Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 27.01.2018
Uruchomiony przez carlo_000 (administrator)  KAROL-LAPTOP (27-01-2018 20:32:55)
Uruchomiony z D:\Desktop
Załadowane profile: carlo_000 (Dostępne profile: carlo_000 & Konto2)
Platform: Windows 8.1 (Update) (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(AVG Technologies CZ, s.r.o.) C:\Pliki programów (x86)\AVG\Framework\Common\avgsvca.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(AVG Technologies CZ, s.r.o.) C:\Pliki programów (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.224\WsAppService.exe
(AVG Technologies CZ, s.r.o.) C:\Pliki programów (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
() C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(AVG Technologies CZ, s.r.o.) C:\Pliki programów (x86)\AVG\Framework\Common\avguix.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera_crashreporter.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Intel Corporation) D:\Programy\Intel\BluetoothHS\BTHSAmpPalService.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel(R) Corporation) D:\Programy\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15794160 2014-05-09] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80368 2013-11-27] (Lenovo(beijing) Limited)
HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [457616 2014-10-03] ()
HKLM\...\Run: [DolbyTrayApp] => c:\program files (x86)\Dolby Home Theater v4\pcee4.exe [508656 2012-08-31] (Dolby Laboratories Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-04-30] (Intel Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [81920 2008-03-13] (Hewlett-Packard)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2406496 2017-06-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [WSVCUUpdateHelper.exe] => C:\Pliki programów (x86)\Wondershare\Wondershare Video Converter Ultimate\WSVCUUpdateHelper.exe [28896 2017-08-10] ()
HKLM-x32\...\Run: [AvgUi] => C:\Pliki programów (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Run: [ALLUpdate] => D:\Programy (x86)\ALLPlayer\ALLUpdate.exe [3510704 2014-04-17] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Run: [Steam] => D:\Programy\Steam\steam.exe [2860832 2016-10-13] (Valve Corporation)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Run: [DAEMON Tools Lite] => D:\Programy\DAEMON Tools Lite\DTLite.exe [3589464 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Run: [AlcoholAutomount] => D:\Programy\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Run: [DAEMON Tools Lite Automount] => D:\Programy\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832264 2017-10-06] (Skype Technologies S.A.)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [479744 2014-10-29] (Microsoft Corporation)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\RunOnce: [Uninstall C:\Users\carlo_000\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\carlo_000\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64"
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\RunOnce: [Uninstall C:\Users\carlo_000\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\carlo_000\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [170688 2016-12-12] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148016 2016-12-12] (NVIDIA Corporation)
IFEO\taskmgr.exe: [Debugger] 

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\Parameters: [NameServer] 8.8.8.8,8.8.8.4
Tcpip\..\Interfaces\{4FF41D6B-3B85-4C7C-96A4-7AE861CA5269}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2017-12-16] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-11] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-08-09] (Oracle Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-11] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-09] (Oracle Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\carlo_000\AppData\Roaming\Mozilla\Firefox\Profiles\1y4lkfco.default [2018-01-27]
FF Extension: (Firefox365scorescom) - C:\Users\carlo_000\AppData\Roaming\Mozilla\Firefox\Profiles\1y4lkfco.default\Extensions\Firefox@365scores.com [2015-10-25] [Przestarzałe] [Brak podpisu cyfrowego]
FF Extension: (rememberpassteesoftinfo) - C:\Users\carlo_000\AppData\Roaming\Mozilla\Firefox\Profiles\1y4lkfco.default\Extensions\rememberpass@teesoft.info [2015-10-25] [Przestarzałe] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2014-05-17] [Przestarzałe] [Brak podpisu cyfrowego]
FF HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_137.dll [2018-01-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-06-04] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_137.dll [2018-01-09] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-09] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-09] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-11-15] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-06-04] (Adobe Systems)
StartMenuInternet: FIREFOX.EXE - D:\Programy\firefox.exe

Chrome: 
=======
CHR DefaultProfile: ChromeDefaultData2

Opera: 
=======
OPR Session Restore: -> [funkcja włączona]
OPR Extension: (Adblock Plus) - C:\Users\carlo_000\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2017-10-09]
StartMenuInternet: (HKLM) OperaStable - D:\Programy\Opera\Launcher.exe

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [814688 2017-06-04] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2257016 2017-08-23] (Adobe Systems, Incorporated)
R2 AMPPALR3; D:\Programy\Intel\BluetoothHS\BTHSAmpPalService.exe [772064 2013-05-01] (Intel Corporation)
R2 avgsvc; C:\Pliki programów (x86)\AVG\Framework\Common\avgsvca.exe [1146128 2016-12-06] (AVG Technologies CZ, s.r.o.)
S4 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2228440 2013-04-24] (Broadcom Corporation.)
S4 BrcmSetSecurity; D:\Programy\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-05-28] (Intel)
R2 BTHSSecurityMgr; D:\Programy\Intel\BluetoothHS\BTHSSecurityMgr.exe [135984 2012-09-12] (Intel(R) Corporation)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-10-19] (Digital Wave Ltd.) [Brak podpisu cyfrowego]
S3 Disc Soft Lite Bus Service; D:\Programy\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
S2 EvtEng; D:\Programy\Intel\WiFi\bin\EvtEng.exe [624368 2013-04-16] (Intel(R) Corporation)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [Brak podpisu cyfrowego]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-30] (Intel Corporation)
S4 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Brak podpisu cyfrowego]
R2 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [156104 2013-06-04] (Intel Corporation)
S2 MyWiFiDHCPDNS; D:\Programy\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-04-16] ()
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-12-13] (NVIDIA Corporation)
S2 Origin Client Service; D:\Programy\Origin\OriginClientService.exe [1910128 2015-02-20] (Electronic Arts)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 TuneUp.UtilitiesSvc; C:\Pliki programów (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [5618960 2017-11-15] (AVG Technologies CZ, s.r.o.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.224\WsAppService.exe [473824 2017-04-20] (Wondershare)
S3 WsDrvInst; C:\Pliki programów (x86)\Wondershare\Wondershare Video Converter Ultimate\Transfer\DriverInstall.exe [118496 2017-08-10] (Wondershare)
S2 ZeroConfigService; D:\Programy\Intel\WiFi\bin\ZeroConfigService.exe [3379440 2013-04-16] (Intel® Corporation)
R2 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "%ProgramData%\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

U3 axscsidrv; C:\Windows\System32\Drivers\axscsidrv.sys [293888 2015-03-12] (Alcohol Soft Development Team)
S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [172760 2013-04-24] (Broadcom Corporation.)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-03-25] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1366328 2013-03-28] (Motorola Solutions, Inc.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-06-30] (Disc Soft Ltd)
U3 dtscsidrv; C:\Windows\System32\Drivers\dtscsidrv.sys [309248 2015-02-10] (Disc Soft Ltd)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-02-10] (Disc Soft Ltd)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [115656 2013-06-04] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [74344 2013-07-03] (Intel Corporation)
S3 lehidmini; C:\Windows\System32\drivers\leath_hid.sys [39704 2013-08-29] (Atheros)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-25] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46016 2016-12-13] (NVIDIA Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-06-20] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-02-06] (Duplex Secure Ltd.)
R3 TuneUpUtilitiesDrv; C:\Pliki programów (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2017-02-21] (AVG Netherlands B.V.)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [206744 2013-05-28] (Windows (R) Win 7 DDK provider)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1064704 2013-06-01] (Vimicro Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-01-27 19:45 - 2018-01-27 19:45 - 000000000 ____D C:\Users\carlo_000\AppData\LocalLow\uTorrent
2018-01-27 00:10 - 2018-01-27 20:32 - 000000000 ____D C:\FRST
2018-01-26 23:01 - 2018-01-27 00:09 - 000000000 ____D C:\WinSys
2018-01-26 23:01 - 2018-01-27 00:09 - 000000000 ____D C:\Disk
2018-01-26 23:01 - 2018-01-26 23:43 - 000000000 ___HD C:\Windows\rss
2018-01-26 23:01 - 2018-01-26 23:01 - 000000000 ____D C:\Windat
2018-01-26 23:00 - 2018-01-27 00:32 - 000000000 ____D C:\Users\carlo_000\AppData\Local\AdService
2018-01-26 22:26 - 2018-01-26 22:26 - 000000000 ____D C:\Users\carlo_000\AppData\Local\PES17_MCR
2018-01-21 21:40 - 2018-01-26 21:07 - 000506088 _____ C:\Windows\system32\FNTCACHE.DAT
2018-01-16 18:54 - 2018-01-16 18:54 - 000000218 _____ C:\Users\carlo_000\.recently-used.xbel
2018-01-13 13:36 - 2018-01-27 18:11 - 000000000 ____D C:\Users\carlo_000\AppData\Local\CrashDumps
2018-01-09 22:09 - 2018-01-02 09:00 - 000590680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2018-01-09 22:09 - 2018-01-02 09:00 - 000242520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2018-01-09 22:09 - 2018-01-02 09:00 - 000214392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2018-01-09 22:09 - 2018-01-02 08:56 - 002530400 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2018-01-09 22:09 - 2018-01-02 08:56 - 000567656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2018-01-09 22:09 - 2018-01-02 08:56 - 000397224 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2018-01-09 22:09 - 2018-01-02 08:56 - 000136536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2018-01-09 22:09 - 2018-01-02 07:39 - 022374248 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2018-01-09 22:09 - 2018-01-02 07:39 - 007408984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-01-09 22:09 - 2018-01-02 07:39 - 002013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2018-01-09 22:09 - 2018-01-02 07:39 - 000418648 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-01-09 22:09 - 2018-01-02 07:39 - 000354648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2018-01-09 22:09 - 2018-01-02 07:38 - 002176064 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2018-01-09 22:09 - 2018-01-02 07:38 - 001662096 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2018-01-09 22:09 - 2018-01-02 07:38 - 001063464 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2018-01-09 22:09 - 2018-01-02 07:37 - 001737600 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-01-09 22:09 - 2018-01-02 07:37 - 001676056 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-01-09 22:09 - 2018-01-02 07:37 - 001536120 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-01-09 22:09 - 2018-01-02 07:37 - 001500432 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-01-09 22:09 - 2018-01-02 07:37 - 001371352 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2018-01-09 22:09 - 2018-01-02 07:37 - 001135280 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-01-09 22:09 - 2018-01-02 07:37 - 000685440 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-01-09 22:09 - 2018-01-02 07:35 - 001307840 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-01-09 22:09 - 2018-01-02 07:35 - 000989528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2018-01-09 22:09 - 2018-01-02 07:05 - 000164296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2018-01-09 22:09 - 2018-01-02 07:03 - 025739264 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-01-09 22:09 - 2018-01-02 07:03 - 000341384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2018-01-09 22:09 - 2018-01-02 07:01 - 001902328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2018-01-09 22:09 - 2018-01-02 07:00 - 019790760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2018-01-09 22:09 - 2018-01-02 06:59 - 001565520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2018-01-09 22:09 - 2018-01-02 06:59 - 001213784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2018-01-09 22:09 - 2018-01-02 06:58 - 001502000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-01-09 22:09 - 2018-01-02 06:48 - 000507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-01-09 22:09 - 2018-01-02 06:40 - 000284672 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-01-09 22:09 - 2018-01-02 06:39 - 000686080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-01-09 22:09 - 2018-01-02 06:39 - 000402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2018-01-09 22:09 - 2018-01-02 06:39 - 000072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2018-01-09 22:09 - 2018-01-02 06:39 - 000048128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbios.sys
2018-01-09 22:09 - 2018-01-02 06:38 - 000559616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2018-01-09 22:09 - 2018-01-02 06:38 - 000445952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2018-01-09 22:09 - 2018-01-02 06:38 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2018-01-09 22:09 - 2018-01-02 06:38 - 000401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-01-09 22:09 - 2018-01-02 06:38 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2018-01-09 22:09 - 2018-01-02 06:38 - 000151040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
2018-01-09 22:09 - 2018-01-02 06:38 - 000138752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2018-01-09 22:09 - 2018-01-02 06:37 - 000110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2018-01-09 22:09 - 2018-01-02 06:37 - 000080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2018-01-09 22:09 - 2018-01-02 06:34 - 000360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2018-01-09 22:09 - 2018-01-02 06:31 - 000040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
2018-01-09 22:09 - 2018-01-02 06:30 - 002900480 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-01-09 22:09 - 2018-01-02 06:28 - 005796352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-01-09 22:09 - 2018-01-02 06:28 - 000577024 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-01-09 22:09 - 2018-01-02 06:28 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-01-09 22:09 - 2018-01-02 06:28 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-01-09 22:09 - 2018-01-02 06:28 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2018-01-09 22:09 - 2018-01-02 06:20 - 020275200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-01-09 22:09 - 2018-01-02 06:19 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll
2018-01-09 22:09 - 2018-01-02 06:18 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-01-09 22:09 - 2018-01-02 06:17 - 000817152 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-01-09 22:09 - 2018-01-02 06:17 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-01-09 22:09 - 2018-01-02 06:16 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-01-09 22:09 - 2018-01-02 06:09 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-01-09 22:09 - 2018-01-02 06:06 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-01-09 22:09 - 2018-01-02 06:02 - 000862720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-01-09 22:09 - 2018-01-02 05:59 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-01-09 22:09 - 2018-01-02 05:59 - 000005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-01-09 22:09 - 2018-01-02 05:57 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-01-09 22:09 - 2018-01-02 05:56 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-01-09 22:09 - 2018-01-02 05:54 - 000145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2018-01-09 22:09 - 2018-01-02 05:53 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-01-09 22:09 - 2018-01-02 05:52 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-01-09 22:09 - 2018-01-02 05:51 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-01-09 22:09 - 2018-01-02 05:49 - 002294272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-01-09 22:09 - 2018-01-02 05:48 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-01-09 22:09 - 2018-01-02 05:45 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll
2018-01-09 22:09 - 2018-01-02 05:44 - 015284224 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-01-09 22:09 - 2018-01-02 05:44 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-01-09 22:09 - 2018-01-02 05:43 - 000662528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-01-09 22:09 - 2018-01-02 05:42 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-01-09 22:09 - 2018-01-02 05:42 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-01-09 22:09 - 2018-01-02 05:41 - 000380416 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-01-09 22:09 - 2018-01-02 05:40 - 001436672 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-01-09 22:09 - 2018-01-02 05:40 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-01-09 22:09 - 2018-01-02 05:40 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-01-09 22:09 - 2018-01-02 05:38 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-01-09 22:09 - 2018-01-02 05:37 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-01-09 22:09 - 2018-01-02 05:34 - 001217536 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2018-01-09 22:09 - 2018-01-02 05:34 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-01-09 22:09 - 2018-01-02 05:33 - 001080320 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2018-01-09 22:09 - 2018-01-02 05:33 - 000845312 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2018-01-09 22:09 - 2018-01-02 05:33 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2018-01-09 22:09 - 2018-01-02 05:32 - 000571392 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2018-01-09 22:09 - 2018-01-02 05:29 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2018-01-09 22:09 - 2018-01-02 05:29 - 000754176 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2018-01-09 22:09 - 2018-01-02 05:27 - 001696256 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2018-01-09 22:09 - 2018-01-02 05:27 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-01-09 22:09 - 2018-01-02 05:26 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-01-09 22:09 - 2018-01-02 05:25 - 000795648 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2018-01-09 22:09 - 2018-01-02 05:25 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-01-09 22:09 - 2018-01-02 05:25 - 000128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2018-01-09 22:09 - 2018-01-02 05:23 - 004508160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-01-09 22:09 - 2018-01-02 05:23 - 002882048 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2018-01-09 22:09 - 2018-01-02 05:22 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-01-09 22:09 - 2018-01-02 05:22 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\WcnApi.dll
2018-01-09 22:09 - 2018-01-02 05:21 - 000391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2018-01-09 22:09 - 2018-01-02 05:20 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-01-09 22:09 - 2018-01-02 05:18 - 000380416 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2018-01-09 22:09 - 2018-01-02 05:18 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-01-09 22:09 - 2018-01-02 05:17 - 001547264 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2018-01-09 22:09 - 2018-01-02 05:17 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-01-09 22:09 - 2018-01-02 05:17 - 000465920 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2018-01-09 22:09 - 2018-01-02 05:17 - 000331776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-01-09 22:09 - 2018-01-02 05:16 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-01-09 22:09 - 2018-01-02 05:16 - 000881152 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2018-01-09 22:09 - 2018-01-02 05:16 - 000747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-01-09 22:09 - 2018-01-02 05:16 - 000464384 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2018-01-09 22:09 - 2018-01-02 05:15 - 001545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-01-09 22:09 - 2018-01-02 05:13 - 000216576 _____ (Microsoft Corporation) C:\Windows\system32\P2P.dll
2018-01-09 22:09 - 2018-01-02 05:11 - 000185856 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2018-01-09 22:09 - 2018-01-02 05:11 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2018-01-09 22:09 - 2018-01-02 05:09 - 000827392 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2018-01-09 22:09 - 2018-01-02 05:09 - 000713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2018-01-09 22:09 - 2018-01-02 05:09 - 000543232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2018-01-09 22:09 - 2018-01-02 05:08 - 000110080 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll
2018-01-09 22:09 - 2018-01-02 05:07 - 001265664 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2018-01-09 22:09 - 2018-01-02 05:07 - 000440832 _____ (Microsoft Corporation) C:\Windows\system32\p2psvc.dll
2018-01-09 22:09 - 2018-01-02 05:06 - 000626176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2018-01-09 22:09 - 2018-01-02 05:05 - 000097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll
2018-01-09 22:09 - 2018-01-02 05:04 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-01-09 22:09 - 2018-01-02 04:59 - 000177664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\P2P.dll
2018-01-09 22:09 - 2018-01-02 04:58 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-01-09 22:09 - 2018-01-02 04:57 - 000164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll
2018-01-09 22:09 - 2018-01-02 04:56 - 000562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2018-01-09 22:09 - 2018-01-02 04:55 - 003548160 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2018-01-09 22:09 - 2018-01-02 04:54 - 001313792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-01-09 22:09 - 2018-01-02 04:53 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-01-09 22:09 - 2017-12-29 09:21 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-01-09 22:09 - 2017-12-15 00:26 - 000374096 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-01-09 22:09 - 2017-12-14 22:39 - 000315736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-01-09 22:09 - 2017-12-14 11:19 - 000096256 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-01-09 22:09 - 2017-12-14 11:17 - 000044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-01-09 22:09 - 2017-12-10 14:59 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-01-09 22:09 - 2017-12-10 14:58 - 000035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-01-09 22:09 - 2017-12-10 14:46 - 007079424 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2018-01-09 22:09 - 2017-12-10 14:24 - 005275136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2018-01-09 22:09 - 2017-12-10 14:06 - 007797760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2018-01-09 22:09 - 2017-12-10 13:59 - 005270528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2018-01-09 22:09 - 2017-12-06 05:42 - 002452816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-01-09 22:09 - 2017-12-05 17:58 - 004168192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-01-09 22:09 - 2014-11-08 05:00 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2018-01-09 22:09 - 2014-11-08 04:56 - 000048128 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp
2018-01-09 22:09 - 2014-11-08 04:56 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll
2018-01-09 22:09 - 2014-11-08 04:56 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll
2018-01-09 22:09 - 2014-11-08 04:24 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2018-01-09 22:09 - 2014-11-08 04:13 - 000039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp
2018-01-09 22:09 - 2014-11-08 04:13 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll
2018-01-09 22:09 - 2014-11-08 04:13 - 000022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll
2018-01-09 22:09 - 2014-11-08 03:48 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll
2018-01-09 22:09 - 2014-11-04 07:27 - 000128512 _____ (Microsoft Corporation) C:\Windows\splwow64.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-01-27 20:21 - 2014-05-09 18:13 - 000003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-603080990-3676789936-2700333261-1001
2018-01-27 20:18 - 2014-05-09 18:10 - 000000000 ___DO C:\Users\carlo_000\SkyDrive
2018-01-27 20:16 - 2015-04-13 03:17 - 000000000 ____D C:\Users\carlo_000\Documents\Assassin's Creed Unity
2018-01-27 20:15 - 2013-08-22 15:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-01-27 20:11 - 2014-05-11 12:13 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks551
2018-01-27 20:05 - 2014-05-09 18:47 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\uTorrent
2018-01-27 01:26 - 2017-08-18 02:27 - 000000008 __RSH C:\Users\carlo_000\ntuser.pol
2018-01-27 01:26 - 2014-05-09 18:03 - 000000000 ____D C:\Users\carlo_000
2018-01-27 01:24 - 2013-08-22 16:36 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2018-01-27 01:24 - 2013-08-22 14:25 - 000524288 ___SH C:\Windows\system32\config\BBI
2018-01-27 00:35 - 2016-04-27 16:58 - 000000855 _____ C:\Users\carlo_000\AppData\Roaming\Microsoft\Windows\Start Menu\Free Sound Recorder.lnk
2018-01-27 00:35 - 2016-04-27 10:12 - 000002400 _____ C:\Users\carlo_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive dla Firm.lnk
2018-01-27 00:35 - 2015-10-20 17:34 - 000000080 _____ C:\Users\carlo_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2018-01-27 00:35 - 2014-05-13 13:45 - 000002423 _____ C:\Users\carlo_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ALLPlayer.TV.lnk
2018-01-27 00:34 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\Inf
2018-01-27 00:32 - 2013-08-22 14:36 - 000000000 ____D C:\Program Files\Video Backgammon
2018-01-27 00:09 - 2017-08-18 09:23 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\Install
2018-01-27 00:01 - 2014-05-11 02:45 - 000000000 ___RD C:\Pliki programów (x86)
2018-01-26 23:35 - 2016-12-03 12:33 - 000192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2018-01-26 23:18 - 2014-05-09 18:07 - 000000000 ____D C:\Users\carlo_000\AppData\Local\VirtualStore
2018-01-26 22:25 - 2017-04-23 12:18 - 000000000 ____D C:\Users\carlo_000\Documents\KONAMI
2018-01-26 01:07 - 2017-04-27 10:09 - 000000000 ____D C:\Windows\Minidump
2018-01-25 08:00 - 2016-12-04 01:48 - 000003866 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1480812480
2018-01-25 08:00 - 2014-05-09 18:03 - 000000000 ____D C:\Users\carlo_000\AppData\Local\Packages
2018-01-23 19:58 - 2014-05-11 19:33 - 000548000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2018-01-19 21:46 - 2017-01-25 19:42 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\MPC-HC
2018-01-18 01:27 - 2013-11-26 15:08 - 001831240 _____ C:\Windows\system32\PerfStringBackup.INI
2018-01-18 01:27 - 2013-08-23 00:12 - 000809096 _____ C:\Windows\system32\perfh015.dat
2018-01-18 01:27 - 2013-08-23 00:12 - 000164352 _____ C:\Windows\system32\perfc015.dat
2018-01-18 01:16 - 2013-08-22 16:36 - 000000000 ___RD C:\Windows\ToastData
2018-01-18 01:12 - 2017-11-28 10:22 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\gretl
2018-01-17 18:59 - 2017-06-13 18:26 - 000000000 ____D C:\Windows\CbsTemp
2018-01-16 19:12 - 2017-11-28 10:22 - 000000000 ____D C:\Users\carlo_000\Documents\gretl
2018-01-16 18:16 - 2017-11-28 10:22 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\gtk-2.0
2018-01-14 14:32 - 2017-08-11 12:03 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera Software
2018-01-13 13:06 - 2017-06-12 07:14 - 000000000 ____D C:\Users\carlo_000\AppData\Local\Microsoft Help
2018-01-11 17:18 - 2017-10-12 15:46 - 129365736 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-01-11 17:18 - 2014-05-11 20:49 - 129365736 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-01-11 17:18 - 2014-05-11 20:49 - 000000000 ____D C:\Windows\system32\MRT
2018-01-11 17:13 - 2013-08-22 14:25 - 000000202 _____ C:\Windows\win.ini
2018-01-10 06:25 - 2017-07-27 16:38 - 000003188 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-603080990-3676789936-2700333261-1001
2018-01-09 18:31 - 2016-02-08 00:46 - 000004388 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-01-09 18:31 - 2015-12-11 02:33 - 000004542 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-01-09 18:31 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-01-09 18:31 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\Macromed
2017-12-30 15:39 - 2017-09-14 16:57 - 000092520 _____ C:\Windows\wmsvr.exe
2017-12-28 04:34 - 2016-01-22 01:09 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\Skype

==================== Pliki w katalogu głównym wybranych folderów =======

2017-08-18 09:31 - 2017-08-18 10:32 - 000023343 _____ () C:\Users\carlo_000\AppData\Roaming\Internet Explorer.txt
2017-08-18 09:31 - 2017-08-18 10:32 - 000931280 _____ () C:\Users\carlo_000\AppData\Roaming\Opera Browser.txt
2015-02-02 04:34 - 2016-07-31 17:58 - 000000139 _____ () C:\Users\carlo_000\AppData\Roaming\WB.CFG
2017-08-11 12:42 - 2017-08-11 12:52 - 000004608 _____ () C:\Users\carlo_000\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-05-12 20:21 - 2017-05-12 20:21 - 000000979 _____ () C:\Users\carlo_000\AppData\Local\recently-used.xbel

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2018-01-26 16:33

==================== Koniec  FRST.txt ============================