Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:07-06-2016
Uruchomiony przez Pawcio (administrator)  PAWCIO-KOMPUTER (07-06-2016 19:42:19)
Uruchomiony z C:\Users\Pawcio\Desktop\Nowy folder (6)\hmm
Załadowane profile: Pawcio (Dostępne profile: Pawcio)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Kaspersky Lab ZAO) C:\Users\Pawcio\Desktop\Nowy folder (6)\hmm\kavremvr.exe
(Kaspersky Lab ZAO) C:\Users\Pawcio\AppData\Local\Temp\{F4E006CA-FDC0-48FA-B340-F584297F2573}\{08265A34-EF86-4998-8539-2A723CC76C40}.exe
(Kaspersky Lab ZAO) C:\Users\Pawcio\AppData\Local\Temp\{F4E006CA-FDC0-48FA-B340-F584297F2573}\kavremover.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM-x32\...\RunOnce: [UnKIS] => wscript.exe //b C:\Users\Pawcio\AppData\Local\Temp\UnKIS.vbs <===== UWAGA
HKU\S-1-5-21-813231136-3034751300-3063813572-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Pawcio\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Pawcio\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Pawcio\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [0PerformanceMonitor] -> {3B5B973C-92A4-4855-9D3F-0F3D23332208} => C:\ProgramData\Microsoft\Performance\Monitor\PerformanceMonitor.dll [2016-05-28] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Pawcio\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Pawcio\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Pawcio\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 83.175.144.9 83.175.144.14
Tcpip\..\Interfaces\{17542616-ADD3-4081-8558-DA62939FF703}: [DhcpNameServer] 83.175.144.9 83.175.144.14

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-813231136-3034751300-3063813572-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-813231136-3034751300-3063813572-1001 -> DefaultScope {50F13B51-35F1-4FBF-A837-D76AA097A8E2} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-813231136-3034751300-3063813572-1001 -> {50F13B51-35F1-4FBF-A837-D76AA097A8E2} URL = hxxps://www.google.com/search?q={searchTerms}
BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29] (BitComet)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-05-23] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-23] (Oracle Corporation)

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://youtube.com/","hxxp://google.com/","hxxp://www.fixitpc.pl/topic/30181-przekierowywania-google-chrome/"
CHR Profile: C:\Users\Pawcio\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dysk Google) - C:\Users\Pawcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-23]
CHR Extension: (YouTube) - C:\Users\Pawcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-23]
CHR Extension: (Slinky Elegancki) - C:\Users\Pawcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmanlajnpdncmhfkiccmbgeocgbncfln [2016-05-31]
CHR Extension: (uBlock Origin) - C:\Users\Pawcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-05-04]
CHR Extension: (Care your Eyes) - C:\Users\Pawcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\fidmpnedniahpnkeomejhnepmbdamlhl [2016-05-26]
CHR Extension: (Agar.io Guide Skins and Powerups) - C:\Users\Pawcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\lggjoeoadbenkimmgnfdigiodkkmknik [2016-05-25]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Pawcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-23]
CHR Extension: (Browsec VPN - Privacy and Security Online) - C:\Users\Pawcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\omghfjlpggmjjaagoclmmobgdodcjboh [2016-06-07]
CHR Extension: (Gmail) - C:\Users\Pawcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-23]
CHR HKLM-x32\...\Chrome\Extension: [dhigneefebkcagnpnpbibganpmfgebnk] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S4 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R4 KAVRemvr; C:\Users\Pawcio\AppData\Local\Temp\{F4E006CA-FDC0-48FA-B340-F584297F2573}\kavremover.exe [9231432 2016-06-07] (Kaspersky Lab ZAO)
S4 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [188072 2015-09-23] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [129168 2015-10-28] (Razer Inc.)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2016-05-29] ()
R3 DFX11_1; C:\Windows\System32\drivers\dfx11_1x64.sys [28008 2012-12-13] (Windows (R) Win 7 DDK provider)
S3 DFX12; C:\Windows\System32\drivers\dfx12x64.sys [28344 2015-10-13] (Windows (R) Win 7 DDK provider)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-10-06] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [19984 2015-12-16] ()
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [27552 2016-05-31] (REALiX(tm))
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2016-05-29] ()
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-03-21] (NVIDIA Corporation)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-09-23] (Razer, Inc.)
R4 cm_km; system32\DRIVERS\cm_km.sys [X]
R4 kl1; system32\DRIVERS\kl1.sys [X]
R4 klbackupdisk; system32\DRIVERS\klbackupdisk.sys [X]
R4 klbackupflt; system32\DRIVERS\klbackupflt.sys [X]
R4 kldisk; system32\DRIVERS\kldisk.sys [X]
R4 klflt; system32\DRIVERS\klflt.sys [X]
R4 KLIF; system32\DRIVERS\klif.sys [X]
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]
R4 klpd; system32\DRIVERS\klpd.sys [X]
R4 kltdi; system32\DRIVERS\kltdi.sys [X]
R4 kneps; system32\DRIVERS\kneps.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-06-07 18:38 - 2016-06-07 19:08 - 03020854 _____ C:\Users\Pawcio\Desktop\Nowy obraz mapy bitowej (2).BMP
2016-06-07 18:02 - 2016-06-07 17:19 - 00008744 _____ C:\Users\Pawcio\Desktop\Fixlog - Kopia.txt
2016-06-07 18:01 - 2016-06-07 18:01 - 00000000 _____ C:\Users\Pawcio\Desktop\Fixlog (2).txt
2016-06-07 17:16 - 2016-06-07 17:19 - 00008744 ____R C:\Users\Pawcio\Desktop\Fixlog.txt
2016-06-06 18:05 - 2016-06-07 19:42 - 00000000 ____D C:\FRST
2016-06-06 01:44 - 2016-06-07 19:10 - 01593054 _____ C:\Users\Pawcio\Desktop\Nowy obraz mapy bitowej.BMP
2016-06-05 02:40 - 2016-06-06 00:08 - 00000166 _____ C:\Users\Pawcio\Desktop\1234.txt
2016-06-05 00:03 - 2016-06-05 00:03 - 00001160 _____ C:\Users\Pawcio\Desktop\Moje dokumenty — skrót.lnk
2016-06-05 00:02 - 2016-06-05 00:02 - 00000862 _____ C:\Users\Pawcio\Desktop\IGG BESTY — skrót.lnk
2016-06-04 23:44 - 2016-06-04 23:44 - 00000000 ____D C:\Users\Pawcio\AppData\LocalLow\PIXELBUG
2016-06-04 23:21 - 2016-06-04 23:21 - 00000000 ____D C:\Users\Pawcio\AppData\LocalLow\FluffyGames
2016-06-04 23:20 - 2016-06-04 23:20 - 00000613 _____ C:\Users\Pawcio\Desktop\DungeonRift.lnk
2016-06-04 22:41 - 2016-06-04 22:41 - 00000000 ____D C:\Users\Pawcio\AppData\LocalLow\K Monkey
2016-06-04 22:22 - 2016-06-04 22:32 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\Dungeonmans
2016-06-04 00:29 - 2016-06-04 00:29 - 00000000 ____D C:\Users\Pawcio\Documents\Klei
2016-06-04 00:19 - 2016-06-04 00:19 - 00001374 _____ C:\Users\Pawcio\Desktop\Darkest — skrót.lnk
2016-06-03 20:53 - 2016-06-03 20:53 - 00000000 ____D C:\Users\Pawcio\AppData\LocalLow\Three Phase Interactive Pty Ltd
2016-06-03 10:24 - 2016-06-03 18:07 - 00000000 ____D C:\Users\Pawcio\AppData\Local\Crashlands
2016-06-03 09:52 - 2016-06-03 09:52 - 00000000 ____D C:\Users\Pawcio\AppData\Local\Ramos_TD
2016-06-03 09:36 - 2016-06-03 09:42 - 00000000 ____D C:\Muzyka
2016-06-03 00:33 - 2016-06-03 00:33 - 00447719 _____ C:\Users\Pawcio\Downloads\Shoppe Keep _ Recenzja _ Gameplay - YouTube.html
2016-06-03 00:33 - 2016-06-03 00:33 - 00000000 ____D C:\Users\Pawcio\Downloads\Shoppe Keep _ Recenzja _ Gameplay - YouTube_files
2016-06-02 19:57 - 2016-06-02 19:58 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\Dungeon Dashers
2016-06-02 19:26 - 2016-06-02 19:26 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\Stencyl
2016-06-02 13:19 - 2016-06-02 13:19 - 00000000 ____D C:\Users\Pawcio\AppData\LocalLow\CubeRoots
2016-06-02 12:29 - 2016-06-02 12:29 - 00000000 ____D C:\Users\Pawcio\AppData\LocalLow\Red Winter Software
2016-06-02 12:27 - 2016-06-02 12:27 - 00000000 ____D C:\Program Files (x86)\GOG.com
2016-06-02 12:23 - 2016-06-02 12:24 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\com.kintogames.bitDungeonII
2016-06-02 10:23 - 2016-06-02 10:23 - 00000000 ____D C:\Users\Pawcio\AppData\LocalLow\Blacksea Odyssey
2016-06-02 09:49 - 2016-06-02 10:02 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\PixelPiracy
2016-05-31 07:01 - 2016-05-31 07:01 - 00304704 _____ C:\Windows\Minidump\053116-23930-01.dmp
2016-05-31 05:44 - 2016-05-31 05:44 - 03889824 _____ (Crystal Dew World ) C:\Users\Pawcio\Desktop\CrystalDiskInfo6_8_2-en.exe
2016-05-31 05:44 - 2016-05-31 05:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2016-05-31 05:44 - 2016-05-31 05:44 - 00000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2016-05-31 05:42 - 2016-05-31 05:42 - 00000000 ____D C:\Users\Pawcio\AppData\Local\CrystalDiskMark5
2016-05-31 05:33 - 2016-05-31 05:33 - 00027552 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS
2016-05-31 05:32 - 2016-05-31 05:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64
2016-05-31 05:32 - 2016-05-31 05:32 - 00000000 ____D C:\Program Files\HWiNFO64
2016-05-31 04:44 - 2016-05-31 04:44 - 00288808 _____ C:\Windows\Minidump\053116-36972-01.dmp
2016-05-31 04:43 - 2016-05-31 04:43 - 00303672 _____ C:\Windows\Minidump\053116-39499-01.dmp
2016-05-30 20:25 - 2016-05-30 20:25 - 00000589 _____ C:\Users\Pawcio\Desktop\D2SE.exe.lnk
2016-05-30 17:27 - 2016-05-30 17:27 - 00289016 _____ C:\Windows\Minidump\053016-43227-01.dmp
2016-05-30 17:23 - 2016-05-30 17:23 - 00293048 _____ C:\Windows\Minidump\053016-47829-01.dmp
2016-05-29 21:37 - 2016-05-29 21:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\D2SE
2016-05-29 21:27 - 2016-05-29 21:27 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Diablo II
2016-05-29 21:25 - 2016-05-29 21:35 - 00027100 _____ C:\Windows\DIIUnin.dat
2016-05-29 21:11 - 2016-05-29 21:11 - 00094208 _____ (Blizzard Entertainment) C:\Windows\DIIUnin.exe
2016-05-29 21:11 - 2016-05-29 21:11 - 00002829 _____ C:\Windows\DIIUnin.pif
2016-05-29 21:10 - 2016-05-31 07:49 - 00000000 ____D C:\Diablo II
2016-05-29 20:27 - 2016-05-29 20:27 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\collection
2016-05-29 20:17 - 2016-05-29 20:17 - 00314016 _____ C:\Windows\system32\Drivers\atksgt.sys
2016-05-29 20:17 - 2016-05-29 20:17 - 00043680 _____ C:\Windows\system32\Drivers\lirsgt.sys
2016-05-29 20:17 - 2016-05-29 20:17 - 00000000 ____D C:\ProgramData\Tages
2016-05-29 20:14 - 2016-05-29 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Basement Collection
2016-05-29 20:05 - 2016-05-31 08:49 - 00000000 ____D C:\Program Files (x86)\Metal Slug Complete PC
2016-05-29 20:05 - 2016-05-29 20:12 - 00000000 ____D C:\Program Files (x86)\The Basement Collection
2016-05-29 18:13 - 2016-05-29 18:13 - 00000000 ____D C:\Users\Pawcio\AppData\LocalLow\Coldrice Games
2016-05-29 17:42 - 2016-05-29 17:42 - 00000000 ____D C:\Users\Pawcio\AppData\LocalLow\Failbetter Games
2016-05-29 14:31 - 2016-06-07 19:21 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync
2016-05-29 14:31 - 2016-06-03 00:19 - 00000000 ____D C:\Users\Pawcio\AppData\Local\MEGAsync
2016-05-29 14:31 - 2016-05-29 14:31 - 00001062 _____ C:\Users\Pawcio\Desktop\MEGAsync.lnk
2016-05-29 11:13 - 2014-12-12 14:35 - 01270064 _____ C:\Users\Pawcio\Desktop\DFX.exe
2016-05-29 11:10 - 2016-05-29 11:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DFX Audio Enhancer
2016-05-28 17:58 - 2016-05-28 17:58 - 00000000 ____D C:\Users\Pawcio\AppData\Local\DFX
2016-05-28 17:56 - 2016-05-29 11:11 - 00000000 ____D C:\Program Files (x86)\DFX
2016-05-28 17:34 - 2016-05-28 17:53 - 00000194 _____ C:\Users\Pawcio\Desktop\morg.txt
2016-05-28 16:51 - 2016-05-28 17:32 - 00017333 _____ C:\Users\Pawcio\Desktop\adam hue.txt
2016-05-26 18:33 - 2016-05-29 21:27 - 00021840 ____T C:\Windows\SysWOW64\SIntfNT.dll
2016-05-26 18:33 - 2016-05-29 21:27 - 00017212 ____T C:\Windows\SysWOW64\SIntf32.dll
2016-05-26 18:33 - 2016-05-29 21:27 - 00012067 ____T C:\Windows\SysWOW64\SIntf16.dll
2016-05-26 10:19 - 2016-05-26 10:19 - 00000000 ____D C:\Users\Pawcio\Documents\SkidRow
2016-05-26 10:19 - 2016-05-26 10:19 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\Pyrodactyl
2016-05-26 09:29 - 2016-05-26 10:03 - 00000000 ____D C:\Users\Pawcio\Documents\DarkMaus
2016-05-26 08:59 - 2016-05-26 08:59 - 00000000 ____D C:\Users\Pawcio\Documents\MEGAsync
2016-05-26 08:58 - 2016-05-26 08:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEGAsync
2016-05-26 08:58 - 2016-05-26 08:58 - 00000000 ____D C:\ProgramData\MEGAsync
2016-05-26 08:43 - 2016-06-04 23:52 - 00000000 ____D C:\download 2
2016-05-26 05:51 - 2015-10-12 19:07 - 07054336 _____ C:\Users\Pawcio\Downloads\xnafx40_redist.msi
2016-05-26 04:19 - 2016-04-08 18:08 - 00929779 _____ C:\Users\Pawcio\Downloads\disciples 3 Spolszczenie.rar.bc!
2016-05-26 02:40 - 2016-04-14 20:33 - 00049907 _____ C:\Users\Pawcio\Downloads\[torrenty.pl] Disciples III- Wskrzeszenie - Hordy Nieumarłych [PL] [DVD] [.iso].torrent
2016-05-26 00:20 - 2016-05-26 00:20 - 272430215 _____ C:\Users\Pawcio\Downloads\IGG-Starward.Rogue.v1.100.rar
2016-05-24 11:35 - 2016-06-06 18:34 - 00000000 ____D C:\Users\Pawcio\Desktop\Nowy folder (6)
2016-05-23 21:31 - 2016-05-23 21:31 - 00000000 ____D C:\Users\Pawcio\AppData\LocalLow\GoblinzStudio
2016-05-23 20:59 - 2016-05-26 10:12 - 00000000 ___RD C:\Users\Pawcio\Documents\MEGA
2016-05-23 19:48 - 2016-05-23 19:48 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\Sun
2016-05-23 19:48 - 2016-05-23 19:48 - 00000000 ____D C:\Users\Pawcio\AppData\LocalLow\Sun
2016-05-23 19:48 - 2016-05-23 19:48 - 00000000 ____D C:\Users\Pawcio\.oracle_jre_usage
2016-05-23 19:47 - 2016-05-23 19:47 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-05-23 19:47 - 2016-05-23 19:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-05-23 19:47 - 2016-05-23 19:47 - 00000000 ____D C:\Program Files (x86)\Java
2016-05-23 19:46 - 2016-05-23 19:49 - 00000000 ____D C:\ProgramData\Oracle
2016-05-23 19:43 - 2016-05-23 19:50 - 00000000 ____D C:\Program Files (x86)\KOL Launcher
2016-05-23 19:43 - 2016-05-23 19:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KINGDOM·OF·LOOT
2016-05-23 19:39 - 2016-05-23 19:39 - 00459144 _____ (Epicbeyond Studios ) C:\Users\Pawcio\Desktop\setup.exe
2016-05-16 20:32 - 2016-06-04 23:57 - 00000000 ____D C:\Users\Pawcio\Desktop\Nowy folder (4)
2016-05-16 19:20 - 2016-05-28 18:08 - 00000000 ____D C:\Users\Pawcio\AppData\Local\LG Electronics
2016-05-16 19:12 - 2016-05-28 18:11 - 00000000 ____D C:\Program Files (x86)\LG Electronics
2016-05-16 19:06 - 2016-05-16 19:07 - 30537211 _____ C:\Users\Pawcio\Desktop\LGPCSync.zip
2016-05-15 17:01 - 2016-05-29 14:24 - 00000000 ____D C:\Users\Pawcio\AppData\Local\DungeonSouls
2016-05-15 16:59 - 2016-05-15 16:59 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\AirshipsGame
2016-05-15 12:59 - 2016-05-15 12:59 - 00000000 ____D C:\Program Files (x86)\Bethesda Softworks
2016-05-15 10:20 - 2016-05-15 10:21 - 00000411 _____ C:\DelFix.txt
2016-05-14 22:00 - 2016-05-14 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Time Rifters
2016-05-14 21:59 - 2016-05-14 22:00 - 00000000 ____D C:\Program Files (x86)\Time Rifters
2016-05-14 21:46 - 2016-05-14 21:46 - 00000000 ____D C:\Users\Pawcio\AppData\LocalLow\Phigames
2016-05-14 21:30 - 2016-05-14 21:31 - 00000000 ____D C:\Program Files (x86)\Warlocks vs Shadows
2016-05-14 21:30 - 2016-05-14 21:30 - 00000878 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Warlocks vs Shadows.lnk
2016-05-14 20:45 - 2016-05-14 20:45 - 00000000 ____D C:\Users\Pawcio\AppData\LocalLow\Will Work For Lunch Games
2016-05-11 21:07 - 2016-05-11 21:07 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\Slain
2016-05-10 21:44 - 2016-05-10 21:50 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\Vertical_Drop_Heroes_HD
2016-05-10 21:00 - 2016-05-10 21:00 - 00000000 ____D C:\Users\Pawcio\Documents\Unknown Saves
2016-05-09 18:20 - 2016-05-31 08:42 - 384498354 _____ C:\Windows\MEMORY.DMP
2016-05-09 18:15 - 2016-05-09 18:15 - 00311896 _____ C:\Windows\Minidump\050916-26660-01.dmp

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-06-08 05:03 - 2015-10-06 00:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2016-06-08 05:03 - 2015-10-06 00:04 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2016-06-08 05:03 - 2010-11-21 09:16 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-06-08 05:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2016-06-08 03:02 - 2016-04-24 11:13 - 00000000 ____D C:\Program Files\Baldurs Gate
2016-06-08 03:02 - 2016-04-23 23:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2016-06-08 03:02 - 2016-04-12 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Disciples III
2016-06-08 03:02 - 2016-03-28 19:00 - 00000000 ____D C:\Program Files (x86)\Total Video Converter
2016-06-08 03:02 - 2016-03-03 21:42 - 00000000 ____D C:\Program Files (x86)\GTX Box Team
2016-06-08 03:02 - 2015-10-06 00:10 - 00000000 ____D C:\Users\Pawcio\AppData\Local\Disc_Soft_Ltd
2016-06-08 03:02 - 2015-10-06 00:04 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\DAEMON Tools Lite
2016-06-08 03:02 - 2015-04-07 16:04 - 00000000 ___SD C:\Windows\system32\GWX
2016-06-08 03:02 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-06-07 19:41 - 2016-04-19 20:37 - 00910160 _____ C:\Windows\ntbtlog.txt
2016-06-07 19:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-06-07 19:39 - 2016-04-23 19:59 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-07 19:39 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-07 19:38 - 2016-02-26 19:28 - 00000000 ____D C:\Windows\pss
2016-06-07 19:21 - 2016-03-12 02:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo II
2016-06-07 19:12 - 2009-07-14 06:45 - 00028928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-06-07 19:12 - 2009-07-14 06:45 - 00028928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-06-07 19:10 - 2016-04-23 19:59 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-06-07 19:07 - 2014-11-21 00:56 - 00000000 ____D C:\ProgramData\NVIDIA
2016-06-07 19:05 - 2014-11-21 00:40 - 00000000 ____D C:\Users\Pawcio
2016-06-06 21:31 - 2015-09-28 23:36 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\BitComet
2016-06-05 11:42 - 2015-10-12 18:27 - 00000000 ____D C:\Users\Pawcio\Documents\Darkest
2016-06-05 00:15 - 2014-11-21 00:43 - 00003998 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{0C5A172E-C211-4E08-92CF-7B6E5878095C}
2016-06-04 23:58 - 2016-03-29 20:37 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\Spider Player
2016-06-04 23:43 - 2015-10-08 14:31 - 00000000 ____D C:\GOG Games
2016-06-03 09:51 - 2016-04-18 21:22 - 00000000 ____D C:\Users\Pawcio\AppData\Local\Deployment
2016-06-02 12:57 - 2016-02-27 01:04 - 00000000 ____D C:\ProgramData\Steam
2016-06-02 11:12 - 2016-04-23 21:14 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\SmartSteamEmu
2016-05-31 08:43 - 2016-03-03 19:25 - 00000000 ____D C:\Users\Pawcio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-05-31 08:42 - 2015-04-15 10:21 - 00000000 ____D C:\Windows\Minidump
2016-05-31 08:42 - 2009-07-14 07:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-05-31 05:23 - 2016-03-29 21:23 - 00000550 _____ C:\Users\Pawcio\Desktop\hours.txt
2016-05-31 05:09 - 2016-03-06 21:51 - 00000000 ____D C:\old pc game
2016-05-26 09:00 - 2016-05-06 20:34 - 00000000 ____D C:\Users\Pawcio\Documents\MEGAsync Downloads
2016-05-24 18:42 - 2016-03-12 07:12 - 00001133 _____ C:\Users\Pawcio\Desktop\Nowy Dokument tekstowy1.txt
2016-05-24 13:50 - 2015-10-04 23:09 - 00000000 ____D C:\Users\Pawcio\Documents\My Games
2016-05-24 07:08 - 2016-04-25 21:05 - 00000000 ____D C:\Users\Pawcio\Desktop\foty
2016-05-16 19:41 - 2016-03-13 03:30 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-05-15 10:06 - 2015-10-08 04:09 - 00000000 ____D C:\Users\Pawcio\AppData\Local\FalloutNV
2016-05-14 20:41 - 2016-04-17 13:54 - 00000000 ____D C:\Users\Pawcio\AppData\LocalLow\Dodge Roll
2016-05-13 04:12 - 2016-04-23 20:00 - 00002201 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-13 04:12 - 2016-04-23 20:00 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-13 04:12 - 2016-04-23 20:00 - 00002189 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2016-05-11 03:05 - 2016-04-23 19:59 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-11 03:05 - 2016-04-23 19:59 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Pliki w katalogu głównym wybranych folderów =======

2015-09-26 04:25 - 2016-04-19 20:52 - 0007608 _____ () C:\Users\Pawcio\AppData\Local\resmon.resmoncfg

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-06-07 03:01

==================== Koniec  FRST.txt ============================