Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 02-07-2016
Uruchomiony przez Bolec (administrator)  BOLEC-KOMPUTER (06-07-2016 13:55:10)
Uruchomiony z C:\Users\Bolec\Downloads
Załadowane profile: Bolec (Dostępne profile: Bolec)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Saitek) C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe
(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe
() C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Disc Soft Ltd) E:\Programy\DAEMON Tools Lite\DiscSoftBusService.exe
() C:\Program Files (x86)\xtex\gupdate\gupdate.exe
() C:\ProgramData\CloudPrinter\CloudPrinter.exe
() C:\ProgramData\Logic Handler\set.exe
() C:\Users\Bolec\AppData\Local\Streetice.exe
() C:\Program Files\BitTorrent\BitTorrent.exe
(GG Network S.A.) E:\Programy\GG\Application\gghub.exe
(GG Network S.A.) E:\Programy\GG\Application\ggapp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
() C:\Program Files (x86)\badu\uc.exe
() C:\ProgramData\Airtostrong\Airtostrong.exe
(Mozilla Corporation) E:\Programy\Mozilla Firefox\firefox.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8849152 2016-04-09] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [ProfilerU] => C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454656 2016-01-21] (Saitek)
HKLM\...\Run: [SaiMfd] => C:\Program Files\SmartTechnology\Software\SaiMfd.exe [157696 2016-01-21] (Saitek)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [296216 2015-03-24] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595480 2016-03-20] (Oracle Corporation)
HKLM-x32\...\Run: [gupdate] => C:\Program Files (x86)\xtex\gupdate\gupdate.exe [149349 2016-07-06] ()
HKLM-x32\...\Run: [apphide] => C:\Program Files (x86)\badu\uc.exe [331848 2016-07-05] ()
HKU\S-1-5-21-865181693-1974036264-3221311095-1000\...\Run: [DAEMON Tools Lite Automount] => E:\Programy\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd)
HKU\S-1-5-21-865181693-1974036264-3221311095-1000\...\Run: [Skype] => E:\Programy\Skype\Phone\Skype.exe [53123712 2016-05-17] (Skype Technologies S.A.)
HKU\S-1-5-21-865181693-1974036264-3221311095-1000\...\Run: [uTorrent] => C:\Users\Bolec\AppData\Roaming\uTorrent\uTorrent.exe [2133504 2016-06-01] (BitTorrent Inc.)
HKU\S-1-5-21-865181693-1974036264-3221311095-1000\...\Run: [OscarX7Mouse5Mode] => C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe [3571712 2013-02-01] ()
HKU\S-1-5-21-865181693-1974036264-3221311095-1000\...\Run: [svchost0] => C:\Program Files (x86)\UCBrowser\Application\UUC0789.exe
HKU\S-1-5-21-865181693-1974036264-3221311095-1000\...\Run: [apphide2] => C:\Program Files (x86)\badu\uc.exe [331848 2016-07-05] ()
HKU\S-1-5-21-865181693-1974036264-3221311095-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-865181693-1974036264-3221311095-1000\...\MountPoints2: {09ef5506-f9c7-11e5-8d3f-d43d7ef14507} - H:\setup\rsrc\Autorun.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-04-04] (Microsoft Corporation)
AppInit_DLLs: C:\ProgramData\Airtostrong\Doubleis.dll => C:\ProgramData\Airtostrong\Doubleis.dll [363008 2016-07-06] ()
AppInit_DLLs-x32: C:\ProgramData\Airtostrong\Daltsiltone.dll => C:\ProgramData\Airtostrong\Daltsiltone.dll [257536 2016-07-06] ()
GroupPolicyScripts: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.100.1
Tcpip\..\Interfaces\{9A092206-750C-4191-8C92-AFB7CC81175C}: [DhcpNameServer] 192.168.100.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\S-1-5-21-865181693-1974036264-3221311095-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B3vZOxc6r0vkIwdphlp_DmxsEJkmf0w-NeggUSUNL6LiWsNL61cHTMIvxWEbD__nV2o83lPwdsgB4zyvnPrtxLFbknFEFntjIokaYRGoOqtssawD3gsOJNLSTUyPvLlrWQGa-s059nLKiv49w_bQeGxu-DzRdqXMaBAEEWChrmBA,&q={searchTerms}
HKU\S-1-5-21-865181693-1974036264-3221311095-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B3vZOxc6r0vkIwdphlp_DmxsEJkmf0w-NeggUSUNL6LiWsNL61cHTMIvxWEbD__nV2o83lPwdsgB4zyd5JkRTSw6JaZsd60w2ruib_p-L8U6hVFs-dS3_fyQ_koFOCmyJ2Z0w6660HLwHOt2NYUIuKUpEmtc55-0oaBxdi73RdTs,
HKU\S-1-5-21-865181693-1974036264-3221311095-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B3vZOxc6r0vkIwdphlp_DmxsEJkmf0w-NeggUSUNL6LiWsNL61cHTMIvxWEbD__nV2o83lPwdsgB4zyvnPrtxLFbknFEFntjIokaYRGoOqtssawD3gsOJNLSTUyPvLlrWQGa-s059nLKiv49w_bQeGxu-DzRdqXMaBAEEWChrmBA,&q={searchTerms}
HKU\S-1-5-21-865181693-1974036264-3221311095-1000\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B3vZOxc6r0vkIwdphlp_DmxsEJkmf0w-NeggUSUNL6LiWsNL61cHTMIvxWEbD__nV2o83lPwdsgB4zyvnPrtxLFbknFEFntjIokaYRGoOqtssawD3gsOJNLSTUyPvLlrWQGa-s059nLKiv49w_bQeGxu-DzRdqXMaBAEEWChrmBA,&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL = 
SearchScopes: HKLM-x32 -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B3vZOxc6r0vkIwdphlp_DmxsEJkmf0w-NeggUSUNL6LiWsNL61cHTMIvxWEbD__nV2o83lPwdsgB4zyvnPrtxLFbknFEFntjIokaYRGoOqtssawD3gsOJNLSTUyPvLlrWQGa-s059nLKiv49w_bQeGxu-DzRdqXMaBAEEWChrmBA,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-865181693-1974036264-3221311095-1000 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B3vZOxc6r0vkIwdphlp_DmxsEJkmf0w-NeggUSUNL6LiWsNL61cHTMIvxWEbD__nV2o83lPwdsgB4zyvnPrtxLFbknFEFntjIokaYRGoOqtssawD3gsOJNLSTUyPvLlrWQGa-s059nLKiv49w_bQeGxu-DzRdqXMaBAEEWChrmBA,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-865181693-1974036264-3221311095-1000 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B3vZOxc6r0vkIwdphlp_DmxsEJkmf0w-NeggUSUNL6LiWsNL61cHTMIvxWEbD__nV2o83lPwdsgB4zyvnPrtxLFbknFEFntjIokaYRGoOqtssawD3gsOJNLSTUyPvLlrWQGa-s059nLKiv49w_bQeGxu-DzRdqXMaBAEEWChrmBA,&q={searchTerms}
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> E:\Programy\bin\ssv.dll [2016-04-03] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> E:\Programy\bin\jp2ssv.dll [2016-04-03] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Bolec\AppData\Roaming\Mozilla\Firefox\Profiles\ruwg6v2m.default-1467805519084
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_192.dll [2016-06-17] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_192.dll [2016-06-17] ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.77.2 -> E:\Programy\bin\dtplugin\npDeployJava1.dll [2016-04-03] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.77.2 -> E:\Programy\bin\plugin2\npjp2.dll [2016-04-03] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-06-03] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-06-03] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-02-26] (Adobe Systems Inc.)
StartMenuInternet: FIREFOX.EXE - E:\Programy\Mozilla Firefox\firefox.exe

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [fcgnigmofekcllgbiejhmigggmgehkip] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 Airtostrong; C:\ProgramData\\Airtostrong\\Airtostrong.exe [400896 2016-06-29] () [Brak podpisu cyfrowego]
R2 backlh; C:\ProgramData\Logic Handler\set.exe [2089472 2016-05-15] () [Brak podpisu cyfrowego]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1863688 2016-04-09] ()
R2 BitTorrent; C:\Program Files\BitTorrent\BitTorrent.exe [383488 2016-07-06] () [Brak podpisu cyfrowego]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
R2 CloudPrinter; C:\ProgramData\\CloudPrinter\\CloudPrinter.exe [694784 2016-07-06] () [Brak podpisu cyfrowego]
R3 Disc Soft Lite Bus Service; E:\Programy\DAEMON Tools Lite\DiscSoftBusService.exe [1444544 2016-03-01] (Disc Soft Ltd)
R2 dtynloadilueoatj; C:\Users\Bolec\AppData\Local\Streetice.exe [28160 2016-07-06] () [Brak podpisu cyfrowego]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [454872 2016-01-28] (Rivet Networks)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2945312 2016-01-14] (IObit)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
S3 Origin Client Service; D:\Gry\Origin\OriginClientService.exe [2122248 2016-06-10] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2016-05-31] ()
R2 SaiDOutput; C:\Program Files\Saitek\DirectOutput\DirectOutputService.exe [235008 2016-01-21] (Saitek) [Brak podpisu cyfrowego]
S2 SkypeUpdate; E:\Programy\Skype\Updater\Updater.exe [327808 2016-03-23] (Skype Technologies)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [147528 2016-01-24] (Rivet Networks, LLC.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-04-03] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-04-03] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-04-02] (REALiX(tm))
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [31144 2016-04-02] (Intel Corporation)
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [44744 2016-04-02] ()
S3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [125488 2015-03-18] (Qualcomm Atheros, Inc.)
R3 KillerEth; C:\Windows\System32\DRIVERS\e2xw7x64.sys [134296 2016-04-09] (Qualcomm Atheros, Inc.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [180480 2016-04-02] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S3 RTCore64; E:\Programy\MSI Afterburner\RTCore64.sys [13512 2015-12-09] ()
S3 SaiK0762; C:\Windows\System32\DRIVERS\SaiK0762.sys [181920 2016-01-27] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [23968 2016-01-27] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [51616 2016-01-27] (Saitek)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-07-06 13:55 - 2016-07-06 13:55 - 00017236 _____ C:\Users\Bolec\Downloads\FRST.txt
2016-07-06 13:53 - 2016-07-06 13:55 - 00000000 ____D C:\FRST
2016-07-06 13:52 - 2016-07-06 13:52 - 02390016 _____ (Farbar) C:\Users\Bolec\Downloads\FRST64.exe
2016-07-06 13:50 - 2016-07-06 13:50 - 00000000 ____D C:\Users\Bolec\Downloads\gmer
2016-07-06 13:49 - 2016-07-06 13:49 - 00371282 _____ C:\Users\Bolec\Downloads\gmer.zip
2016-07-06 13:34 - 2016-07-06 13:34 - 02782549 _____ () C:\Program Files\Common Files\uwqb4avd.exe
2016-07-06 13:34 - 2016-07-06 13:34 - 00000000 ____D C:\ProgramData\Airtostrongs
2016-07-06 13:34 - 2016-07-06 13:34 - 00000000 ____D C:\ProgramData\Airtostrong
2016-07-06 13:34 - 2016-07-06 13:34 - 00000000 ____D C:\Program Files\Common Files\bxgzr5gn
2016-07-06 13:28 - 2016-07-06 13:45 - 00000000 ____D C:\Users\Bolec\Desktop\Stare dane programu Firefox
2016-07-06 12:44 - 2016-07-06 13:06 - 00000000 ____D C:\Users\Bolec\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UC浏览器
2016-07-06 12:44 - 2016-07-06 12:44 - 00000000 ____D C:\Users\Bolec\AppData\Local\UCBrowser
2016-07-06 12:43 - 2016-07-06 12:43 - 00000000 ____D C:\Program Files (x86)\badu
2016-07-06 12:34 - 2016-07-06 12:34 - 00041472 _____ C:\Users\Bolec\AppData\Local\Streetice.dat
2016-07-06 12:34 - 2016-07-06 12:34 - 00028160 _____ C:\Users\Bolec\AppData\Local\Streetice.exe
2016-07-06 12:34 - 2016-07-06 12:34 - 00000395 _____ C:\Users\Bolec\Desktop\Get Random Viral.lnk
2016-07-06 12:34 - 2016-07-06 12:34 - 00000347 _____ C:\Users\Bolec\Desktop\Google Search.lnk
2016-07-06 12:34 - 2016-07-06 12:34 - 00000187 _____ C:\Users\Bolec\AppData\Local\Streetice.exe.config
2016-07-06 12:34 - 2016-07-06 12:34 - 00000000 ____D C:\Program Files\BitTorrent
2016-07-06 12:33 - 2016-07-06 13:34 - 00002393 _____ C:\Windows\SysWOW64\findit.xml
2016-07-06 12:33 - 2016-07-06 12:33 - 06870016 _____ C:\Users\Bolec\AppData\Roaming\agent.dat
2016-07-06 12:33 - 2016-07-06 12:33 - 02279413 _____ C:\Users\Bolec\AppData\Roaming\Bigtop.bin
2016-07-06 12:33 - 2016-07-06 12:33 - 01761214 _____ C:\Users\Bolec\AppData\Roaming\Stimflex.tst
2016-07-06 12:33 - 2016-07-06 12:33 - 00848437 _____ C:\Users\Bolec\AppData\Roaming\Jayfresh.bin
2016-07-06 12:33 - 2016-07-06 12:33 - 00694784 _____ C:\Users\Bolec\AppData\Roaming\Unolax.exe
2016-07-06 12:33 - 2016-07-06 12:33 - 00694784 _____ C:\Users\Bolec\AppData\Roaming\Stimflex.exe
2016-07-06 12:33 - 2016-07-06 12:33 - 00189644 _____ () C:\Users\Bolec\AppData\Roaming\TrustZennix.bin
2016-07-06 12:33 - 2016-07-06 12:33 - 00128512 _____ C:\Users\Bolec\AppData\Roaming\Installer.dat
2016-07-06 12:33 - 2016-07-06 12:33 - 00126464 _____ C:\Users\Bolec\AppData\Roaming\noah.dat
2016-07-06 12:33 - 2016-07-06 12:33 - 00126464 _____ C:\Users\Bolec\AppData\Roaming\lobby.dat
2016-07-06 12:33 - 2016-07-06 12:33 - 00072704 _____ C:\Users\Bolec\AppData\Roaming\Unolax.tst
2016-07-06 12:33 - 2016-07-06 12:33 - 00069024 _____ C:\Users\Bolec\AppData\Roaming\Config.xml
2016-07-06 12:33 - 2016-07-06 12:33 - 00054272 _____ C:\Users\Bolec\AppData\Roaming\ApplicationHosting.dat
2016-07-06 12:33 - 2016-07-06 12:33 - 00019584 _____ C:\Users\Bolec\AppData\Roaming\InstallationConfiguration.xml
2016-07-06 12:33 - 2016-07-06 12:33 - 00018432 _____ C:\Users\Bolec\AppData\Roaming\Main.dat
2016-07-06 12:33 - 2016-07-06 12:33 - 00005568 _____ C:\Users\Bolec\AppData\Roaming\md.xml
2016-07-06 12:33 - 2016-07-06 12:33 - 00000000 ____D C:\ProgramData\Logic Handler
2016-07-06 12:33 - 2016-07-06 12:33 - 00000000 ____D C:\ProgramData\CloudPrinter
2016-07-06 12:33 - 2016-07-06 12:33 - 00000000 ____D C:\Program Files (x86)\xtex
2016-07-05 22:32 - 2016-07-05 22:32 - 00053248 _____ C:\Users\Bolec\AppData\Roaming\ProxySettings.dll
2016-07-01 16:02 - 2016-07-01 16:02 - 00000766 _____ C:\Users\Bolec\Desktop\Return to Castle Wolfenstein (Single Player).lnk
2016-07-01 16:02 - 2016-07-01 16:02 - 00000766 _____ C:\Users\Bolec\Desktop\Return to Castle Wolfenstein (Multiplayer).lnk
2016-07-01 16:02 - 2016-07-01 16:02 - 00000000 ____D C:\Users\Bolec\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Return to Castle Wolfenstein - Platinum Edition
2016-07-01 16:02 - 2016-07-01 16:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Return to Castle Wolfenstein - Platinum Edition
2016-07-01 16:00 - 2001-06-19 18:53 - 00266293 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.007
2016-07-01 15:58 - 2016-07-01 15:58 - 00000635 _____ C:\Windows\rtcwgoty.INI
2016-07-01 15:56 - 2016-07-01 15:56 - 00000000 ____D C:\Users\Bolec\AppData\Local\Disc_Soft_Ltd
2016-07-01 15:55 - 2016-07-01 15:55 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2016-07-01 15:54 - 2001-06-19 18:53 - 00266293 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.006
2016-07-01 15:52 - 2016-07-01 16:02 - 00000848 _____ C:\Windows\Rtcwplat.INI
2016-07-01 15:48 - 2001-06-19 17:53 - 00266293 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.005
2016-07-01 15:48 - 2001-06-19 17:53 - 00266293 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.004
2016-07-01 15:47 - 2001-06-19 17:53 - 00266293 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.003
2016-07-01 15:45 - 2001-06-19 17:53 - 00266293 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.002
2016-07-01 15:42 - 2001-06-19 17:53 - 00266293 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.001
2016-07-01 15:42 - 2001-06-19 17:53 - 00266293 _____ (Microsoft Corporation) C:\Windows\SysWOW64\temp.000
2016-06-30 13:21 - 2016-06-30 13:21 - 00000716 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2016-06-30 13:21 - 2016-06-30 13:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2016-06-30 12:56 - 2016-06-30 13:01 - 00000000 ____D C:\Users\Bolec\Desktop\Nowy folder1111111
2016-06-30 12:00 - 2016-06-30 12:00 - 00001297 _____ C:\Users\Bolec\Desktop\Continue AIDA32 - Enterprise System Information installation.lnk
2016-06-27 23:20 - 2016-06-29 14:31 - 00000000 ____D C:\Users\Bolec\Desktop\skoki 1
2016-06-27 19:09 - 2016-06-27 19:09 - 00162123 _____ C:\Users\Bolec\Documents\test1.wma
2016-06-27 11:57 - 2016-06-27 11:57 - 00002277 _____ C:\Users\Public\Desktop\5-Mode Oscar Editor.lnk
2016-06-27 11:57 - 2016-06-27 11:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\A4Tech Software
2016-06-27 11:57 - 2016-06-27 11:57 - 00000000 ____D C:\Program Files (x86)\OscarX7Editor5Mode
2016-06-26 19:22 - 2016-06-26 19:23 - 00000000 ____D C:\Users\Bolec\Desktop\skoki
2016-06-23 23:59 - 2016-07-05 18:10 - 00000000 ____D C:\Users\Bolec\AppData\LocalLow\Heroes and Generals
2016-06-23 23:49 - 2016-06-23 23:49 - 00000000 ____D C:\Users\Bolec\AppData\Roaming\HeroesAndGeneralsDesktop
2016-06-23 23:42 - 2016-06-23 23:42 - 00000206 _____ C:\Users\Bolec\Desktop\Heroes & Generals.url
2016-06-22 00:33 - 2016-06-29 21:51 - 00001427 _____ C:\Users\Bolec\AppData\Roaming\BreakingPoint_Options.ini
2016-06-22 00:32 - 2016-06-29 21:20 - 00000297 _____ C:\Users\Bolec\AppData\Roaming\BreakingPoint_Login.ini
2016-06-22 00:28 - 2016-06-22 00:28 - 00001516 _____ C:\Users\Public\Desktop\BreakingPoint.lnk
2016-06-22 00:28 - 2016-06-22 00:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Breaking Point
2016-06-22 00:28 - 2016-06-22 00:28 - 00000000 ____D C:\ProgramData\Caphyon
2016-06-22 00:27 - 2016-06-22 00:27 - 00000000 ____D C:\Users\Bolec\AppData\Roaming\The Zombie Infection
2016-06-15 15:22 - 2016-05-24 01:37 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-06-15 15:22 - 2016-05-24 00:54 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-06-15 15:22 - 2016-05-21 19:28 - 25802752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-06-15 15:22 - 2016-05-21 18:57 - 20341248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-06-15 15:22 - 2016-05-21 00:27 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-06-15 15:22 - 2016-05-21 00:27 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-06-15 15:22 - 2016-05-21 00:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-06-15 15:22 - 2016-05-21 00:10 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-06-15 15:22 - 2016-05-21 00:09 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-06-15 15:22 - 2016-05-21 00:09 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-06-15 15:22 - 2016-05-21 00:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-06-15 15:22 - 2016-05-21 00:08 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-06-15 15:22 - 2016-05-21 00:08 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-06-15 15:22 - 2016-05-21 00:02 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-06-15 15:22 - 2016-05-21 00:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-06-15 15:22 - 2016-05-20 23:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-06-15 15:22 - 2016-05-20 23:57 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-06-15 15:22 - 2016-05-20 23:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-06-15 15:22 - 2016-05-20 23:57 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-06-15 15:22 - 2016-05-20 23:56 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-06-15 15:22 - 2016-05-20 23:56 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-06-15 15:22 - 2016-05-20 23:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-06-15 15:22 - 2016-05-20 23:54 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-06-15 15:22 - 2016-05-20 23:54 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-06-15 15:22 - 2016-05-20 23:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-06-15 15:22 - 2016-05-20 23:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-06-15 15:22 - 2016-05-20 23:50 - 02287104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-06-15 15:22 - 2016-05-20 23:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-06-15 15:22 - 2016-05-20 23:48 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-06-15 15:22 - 2016-05-20 23:45 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-06-15 15:22 - 2016-05-20 23:45 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-06-15 15:22 - 2016-05-20 23:44 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-06-15 15:22 - 2016-05-20 23:44 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-06-15 15:22 - 2016-05-20 23:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-06-15 15:22 - 2016-05-20 23:41 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-06-15 15:22 - 2016-05-20 23:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-06-15 15:22 - 2016-05-20 23:33 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-06-15 15:22 - 2016-05-20 23:32 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-06-15 15:22 - 2016-05-20 23:29 - 13815808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-06-15 15:22 - 2016-05-20 23:28 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-06-15 15:22 - 2016-05-20 23:27 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-06-15 15:22 - 2016-05-20 23:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-06-15 15:22 - 2016-05-20 23:26 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-06-15 15:22 - 2016-05-20 23:25 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-06-15 15:22 - 2016-05-20 23:23 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-06-15 15:22 - 2016-05-20 23:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-06-15 15:22 - 2016-05-20 23:22 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-06-15 15:22 - 2016-05-20 23:21 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-06-15 15:22 - 2016-05-20 23:19 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-06-15 15:22 - 2016-05-20 23:14 - 04610048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-06-15 15:22 - 2016-05-20 23:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-06-15 15:22 - 2016-05-20 23:11 - 15420928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-06-15 15:22 - 2016-05-20 23:11 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-06-15 15:22 - 2016-05-20 23:09 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-06-15 15:22 - 2016-05-20 23:09 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-06-15 15:22 - 2016-05-20 23:08 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-06-15 15:22 - 2016-05-20 23:08 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-06-15 15:22 - 2016-05-20 23:07 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-06-15 15:22 - 2016-05-20 23:07 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-06-15 15:22 - 2016-05-20 23:06 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-06-15 15:22 - 2016-05-20 22:46 - 02597888 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-06-15 15:22 - 2016-05-20 22:42 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-06-15 15:22 - 2016-05-20 22:38 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-06-15 15:22 - 2016-05-20 22:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-06-15 15:22 - 2016-05-20 22:34 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-06-15 15:22 - 2016-05-20 22:23 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-06-15 15:22 - 2016-05-18 18:10 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-06-15 15:22 - 2016-05-18 18:09 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-06-15 15:22 - 2016-05-14 00:15 - 00382184 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-06-15 15:22 - 2016-05-14 00:09 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-06-15 15:22 - 2016-05-14 00:09 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-06-15 15:22 - 2016-05-14 00:09 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-06-15 15:22 - 2016-05-14 00:09 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-06-15 15:22 - 2016-05-13 23:54 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-06-15 15:22 - 2016-05-13 23:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-06-15 15:22 - 2016-05-13 23:49 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-06-15 15:22 - 2016-05-13 23:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-06-15 15:22 - 2016-05-13 23:27 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-06-15 15:22 - 2016-05-12 19:20 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-06-15 15:22 - 2016-05-12 19:20 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-06-15 15:22 - 2016-05-12 19:15 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-06-15 15:22 - 2016-05-12 19:15 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-06-15 15:22 - 2016-05-12 19:15 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
2016-06-15 15:22 - 2016-05-12 19:15 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-06-15 15:22 - 2016-05-12 19:15 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-06-15 15:22 - 2016-05-12 19:15 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00793088 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-06-15 15:22 - 2016-05-12 19:14 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-06-15 15:22 - 2016-05-12 19:14 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00591872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipsec.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-06-15 15:22 - 2016-05-12 17:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-06-15 15:22 - 2016-05-12 17:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.exe
2016-06-15 15:22 - 2016-05-12 17:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-06-15 15:22 - 2016-05-12 17:03 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-06-15 15:22 - 2016-05-12 16:58 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-06-15 15:22 - 2016-05-12 16:58 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-06-15 15:22 - 2016-05-12 16:58 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-06-15 15:22 - 2016-05-12 16:58 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-06-15 15:22 - 2016-05-12 16:58 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-06-15 15:22 - 2016-05-12 16:58 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-06-15 15:22 - 2016-05-12 16:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.dll
2016-06-15 15:22 - 2016-05-12 16:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-06-15 15:22 - 2016-05-12 16:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.exe
2016-06-15 15:22 - 2016-05-12 16:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-06-15 15:22 - 2016-05-12 16:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-06-15 15:22 - 2016-05-12 15:05 - 00459640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-06-15 15:22 - 2016-05-12 15:05 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-06-15 15:22 - 2016-05-12 15:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-06-15 15:22 - 2016-05-11 19:02 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-06-15 15:22 - 2016-05-11 19:02 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-06-15 15:22 - 2016-05-11 19:02 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-06-15 15:22 - 2016-05-11 19:02 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-06-15 15:22 - 2016-05-11 17:19 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-06-15 15:22 - 2016-05-11 17:19 - 00351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-06-15 15:22 - 2016-05-11 17:19 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-06-15 15:22 - 2016-05-11 17:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2016-06-15 15:22 - 2016-05-11 17:11 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2016-06-15 15:22 - 2016-05-11 17:01 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2016-06-15 15:22 - 2016-05-11 16:58 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-06-14 14:47 - 2016-06-14 14:47 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-06-14 14:47 - 2016-06-14 14:47 - 00410624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
2016-06-14 14:47 - 2016-06-14 14:47 - 00113543 _____ C:\Windows\SysWOW64\slmgr.vbs
2016-06-14 14:47 - 2016-06-14 14:47 - 00002048 _____ C:\Windows\SysWOW64\winver.exe
2016-06-13 00:54 - 2016-06-13 00:54 - 00000000 ____D C:\ProgramData\Gaijin
2016-06-11 23:14 - 2016-06-03 05:19 - 00113208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-06-11 23:13 - 2016-06-03 09:38 - 39979576 _____ C:\Windows\system32\nvcompiler.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 35115456 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 31603768 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 25377848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 21802280 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 21346712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 18143912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 17738592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 17290416 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 13460536 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-06-11 23:13 - 2016-06-03 09:38 - 10643240 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 08733608 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 03512888 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 03065280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 01922616 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436839.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436839.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00985144 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00908736 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00769984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00707520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00669952 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00565392 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00476664 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00425016 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00422752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00394912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00379448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00178136 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00155768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00153416 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-06-11 23:13 - 2016-06-03 09:38 - 00131768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-06-11 19:38 - 2016-06-20 19:14 - 00000000 ____D C:\Users\Bolec\Desktop\Nowy folder

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-07-06 13:38 - 2016-04-06 23:52 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-07-06 13:34 - 2016-04-02 23:26 - 00000769 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-07-06 13:34 - 2016-04-02 23:26 - 00000769 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-07-06 13:34 - 2016-04-02 21:10 - 00001433 _____ C:\Users\Bolec\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-07-06 13:08 - 2016-04-03 20:00 - 00000000 ____D C:\Users\Bolec\AppData\Roaming\uTorrent
2016-07-06 13:01 - 2009-07-14 06:45 - 00010128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-07-06 13:01 - 2009-07-14 06:45 - 00010128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-07-06 12:36 - 2016-04-04 19:08 - 00000000 ____D C:\Users\Bolec\AppData\Roaming\GG
2016-07-06 12:34 - 2016-04-13 11:55 - 00000000 ____D C:\Users\Bolec\AppData\Roaming\Skype
2016-07-06 11:32 - 2009-07-14 19:55 - 00740098 _____ C:\Windows\system32\perfh015.dat
2016-07-06 11:32 - 2009-07-14 19:55 - 00155672 _____ C:\Windows\system32\perfc015.dat
2016-07-06 11:32 - 2009-07-14 07:13 - 01669190 _____ C:\Windows\system32\PerfStringBackup.INI
2016-07-06 11:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-07-06 11:27 - 2016-04-02 23:32 - 00000000 ____D C:\ProgramData\NVIDIA
2016-07-06 11:27 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-07-05 18:07 - 2016-04-02 21:10 - 00000000 ____D C:\Users\Bolec
2016-07-03 14:16 - 2016-04-24 23:44 - 00000000 ____D C:\Users\Bolec\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-07-01 16:04 - 2016-04-28 22:29 - 00000000 ____D C:\Users\Bolec\AppData\Roaming\NVIDIA
2016-07-01 15:55 - 2016-04-03 20:12 - 00000000 ____D C:\Users\Bolec\AppData\Roaming\DAEMON Tools Lite
2016-06-30 13:14 - 2016-05-31 18:44 - 00001377 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-06-30 10:56 - 2016-04-02 23:33 - 00000000 ____D C:\ProgramData\ProductData
2016-06-29 21:23 - 2016-04-03 14:37 - 00000000 ____D C:\Users\Bolec\AppData\Local\Arma 3
2016-06-29 20:28 - 2016-04-03 18:22 - 00348360 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2016-06-29 20:28 - 2016-04-03 00:34 - 00348360 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-06-29 20:27 - 2016-04-03 00:34 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-06-29 20:26 - 2016-04-02 23:56 - 00000000 ____D C:\ProgramData\Origin
2016-06-27 21:00 - 2016-04-03 16:14 - 00000000 ____D C:\Users\Bolec\AppData\Roaming\TS3Client
2016-06-27 19:10 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-06-27 19:06 - 2016-04-03 02:12 - 00000000 ____D C:\Users\Bolec\.junique
2016-06-21 00:57 - 2016-04-03 03:11 - 00000000 ____D C:\Users\Bolec\AppData\Local\Arma 3 Launcher
2016-06-17 15:38 - 2016-04-06 23:52 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-06-17 15:38 - 2016-04-06 23:52 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-06-17 15:38 - 2016-04-06 23:52 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-06-17 14:58 - 2016-04-03 14:37 - 00000000 ____D C:\Users\Bolec\Documents\Arma 3
2016-06-16 03:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-06-16 03:20 - 2009-07-14 06:45 - 00267360 _____ C:\Windows\system32\FNTCACHE.DAT
2016-06-16 03:03 - 2016-04-03 19:49 - 00000000 ____D C:\Windows\system32\MRT
2016-06-16 03:02 - 2016-04-03 19:49 - 142482544 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-06-14 22:01 - 2016-04-02 23:33 - 01767944 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-06-14 22:01 - 2016-04-02 23:33 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-06-14 22:01 - 2016-04-02 23:33 - 01377800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-06-14 22:01 - 2016-04-02 23:33 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-06-14 22:01 - 2016-04-02 23:33 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-06-11 23:14 - 2016-04-02 23:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-06-11 23:14 - 2016-04-02 23:31 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-06-11 00:48 - 2016-04-13 11:55 - 00000000 ____D C:\Program Files (x86)\Skype
2016-06-11 00:48 - 2016-04-09 17:46 - 00000000 ____D C:\Users\Bolec\AppData\Roaming\ProductData
2016-06-11 00:48 - 2016-04-03 00:08 - 00000000 ____D C:\Users\Bolec\AppData\Roaming\Winamp
2016-06-11 00:48 - 2016-04-02 23:31 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-06-11 00:48 - 2016-04-02 23:29 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-06-11 00:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2016-06-11 00:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2016-06-11 00:47 - 2016-04-13 11:55 - 00000000 ____D C:\ProgramData\Skype
2016-06-10 01:03 - 2016-04-02 23:39 - 00000000 ____D C:\Users\Bolec\AppData\Local\CrashDumps

==================== Pliki w katalogu głównym wybranych folderów =======

2016-07-06 13:34 - 2016-07-06 13:34 - 2782549 _____ () C:\Program Files\Common Files\uwqb4avd.exe
2013-10-02 04:55 - 2013-10-02 04:55 - 0000565 _____ () C:\Users\Bolec\AppData\Roaming\11.png
2015-06-03 04:06 - 2015-06-03 04:06 - 0000206 _____ () C:\Users\Bolec\AppData\Roaming\3BSYBS1_DCSA_Errlog.txt
2011-09-26 21:45 - 2011-09-26 21:45 - 0001305 _____ () C:\Users\Bolec\AppData\Roaming\401-5.htm
2011-09-26 21:45 - 2011-09-26 21:45 - 0001120 _____ () C:\Users\Bolec\AppData\Roaming\404-12.htm
2011-09-26 21:45 - 2011-09-26 21:45 - 0001433 _____ () C:\Users\Bolec\AppData\Roaming\501.htm
2014-12-01 23:42 - 2014-12-01 23:42 - 0001701 _____ () C:\Users\Bolec\AppData\Roaming\60-latin.conf
2013-10-02 04:55 - 2013-10-02 04:55 - 0001271 _____ () C:\Users\Bolec\AppData\Roaming\admonition.title.properties.xml
2014-05-08 07:44 - 2014-05-08 07:44 - 0004344 _____ () C:\Users\Bolec\AppData\Roaming\Adobe-CNS1-3
2016-07-06 12:33 - 2016-07-06 12:33 - 6870016 _____ () C:\Users\Bolec\AppData\Roaming\agent.dat
2013-10-02 04:55 - 2013-10-02 04:55 - 0001223 _____ () C:\Users\Bolec\AppData\Roaming\annotation.js.xml
2016-07-06 12:33 - 2016-07-06 12:33 - 0054272 _____ () C:\Users\Bolec\AppData\Roaming\ApplicationHosting.dat
2015-05-20 03:28 - 2015-05-20 03:28 - 0001612 _____ () C:\Users\Bolec\AppData\Roaming\backup.png
2013-10-02 04:54 - 2013-10-02 04:54 - 0000513 _____ () C:\Users\Bolec\AppData\Roaming\Belize
2016-07-06 12:33 - 2016-07-06 12:33 - 2279413 _____ () C:\Users\Bolec\AppData\Roaming\Bigtop.bin
2013-10-02 04:55 - 2013-10-02 04:55 - 0001190 _____ () C:\Users\Bolec\AppData\Roaming\blurb.on.titlepage.enabled.xml
2016-06-22 00:32 - 2016-06-29 21:20 - 0000297 _____ () C:\Users\Bolec\AppData\Roaming\BreakingPoint_Login.ini
2016-06-22 00:33 - 2016-06-29 21:51 - 0001427 _____ () C:\Users\Bolec\AppData\Roaming\BreakingPoint_Options.ini
2010-03-10 02:00 - 2010-03-10 02:00 - 0003680 _____ () C:\Users\Bolec\AppData\Roaming\Cardinalbishop.b
2014-05-08 07:44 - 2014-05-08 07:44 - 0001006 _____ () C:\Users\Bolec\AppData\Roaming\CHS.zdct
2013-10-02 04:55 - 2013-10-02 04:55 - 0001091 _____ () C:\Users\Bolec\AppData\Roaming\CommonMessages_fr.xml
2016-07-06 12:33 - 2016-07-06 12:33 - 0069024 _____ () C:\Users\Bolec\AppData\Roaming\Config.xml
2014-05-08 07:44 - 2014-05-08 07:44 - 0000144 _____ () C:\Users\Bolec\AppData\Roaming\desc_da_DK.txt
1997-01-13 02:00 - 1997-01-13 02:00 - 0046335 _____ () C:\Users\Bolec\AppData\Roaming\Dibranchiate.mh2
2013-10-02 04:56 - 2013-10-02 04:56 - 0000997 _____ () C:\Users\Bolec\AppData\Roaming\editedby.enabled.xml
2013-10-02 04:55 - 2013-10-02 04:55 - 0004295 _____ () C:\Users\Bolec\AppData\Roaming\external.fo
2014-05-08 07:44 - 2014-05-08 07:44 - 0001300 _____ () C:\Users\Bolec\AppData\Roaming\f21.png
2014-05-08 07:44 - 2014-05-08 07:44 - 0001394 _____ () C:\Users\Bolec\AppData\Roaming\f25.png
2013-10-02 04:56 - 2013-10-02 04:56 - 0000889 _____ () C:\Users\Bolec\AppData\Roaming\foilgroup.toc.xml
2015-05-20 03:28 - 2015-05-20 03:28 - 0000887 _____ () C:\Users\Bolec\AppData\Roaming\forward_long.png
2014-05-08 06:05 - 2014-05-08 06:05 - 0001106 _____ () C:\Users\Bolec\AppData\Roaming\GIF 128 No Dither.irs
2013-10-02 04:56 - 2013-10-02 04:56 - 0000914 _____ () C:\Users\Bolec\AppData\Roaming\htmlhelp.display.progress.xml
2015-07-05 00:18 - 2015-07-05 00:18 - 0002268 _____ () C:\Users\Bolec\AppData\Roaming\icon.png
2011-09-26 22:45 - 2011-09-26 22:45 - 0000696 _____ () C:\Users\Bolec\AppData\Roaming\iisexpresstray.exe.manifest
2016-07-06 12:33 - 2016-07-06 12:33 - 0019584 _____ () C:\Users\Bolec\AppData\Roaming\InstallationConfiguration.xml
2016-07-06 12:33 - 2016-07-06 12:33 - 0128512 _____ () C:\Users\Bolec\AppData\Roaming\Installer.dat
2015-05-20 03:28 - 2015-05-20 03:28 - 0002550 _____ () C:\Users\Bolec\AppData\Roaming\install_2.ico
2013-10-02 04:54 - 2013-10-02 04:54 - 0000581 _____ () C:\Users\Bolec\AppData\Roaming\Irkutsk
2013-10-02 04:56 - 2013-10-02 04:56 - 0001015 _____ () C:\Users\Bolec\AppData\Roaming\javahelp.encoding.xml
2016-07-06 12:33 - 2016-07-06 12:33 - 0848437 _____ () C:\Users\Bolec\AppData\Roaming\Jayfresh.bin
2013-10-02 04:54 - 2013-10-02 04:54 - 0000065 _____ () C:\Users\Bolec\AppData\Roaming\Lagos
2014-05-08 07:44 - 2014-05-08 07:44 - 0002028 _____ () C:\Users\Bolec\AppData\Roaming\lavphon.env
2016-07-06 12:33 - 2016-07-06 12:33 - 0126464 _____ () C:\Users\Bolec\AppData\Roaming\lobby.dat
2014-05-08 06:05 - 2014-05-08 06:05 - 0000524 _____ () C:\Users\Bolec\AppData\Roaming\magenta bl 2.ADO
2016-07-06 12:33 - 2016-07-06 12:33 - 0018432 _____ () C:\Users\Bolec\AppData\Roaming\Main.dat
2013-10-02 04:54 - 2013-10-02 04:54 - 0000065 _____ () C:\Users\Bolec\AppData\Roaming\Maldives
2013-10-02 04:56 - 2013-10-02 04:56 - 0001076 _____ () C:\Users\Bolec\AppData\Roaming\man.font.funcprototype.xml
2013-10-02 04:56 - 2013-10-02 04:56 - 0001264 _____ () C:\Users\Bolec\AppData\Roaming\man.indent.blurbs.xml
2013-10-02 04:56 - 2013-10-02 04:56 - 0001291 _____ () C:\Users\Bolec\AppData\Roaming\man.th.extra3.suppress.xml
2016-07-06 12:33 - 2016-07-06 12:33 - 0005568 _____ () C:\Users\Bolec\AppData\Roaming\md.xml
2013-10-02 04:54 - 2013-10-02 04:54 - 0003109 _____ () C:\Users\Bolec\AppData\Roaming\messages_it.properties
2012-03-14 20:41 - 2012-03-14 20:41 - 0002698 _____ () C:\Users\Bolec\AppData\Roaming\msweb-brand.png
2016-07-06 12:33 - 2016-07-06 12:33 - 0126464 _____ () C:\Users\Bolec\AppData\Roaming\noah.dat
2015-05-20 03:28 - 2015-05-20 03:28 - 0003313 _____ () C:\Users\Bolec\AppData\Roaming\notepad.png
2013-10-02 04:56 - 2013-10-02 04:56 - 0001173 _____ () C:\Users\Bolec\AppData\Roaming\olink.debug.xml
2013-10-02 04:56 - 2013-10-02 04:56 - 0001202 _____ () C:\Users\Bolec\AppData\Roaming\othercredit.like.author.enabled.xml
2013-10-02 04:56 - 2013-10-02 04:56 - 0001186 _____ () C:\Users\Bolec\AppData\Roaming\page.height.xml
2013-10-02 04:56 - 2013-10-02 04:56 - 0002461 _____ () C:\Users\Bolec\AppData\Roaming\plain-titlepage.xml
2013-10-02 04:56 - 2013-10-02 04:56 - 0001399 _____ () C:\Users\Bolec\AppData\Roaming\profile.revisionflag.xml
2016-07-05 22:32 - 2016-07-05 22:32 - 0053248 _____ () C:\Users\Bolec\AppData\Roaming\ProxySettings.dll
2013-10-02 04:56 - 2013-10-02 04:56 - 0001102 _____ () C:\Users\Bolec\AppData\Roaming\qanda.title.level4.properties.xml
2014-05-08 07:44 - 2014-05-08 07:44 - 0000976 _____ () C:\Users\Bolec\AppData\Roaming\queue.js
2014-05-08 07:44 - 2014-05-08 07:44 - 0001142 _____ () C:\Users\Bolec\AppData\Roaming\README_RO.txt
2013-10-02 04:55 - 2013-10-02 04:55 - 0001572 _____ () C:\Users\Bolec\AppData\Roaming\reference.css
2009-06-10 23:06 - 2009-06-10 23:06 - 0003119 _____ () C:\Users\Bolec\AppData\Roaming\SceneButtonSubpicture.png
2015-05-20 03:28 - 2015-05-20 03:28 - 0001562 _____ () C:\Users\Bolec\AppData\Roaming\service_center.png
2013-10-02 04:55 - 2013-10-02 04:55 - 0004251 _____ () C:\Users\Bolec\AppData\Roaming\simple.fo
2009-06-10 23:06 - 2009-06-10 23:06 - 0002864 _____ () C:\Users\Bolec\AppData\Roaming\specialmainsubpicture.png
2013-10-02 04:56 - 2013-10-02 04:56 - 0002483 _____ () C:\Users\Bolec\AppData\Roaming\statusCallBack.c
2016-07-06 12:33 - 2016-07-06 12:33 - 0694784 _____ () C:\Users\Bolec\AppData\Roaming\Stimflex.exe
2016-07-06 12:33 - 2016-07-06 12:33 - 1761214 _____ () C:\Users\Bolec\AppData\Roaming\Stimflex.tst
2015-05-20 03:28 - 2015-05-20 03:28 - 0001299 _____ () C:\Users\Bolec\AppData\Roaming\subwoofer.png
2014-05-08 07:44 - 2014-05-08 07:44 - 0004467 _____ () C:\Users\Bolec\AppData\Roaming\sv.pak
2016-07-06 12:33 - 2016-07-06 12:33 - 0189644 _____ () C:\Users\Bolec\AppData\Roaming\TrustZennix.bin
2015-05-20 03:14 - 2015-05-20 03:14 - 0000715 _____ () C:\Users\Bolec\AppData\Roaming\tweakBIOSDriversFirmwareUpdate_fr.p5p
2015-05-20 03:14 - 2015-05-20 03:14 - 0000666 _____ () C:\Users\Bolec\AppData\Roaming\tweakBIOSDriversFirmwareUpdate_pt-pt.p5p
2015-05-20 03:14 - 2015-05-20 03:14 - 0002031 _____ () C:\Users\Bolec\AppData\Roaming\tweakNetworkingManual_ar.p5p
2016-07-06 12:34 - 2016-07-06 12:34 - 0001150 _____ () C:\Users\Bolec\AppData\Roaming\uninstall_temp.ico
2016-07-06 12:33 - 2016-07-06 12:33 - 0694784 _____ () C:\Users\Bolec\AppData\Roaming\Unolax.exe
2016-07-06 12:33 - 2016-07-06 12:33 - 0072704 _____ () C:\Users\Bolec\AppData\Roaming\Unolax.tst
2014-05-08 06:06 - 2014-05-08 06:06 - 0001924 _____ () C:\Users\Bolec\AppData\Roaming\Upload To SketchFab.jsx.png
2015-05-15 19:02 - 2015-05-15 19:02 - 0000000 _____ () C:\Users\Bolec\AppData\Roaming\voiceservers.lst
2015-05-20 03:28 - 2015-05-20 03:28 - 0002327 _____ () C:\Users\Bolec\AppData\Roaming\windows_update.png
2013-10-02 04:59 - 2013-10-02 04:59 - 0000833 _____ () C:\Users\Bolec\AppData\Roaming\xercesImpl.NOTICE.txt
2016-04-02 22:34 - 2016-04-02 22:59 - 0000000 _____ () C:\Users\Bolec\AppData\Local\Driver_LOM_8161Present.flag
2016-07-06 12:34 - 2016-07-06 12:34 - 0041472 _____ () C:\Users\Bolec\AppData\Local\Streetice.dat
2016-07-06 12:34 - 2016-07-06 12:34 - 0028160 _____ () C:\Users\Bolec\AppData\Local\Streetice.exe
2016-07-06 12:34 - 2016-07-06 12:34 - 0000187 _____ () C:\Users\Bolec\AppData\Local\Streetice.exe.config

Niektóre pliki w TEMP:
====================
C:\Users\Bolec\AppData\Local\Temp\Browser_V5.6.12150.8_r_4727_(Build1604251144).exe
C:\Users\Bolec\AppData\Local\Temp\ICReinstall_AIDA32-Enterprise-System-Information-11510-dp.exe
C:\Users\Bolec\AppData\Local\Temp\jshortcut-1005355296722090269.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-1187731151408726307.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-1337673378054653474.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-1382754353351328281.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-1514558808944985178.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-1549152462032858947.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-1629490983219148283.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-1711117567705453039.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-1883548918061909004.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-2026203527561060137.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-2038541458782854633.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-2094045619335519401.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-2108888497639109099.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-2712129118033692477.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-2854027354775855273.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-2859974779009471627.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-2862675964379475963.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-2894242502525565649.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-3128731523208121227.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-3561327356591895830.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-3666126095340281171.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-3839351856973288661.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-3895880572346739617.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-3907702195537354311.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-3966566718080386496.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-4372072612642992110.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-4374049618648383731.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-4711718528150056476.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-4752562044195371811.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-4995293794161212039.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-5099459520076619803.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-5102543442696689306.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-5144088859371606363.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-5237539856079299123.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-5337133487194721991.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-5493722155239634850.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-5744327586724835530.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-6178105440978776996.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-6255973125850156916.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-6383344343304811134.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-666337987915823974.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-6697159937634581850.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-6725092434735737718.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-6807405631894611913.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-6888911260654582978.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-6924413986621255352.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-7227028893426154503.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-7310512922927124178.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-7397904278008516125.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-7400026776921910435.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-7460930762033290594.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-7490178714917743876.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-7595470978795843066.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-7731106435700712931.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-7793994125101588549.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-7852121855956906111.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-8020044908247288305.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-8338778432306197533.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-8527618293395600410.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-8549231111871057945.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-8850714968533668005.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-9033756250118724227.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-9079396897867467820.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-9203001095147505895.dll
C:\Users\Bolec\AppData\Local\Temp\jshortcut-9204641015520474368.dll
C:\Users\Bolec\AppData\Local\Temp\nseC987.exe
C:\Users\Bolec\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Bolec\AppData\Local\Temp\nvStInst.exe
C:\Users\Bolec\AppData\Local\Temp\setup.exe
C:\Users\Bolec\AppData\Local\Temp\Windows 7 Aktywator Downloader__3687_i1925490279_il127936.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll
[2016-04-05 14:51] - [2015-11-10 20:55] - 1008640 ____A (Microsoft Corporation) E573BD9AB55C8E333C202B9E255F972E

C:\Windows\SysWOW64\User32.dll
[2016-06-14 14:47] - [2016-06-14 14:47] - 0833024 ____A (Microsoft Corporation) 2C9CC9F492CA596B1B9FC1AE5E916356

C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-06-28 12:31

==================== Koniec  FRST.txt ============================