Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 13-07-2017
Uruchomiony przez Kacper (administrator)  KACPER-KOMPUTER (14-07-2017 20:24:27)
Uruchomiony z C:\Users\Kacper\Downloads
Załadowane profile: Kacper (Dostępne profile: Kacper)
Platform: Windows 10 Pro Wersja 1703 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(MSI) C:\Windows\SysWOW64\muachost.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel® Corporation) C:\Program Files\Intel\ConnectCenter\bin\CCFManager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8899592 2016-10-02] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [IntelConnectCenter] => C:\Program Files\Intel\ConnectCenter\bin\ICCLauncher.exe [90112 2016-10-09] (Intel® Corporation)
HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1489088 2017-07-11] (COMODO)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1178912 2016-05-25] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-01-21] (Microsoft Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5885352 2017-06-29] (LogMeIn Inc.)
HKU\S-1-5-21-887847752-4213657936-3099430745-1000\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [3062048 2017-07-12] (Valve Corporation)
HKU\S-1-5-21-887847752-4213657936-3099430745-1000\...\Run: [DAEMON Tools Lite Automount] => D:\Program Files\DAEMON Tools Lite\DTAgent.exe [4299968 2016-10-04] (Disc Soft Ltd)
HKU\S-1-5-21-887847752-4213657936-3099430745-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27021952 2016-10-17] (Skype Technologies S.A.)
HKU\S-1-5-21-887847752-4213657936-3099430745-1000\...\Run: [Spotify] => C:\Users\Kacper\AppData\Roaming\Spotify\Spotify.exe [7111792 2017-07-12] (Spotify Ltd)
HKU\S-1-5-21-887847752-4213657936-3099430745-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9803992 2017-06-13] (Piriform Ltd)
HKU\S-1-5-21-887847752-4213657936-3099430745-1000\...\Run: [Spotify Web Helper] => C:\Users\Kacper\AppData\Roaming\Spotify\Spotify.exe [7111792 2017-07-12] (Spotify Ltd)
HKU\S-1-5-21-887847752-4213657936-3099430745-1000\...\RunOnce: [Application Restart #5] => C:\Windows\SysWOW64\muachost.exe [1692840 2016-12-14] (MSI)
HKU\S-1-5-21-887847752-4213657936-3099430745-1000\...\MountPoints2: {3e63866f-8cb9-11e6-87ec-4ccc6a27283d} - "G:\Setup.exe" 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2016-09-30]
ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.9.10
Tcpip\..\Interfaces\{47c207f4-a7ac-475e-b480-706cc9a63b64}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{ca28b01a-4334-4cac-ab07-751924b271b8}: [DhcpNameServer] 192.168.9.10

Internet Explorer:
==================
HKU\S-1-5-21-887847752-4213657936-3099430745-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.pl/
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-04-20] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-04-20] (Oracle Corporation)
DPF: HKLM-x32 {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} hxxp://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1497801038293
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://files.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab

FireFox:
========
FF DefaultProfile: dbt82xhk.default
FF ProfilePath: C:\Users\Kacper\AppData\Roaming\Mozilla\Firefox\Profiles\dbt82xhk.default [2017-07-14]
FF user.js: detected! => C:\Users\Kacper\AppData\Roaming\Mozilla\Firefox\Profiles\dbt82xhk.default\user.js [2016-10-02]
FF Homepage: Mozilla\Firefox\Profiles\dbt82xhk.default -> hxxp://google.pl/
FF Extension: (Browser-Security) - C:\Users\Kacper\AppData\Roaming\Mozilla\Firefox\Profiles\dbt82xhk.default\Extensions\firefox@browser-security.de.xpi [2016-10-02]
FF Extension: (Video AdBlock) - C:\Users\Kacper\AppData\Roaming\Mozilla\Firefox\Profiles\dbt82xhk.default\Extensions\{7b8a500a-a464-4624-bd4f-73eaafe0f766} [2016-10-02]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_137.dll [2017-07-12] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_137.dll [2017-07-12] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-04-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-04-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-06-27] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-06-27] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)

Chrome: 
=======
CHR Session Restore: Default -> [funkcja włączona]
CHR Profile: C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default [2017-07-14]
CHR Extension: (Dysk Google) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-03]
CHR Extension: (YouTube) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-03]
CHR Extension: (FilmwebBooster) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgdojnljhhnmokjbpbhmngmmfnhokgij [2016-12-19]
CHR Extension: (AdBlock) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-06-30]
CHR Extension: (Into The Mist) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgihmkgobaljfehcadcckdggpeojaadh [2016-12-07]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Gmail) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-03]
CHR Extension: (Chrome Media Router) - C:\Users\Kacper\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-14]
CHR HKU\S-1-5-21-887847752-4213657936-3099430745-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [hegneaniplmfjcmohoclabblbahcbjoe] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [hegneaniplmfjcmohoclabblbahcbjoe] - hxxp://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [10501104 2017-07-11] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2876096 2017-07-11] (COMODO)
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [Brak podpisu cyfrowego]
S3 Disc Soft Lite Bus Service; D:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-10-04] (Disc Soft Ltd)
R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3418024 2017-06-29] (LogMeIn Inc.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-05-25] (Intel Corporation)
R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [454872 2016-01-28] (Rivet Networks)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc.)
S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [5893272 2016-10-22] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-06-21] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-06-21] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-06-27] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [450168 2017-06-21] (NVIDIA Corporation)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2017-04-09] ()
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)
S2 STCServ; C:\Program Files\Intel\STCServ\STCServ.exe [8095456 2016-10-09] (Intel Corporation)
R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2016-11-13] (Popcorn Time) [Brak podpisu cyfrowego]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [314016 2017-05-08] ()
R1 BfLwf; C:\WINDOWS\system32\DRIVERS\bflwfx64.sys [147528 2016-01-24] (Rivet Networks, LLC.)
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [40936 2017-06-02] (COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [831992 2017-06-02] (COMODO)
R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [50776 2017-06-02] (COMODO)
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2016-10-09] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2016-10-09] (Windows (R) Win 7 DDK provider)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-10-04] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-10-04] (Disc Soft Ltd)
R3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2017-05-22] (LogMeIn Inc.)
S3 I2cHkBurn; C:\WINDOWS\system32\drivers\I2cHkBurn.sys [41760 2016-12-14] (FINTEK Corp.)
R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [132880 2017-06-07] (COMODO)
R3 KillerEth; C:\WINDOWS\System32\drivers\e2xw10x64.sys [145920 2017-03-18] (Qualcomm Atheros, Inc.)
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [43680 2017-05-08] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_2386fda73b467ac8\nvlddmkm.sys [15625336 2017-06-28] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-06-21] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48248 2017-06-21] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-06-28] (NVIDIA Corporation)
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
R3 XENfiltv; C:\WINDOWS\system32\drivers\XENfiltv.sys [25600 2016-10-04] (Creative Technology Ltd.)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-07-14 20:24 - 2017-07-14 20:25 - 00018611 _____ C:\Users\Kacper\Downloads\FRST.txt
2017-07-14 20:23 - 2017-07-14 20:24 - 00000000 ____D C:\FRST
2017-07-14 20:23 - 2017-07-14 20:23 - 02435584 _____ (Farbar) C:\Users\Kacper\Downloads\FRST64.exe
2017-07-14 19:46 - 2017-07-14 19:46 - 00000000 ____D C:\Users\Kacper\Desktop\Testy
2017-07-14 19:14 - 2017-07-14 19:18 - 49597616 _____ (FinalWire Ltd. ) C:\Users\Kacper\Downloads\aida64extreme592.exe
2017-07-13 23:26 - 2017-07-13 23:26 - 00642632 _____ (EFD Software ) C:\Users\Kacper\Downloads\hdtune_255.exe
2017-07-13 23:26 - 2017-07-13 23:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune
2017-07-13 23:26 - 2017-07-13 23:26 - 00000000 ____D C:\Program Files (x86)\HD Tune
2017-07-13 23:21 - 2017-07-13 23:22 - 01482663 _____ (Setitefus ) C:\Users\Kacper\Downloads\HD-Tune-12177-AsystentPobierania_1240947800.exe
2017-07-13 17:28 - 2017-07-13 17:28 - 00000279 _____ C:\Users\Kacper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kosz.lnk
2017-07-13 17:21 - 2017-07-13 17:28 - 00000000 ____D C:\Users\Kacper\Desktop\Antihero
2017-07-13 17:21 - 2017-07-13 17:21 - 00000000 ____D C:\Users\Public\Documents\Steam
2017-07-13 17:21 - 2017-07-13 17:21 - 00000000 ____D C:\Users\Kacper\AppData\Roaming\com.timconkling.aciv
2017-07-12 01:00 - 2017-07-12 01:00 - 00000000 ____D C:\Users\Kacper\AppData\Local\Adorables
2017-07-11 22:47 - 2017-07-11 22:47 - 00000000 ____D C:\Users\Kacper\AppData\Roaming\Google
2017-07-10 13:05 - 2017-07-10 17:42 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi
2017-07-10 13:05 - 2017-07-10 17:42 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi
2017-07-10 13:05 - 2017-07-10 13:05 - 00000153 _____ C:\Users\Default\BullseyeCoverageError.txt
2017-07-10 13:05 - 2017-07-10 13:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2017-07-10 01:39 - 2017-07-10 01:39 - 00000000 ____D C:\Users\Kacper\AppData\LocalLow\Killerfish Games
2017-07-09 23:47 - 2017-07-09 23:57 - 54433208 _____ C:\Users\Kacper\Downloads\torbrowser-install-7.0.2_pl.exe
2017-07-06 23:38 - 2017-07-13 17:29 - 00002864 _____ C:\WINDOWS\system32\Drivers\fvstore.dat
2017-07-06 23:38 - 2017-07-06 23:38 - 00000000 ___HD C:\VTRoot
2017-07-05 20:32 - 2017-07-05 20:32 - 00002872 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-07-05 20:32 - 2017-07-05 20:32 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-07-05 20:32 - 2017-07-05 20:32 - 00000000 ____D C:\Program Files\CCleaner
2017-07-05 14:45 - 2017-07-05 14:45 - 00000000 ___RD C:\Users\Kacper\Documents\Scanned Documents
2017-07-05 14:45 - 2017-07-05 14:45 - 00000000 ____D C:\Users\Kacper\Documents\Fax
2017-07-04 20:41 - 2017-07-04 21:09 - 00000000 ____D C:\Users\Kacper\AppData\Local\Black_Tree_Gaming
2017-07-03 11:40 - 2017-07-03 11:40 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-07-03 11:40 - 2017-06-27 22:27 - 00135616 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2017-07-03 11:40 - 2017-03-10 23:17 - 00536864 _____ C:\WINDOWS\system32\vulkan-1.dll
2017-07-03 11:40 - 2017-03-10 23:17 - 00525600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2017-07-03 11:40 - 2017-03-10 23:17 - 00254240 _____ C:\WINDOWS\system32\vulkaninfo.exe
2017-07-03 11:40 - 2017-03-10 23:17 - 00233760 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2017-07-03 11:39 - 2017-07-03 11:39 - 00000000 _____ C:\WINDOWS\SysWOW64\SET6E7C.tmp
2017-07-03 11:38 - 2017-06-28 00:39 - 40239736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 35838912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 35314296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 28953536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 13559376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 12337296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 12132272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 11501776 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 10381664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 09982456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 04163008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 03709952 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 03595384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 01988216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438476.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 01597888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438476.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 01278528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 01067128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 01004664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 00996760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 00972736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 00924096 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 00781728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 00725112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 00689808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 00617416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 00609728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 00584128 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 00578056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 00499320 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2017-07-03 11:38 - 2017-06-28 00:39 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json
2017-07-03 11:38 - 2017-06-28 00:39 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json
2017-07-02 18:07 - 2017-07-14 20:17 - 01474832 _____ C:\WINDOWS\system32\Drivers\sfi.dat
2017-07-02 18:07 - 2017-07-02 18:07 - 00000000 ____D C:\WINDOWS\System32\Tasks\COMODO
2017-07-02 18:06 - 2017-07-02 18:06 - 00000000 ____D C:\ProgramData\Comodo Downloader
2017-07-02 18:06 - 2017-07-02 18:06 - 00000000 ____D C:\Program Files\COMODO
2017-07-02 18:05 - 2017-07-02 18:05 - 00000000 ____D C:\ProgramData\Shared Space
2017-07-02 18:05 - 2017-07-02 18:05 - 00000000 ____D C:\ProgramData\Comodo
2017-07-02 17:01 - 2017-06-21 09:07 - 00179320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2017-07-02 17:01 - 2017-06-21 09:07 - 00146552 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2017-06-30 20:16 - 2017-06-30 20:16 - 00000000 _____ C:\WINDOWS\System32\Tasks\CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}
2017-06-27 11:40 - 2017-06-27 11:40 - 00178800 _____ (Sony DADC Austria AG.) C:\WINDOWS\SysWOW64\CmdLineExt_x64.dll
2017-06-18 17:44 - 2017-06-18 17:44 - 00000000 _____ C:\WINDOWS\system32\Drivers\SET9BB7.tmp
2017-06-18 17:43 - 2017-06-18 17:43 - 00000000 _____ C:\WINDOWS\system32\SETAB90.tmp
2017-06-18 17:43 - 2017-06-08 03:45 - 00512960 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-06-18 17:42 - 2017-06-08 03:45 - 00045976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2017-06-18 17:41 - 2017-06-28 00:39 - 04208984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2017-06-18 17:41 - 2017-06-08 03:45 - 01988216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438253.dll
2017-06-18 17:41 - 2017-06-08 03:45 - 01606776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438253.dll
2017-06-18 15:18 - 2017-07-11 22:32 - 00000000 ____D C:\Users\Kacper\AppData\Local\LogMeIn Hamachi
2017-06-18 15:18 - 2017-07-10 13:05 - 00000995 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2017-06-15 20:47 - 2017-07-10 13:05 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2017-06-15 20:34 - 2017-06-30 20:17 - 00000176 _____ C:\Users\Kacper\BullseyeCoverageError.txt

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-07-14 19:48 - 2017-05-14 01:07 - 00000000 ____D C:\Users\Kacper
2017-07-14 19:35 - 2016-10-08 20:58 - 00000000 ____D C:\Users\Kacper\AppData\Roaming\NVIDIA
2017-07-14 19:28 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-07-14 19:16 - 2017-05-14 01:11 - 00004226 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E2070B18-2F61-4567-A356-13958A5C7212}
2017-07-14 19:15 - 2017-05-14 01:06 - 00000000 ____D C:\ProgramData\NVIDIA
2017-07-14 19:07 - 2017-05-14 01:11 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-07-14 03:17 - 2017-03-18 13:40 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2017-07-13 22:22 - 2017-04-11 22:59 - 00000000 ____D C:\Users\Kacper\AppData\Local\Spotify
2017-07-13 22:21 - 2017-04-11 22:33 - 00000000 ____D C:\Users\Kacper\AppData\Roaming\Spotify
2017-07-13 17:29 - 2016-10-03 23:13 - 00000000 ____D C:\Users\Kacper\AppData\Roaming\uTorrent
2017-07-13 15:41 - 2016-10-04 21:56 - 00000000 ____D C:\Users\Kacper\Documents\My Games
2017-07-13 15:19 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps
2017-07-13 15:19 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-07-13 01:53 - 2017-05-14 01:05 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-07-13 00:09 - 2016-10-02 20:13 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-07-12 23:58 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-07-12 19:15 - 2016-10-10 16:12 - 00000000 ____D C:\Users\Kacper\Desktop\League of Legends
2017-07-12 00:28 - 2017-05-14 01:11 - 00004654 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-07-12 00:28 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-07-12 00:28 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-07-11 22:58 - 2016-10-03 22:37 - 00000000 ____D C:\Users\Kacper\Desktop\All
2017-07-11 22:51 - 2016-10-02 17:38 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-07-11 22:49 - 2016-10-02 17:38 - 135225752 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-07-11 13:44 - 2017-06-08 04:45 - 00942280 _____ (COMODO) C:\WINDOWS\system32\guard64.dll
2017-07-11 13:44 - 2017-06-08 04:45 - 00732944 _____ (COMODO) C:\WINDOWS\SysWOW64\guard32.dll
2017-07-11 13:44 - 2017-06-08 04:45 - 00051808 _____ (COMODO) C:\WINDOWS\system32\cmdcsr.dll
2017-07-11 13:41 - 2017-06-08 04:43 - 00457408 _____ (COMODO) C:\WINDOWS\system32\cmdvrt64.dll
2017-07-11 13:40 - 2017-06-08 04:41 - 00363712 _____ (COMODO) C:\WINDOWS\SysWOW64\cmdvrt32.dll
2017-07-10 13:05 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF
2017-07-10 01:37 - 2016-10-04 21:40 - 00000000 ____D C:\Users\Kacper\AppData\Roaming\DAEMON Tools Lite
2017-07-06 23:38 - 2017-05-14 01:11 - 00003140 _____ C:\WINDOWS\System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3}
2017-07-05 22:50 - 2017-05-14 01:05 - 00395472 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-07-05 20:39 - 2016-10-02 17:24 - 00000000 ____D C:\Users\Kacper\AppData\Local\Packages
2017-07-05 20:36 - 2017-05-13 14:11 - 00000000 ___DC C:\WINDOWS\Panther
2017-07-05 20:36 - 2016-10-02 18:22 - 00000000 ____D C:\Users\Kacper\AppData\Roaming\MPC-HC
2017-07-05 20:36 - 2016-10-01 21:02 - 00000000 ____D C:\Users\Kacper\AppData\Local\CrashDumps
2017-07-05 19:36 - 2016-10-01 22:00 - 00000000 ____D C:\Windows10Upgrade
2017-07-05 19:21 - 2016-10-06 16:09 - 00000000 ____D C:\Users\Kacper\AppData\Roaming\TS3Client
2017-07-04 21:20 - 2016-12-16 20:43 - 00000000 ____D C:\Users\Kacper\AppData\Local\Ubisoft Game Launcher
2017-07-03 11:51 - 2017-05-14 01:06 - 03109294 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-07-03 11:51 - 2017-03-20 05:58 - 01425080 _____ C:\WINDOWS\system32\perfh015.dat
2017-07-03 11:51 - 2017-03-20 05:58 - 00358654 _____ C:\WINDOWS\system32\perfc015.dat
2017-07-03 11:45 - 2016-09-30 13:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-07-03 11:38 - 2017-05-14 01:06 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-07-02 19:33 - 2016-09-30 21:57 - 00000000 ____D C:\Users\Kacper\AppData\Local\ElevatedDiagnostics
2017-07-02 18:07 - 2016-10-02 18:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2017-07-02 17:01 - 2017-05-22 19:43 - 00004000 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-02 17:01 - 2017-05-14 01:11 - 00004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-02 17:01 - 2017-05-14 01:11 - 00003994 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-02 17:01 - 2017-05-14 01:11 - 00003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-02 17:01 - 2017-05-14 01:11 - 00003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-02 17:01 - 2017-05-14 01:11 - 00003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-02 17:01 - 2017-05-14 01:11 - 00003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-02 17:01 - 2017-05-14 01:11 - 00003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-02 17:01 - 2017-05-14 01:06 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-07-02 17:01 - 2017-05-14 01:06 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-07-01 21:16 - 2016-10-03 22:20 - 00002278 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-06-30 20:19 - 2017-04-10 18:41 - 00000000 ____D C:\Program Files (x86)\COMODO
2017-06-30 19:21 - 2017-03-18 23:06 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-06-30 19:21 - 2017-03-18 23:06 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-29 00:05 - 2017-03-19 10:43 - 00000000 ____D C:\Users\Kacper\Documents\ProfileCache
2017-06-29 00:03 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache
2017-06-28 00:39 - 2017-05-05 15:58 - 00057792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys
2017-06-28 00:39 - 2017-05-05 15:58 - 00046373 _____ C:\WINDOWS\system32\nvinfo.pb
2017-06-27 23:03 - 2017-05-14 01:06 - 06462400 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2017-06-27 23:03 - 2017-05-14 01:06 - 02478712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2017-06-27 23:03 - 2017-05-14 01:06 - 01762936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2017-06-27 23:03 - 2017-05-14 01:06 - 00549312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2017-06-27 23:03 - 2017-05-14 01:06 - 00392312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2017-06-27 23:03 - 2017-05-14 01:06 - 00082040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2017-06-27 23:03 - 2017-05-14 01:06 - 00069752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2017-06-27 22:52 - 2017-05-14 01:06 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2017-06-27 12:28 - 2016-09-30 12:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-06-25 16:50 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\registration
2017-06-25 16:50 - 2014-03-05 19:05 - 00000000 ____D C:\Users\Kacper\AppData\Roaming\.rezi
2017-06-22 23:11 - 2016-12-25 02:13 - 00000000 ____D C:\Program Files\Rockstar Games
2017-06-22 23:11 - 2016-12-25 02:13 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2017-06-22 22:30 - 2017-05-14 01:06 - 08076177 _____ C:\WINDOWS\system32\nvcoproc.bin
2017-06-22 14:20 - 2017-05-14 01:11 - 00003292 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-06-22 14:20 - 2016-10-02 17:26 - 00002455 _____ C:\Users\Kacper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-06-22 14:20 - 2016-10-02 17:26 - 00000000 ___RD C:\Users\Kacper\OneDrive
2017-06-21 18:22 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\servicing
2017-06-21 09:07 - 2017-04-15 00:31 - 00048248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2017-06-21 09:07 - 2016-10-03 22:28 - 01903224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2017-06-21 09:07 - 2016-10-03 22:28 - 01755256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2017-06-21 09:07 - 2016-10-03 22:28 - 01489528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2017-06-21 09:07 - 2016-10-03 22:28 - 01317496 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2017-06-21 09:07 - 2016-10-03 22:28 - 00121464 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2017-06-20 22:58 - 2017-04-07 18:02 - 00001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat
2017-06-18 17:51 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-06-18 15:30 - 2016-10-02 18:26 - 00000000 ____D C:\Users\Kacper\AppData\Local\Adobe
2017-06-18 15:29 - 2017-05-14 01:11 - 00004486 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-06-18 15:18 - 2010-11-21 05:27 - 00565416 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-06-18 15:14 - 2017-03-20 06:00 - 00000000 ___SD C:\WINDOWS\system32\AppV
2017-06-18 15:14 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-06-18 15:14 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-06-18 15:14 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\PrintDialog
2017-06-18 15:14 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-06-18 15:14 - 2017-03-18 23:03 - 00000000 ___RD C:\Program Files\Windows Defender
2017-06-18 15:14 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-06-18 15:14 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-06-18 15:14 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-06-18 15:14 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-06-18 15:14 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-06-18 15:14 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-06-18 15:14 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-06-18 15:14 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-06-18 15:14 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-06-18 15:14 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-06-18 15:14 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-06-18 15:14 - 2016-10-02 17:24 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-06-18 15:14 - 2009-07-14 05:20 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-06-18 15:13 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SystemResources
2017-06-18 15:12 - 2016-12-15 18:25 - 00000000 ____D C:\Users\Kacper\AppData\LocalLow\CampoSanto
2017-06-18 15:12 - 2016-10-02 18:28 - 00000000 ____D C:\Users\Kacper\AppData\LocalLow\Sun

==================== Pliki w katalogu głównym wybranych folderów =======

2016-09-30 12:52 - 2016-09-30 12:52 - 0000000 _____ () C:\Users\Kacper\AppData\Local\Driver_LOM_8171Present.flag
2016-09-30 21:28 - 2016-12-25 22:26 - 0007597 _____ () C:\Users\Kacper\AppData\Local\Resmon.ResmonCfg
2017-05-14 01:06 - 2017-05-14 01:06 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-12-16 00:25 - 2017-01-28 19:03 - 0017605 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-16 00:25 - 2017-01-11 23:57 - 0015106 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1

Niektóre pliki w TEMP:
====================
2017-07-05 14:47 - 2017-07-05 14:48 - 6394488 _____ (Microsoft Corporation) C:\Users\Kacper\AppData\Local\Temp\Windows10Upgrade.exe

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-07-09 22:21

==================== Koniec  FRST.txt ============================