Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 25-02-2017
Uruchomiony przez karol (administrator)  KAROL-KOMPUTER (26-02-2017 11:45:09)
Uruchomiony z C:\Users\karol\Downloads
Załadowane profile: karol (Dostępne profile: karol)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(AresGalaxy) J:\ares\Ares.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [205512 2017-02-06] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKU\S-1-5-21-2476814522-3174037697-3718741042-1001\...\Run: [ares] => J:\ares\Ares.exe [3535360 2016-10-06] (AresGalaxy)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-06-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-02-06] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-02-06] (AVAST Software)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 217.17.34.10 8.8.8.8
Tcpip\..\Interfaces\{0BC579DC-2EE6-4EF4-BC1D-3FB0A7E941D1}: [DhcpNameServer] 217.17.34.10 8.8.8.8

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2476814522-3174037697-3718741042-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2476814522-3174037697-3718741042-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-01-25] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-02-06] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-25] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-02-06] (AVAST Software)
BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

Chrome: 
=======
CHR Profile: C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default [2017-02-26]
CHR Extension: (uBlock Origin) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2017-02-26]
CHR Extension: (Adobe Acrobat) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-02-23]
CHR Extension: (Avast Online Security) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-02-23]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-02-23]
CHR Extension: (Chrome Media Router) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-23]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <nie znaleziono>

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7142136 2017-02-14] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [262736 2017-02-06] (AVAST Software)
S4 Hkhlp; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S4 Hkhlp; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [24376 2015-06-30] (Hewlett-Packard Company)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2011-03-04] (Hewlett-Packard Company) [Brak podpisu cyfrowego]
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [464440 2017-01-20] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-01-20] (NVIDIA Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [309784 2017-02-06] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [189768 2017-02-06] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [334600 2017-02-06] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [48528 2017-02-06] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-02-06] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [32088 2017-02-06] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [126088 2017-02-06] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [100640 2017-02-06] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [74680 2017-02-06] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [991496 2017-02-06] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [547904 2017-02-06] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [162528 2017-02-06] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [337080 2017-02-10] (AVAST Software)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-11-16] (Disc Soft Ltd)
S3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-11-16] (Disc Soft Ltd)
S3 dtproscsibus; C:\Windows\System32\DRIVERS\dtproscsibus.sys [30264 2016-11-16] (Disc Soft Ltd)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-01-20] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46016 2017-01-20] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-01-20] (NVIDIA Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [42600 2016-04-13] (Synaptics Incorporated)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-02-26 11:45 - 2017-02-26 11:45 - 00011952 _____ C:\Users\karol\Downloads\FRST.txt
2017-02-26 00:14 - 2017-02-26 00:14 - 00009377 _____ C:\Users\karol\Downloads\Fixlog.txt
2017-02-24 21:38 - 2017-02-24 21:39 - 00039804 _____ C:\Users\karol\Downloads\Addition.txt
2017-02-24 20:23 - 2017-02-24 20:23 - 00089443 _____ C:\Users\karol\Downloads\1_wzor (4).xps
2017-02-24 20:17 - 2017-02-24 20:17 - 00089443 _____ C:\Users\karol\Downloads\1_wzor (3).xps
2017-02-24 20:11 - 2017-02-24 20:11 - 00089443 _____ C:\Users\karol\Downloads\1_wzor (2).xps
2017-02-24 20:10 - 2017-02-24 20:10 - 00089443 _____ C:\Users\karol\Downloads\1_wzor (1).xps
2017-02-24 20:09 - 2017-02-26 00:14 - 00000000 ____D C:\Users\karol\AppData\LocalLow\Temp
2017-02-24 20:09 - 2017-02-24 20:09 - 00089443 _____ C:\Users\karol\Downloads\1_wzor.xps
2017-02-24 19:00 - 2017-02-24 19:00 - 17066807 _____ C:\Users\karol\Downloads\Haydn - kwintet.pdf
2017-02-24 19:00 - 2017-02-24 19:00 - 06760389 _____ C:\Users\karol\Downloads\Bach - kwintet.pdf
2017-02-24 12:06 - 2017-02-24 12:06 - 00593952 _____ (Duplex Secure Ltd) C:\Users\karol\Downloads\SPTDinst-v189-x64.exe
2017-02-24 11:41 - 2017-02-26 11:45 - 00000000 ____D C:\FRST
2017-02-24 11:37 - 2017-02-24 11:37 - 00380928 _____ C:\Users\karol\Downloads\ygu02o5o.exe
2017-02-24 11:36 - 2017-02-26 00:08 - 02423296 _____ (Farbar) C:\Users\karol\Downloads\FRST64.exe
2017-02-23 21:56 - 2017-02-23 21:56 - 01944616 _____ (WiperSoft) C:\Users\karol\Downloads\WiperSoft-installer.exe
2017-02-23 10:52 - 2017-02-23 10:52 - 00000000 ____D C:\ProgramData\RegRun
2017-02-23 10:13 - 2017-02-26 00:14 - 00001254 _____ C:\Users\karol\Desktop\Google Chrome.lnk
2017-02-23 10:11 - 2017-02-23 10:23 - 00000248 _____ C:\Windows\SysWOW64\PARTIZAL.EXE
2017-02-23 10:09 - 2017-02-23 10:09 - 00000000 ____D C:\@RestoreQuarantine
2017-02-23 10:03 - 2017-02-23 10:09 - 00000567 _____ C:\Windows\SysWOW64\Partizan.RRI
2017-02-23 09:49 - 2017-02-23 09:49 - 00000002 RSHOT C:\Windows\winstart.bat
2017-02-23 09:49 - 2017-02-23 09:49 - 00000002 RSHOT C:\Windows\SysWOW64\CONFIG.NT
2017-02-23 09:49 - 2017-02-23 09:49 - 00000002 RSHOT C:\Windows\SysWOW64\AUTOEXEC.NT
2017-02-23 09:48 - 2017-02-23 21:55 - 00000000 ____D C:\Users\karol\Documents\RegRun2
2017-02-23 09:48 - 2017-02-23 10:54 - 00000000 ____D C:\Users\Public\Documents\regruninfo
2017-02-23 09:48 - 2017-02-23 10:27 - 00003336 _____ C:\Windows\System32\Tasks\UnHackMe Task Scheduler
2017-02-23 09:48 - 2017-02-23 10:14 - 00000000 ____D C:\Program Files (x86)\UnHackMe
2017-02-23 09:48 - 2017-02-23 09:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnHackMe
2017-02-23 09:48 - 2016-11-01 13:08 - 00015016 _____ (Greatis Software, LLC.) C:\Windows\SysWOW64\Drivers\UnHackMeDrv.sys
2017-02-23 09:48 - 2015-12-28 11:32 - 00049968 _____ (Greatis Software) C:\Windows\system32\partizan.exe
2017-02-22 23:45 - 2017-02-22 23:45 - 08932000 _____ (Solvusoft Corporation ) C:\Users\karol\Downloads\Setup_WinThruster_2016.exe
2017-02-22 21:33 - 2017-02-22 21:41 - 00000000 ____D C:\Program Files\Unlocker
2017-02-22 21:33 - 2017-02-22 21:33 - 00000000 ____D C:\Users\karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2017-02-22 21:32 - 2017-02-22 21:32 - 01273752 _____ ( ) C:\Users\karol\Downloads\pobierz_Unlocker_V1.9.2.exe
2017-02-22 21:32 - 2017-02-22 21:32 - 01078591 _____ C:\Users\karol\Downloads\Unlocker1.9.2.exe
2017-02-22 21:07 - 2017-02-22 21:07 - 00000000 ____D C:\Windows\4FC9DA9DF608454E8191D7EFFDCC5726.TMP
2017-02-22 19:21 - 2017-02-22 19:21 - 00000000 ____D C:\Windows\pss
2017-02-22 18:40 - 2017-02-22 18:40 - 00000000 ___HD C:\$AV_ASW
2017-02-22 18:32 - 2017-02-22 18:32 - 00387726 _____ C:\Users\karol\Downloads\Download Fifa 17 Generator Kluczy Do Pobrania.zip
2017-02-21 23:12 - 2017-02-21 23:12 - 00000000 ____D C:\ProgramData\Origin
2017-02-21 23:07 - 2017-02-21 23:07 - 00000000 ____D C:\Program Files (x86)\Origin Games
2017-02-21 23:02 - 2017-02-21 23:02 - 01316643 _____ C:\Users\karol\Downloads\FIFA-17-Ultimate-Team-Key-Generator.zip
2017-02-20 21:04 - 2017-02-20 21:04 - 54970576 _____ (Electronic Arts) C:\Users\karol\Downloads\OriginThinSetup.exe
2017-02-20 21:04 - 2017-02-20 21:04 - 00000000 ____D C:\Users\karol\.QtWebEngineProcess
2017-02-20 21:01 - 2017-02-20 21:01 - 01239008 _____ ( ) C:\Users\karol\Downloads\Origin-38298-dp.exe
2017-02-20 20:45 - 2017-02-20 22:09 - 00000971 _____ C:\Users\Public\Desktop\FIFA 17.lnk
2017-02-20 20:45 - 2017-02-20 20:45 - 00000000 ___HD C:\Program Files\Common Files\EAInstaller
2017-02-20 20:45 - 2017-02-20 20:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 17
2017-02-20 20:43 - 2017-02-20 20:43 - 00000000 ____D C:\Users\karol\Documents\FIFA 17
2017-02-20 18:29 - 2017-02-20 18:29 - 00100807 _____ C:\Users\karol\Downloads\PLAN PRACY 2017 - marzec.pdf
2017-02-15 19:36 - 2017-02-15 19:36 - 00004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-02-15 19:36 - 2017-01-20 19:39 - 00156608 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-02-15 19:36 - 2017-01-20 19:39 - 00124352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-02-15 19:36 - 2017-01-20 19:39 - 00057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-02-15 19:36 - 2017-01-20 19:39 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2017-02-15 19:36 - 2017-01-20 14:36 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-02-09 21:45 - 2017-02-09 21:45 - 00273271 _____ C:\Users\karol\Downloads\Skład - Nagrania Chmura - Luty.pdf
2017-02-06 16:54 - 2017-02-06 16:54 - 00273697 _____ C:\Users\karol\Downloads\Skład - Nagrania i koncert G.Chmura .pdf
2017-02-06 12:34 - 2017-02-09 10:39 - 00004172 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-02-06 12:34 - 2017-02-06 12:34 - 00398408 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-02-06 12:34 - 2017-02-06 12:33 - 00334600 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-02-06 12:34 - 2017-02-06 12:33 - 00309784 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-02-06 12:34 - 2017-02-06 12:33 - 00189768 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-02-06 12:34 - 2017-02-06 12:33 - 00048528 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-02-06 12:07 - 2017-02-06 12:07 - 00000485 _____ C:\Users\karol\Downloads\Ogrody_926611_1.mid
2017-02-06 11:39 - 2017-02-06 11:39 - 01495047 _____ C:\Users\karol\Downloads\InstrukcjaUzytkownikauslugie-skok23032013.pdf
2017-02-04 21:28 - 2017-02-04 21:28 - 05903914 _____ C:\Users\karol\Downloads\Weinberg - Vln I i II.pdf
2017-02-04 21:28 - 2017-02-04 21:28 - 03192941 _____ C:\Users\karol\Downloads\Prokofiew - Vln I i II.pdf
2017-02-02 22:35 - 2017-02-02 22:35 - 04015056 _____ C:\Users\karol\Downloads\adwcleaner_6.043.exe
2017-02-02 15:52 - 2017-02-02 15:52 - 00001120 _____ C:\Users\Public\Desktop\Life is Strange - Complete.lnk
2017-02-02 15:52 - 2017-02-02 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Square Enix
2017-02-01 21:43 - 2017-02-01 21:44 - 09097763 _____ C:\Users\karol\Downloads\553fd066cf53f.LIS_PL.exe
2017-02-01 20:39 - 2017-02-01 20:39 - 12132774 _____ C:\Users\karol\Downloads\Life Is Strange - spolszczenie [1].exe
2017-02-01 20:39 - 2017-02-01 20:39 - 01285720 _____ (Gokuba ) C:\Users\karol\Downloads\Life Is Strange - spolszczenie.exe
2017-02-01 20:01 - 2017-02-01 20:01 - 00051363 _____ C:\Users\karol\Downloads\PA_4777_2017.pdf
2017-01-30 10:20 - 2017-01-30 10:20 - 05736716 _____ C:\Users\karol\Downloads\Paderewski - Koncert - Vln.pdf
2017-01-30 10:19 - 2017-01-30 10:20 - 03224315 _____ C:\Users\karol\Downloads\Stojowski - kwintet.pdf
2017-01-30 10:19 - 2017-01-30 10:19 - 00067128 _____ C:\Users\karol\Downloads\Sklad orkiestry Nagrania Borowicz (1).pdf
2017-01-29 20:45 - 2017-01-29 20:45 - 00141926 _____ C:\Users\karol\Downloads\1485719131-1001-6154.pdf
2017-01-29 19:46 - 2017-01-29 19:46 - 00000000 ____D C:\Users\karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OCCT
2017-01-29 15:33 - 2017-01-29 15:33 - 04341284 _____ C:\Users\karol\Downloads\memtest86-iso.zip
2017-01-29 15:33 - 2016-12-13 08:44 - 12271616 _____ C:\Users\karol\Downloads\Memtest86-7.2.iso
2017-01-29 15:32 - 2017-01-29 15:32 - 01280960 _____ (Rusahebac ) C:\Users\karol\Downloads\Memtest86-12556-dp.exe
2017-01-29 13:17 - 2017-01-29 13:52 - 05680877 _____ C:\Users\karol\Downloads\p95v289.win64.zip
2017-01-29 13:16 - 2017-01-29 13:16 - 01280960 _____ (Rusahebac ) C:\Users\karol\Downloads\Prime95-12983-dp.exe
2017-01-29 13:16 - 2017-01-29 13:16 - 01280960 _____ (Rusahebac ) C:\Users\karol\Downloads\Prime95-12983-dp (1).exe
2017-01-29 12:01 - 2017-01-29 12:01 - 02800800 _____ (Copyright © 2014 ReviverSoft LLC. All Rights Reserved.) C:\Users\karol\Downloads\PCBenchmarkSetup.exe
2017-01-29 12:01 - 2017-01-29 12:01 - 01280960 _____ (Rusahebac ) C:\Users\karol\Downloads\PC-Benchmark-41918-dp.exe
2017-01-29 01:31 - 2017-01-29 01:31 - 00000000 ____D C:\Users\karol\AppData\Local\OCCT_-_Ocbase_-_Adrien_Me
2017-01-29 01:28 - 2017-02-14 12:36 - 00000000 ____D C:\Users\karol\Documents\OCCT
2017-01-29 01:21 - 2017-01-29 19:46 - 00000000 ____D C:\Program Files (x86)\OCCTPT
2017-01-29 01:21 - 2017-01-29 01:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OCCT
2017-01-29 01:20 - 2017-01-29 01:20 - 06938939 _____ C:\Users\karol\Downloads\OCCTPT4.4.2.exe
2017-01-29 01:20 - 2017-01-29 01:20 - 01280960 _____ (Rusahebac ) C:\Users\karol\Downloads\OCCT-28567-dp.exe
2017-01-28 14:09 - 2017-02-15 19:36 - 00003742 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-28 14:09 - 2017-02-15 19:36 - 00003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-28 14:09 - 2017-02-15 19:36 - 00003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-28 14:09 - 2017-02-15 19:36 - 00003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-28 14:09 - 2017-02-15 19:36 - 00003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-28 14:09 - 2017-02-15 19:36 - 00003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-28 14:09 - 2017-01-28 14:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-01-28 14:09 - 2017-01-28 14:09 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-01-28 14:09 - 2017-01-20 19:39 - 01872320 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-01-28 14:09 - 2017-01-20 19:39 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-01-28 14:09 - 2017-01-20 19:39 - 01464768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-01-28 14:09 - 2017-01-20 19:39 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-01-28 14:09 - 2017-01-20 19:39 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-01-28 14:09 - 2017-01-20 16:13 - 00548800 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-01-28 14:09 - 2017-01-20 16:13 - 00083512 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-01-28 14:09 - 2017-01-20 15:07 - 00134080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-01-28 14:09 - 2016-12-16 01:33 - 00273696 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-01-28 14:09 - 2016-12-16 01:33 - 00266528 _____ C:\Windows\system32\vulkan-1.dll
2017-01-28 14:09 - 2016-12-16 01:33 - 00111392 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-01-28 14:09 - 2016-12-16 01:32 - 00125728 _____ C:\Windows\system32\vulkaninfo.exe
2017-01-28 14:08 - 2017-01-20 15:07 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-01-28 14:06 - 2017-01-24 00:04 - 01600056 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-01-28 14:06 - 2017-01-24 00:04 - 00217528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-01-28 14:06 - 2017-01-24 00:04 - 00047664 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 40192056 _____ C:\Windows\system32\nvcompiler.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 35272760 _____ C:\Windows\SysWOW64\nvcompiler.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 34934720 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 28209720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 19092912 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 19008392 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 16491120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 16403200 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 14677456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 14286392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-01-28 14:06 - 2017-01-20 17:36 - 13378448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 11123424 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 11019192 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 09308896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 08990584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 04065808 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 03623992 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 03585120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 03185720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 01985080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437849.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 01591352 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437849.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 01051072 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 00990264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 00960568 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 00909760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 00687224 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 00576192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 00496680 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 00412720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 00173272 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 00156792 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 00150760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 00135840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-01-28 14:06 - 2017-01-20 17:36 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-01-28 14:06 - 2017-01-20 17:36 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2017-01-28 13:50 - 2017-01-28 14:04 - 391600160 _____ (NVIDIA Corporation) C:\Users\karol\Downloads\378.49-desktop-win8-win7-64bit-international-whql.exe
2017-01-27 20:20 - 2017-01-27 20:20 - 00000000 ____D C:\Program Files (x86)\GTA 5
2017-01-27 12:11 - 2017-01-27 12:11 - 00067128 _____ C:\Users\karol\Downloads\Sklad orkiestry Nagrania Borowicz.pdf
2017-01-27 12:03 - 2017-01-27 12:03 - 00255215 _____ C:\Users\karol\Downloads\Zarzadzenie 16_12_2016 ekwiwalent na zakup akcesoriów.pdf

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-02-26 11:42 - 2016-10-14 17:29 - 00000000 ____D C:\AdwCleaner
2017-02-26 04:04 - 2009-07-14 05:45 - 00010416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-02-26 04:04 - 2009-07-14 05:45 - 00010416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-02-26 01:00 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-02-26 00:21 - 2009-07-14 18:55 - 00740422 _____ C:\Windows\system32\perfh015.dat
2017-02-26 00:21 - 2009-07-14 18:55 - 00155996 _____ C:\Windows\system32\perfc015.dat
2017-02-26 00:21 - 2009-07-14 06:13 - 01670518 _____ C:\Windows\system32\PerfStringBackup.INI
2017-02-26 00:17 - 2016-12-09 23:42 - 00000000 ____D C:\ProgramData\NVIDIA
2017-02-26 00:15 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-02-26 00:14 - 2016-12-26 22:47 - 00000000 ____D C:\Users\karol\Desktop\programy karola
2017-02-26 00:14 - 2016-09-23 22:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart File Advisor
2017-02-26 00:14 - 2016-09-12 18:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightworks
2017-02-24 03:02 - 2016-06-09 08:00 - 00000000 ____D C:\Windows\system32\MRT
2017-02-24 03:00 - 2016-06-09 08:00 - 138020592 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-02-23 09:57 - 2017-01-24 21:49 - 00000000 ____D C:\Users\karol\AppData\Local\AdvinstAnalytics
2017-02-23 09:55 - 2016-11-27 19:28 - 00000000 ____D C:\Users\karol\AppData\Local\IIIQF
2017-02-23 07:06 - 2016-06-11 13:07 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-22 23:57 - 2016-06-08 21:32 - 00000000 ____D C:\Users\karol
2017-02-22 22:36 - 2016-12-13 17:47 - 00000000 ____D C:\Users\karol\AppData\Local\CrashDumps
2017-02-22 18:48 - 2016-07-31 11:09 - 00000000 ____D C:\Windows\Minidump
2017-02-20 20:45 - 2016-11-16 16:07 - 00000000 ____D C:\ProgramData\Package Cache
2017-02-20 19:56 - 2016-09-22 19:03 - 00000000 ____D C:\Users\karol\AppData\Roaming\vlc
2017-02-18 09:59 - 2016-09-05 22:21 - 00000000 ____D C:\Users\karol\Desktop\Sylwia
2017-02-17 22:56 - 2016-06-08 22:14 - 00003972 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1465420481
2017-02-15 19:36 - 2016-12-09 23:44 - 00000000 ____D C:\Users\karol\AppData\Local\NVIDIA Corporation
2017-02-15 19:36 - 2016-12-09 23:42 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-02-15 19:36 - 2016-12-09 23:42 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-02-15 19:36 - 2016-12-09 23:39 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-02-10 12:34 - 2016-06-08 22:03 - 00337080 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2017-02-09 10:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2017-02-09 10:26 - 2016-12-20 19:53 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2017-02-08 15:10 - 2016-06-08 22:00 - 00000000 ____D C:\ProgramData\AVAST Software
2017-02-08 11:28 - 2009-07-14 06:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-02-06 12:34 - 2016-06-08 22:14 - 00032088 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-02-06 12:34 - 2016-06-08 22:03 - 00991496 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-02-06 12:34 - 2016-06-08 22:03 - 00547904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-02-06 12:34 - 2016-06-08 22:03 - 00162528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-02-06 12:34 - 2016-06-08 22:03 - 00126088 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-02-06 12:34 - 2016-06-08 22:03 - 00100640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-02-06 12:34 - 2016-06-08 22:03 - 00074680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-02-06 12:34 - 2016-06-08 22:03 - 00038296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-02-06 12:09 - 2017-01-04 10:10 - 00000000 ____D C:\Users\karol\Desktop\Nuty
2017-02-02 22:15 - 2016-09-23 22:24 - 00000246 _____ C:\Users\karol\Documents\ax_files.xml
2017-02-01 20:28 - 2017-01-09 22:25 - 00000000 ____D C:\Users\karol\Documents\My Games
2017-01-29 13:10 - 2016-06-08 21:33 - 00000000 ____D C:\Users\karol\AppData\Local\VirtualStore
2017-01-28 14:09 - 2016-12-09 23:43 - 00000000 ____D C:\Users\karol\AppData\Local\NVIDIA

==================== Pliki w katalogu głównym wybranych folderów =======

2015-04-17 10:52 - 2015-04-17 10:52 - 0000000 _____ () C:\Users\karol\AppData\Local\{CABF2C3E-6A25-45BD-81F5-D6B3FA290D8C}

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-02-22 00:06

==================== Koniec  FRST.txt ============================