02 14:40 - 2016-03-02 14:40 - 00000000 ____D C:\Users\Marcin\Downloads\Log
2016-03-02 14:40 - 2016-02-05 20:43 - 10478336 _____ (Perfect World Entertainment) C:\Users\Marcin\Downloads\ArcInstall_NW_20151009a.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-03-31 14:14 - 2016-01-29 22:25 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-03-31 13:13 - 2016-01-28 19:55 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3990597668-3980982948-3345965999-1001
2016-03-31 13:08 - 2015-06-05 10:45 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2016-03-31 13:04 - 2016-01-30 13:39 - 00000000 ____D C:\Users\Marcin\AppData\Local\Spotify
2016-03-31 13:04 - 2016-01-30 13:38 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\Spotify
2016-03-31 13:04 - 2016-01-28 20:18 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-31 12:59 - 2016-01-29 19:51 - 00000000 ___RD C:\Users\Marcin\OneDrive
2016-03-31 12:59 - 2016-01-28 19:49 - 00000000 ____D C:\Users\Marcin
2016-03-31 12:28 - 2015-06-05 19:43 - 00808198 _____ C:\WINDOWS\system32\perfh015.dat
2016-03-31 12:28 - 2015-06-05 19:43 - 00164014 _____ C:\WINDOWS\system32\perfc015.dat
2016-03-31 12:28 - 2014-11-21 06:44 - 01828496 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-31 12:28 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\Inf
2016-03-31 12:24 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-03-31 11:43 - 2016-01-28 19:52 - 00003980 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{601E1AFC-2A75-4BE5-900F-F43EB7809610}
2016-03-30 22:08 - 2016-01-29 22:16 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee
2016-03-28 19:28 - 2016-01-30 12:58 - 00000080 _____ C:\Users\Marcin\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2016-03-28 19:11 - 2016-01-28 19:49 - 00000000 ____D C:\Users\Marcin\AppData\Local\VirtualStore
2016-03-28 18:55 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-03-28 18:53 - 2015-06-05 10:46 - 00002560 _____ C:\WINDOWS\system32\VfService.trf
2016-03-28 18:49 - 2016-02-01 20:39 - 00000000 ____D C:\Users\Marcin\AppData\Local\CrashDumps
2016-03-28 18:49 - 2015-06-05 10:12 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-03-28 17:27 - 2016-01-28 19:54 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-03-28 17:27 - 2016-01-28 19:54 - 00001076 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-03-28 16:52 - 2015-06-05 10:27 - 00000000 ____D C:\Program Files (x86)\Lenovo
2016-03-28 16:32 - 2016-02-01 17:20 - 00000000 ____D C:\Users\Marcin\AppData\Local\Battle.net
2016-03-28 16:32 - 2016-02-01 17:19 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-03-28 12:52 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2016-03-27 02:26 - 2016-02-12 17:19 - 00000000 ____D C:\ProgramData\Origin
2016-03-26 20:58 - 2016-02-12 17:21 - 00000000 ____D C:\Users\Marcin\AppData\Local\Origin
2016-03-26 19:09 - 2016-02-01 17:20 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\Battle.net
2016-03-26 15:43 - 2016-02-12 22:18 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-03-26 15:40 - 2016-02-12 17:21 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\Origin
2016-03-26 12:41 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-03-25 19:21 - 2013-08-22 17:20 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-25 19:20 - 2016-01-30 01:19 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2016-03-25 19:20 - 2016-01-30 01:19 - 00000000 ___SD C:\WINDOWS\system32\GWX
2016-03-25 14:42 - 2016-02-01 17:37 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
2016-03-25 14:39 - 2016-02-01 17:18 - 00000000 ____D C:\ProgramData\Battle.net
2016-03-25 14:08 - 2016-02-15 13:32 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2016-03-25 14:08 - 2016-02-15 13:32 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2016-03-24 17:14 - 2016-01-29 22:25 - 00003818 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-03-23 16:39 - 2016-02-29 14:41 - 2684354560 _____ C:\Users\Marcin\Downloads\Tom.Clancys.Rainbow.Six.Siege.2015-CX.part1.rar
2016-03-23 12:22 - 2015-06-05 10:47 - 00000000 ____D C:\Program Files (x86)\McAfee
2016-03-21 18:29 - 2016-01-28 19:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-03-15 15:43 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2016-03-15 13:32 - 2016-01-30 12:57 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-03-15 13:32 - 2016-01-30 12:56 - 00000000 ____D C:\Program Files\Rockstar Games
2016-03-14 18:22 - 2016-01-28 20:23 - 00000204 _____ C:\Users\Marcin\Desktop\Seam.txt
2016-03-14 13:01 - 2016-01-29 22:11 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-03-14 12:57 - 2016-01-29 22:11 - 143659408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-03-13 21:54 - 2016-01-28 20:24 - 00000000 ____D C:\Users\Marcin\AppData\Local\Steam
2016-03-13 21:49 - 2016-02-01 20:27 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\TS3Client
2016-03-13 21:47 - 2014-12-10 03:49 - 00000000 ____D C:\WINDOWS\Panther
2016-03-11 17:04 - 2013-08-22 16:44 - 00348080 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-11 17:03 - 2016-01-30 01:18 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-03-09 20:53 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-09 20:47 - 2016-01-28 22:33 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-03-09 20:47 - 2016-01-28 22:33 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-03-09 20:47 - 2016-01-28 22:33 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-03-08 09:00 - 2014-11-21 14:27 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-03-08 09:00 - 2014-11-21 14:27 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-04 14:51 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-03-04 12:25 - 2016-02-08 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2016-03-04 12:22 - 2016-02-05 11:08 - 00000000 ____D C:\Users\Marcin\Downloads\Gameforge Live
2016-03-04 12:22 - 2016-02-05 11:08 - 00000000 ____D C:\Program Files (x86)\GameforgeLive
2016-03-03 14:50 - 2015-06-05 10:09 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-03 14:47 - 2016-02-01 16:33 - 00001408 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-03-03 14:47 - 2016-01-28 19:50 - 00000000 ____D C:\Users\Marcin\AppData\Local\NVIDIA
2016-03-03 14:31 - 2016-01-29 22:24 - 00000000 ____D C:\Users\Marcin\AppData\Local\Adobe
2016-03-03 14:26 - 2016-01-28 19:52 - 00000000 __SHD C:\Users\Marcin\AppData\LocalLow\EmieUserList
2016-03-03 14:26 - 2016-01-28 19:52 - 00000000 __SHD C:\Users\Marcin\AppData\LocalLow\EmieSiteList
2016-03-03 14:26 - 2016-01-28 19:52 - 00000000 __SHD C:\Users\Marcin\AppData\LocalLow\EmieBrowserModeList
2016-03-03 14:26 - 2016-01-28 19:52 - 00000000 __SHD C:\Users\Marcin\AppData\Local\EmieUserList
2016-03-03 14:26 - 2016-01-28 19:52 - 00000000 __SHD C:\Users\Marcin\AppData\Local\EmieSiteList
2016-03-03 14:26 - 2016-01-28 19:52 - 00000000 __SHD C:\Users\Marcin\AppData\Local\EmieBrowserModeList

==================== Pliki w katalogu głównym wybranych folderów =======

2015-06-05 10:15 - 2015-06-05 10:15 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-03-04 15:06 - 2016-03-04 15:06 - 0000021 _____ () C:\ProgramData\settings.cfg

Niektóre pliki w TEMP:
====================
C:\Users\Marcin\AppData\Local\Temp\3116.tmp.exe
C:\Users\Marcin\AppData\Local\Temp\316A.tmp.exe
C:\Users\Marcin\AppData\Local\Temp\3IARDB2MYR.exe
C:\Users\Marcin\AppData\Local\Temp\7NI15GJQFN.exe
C:\Users\Marcin\AppData\Local\Temp\9FD5.tmp.exe
C:\Users\Marcin\AppData\Local\Temp\A01D.tmp.exe
C:\Users\Marcin\AppData\Local\Temp\CCA3.tmp.exe
C:\Users\Marcin\AppData\Local\Temp\GSZIEMUSCO.exe
C:\Users\Marcin\AppData\Local\Temp\setup_758.exe
C:\Users\Marcin\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll
[2015-06-05 09:56] - [2015-06-05 09:56] - 0657920 ____A (Microsoft Corporation) 8A28D6A567E218EB6EB66515E49E776C

C:\WINDOWS\SysWOW64\dnsapi.dll
[2015-06-05 09:56] - [2015-06-05 09:56] - 0498688 ____A (Microsoft Corporation) 8AAA5EB712BBC03CBDD644F100110E0F

C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-03-28 16:24

==================== Koniec  FRST.txt ============================