Cześć. Przyznam, że zarejestrowałem się tutaj głównie w celu odnalezienia rozwiązania problemu, który nastąpił dziś rano. Wczoraj wieczorem dokonałem aktualizacji Windows 7 na swoim laptopie. Niestety jeden z programów niezbędnych do pracy z domu przestał działać toteż postanowiłem przywrócić system do ustawień sprzed aktualizacji. Po restarcie widzę blue screen z błędem wymienionym w temacie. Próbowałem już kilku rzeczy w tym przywracanie do innych dat, ale nic z tego. Pojawia się komunikat, o uszkodzonych plikach itd. Przed chwilą zrobiłem skan programem FRST, Poniżej log - dacie radę mi pomóc?
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02.01.2018
Ran by SYSTEM on MININT-MKQT3OQ (05-01-2018 13:00:58)
Running from f:\
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 9
Boot Mode: Recovery
Default: ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-05-16] (Realtek Semiconductor)
HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2785064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [synAsusAcpi] => C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-11-16] (AVAST Software)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [bCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [switchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\RunOnce: [*Restore] => C:\Windows\system32\rstrui.exe [296960 2010-11-20] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\Default\...\Run: [sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\Default User\...\Run: [sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\Gość\...\Run: [sidebar] => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\Małgo\...\Run: [Google Update] => C:\Users\Małgo\AppData\Local\Google\Update\1.3.33.7\GoogleUpdateCore.exe [601680 2017-11-17] (Google Inc.)
HKU\Małgo\...\Run: [AdobeBridge] => [X]
HKU\MSSQL$SQLEXPRESS\...\Run: [sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\UpdatusUser\...\Run: [sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\UpdatusUser\...\Run: [iSUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7549928 2017-11-16] (AVAST Software)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-11-16] (AVAST Software)
S2 MySQL56; C:\ProgramData\MySQL\MySQL Server 5.6\my.ini [14232 2017-12-18] ()
S4 OracleJobSchedulerXE; c:\oraclexe\app\oracle\product\11.2.0\server\Bin\extjob.exe [45568 2014-05-29] ()
S3 OracleMTSRecoveryService; C:\oraclexe\app\oracle\product\11.2.0\server\BIN\omtsreco.exe [81408 2014-05-29] (Oracle Corporation)
S2 OracleServiceXE; c:\oraclexe\app\oracle\product\11.2.0\server\bin\ORACLE.EXE [147110912 2014-05-29] (Oracle Corporation)
S3 OracleXEClrAgent; C:\oraclexe\app\oracle\product\11.2.0\server\bin\OraClrAgnt.exe [83968 2014-05-29] (Oracle Corporation)
S2 OracleXETNSListener; C:\oraclexe\app\oracle\product\11.2.0\server\BIN\tnslsnr.exe [522240 2014-05-29] (Oracle Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)
S2 BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [183584 2017-11-16] (AVAST Software)
S1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [321032 2017-11-16] (AVAST Software s.r.o.)
S0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [198968 2017-11-16] (AVAST Software s.r.o.)
S0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343288 2017-11-16] (AVAST Software s.r.o.)
S0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57728 2017-11-16] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [47008 2017-11-16] (AVAST Software)
S1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41832 2017-09-07] (AVAST Software)
S2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [148288 2017-11-16] (AVAST Software)
S1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110376 2017-11-16] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84416 2017-11-16] (AVAST Software)
S1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1026232 2017-11-16] (AVAST Software)
S1 aswSP; C:\Windows\System32\drivers\aswSP.sys [455376 2017-11-16] (AVAST Software)
S2 aswStm; C:\Windows\System32\drivers\aswStm.sys [203976 2017-11-16] (AVAST Software)
S0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [364464 2017-11-16] (AVAST Software)
S1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-03-11] (DT Soft Ltd)
S3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
S3 qcusbnet; C:\Windows\System32\DRIVERS\qcusbnet.sys [428600 2017-03-14] (QUALCOMM Incorporated)
S3 qcusbser; C:\Windows\System32\DRIVERS\qcusbser.sys [254520 2017-03-14] (QUALCOMM Incorporated)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [28416 2008-04-16] (Research In Motion Limited)
S3 AthBTPort; system32\DRIVERS\btath_flt.sys [X]
S3 BTATH_A2DP; system32\drivers\btath_a2dp.sys [X]
S3 BTATH_BUS; system32\DRIVERS\btath_bus.sys [X]
S3 BTATH_HCRP; system32\DRIVERS\btath_hcrp.sys [X]
S3 BTATH_LWFLT; system32\DRIVERS\btath_lwflt.sys [X]
S3 BTATH_RCP; system32\DRIVERS\btath_rcp.sys [X]
S3 BtFilter; system32\DRIVERS\btfilter.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-01-05 13:00 - 2018-01-05 13:00 - 000000000 ____D C:\FRST
2018-01-04 23:31 - 2018-01-04 23:31 - 000000000 ____D C:\Users\Małgo\AppData\Roaming\Juniper Networks
2018-01-04 20:19 - 2018-01-05 00:35 - 000000000 ___SD C:\Windows\System32\CompatTel
2018-01-04 20:19 - 2018-01-05 00:35 - 000000000 ____D C:\Windows\System32\appraiser
2018-01-04 12:00 - 2018-01-04 12:00 - 000000000 ____D C:\Windows\System32\MRT
2018-01-04 11:26 - 2009-07-13 17:41 - 001393152 _____ (Microsoft Corporation) C:\Windows\System32\WMALFXGFXDSP.dll
2018-01-02 07:42 - 2018-01-02 07:42 - 000210056 _____ C:\Users\Małgo\Desktop\Formularz-rekrutacyjny.pdf
2017-12-28 14:52 - 2017-12-28 15:09 - 271106338 _____ C:\Users\Małgo\Downloads\CameraRaw_9_1_1.zip
2017-12-27 09:42 - 2017-12-27 09:42 - 002219562 _____ C:\Users\Małgo\Downloads\Astrofotografia dla początkującego.pdf
2017-12-27 09:42 - 2017-12-27 09:42 - 001682907 _____ C:\Users\Małgo\Downloads\Łączenie.pdf
2017-12-27 05:26 - 2017-12-27 05:27 - 000127284 _____ C:\Users\Małgo\Downloads\GradientXTerminatorWin64.zip
2017-12-27 03:28 - 2017-12-27 03:28 - 003540049 _____ C:\Users\Małgo\Downloads\Obróbka DSS w PS5.pdf
2017-12-27 03:26 - 2017-12-27 03:27 - 002814685 _____ C:\Users\Małgo\Downloads\PS w obróbce DSS.pdf
2017-12-27 01:48 - 2018-01-03 06:53 - 000003496 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-GOSIA-Małgo
2017-12-27 01:41 - 2017-12-27 01:41 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-12-27 01:38 - 2017-12-27 01:42 - 000000000 ____D C:\Program Files\Adobe
2017-12-27 01:33 - 2017-12-27 01:41 - 000000000 ____D C:\Program Files\Common Files\Adobe
2017-12-26 13:26 - 2017-12-26 13:27 - 000566792 _____ C:\Users\Małgo\Downloads\Deep_Sky_Stacker_-_opis.pdf
2017-12-26 13:26 - 2017-12-26 13:27 - 000504296 _____ C:\Users\Małgo\Downloads\Kalibracja i stackowanie w DeepSkyStacker.pdf
2017-12-26 12:32 - 2017-12-26 12:32 - 000002591 _____ C:\Users\Public\Desktop\DeepSkyStacker.lnk
2017-12-26 12:32 - 2017-12-26 12:32 - 000000000 ____D C:\Users\Małgo\Downloads\DeepSkyStacker
2017-12-26 12:32 - 2017-12-26 12:32 - 000000000 ____D C:\Program Files (x86)\DeepSkyStacker
2017-12-26 12:24 - 2017-12-26 12:25 - 010754751 _____ C:\Users\Małgo\Downloads\DeepSkyStacker.zip
2017-12-21 23:51 - 2017-12-22 02:05 - 000000000 ____D C:\Users\Małgo\Desktop\My Cpp
2017-12-19 03:50 - 2017-12-19 03:50 - 000000445 _____ C:\Users\Małgo\Desktop\carrot.cpp
2017-12-18 09:06 - 2017-12-18 09:07 - 000000000 ____D C:\Program Files (x86)\CodeBlocks
2017-12-18 09:06 - 2017-12-18 09:06 - 000001097 _____ C:\Users\Małgo\Desktop\CodeBlocks.lnk
2017-12-18 09:03 - 2017-12-18 09:04 - 083783938 _____ (The Code::Blocks Team) C:\Users\Małgo\Downloads\codeblocks-16.01mingw-setup.exe
2017-12-18 08:35 - 2017-12-26 13:13 - 000000000 ____D C:\Users\Małgo\AppData\Roaming\CodeBlocks
2017-12-18 08:34 - 2017-12-18 08:34 - 034486727 _____ (The Code::Blocks Team) C:\Users\Małgo\Downloads\codeblocks-16.01-setup.exe
2017-12-18 08:17 - 2017-12-18 08:17 - 008075834 _____ C:\Users\Małgo\Desktop\Cpp_Primer_Plus_6th_Edition.pdf
2017-12-18 06:47 - 2017-12-18 06:47 - 002193834 _____ C:\Users\Małgo\Downloads\flyer.pdf
2017-12-18 01:49 - 2017-12-18 01:49 - 000279583 _____ C:\Users\Małgo\Downloads\CV_Malgorzata Dobosz_eng 2017-2.pdf
2017-12-18 01:32 - 2017-12-18 07:02 - 000001424 _____ C:\Users\Małgo\Downloads\MrBuggy.cfg
2017-12-18 01:24 - 2017-12-18 01:24 - 000000000 ____D C:\Program Files\MySQL
2017-12-18 01:20 - 2017-12-18 01:24 - 000000000 ____D C:\Program Files (x86)\MySQL
2017-12-18 01:13 - 2017-12-18 01:14 - 188518400 _____ C:\Users\Małgo\Downloads\mysql-installer-community-5.6.12.0.msi
2017-12-18 01:13 - 2017-12-18 01:13 - 001638912 _____ (21CN) C:\Users\Małgo\Downloads\MrBuggy.exe
2017-12-15 13:41 - 2017-12-15 13:41 - 000000004 _____ C:\Users\Małgo\Desktop\karta edenred.txt
2017-12-06 22:56 - 2017-12-06 22:56 - 000000000 ____D C:\Program Files\Common Files\Avast Software
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-01-05 12:48 - 2009-07-13 23:45 - 000000000 ____D C:\Program Files\Windows Journal
2018-01-05 02:47 - 2017-09-10 11:04 - 000535442 _____ C:\Windows\ntbtlog.txt
2018-01-05 00:46 - 2016-04-07 12:41 - 000000000 ____D C:\users\MSSQL$SQLEXPRESS
2018-01-05 00:46 - 2015-05-25 06:57 - 000000000 ____D C:\users\Gość
2018-01-05 00:46 - 2012-03-09 04:11 - 000000000 ____D C:\users\Małgo
2018-01-05 00:46 - 2011-11-11 11:34 - 000000000 ____D C:\users\UpdatusUser
2018-01-05 00:46 - 2009-07-13 23:45 - 000000000 ____D C:\Windows\ShellNew
2018-01-05 00:46 - 2009-07-13 21:32 - 000000000 ____D C:\Windows\Offline Web Pages
2018-01-05 00:46 - 2009-07-13 21:32 - 000000000 ____D C:\Windows\Downloaded Program Files
2018-01-05 00:46 - 2009-07-13 21:32 - 000000000 ____D C:\Program Files\Windows Defender
2018-01-05 00:46 - 2009-07-13 21:32 - 000000000 ____D C:\Program Files\DVD Maker
2018-01-05 00:46 - 2009-07-13 21:32 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\SysWOW64\Setup
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\SysWOW64\migwiz
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\SysWOW64\et-EE
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\SysWOW64\Dism
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\System32\Setup
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\System32\migwiz
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\System32\lv-LV
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\System32\lt-LT
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\System32\et-EE
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\System32\Dism
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\System32\AdvancedInstallers
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\rescache
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\PolicyDefinitions
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\L2Schemas
2018-01-05 00:46 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\inf
2018-01-05 00:44 - 2015-07-29 09:42 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
2018-01-05 00:44 - 2011-02-18 21:30 - 000000000 ____D C:\Windows\SysWOW64\XPSViewer
2018-01-05 00:44 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\tracing
2018-01-05 00:44 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\SysWOW64\MUI
2018-01-05 00:44 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\System32\MUI
2018-01-05 00:44 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\servicing
2018-01-05 00:44 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\schemas
2018-01-05 00:41 - 2017-10-04 10:36 - 000000000 ___RD C:\Users\Małgo\Virtual Machines
2018-01-05 00:41 - 2017-08-12 09:01 - 000000000 ____D C:\Program Files\Java
2018-01-05 00:41 - 2017-05-24 23:30 - 000000000 ____D C:\Users\Małgo\AppData\Roaming\ICAClient
2018-01-05 00:41 - 2013-03-13 00:49 - 000000000 ____D C:\Program Files\Microsoft Silverlight
2018-01-05 00:41 - 2011-11-11 11:43 - 000000000 ____D C:\ProgramData\P4G
2018-01-05 00:41 - 2009-07-13 19:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
2018-01-05 00:40 - 2017-05-24 23:28 - 000000000 ____D C:\Program Files (x86)\Citrix
2018-01-05 00:40 - 2013-03-13 00:49 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2018-01-05 00:40 - 2012-03-18 04:29 - 000000000 ____D C:\Program Files (x86)\Java
2018-01-05 00:38 - 2009-07-13 23:44 - 000000000 ___RD C:\Users\Public\Recorded TV
2018-01-05 00:26 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\registration
2018-01-05 00:16 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\AppCompat
2018-01-05 00:05 - 2009-07-13 20:45 - 000009920 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-01-05 00:05 - 2009-07-13 20:45 - 000009920 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-01-04 23:50 - 2016-08-10 01:14 - 000000000 ____D C:\Users\Małgo\.oracle_jre_usage
2018-01-04 23:32 - 2012-03-09 04:11 - 000000000 ____D C:\Users\Małgo\AppData\Local\VirtualStore
2018-01-04 20:50 - 2009-07-28 22:03 - 000000000 ____D C:\Windows\Panther
2018-01-04 07:04 - 2013-07-08 11:04 - 000000288 _____ C:\Windows\Tasks\DSite.job
2018-01-04 00:40 - 2012-03-09 04:45 - 000001006 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1853744613-2716420291-1059564960-1001Core.job
2018-01-04 00:24 - 2012-04-16 07:42 - 000000000 ____D C:\Users\Małgo\AppData\Local\Adobe
2018-01-03 06:53 - 2017-08-01 01:07 - 000003154 _____ C:\Windows\System32\Tasks\{6CA1A2D6-4D75-49D0-B0F7-5AC62CF71E90}
2018-01-03 06:53 - 2017-07-07 05:22 - 000003944 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1468514181
2018-01-03 06:53 - 2016-08-16 05:27 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-01-03 06:53 - 2015-12-21 09:20 - 000004412 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-01-03 06:53 - 2015-08-29 12:53 - 000003386 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1853744613-2716420291-1059564960-1001Core1d0bf89ddf8de40
2018-01-03 06:53 - 2013-12-17 14:31 - 000002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2018-01-03 06:53 - 2013-07-08 11:04 - 000003222 _____ C:\Windows\System32\Tasks\DSite
2018-01-03 06:53 - 2013-03-16 04:34 - 000003160 _____ C:\Windows\System32\Tasks\Game_Booster_AutoUpdate
2018-01-03 06:53 - 2013-01-30 10:56 - 000003480 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-01-03 06:53 - 2013-01-30 10:56 - 000003352 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2018-01-03 06:53 - 2012-03-18 03:15 - 000003170 _____ C:\Windows\System32\Tasks\{4F0D66D6-DA8E-4B9A-A0F5-D3E3790E0EA9}
2018-01-03 06:53 - 2012-03-18 03:15 - 000003170 _____ C:\Windows\System32\Tasks\{2A247AC1-279A-4D6B-B03C-E93E28C307FF}
2018-01-03 06:53 - 2012-03-11 01:06 - 000003018 _____ C:\Windows\System32\Tasks\ASUS Live Update
2018-01-03 06:53 - 2012-03-09 04:45 - 000003658 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1853744613-2716420291-1059564960-1001UA
2018-01-03 06:53 - 2012-03-09 04:45 - 000003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1853744613-2716420291-1059564960-1001Core
2018-01-03 06:53 - 2011-11-11 11:43 - 000003148 _____ C:\Windows\System32\Tasks\SidebarExecute
2018-01-01 13:20 - 2011-02-18 21:31 - 000753644 _____ C:\Windows\System32\perfh015.dat
2018-01-01 13:20 - 2011-02-18 21:31 - 000160164 _____ C:\Windows\System32\perfc015.dat
2018-01-01 13:20 - 2009-07-13 21:13 - 001701542 _____ C:\Windows\System32\PerfStringBackup.INI
2018-01-01 06:34 - 2013-02-02 02:45 - 000065536 _____ C:\Windows\System32\Ikeext.etl
2018-01-01 06:34 - 2011-11-11 11:47 - 000045056 _____ C:\Windows\System32\acovcnt.exe
2018-01-01 06:34 - 2009-07-13 21:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-12-31 07:55 - 2017-03-08 13:51 - 000004172 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-12-29 13:49 - 2009-07-13 19:20 - 000000000 ____D C:\Windows\System32\NDF
2017-12-29 10:11 - 2016-08-26 09:01 - 000000000 _____ C:\Windows\SysWOW64\last.dump
2017-12-29 10:09 - 2011-11-11 11:47 - 000002816 _____ C:\Windows\System32\AutoRunFilter.ini
2017-12-29 10:08 - 2009-07-13 20:45 - 005042464 _____ C:\Windows\System32\FNTCACHE.DAT
2017-12-28 15:06 - 2012-03-09 04:43 - 000000000 ____D C:\Users\Małgo\AppData\Roaming\Adobe
2017-12-28 14:35 - 2012-03-18 14:45 - 000000000 ____D C:\Users\Małgo\AppData\Local\CrashDumps
2017-12-27 09:02 - 2012-04-16 07:40 - 000000000 ____D C:\ProgramData\Adobe
2017-12-27 01:47 - 2015-11-07 11:01 - 000000000 ____D C:\Users\Małgo\AppData\Roaming\NVIDIA
2017-12-27 01:44 - 2012-03-09 04:11 - 000110880 _____ C:\Users\Małgo\AppData\Local\GDIPFONTCACHEV1.DAT
2017-12-27 01:42 - 2012-04-16 07:42 - 000000000 ____D C:\Program Files (x86)\Adobe
2017-12-27 01:27 - 2012-03-09 05:35 - 000000000 ____D C:\Users\Małgo\AppData\Roaming\uTorrent
2017-12-26 13:16 - 2016-08-15 10:12 - 000000000 ____D C:\Users\Małgo\Downloads\TORRENTS
2017-12-18 01:24 - 2016-11-22 09:02 - 000000000 ____D C:\ProgramData\MySQL
2017-12-18 01:24 - 2014-06-29 07:35 - 001730104 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-12-18 01:04 - 2012-08-01 08:23 - 000000000 ____D C:\Users\Małgo\AppData\Local\ElevatedDiagnostics
2017-12-12 23:32 - 2015-12-21 09:20 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-12-12 23:32 - 2015-12-21 09:20 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-12-12 23:32 - 2015-12-21 09:20 - 000000000 ____D C:\Windows\System32\Macromed
2017-12-12 23:32 - 2011-04-01 01:19 - 000000000 ____D C:\Windows\SysWOW64\Macromed
Some files in TEMP:
====================
2017-09-10 10:45 - 2016-07-21 10:14 - 006913648 _____ (Spotify Ltd) C:\Users\Małgo\AppData\Local\Temp\SpotifyUninstall.exe
==================== Known DLLs (Whitelisted) =========================
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\dnsapi.dll => MD5 is legit
C:\Windows\SysWOW64\dnsapi.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== Association (Whitelisted) =============
==================== Restore Points =========================
==================== Memory info ===========================
Percentage of memory in use: 14%
Total physical RAM: 4006.7 MB
Available physical RAM: 3418.41 MB
Total Virtual: 4004.85 MB
Available Virtual: 3411.5 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:44.24 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (DATA) (Fixed) (Total:254.46 GB) (Free:72.06 GB) NTFS
Drive f: (INTENSO) (Removable) (Total:7.83 GB) (Free:5.22 GB) exFAT
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 496B9619)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=186.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=254.5 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 7.8 GB) (Disk ID: 00000000)
Partition: GPT.
LastRegBack: 2017-12-29 08:08
==================== End of FRST.txt ============================
