API tools faq
paste
Advertisement
Guest User

frst

a guest
Jun 5th, 2017
190
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 57.63 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-06-2017
  2. Ran by aczyr (administrator) on DESKTOP-AALO4FM (05-06-2017 16:35:46)
  3. Running from C:\Users\aczyr\Desktop
  4. Loaded Profiles: aczyr (Available Profiles: aczyr)
  5. Platform: Windows 10 Home Version 1703 (X64) Language: Polski (Polish)
  6. Internet Explorer Version 11 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
  15. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
  16. (Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe
  17. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
  18. (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
  19. (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
  20. (Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe
  21. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
  22. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  23. (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
  24. (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
  25. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
  26. () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.16.595.0_x64__kzf8qxf38zg5c\SkypeHost.exe
  27. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  28. (Microsoft Corporation) C:\Windows\System32\smartscreen.exe
  29. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  30. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  31. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  32. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  33. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  34. (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
  35. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
  36. (Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
  37. (Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
  38. (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AdobeGCClient.exe
  39. (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
  40. (Flux Software LLC) C:\Users\aczyr\AppData\Local\FluxSoftware\Flux\flux.exe
  41. (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
  42. (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
  43. (Spotify Ltd) C:\Users\aczyr\AppData\Roaming\Spotify\SpotifyWebHelper.exe
  44. (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
  45. (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  46. () C:\Program Files (x86)\Launchy\Launchy.exe
  47. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  48. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe
  49. (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
  50. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
  51. (GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe
  52. (GOG.com) C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
  53. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
  54. (GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
  55. (GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
  56. (GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
  57. (GOG.com) C:\Program Files (x86)\GOG Galaxy\GOG Galaxy Notifications Renderer.exe
  58. () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
  59. (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
  60. (Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
  61. (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
  62. (Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
  63. (Intel Corporation) C:\Program Files\Intel\Intel(R) Online Connect\ioc.exe
  64. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  65. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  66. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  67. (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
  68. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  69. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  70. (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
  71.  
  72. ==================== Registry (Whitelisted) ====================
  73.  
  74. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  75.  
  76. HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
  77. HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9192960 2017-03-30] (Realtek Semiconductor)
  78. HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  79. HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
  80. HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1739896 2017-03-30] (Logitech, Inc.)
  81. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
  82. HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1203488 2016-10-20] (Intel Corporation)
  83. HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2404952 2017-03-27] (Adobe Systems Incorporated)
  84. HKU\S-1-5-21-813033584-1070609415-2101242023-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3042592 2017-06-01] (Valve Corporation)
  85. HKU\S-1-5-21-813033584-1070609415-2101242023-1001\...\Run: [f.lux] => C:\Users\aczyr\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
  86. HKU\S-1-5-21-813033584-1070609415-2101242023-1001\...\Run: [GalaxyClient] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [4954176 2017-05-25] (GOG.com)
  87. HKU\S-1-5-21-813033584-1070609415-2101242023-1001\...\Run: [TIDAL] => C:\Users\aczyr\AppData\Local\TIDAL\update.exe --processStart TIDAL.exe --process-start-args " -autostart -minimized"
  88. HKU\S-1-5-21-813033584-1070609415-2101242023-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-04-24] (Disc Soft Ltd)
  89. HKU\S-1-5-21-813033584-1070609415-2101242023-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9772248 2017-05-05] (Piriform Ltd)
  90. HKU\S-1-5-21-813033584-1070609415-2101242023-1001\...\Run: [Spotify Web Helper] => C:\Users\aczyr\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1560176 2017-05-28] (Spotify Ltd)
  91. ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
  92. ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
  93. ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
  94. Startup: C:\Users\aczyr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Launchy.lnk [2017-05-03]
  95. ShortcutTarget: Launchy.lnk -> C:\Program Files (x86)\Launchy\Launchy.exe ()
  96.  
  97. ==================== Internet (Whitelisted) ====================
  98.  
  99. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  100.  
  101. Tcpip\Parameters: [DhcpNameServer] 37.8.214.2 31.11.202.254
  102. Tcpip\..\Interfaces\{11d09814-138e-4ba9-a5e9-c7445c977899}: [DhcpNameServer] 37.8.214.2 31.11.202.254
  103.  
  104. Internet Explorer:
  105. ==================
  106. BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-05-25] (Microsoft Corporation)
  107. BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-05-25] (Microsoft Corporation)
  108. BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-05-25] (Microsoft Corporation)
  109. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-05-03] (Oracle Corporation)
  110. BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-05-25] (Microsoft Corporation)
  111. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-03] (Oracle Corporation)
  112. Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-25] (Microsoft Corporation)
  113. Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-25] (Microsoft Corporation)
  114. Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-25] (Microsoft Corporation)
  115. Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-05-25] (Microsoft Corporation)
  116.  
  117. FireFox:
  118. ========
  119. FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
  120. FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-03-27] (Adobe Systems)
  121. FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-05-03] (Oracle Corporation)
  122. FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-05-03] (Oracle Corporation)
  123. FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-25] (Microsoft Corporation)
  124. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-05-25] (Microsoft Corporation)
  125. FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-05-01] (NVIDIA Corporation)
  126. FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-05-01] (NVIDIA Corporation)
  127. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-28] (Google Inc.)
  128. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-28] (Google Inc.)
  129. FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-03-27] (Adobe Systems)
  130.  
  131. Chrome:
  132. =======
  133. CHR DefaultProfile: Profile 1
  134. CHR DefaultSearchURL: Profile 1 -> hxxp://www.mystarting123.com/search/index.php?z=69ff2f0d125b3422b7ca732g8z3tcw8m3e2e6c9g6w&q={searchTerms}
  135. CHR DefaultSearchKeyword: Profile 1 -> mystarting123
  136. CHR Profile: C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default [2017-06-05]
  137. CHR Extension: (Prezentacje Google) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-05-28]
  138. CHR Extension: (Magic Actions for YouTube™) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2017-05-28]
  139. CHR Extension: (Dokumenty Google) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-05-28]
  140. CHR Extension: (Licznik Czasu Zadań) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aomfjmibjhhfdenfkpaodhnlhkolngif [2017-05-28]
  141. CHR Extension: (Dysk Google) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-05-28]
  142. CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2017-05-28]
  143. CHR Extension: (YouTube) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-05-28]
  144. CHR Extension: (Firebug Lite for Google Chrome™) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench [2017-05-28]
  145. CHR Extension: (Adblock Plus) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-05-28]
  146. CHR Extension: (NewGenBook for Facebook) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjclccgcpfkfemddeefkbepaagjfgbeg [2017-05-28]
  147. CHR Extension: (Style Chooser) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\daodklicmmjhcacgkjpianadkdkbkbce [2017-05-28]
  148. CHR Extension: (Arkusze Google) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-05-28]
  149. CHR Extension: (EditThisCookie) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2017-05-28]
  150. CHR Extension: (Pulpit zdalny Chrome) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-05-28]
  151. CHR Extension: (Dokumenty Google offline) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-05-29]
  152. CHR Extension: (Last.fm Scrobbler) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhinaapppaileiechjoiifaancjggfjm [2017-05-28]
  153. CHR Extension: (feedly) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\hipbfijinpcgfogaopmgehiegacbhmob [2017-05-28]
  154. CHR Extension: (Pixlr Express) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmjpdlmjopaeginhldhiokeidchjid [2017-05-28]
  155. CHR Extension: (Pocket Website) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\jijgclgmgjipgefcnnnibgllfonlfdap [2017-05-28]
  156. CHR Extension: (Netflix Categories) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\lnbopcabgddpanjmeabponnjngbmemml [2017-05-28]
  157. CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-05-28]
  158. CHR Extension: (Hover Zoom) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nonjdcjchghhkdoolnlbekcfllmednbl [2017-06-03]
  159. CHR Extension: (Simple EPUB Reader) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojhbgcchcbdjdenibfmjofobklkkhofc [2017-05-28]
  160. CHR Extension: (Click&Clean App) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2017-06-01]
  161. CHR Extension: (Gmail) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-05-28]
  162. CHR Extension: (Chrome Media Router) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-28]
  163. CHR Profile: C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-06-05]
  164. CHR Extension: (Prezentacje Google) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-06-05]
  165. CHR Extension: (Dokumenty Google) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2017-06-05]
  166. CHR Extension: (Dysk Google) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-06-05]
  167. CHR Extension: (YouTube) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-06-05]
  168. CHR Extension: (Arkusze Google) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-06-05]
  169. CHR Extension: (Dokumenty Google offline) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-06-05]
  170. CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-06-05]
  171. CHR Extension: (Gmail) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-06-05]
  172. CHR Extension: (Chrome Media Router) - C:\Users\aczyr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-05]
  173.  
  174. ==================== Services (Whitelisted) ====================
  175.  
  176. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  177.  
  178. R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [771672 2017-03-14] (Adobe Systems Incorporated)
  179. R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
  180. R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3971264 2017-05-14] (Microsoft Corporation)
  181. R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-04-24] (Disc Soft Ltd)
  182. S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [512576 2017-05-25] (GOG.com)
  183. S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7955008 2017-05-20] (GOG.com)
  184. S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel(R) Corporation)
  185. R3 Intel(R) Online Connect; C:\Program Files\Intel\Intel(R) Online Connect\ioc.exe [25824 2016-10-04] (Intel Corporation)
  186. S2 Intel(R) Online Connect Helper; C:\Program Files\Intel\Intel(R) Online Connect\iocHelperService.exe [22752 2016-10-04] (Intel Corporation)
  187. S3 Intel(R) Online Connect Software Asset Manager; C:\Program Files (x86)\Intel\Intel(R) Online Connect Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [18152 2016-09-29] (Intel Corporation)
  188. R2 Intel(R) TechnologyAccessLegacyCSLoader; C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe [173288 2016-10-05] (Intel(R) Corporation)
  189. R2 Intel(R) TechnologyAccessService; C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe [496872 2016-10-05] (Intel(R) Corporation)
  190. R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [177440 2016-10-20] (Intel Corporation)
  191. S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
  192. R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [492664 2017-04-26] (NVIDIA Corporation)
  193. S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [492664 2017-04-26] (NVIDIA Corporation)
  194. R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-05-01] (NVIDIA Corporation)
  195. R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [452152 2017-04-20] (NVIDIA Corporation)
  196. R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
  197. R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)
  198.  
  199. ===================== Drivers (Whitelisted) ======================
  200.  
  201. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  202.  
  203. R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-05-05] (Disc Soft Ltd)
  204. R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-05-05] (Disc Soft Ltd)
  205. R3 iaLPSS2_UART2; C:\WINDOWS\System32\drivers\iaLPSS2_UART2.sys [281400 2017-05-03] (Intel Corporation)
  206. R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [251832 2017-06-03] (Malwarebytes)
  207. R1 ndisrd; C:\WINDOWS\system32\DRIVERS\ndisrfl.sys [59792 2016-09-13] (Intel Corporation)
  208. S3 netr28ux; C:\WINDOWS\System32\drivers\netr28ux.sys [2224128 2017-03-18] (MediaTek Inc.)
  209. R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_f9309145156afb40\nvlddmkm.sys [14456912 2017-05-19] (NVIDIA Corporation)
  210. S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-04-26] (NVIDIA Corporation)
  211. R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [47736 2017-04-26] (NVIDIA Corporation)
  212. R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [59448 2017-04-20] (NVIDIA Corporation)
  213. R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [943112 2016-08-23] (Realtek )
  214. S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
  215. S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
  216. R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
  217. R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
  218.  
  219. ==================== NetSvcs (Whitelisted) ===================
  220.  
  221. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  222.  
  223.  
  224. ==================== One Month Created files and folders ========
  225.  
  226. (If an entry is included in the fixlist, the file/folder will be moved.)
  227.  
  228. 2017-06-05 16:33 - 2017-06-05 16:33 - 00000000 ___HD C:\OneDriveTemp
  229. 2017-06-04 18:02 - 2017-06-04 18:02 - 01992116 _____ C:\Users\aczyr\Downloads\gothic_1_pl.rar
  230. 2017-06-04 18:02 - 2017-06-04 18:02 - 00000000 ____D C:\Gothic
  231. 2017-06-04 15:50 - 2017-06-04 15:50 - 00176327 _____ C:\Users\aczyr\Downloads\SweetFX_1.4.7z
  232. 2017-06-04 15:43 - 2017-06-04 15:43 - 00184246 _____ C:\Users\aczyr\Downloads\SweetFX_1_5-23364.7z
  233. 2017-06-04 15:36 - 2017-06-04 15:36 - 00965964 _____ (Diverse) C:\Users\aczyr\Downloads\GI_Win7_Nvidia_Workaround-1.0.exe
  234. 2017-06-04 15:25 - 2017-06-04 15:25 - 00008192 _____ C:\WINDOWS\d3dx.dat
  235. 2017-06-04 15:23 - 2017-06-04 15:23 - 00001842 _____ C:\Users\aczyr\Downloads\Gothic_fullscreen_border.zip
  236. 2017-06-04 15:21 - 2017-06-04 15:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IronKeep Studios
  237. 2017-06-04 15:20 - 2017-06-04 15:20 - 03270951 _____ C:\Users\aczyr\Downloads\gothic1_playerkit-1.08k.exe
  238. 2017-06-04 15:20 - 2017-06-04 15:20 - 00003503 _____ C:\Users\aczyr\Downloads\GothicFps-108.zip
  239. 2017-06-04 15:19 - 2017-06-04 15:19 - 05079859 _____ (IronKeep Studios) C:\Users\aczyr\Downloads\g1icp_v0.9.2_setup.exe
  240. 2017-06-04 14:20 - 2017-06-04 14:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cdp.pl
  241. 2017-06-04 11:49 - 2017-06-04 11:49 - 262420977 _____ (G3 Community) C:\Users\aczyr\Downloads\G3_QUEST_PACK_4_U2_pl_DIGI.exe
  242. 2017-06-04 11:44 - 2017-06-04 12:25 - 1588960797 _____ (Nordic Games GmbH ) C:\Users\aczyr\Downloads\Gothic_3_EE_Patch_v1.75.14_Int_Full.exe
  243. 2017-06-04 11:44 - 2017-06-04 12:17 - 1179576820 _____ C:\Users\aczyr\Downloads\CM_3.1_INT_FINAL.exe
  244. 2017-06-04 11:44 - 2017-06-04 11:45 - 30787189 _____ C:\Users\aczyr\Downloads\Gothic_3_EE_v1.75_Int_Update_Pack_v1.04.10.exe
  245. 2017-06-04 11:44 - 2017-06-04 11:44 - 00066753 _____ C:\Users\aczyr\Downloads\Gothic3_czcionka.rar
  246. 2017-06-04 11:38 - 2017-06-04 11:50 - 2100000000 _____ C:\Users\aczyr\Downloads\setup_gothic_universe_rev2-3.bin
  247. 2017-06-04 11:38 - 2017-06-04 11:50 - 2100000000 _____ C:\Users\aczyr\Downloads\setup_gothic_universe_rev2-2.bin
  248. 2017-06-04 11:38 - 2017-06-04 11:42 - 2098994944 _____ C:\Users\aczyr\Downloads\setup_gothic_universe_rev2-1.bin
  249. 2017-06-04 11:38 - 2017-06-04 11:41 - 236331945 _____ C:\Users\aczyr\Downloads\setup_gothic_universe_rev2-4.bin
  250. 2017-06-04 11:38 - 2017-06-04 11:38 - 01010392 _____ (Nordic Games GmbH ) C:\Users\aczyr\Downloads\setup_gothic_universe_rev2.exe
  251. 2017-06-03 22:06 - 2017-06-03 22:09 - 00000000 ____D C:\AdwCleaner
  252. 2017-06-03 22:02 - 2017-06-05 16:35 - 00023692 _____ C:\Users\aczyr\Desktop\FRST.txt
  253. 2017-06-03 21:58 - 2017-06-05 16:32 - 00002201 _____ C:\Users\aczyr\Desktop\Fixlog.txt
  254. 2017-06-03 21:06 - 2017-06-03 21:06 - 00054929 _____ C:\Users\aczyr\Downloads\Shortcut.txt
  255. 2017-06-03 21:06 - 2017-06-03 21:06 - 00049452 _____ C:\Users\aczyr\Downloads\Addition.txt
  256. 2017-06-03 21:05 - 2017-06-05 16:35 - 00000000 ____D C:\FRST
  257. 2017-06-03 21:05 - 2017-06-03 21:06 - 00087216 _____ C:\Users\aczyr\Downloads\FRST.txt
  258. 2017-06-03 21:03 - 2017-06-03 21:03 - 02433536 _____ (Farbar) C:\Users\aczyr\Desktop\FRST64.exe
  259. 2017-06-03 20:54 - 2017-06-03 20:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\by.xatab
  260. 2017-06-03 19:56 - 2017-06-03 19:56 - 00380928 _____ C:\Users\aczyr\Downloads\4zleqob7.exe
  261. 2017-06-03 19:34 - 2017-06-03 19:34 - 00388608 _____ (Trend Micro Inc.) C:\Users\aczyr\Downloads\HijackThis.exe
  262. 2017-06-03 13:05 - 2017-06-03 13:05 - 00000000 ____D C:\Program Files (x86)\VulkanRT
  263. 2017-06-03 13:05 - 2017-05-01 22:14 - 00134592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
  264. 2017-06-03 13:05 - 2017-03-10 23:17 - 00536864 _____ C:\WINDOWS\system32\vulkan-1.dll
  265. 2017-06-03 13:05 - 2017-03-10 23:17 - 00525600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
  266. 2017-06-03 13:05 - 2017-03-10 23:17 - 00254240 _____ C:\WINDOWS\system32\vulkaninfo.exe
  267. 2017-06-03 13:05 - 2017-03-10 23:17 - 00233760 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
  268. 2017-05-31 18:49 - 2017-05-31 18:49 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\SumatraPDF
  269. 2017-05-31 12:09 - 2017-05-31 12:09 - 875546528 _____ C:\WINDOWS\MEMORY.DMP
  270. 2017-05-31 12:09 - 2017-05-31 12:09 - 00536684 _____ C:\WINDOWS\Minidump\053117-5000-01.dmp
  271. 2017-05-31 12:09 - 2017-05-31 12:09 - 00068288 _____ C:\WINDOWS\system32\Drivers\VBoxDrv.sys
  272. 2017-05-30 19:46 - 2017-05-30 19:46 - 00262212 _____ C:\Users\aczyr\Downloads\ceramika_lab.pdf
  273. 2017-05-29 18:14 - 2017-05-29 18:15 - 00000000 ____D C:\ProgramData\Google
  274. 2017-05-29 18:14 - 2017-05-29 18:14 - 00000000 ____D C:\Program Files\Google
  275. 2017-05-29 18:10 - 2017-05-29 18:11 - 450071920 _____ C:\Users\aczyr\Downloads\nikcollection-full-1.2.11.exe
  276. 2017-05-29 17:57 - 2017-05-29 17:57 - 00007770 _____ C:\Users\aczyr\Downloads\DSC_3279.xmp
  277. 2017-05-29 17:53 - 2017-05-29 17:53 - 18933849 _____ C:\Users\aczyr\Downloads\DSC_3279.NEF
  278. 2017-05-28 14:55 - 2017-05-28 14:55 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Google
  279. 2017-05-28 14:54 - 2017-05-29 18:15 - 00000000 ____D C:\Users\aczyr\AppData\Local\Google
  280. 2017-05-28 14:54 - 2017-05-28 14:54 - 49228392 _____ (Google Inc.) C:\Users\aczyr\Downloads\ChromeStandaloneSetup64.exe
  281. 2017-05-28 14:54 - 2017-05-28 14:54 - 00003566 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
  282. 2017-05-28 14:54 - 2017-05-28 14:54 - 00003442 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
  283. 2017-05-25 21:41 - 2017-05-25 21:41 - 00001836 _____ C:\Users\aczyr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
  284. 2017-05-25 21:38 - 2017-05-25 21:38 - 00668880 _____ (Spotify Ltd) C:\Users\aczyr\Downloads\SpotifySetup.exe
  285. 2017-05-25 16:50 - 2017-05-25 16:50 - 04110280 _____ C:\Users\aczyr\Downloads\adwcleaner_6.047.exe
  286. 2017-05-25 16:49 - 2017-05-25 16:49 - 63364552 _____ (Malwarebytes ) C:\Users\aczyr\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.122-1.0.1976.exe
  287. 2017-05-25 16:49 - 2017-05-25 16:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
  288. 2017-05-25 16:49 - 2017-05-09 16:37 - 00077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
  289. 2017-05-20 16:11 - 2017-05-20 16:11 - 48040537 _____ C:\Users\aczyr\Downloads\Muzykofilia.pdf
  290. 2017-05-20 15:53 - 2017-05-20 15:53 - 00000000 ____D C:\Users\aczyr\AppData\Local\Ubisoft
  291. 2017-05-20 12:52 - 2017-05-25 21:38 - 00000000 ____D C:\Users\aczyr\AppData\Local\TIDAL
  292. 2017-05-20 12:51 - 2017-05-20 12:51 - 01130328 _____ (Google Inc.) C:\Users\aczyr\Downloads\ChromeSetup (1).exe
  293. 2017-05-20 12:36 - 2017-05-20 12:36 - 01130328 _____ (Google Inc.) C:\Users\aczyr\Downloads\ChromeSetup.exe
  294. 2017-05-20 12:25 - 2017-05-20 12:25 - 00002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
  295. 2017-05-20 12:24 - 2017-05-20 12:25 - 00000000 ____D C:\Program Files\CCleaner
  296. 2017-05-20 12:23 - 2017-06-03 22:09 - 00251832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
  297. 2017-05-20 11:45 - 2017-05-20 12:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
  298. 2017-05-20 11:45 - 2017-05-20 12:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
  299. 2017-05-20 11:45 - 2017-05-20 11:50 - 00000000 ____D C:\Users\aczyr\AppData\Local\Mozilla
  300. 2017-05-20 11:33 - 2017-05-20 15:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Registrar Registry Manager
  301. 2017-05-20 11:33 - 2017-05-20 15:35 - 00000000 ____D C:\Program Files\Registrar Registry Manager
  302. 2017-05-20 11:26 - 2017-05-20 11:26 - 00000000 ____D C:\Program Files\Java
  303. 2017-05-20 11:24 - 2017-05-20 11:24 - 00000000 ____D C:\Users\aczyr\AppData\LocalLow\Sun
  304. 2017-05-19 19:46 - 2017-06-05 16:30 - 00000000 ____D C:\Users\aczyr\AppData\Local\Spotify
  305. 2017-05-19 19:45 - 2017-06-05 16:30 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Spotify
  306. 2017-05-19 18:05 - 2017-05-19 18:05 - 35397528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
  307. 2017-05-19 18:04 - 2017-05-19 18:04 - 28632152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
  308. 2017-05-19 18:04 - 2017-05-19 18:04 - 00969624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
  309. 2017-05-19 18:04 - 2017-05-19 18:04 - 00920664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
  310. 2017-05-19 18:04 - 2017-05-19 18:04 - 00618584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
  311. 2017-05-19 18:04 - 2017-05-19 18:04 - 00507984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
  312. 2017-05-19 18:03 - 2017-05-19 18:03 - 01996696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438205.dll
  313. 2017-05-19 18:03 - 2017-05-19 18:03 - 01598360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438205.dll
  314. 2017-05-19 18:03 - 2017-05-19 18:03 - 01062808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
  315. 2017-05-19 18:03 - 2017-05-19 18:03 - 00999832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
  316. 2017-05-19 18:03 - 2017-05-19 18:03 - 00829848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
  317. 2017-05-19 18:03 - 2017-05-19 18:03 - 00659864 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
  318. 2017-05-19 18:03 - 2017-05-19 18:03 - 00054680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
  319. 2017-05-19 18:02 - 2017-05-19 18:02 - 40210512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
  320. 2017-05-19 18:02 - 2017-05-19 18:02 - 35290192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
  321. 2017-05-19 18:02 - 2017-05-19 18:02 - 03800984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
  322. 2017-05-19 18:02 - 2017-05-19 18:02 - 03256408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
  323. 2017-05-19 17:53 - 2017-05-20 12:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
  324. 2017-05-19 17:50 - 2017-05-25 16:49 - 00000000 ____D C:\ProgramData\Malwarebytes
  325. 2017-05-19 17:48 - 2017-05-19 17:48 - 11161992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
  326. 2017-05-19 17:48 - 2017-05-19 17:48 - 10648512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
  327. 2017-05-19 17:48 - 2017-05-19 17:48 - 09102480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
  328. 2017-05-19 17:48 - 2017-05-19 17:48 - 08891160 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
  329. 2017-05-19 17:48 - 2017-05-19 17:48 - 01296264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
  330. 2017-05-19 17:48 - 2017-05-19 17:48 - 01011488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
  331. 2017-05-19 17:48 - 2017-05-19 17:48 - 00791792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
  332. 2017-05-19 17:48 - 2017-05-19 17:48 - 00703880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
  333. 2017-05-19 17:48 - 2017-05-19 17:48 - 00633040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
  334. 2017-05-19 17:48 - 2017-05-19 17:48 - 00626384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
  335. 2017-05-19 17:48 - 2017-05-19 17:48 - 00591672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
  336. 2017-05-19 17:47 - 2017-05-19 17:47 - 11129704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
  337. 2017-05-19 17:47 - 2017-05-19 17:47 - 09335520 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
  338. 2017-05-19 17:47 - 2017-05-19 17:47 - 01298696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
  339. 2017-05-19 17:47 - 2017-05-19 17:47 - 01013344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
  340. 2017-05-15 16:53 - 2017-05-20 12:20 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
  341. 2017-05-15 16:22 - 2017-05-15 16:22 - 00000000 ____D C:\Users\aczyr\.TeamSpeak 3
  342. 2017-05-15 16:22 - 2017-05-15 16:22 - 00000000 ____D C:\Users\aczyr\.QtWebEngineProcess
  343. 2017-05-15 16:20 - 2017-05-15 17:54 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\TS3Client
  344. 2017-05-15 16:20 - 2017-05-15 16:20 - 00000970 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
  345. 2017-05-15 16:20 - 2017-05-15 16:20 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
  346. 2017-05-15 16:19 - 2017-05-15 16:19 - 77604984 _____ (TeamSpeak Systems GmbH) C:\Users\aczyr\Downloads\TeamSpeak3-Client-win64-3.1.4.exe
  347. 2017-05-12 17:42 - 2017-05-20 12:20 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoOfTheDay
  348. 2017-05-12 17:41 - 2017-05-19 17:17 - 00000000 ____D C:\Users\aczyr\AppData\Local\Deployment
  349. 2017-05-12 17:41 - 2017-05-12 17:41 - 00005938 _____ C:\Users\aczyr\Downloads\PhotoOfTheDay.application
  350. 2017-05-12 17:41 - 2017-05-12 17:41 - 00000000 ____D C:\Users\aczyr\AppData\Local\Apps\2.0
  351. 2017-05-12 17:34 - 2017-05-12 17:34 - 10513112 _____ (Microsoft Corporation) C:\Users\aczyr\Downloads\BingDesktopSetup.exe
  352. 2017-05-10 22:15 - 2017-05-10 22:15 - 00056808 _____ C:\Users\aczyr\Downloads\53327729_F_50381055_04_17_F.pdf
  353. 2017-05-09 23:48 - 2017-05-25 11:50 - 00002069 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
  354. 2017-05-09 23:48 - 2017-05-25 11:50 - 00000000 ____D C:\Users\aczyr\AppData\LocalLow\Mozilla
  355. 2017-05-09 23:48 - 2017-05-20 12:44 - 00000000 ____D C:\WINDOWS\system32\log
  356. 2017-05-09 23:48 - 2017-05-20 11:45 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Mozilla
  357. 2017-05-09 22:07 - 2017-04-28 03:38 - 01411128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
  358. 2017-05-09 22:07 - 2017-04-28 03:19 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
  359. 2017-05-09 22:07 - 2017-04-28 03:19 - 00605936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
  360. 2017-05-09 22:07 - 2017-04-28 03:18 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
  361. 2017-05-09 22:07 - 2017-04-28 03:16 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
  362. 2017-05-09 22:07 - 2017-04-28 03:12 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
  363. 2017-05-09 22:07 - 2017-04-28 03:12 - 00543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
  364. 2017-05-09 22:07 - 2017-04-28 03:11 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
  365. 2017-05-09 22:07 - 2017-04-28 03:09 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
  366. 2017-05-09 22:07 - 2017-04-28 03:08 - 08320920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
  367. 2017-05-09 22:07 - 2017-04-28 03:08 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
  368. 2017-05-09 22:07 - 2017-04-28 03:08 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
  369. 2017-05-09 22:07 - 2017-04-28 03:08 - 00775824 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
  370. 2017-05-09 22:07 - 2017-04-28 03:07 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
  371. 2017-05-09 22:07 - 2017-04-28 03:07 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
  372. 2017-05-09 22:07 - 2017-04-28 03:06 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
  373. 2017-05-09 22:07 - 2017-04-28 03:06 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
  374. 2017-05-09 22:07 - 2017-04-28 03:05 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
  375. 2017-05-09 22:07 - 2017-04-28 03:04 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
  376. 2017-05-09 22:07 - 2017-04-28 03:03 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
  377. 2017-05-09 22:07 - 2017-04-28 03:00 - 02444192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
  378. 2017-05-09 22:07 - 2017-04-28 02:59 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
  379. 2017-05-09 22:07 - 2017-04-28 02:59 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
  380. 2017-05-09 22:07 - 2017-04-28 02:59 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
  381. 2017-05-09 22:07 - 2017-04-28 02:59 - 00207264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
  382. 2017-05-09 22:07 - 2017-04-28 02:59 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
  383. 2017-05-09 22:07 - 2017-04-28 02:58 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
  384. 2017-05-09 22:07 - 2017-04-28 02:58 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
  385. 2017-05-09 22:07 - 2017-04-28 02:57 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
  386. 2017-05-09 22:07 - 2017-04-28 02:56 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
  387. 2017-05-09 22:07 - 2017-04-28 02:55 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
  388. 2017-05-09 22:07 - 2017-04-28 02:55 - 01325456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
  389. 2017-05-09 22:07 - 2017-04-28 02:53 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
  390. 2017-05-09 22:07 - 2017-04-28 02:52 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
  391. 2017-05-09 22:07 - 2017-04-28 02:52 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
  392. 2017-05-09 22:07 - 2017-04-28 02:52 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
  393. 2017-05-09 22:07 - 2017-04-28 02:51 - 20505600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
  394. 2017-05-09 22:07 - 2017-04-28 02:49 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
  395. 2017-05-09 22:07 - 2017-04-28 02:49 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
  396. 2017-05-09 22:07 - 2017-04-28 02:46 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
  397. 2017-05-09 22:07 - 2017-04-28 02:46 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
  398. 2017-05-09 22:07 - 2017-04-28 02:46 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
  399. 2017-05-09 22:07 - 2017-04-28 02:45 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
  400. 2017-05-09 22:07 - 2017-04-28 02:44 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
  401. 2017-05-09 22:07 - 2017-04-28 02:44 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
  402. 2017-05-09 22:07 - 2017-04-28 02:42 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
  403. 2017-05-09 22:07 - 2017-04-28 02:42 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
  404. 2017-05-09 22:07 - 2017-04-28 02:42 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
  405. 2017-05-09 22:07 - 2017-04-28 02:42 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
  406. 2017-05-09 22:07 - 2017-04-28 02:41 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
  407. 2017-05-09 22:07 - 2017-04-28 02:40 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
  408. 2017-05-09 22:07 - 2017-04-28 02:40 - 06292992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
  409. 2017-05-09 22:07 - 2017-04-28 02:40 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
  410. 2017-05-09 22:07 - 2017-04-28 02:40 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
  411. 2017-05-09 22:07 - 2017-04-28 02:40 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
  412. 2017-05-09 22:07 - 2017-04-28 02:40 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
  413. 2017-05-09 22:07 - 2017-04-28 02:39 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
  414. 2017-05-09 22:07 - 2017-04-28 02:39 - 03655680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
  415. 2017-05-09 22:07 - 2017-04-28 02:39 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
  416. 2017-05-09 22:07 - 2017-04-28 02:38 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
  417. 2017-05-09 22:07 - 2017-04-28 02:38 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
  418. 2017-05-09 22:07 - 2017-04-28 02:37 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
  419. 2017-05-09 22:07 - 2017-04-28 02:37 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
  420. 2017-05-09 22:07 - 2017-04-28 02:34 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
  421. 2017-05-09 22:07 - 2017-04-28 02:33 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
  422. 2017-05-09 22:07 - 2017-04-28 02:26 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
  423. 2017-05-09 22:07 - 2017-04-28 02:15 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
  424. 2017-05-09 22:07 - 2017-04-28 02:15 - 01051648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
  425. 2017-05-09 22:07 - 2017-04-28 02:14 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
  426. 2017-05-09 22:07 - 2017-04-28 02:11 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
  427. 2017-05-09 22:07 - 2017-04-28 02:11 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
  428. 2017-05-09 22:07 - 2017-04-28 02:11 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
  429. 2017-05-09 22:07 - 2017-04-28 02:09 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
  430. 2017-05-09 22:07 - 2017-04-28 02:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
  431. 2017-05-09 22:07 - 2017-04-28 02:08 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
  432. 2017-05-09 22:07 - 2017-04-28 02:08 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
  433. 2017-05-09 22:07 - 2017-04-28 02:08 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
  434. 2017-05-09 22:07 - 2017-04-28 02:07 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
  435. 2017-05-09 22:07 - 2017-04-28 02:06 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
  436. 2017-05-09 22:07 - 2017-04-28 02:06 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
  437. 2017-05-09 22:07 - 2017-04-28 02:06 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
  438. 2017-05-09 22:07 - 2017-04-28 02:06 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
  439. 2017-05-09 22:07 - 2017-04-28 02:05 - 01075712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
  440. 2017-05-09 22:07 - 2017-04-28 02:05 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
  441. 2017-05-09 22:07 - 2017-04-28 02:04 - 23681024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
  442. 2017-05-09 22:07 - 2017-04-28 02:04 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
  443. 2017-05-09 22:07 - 2017-04-28 02:04 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
  444. 2017-05-09 22:07 - 2017-04-28 02:04 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
  445. 2017-05-09 22:07 - 2017-04-28 02:03 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
  446. 2017-05-09 22:07 - 2017-04-28 02:03 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
  447. 2017-05-09 22:07 - 2017-04-28 02:03 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
  448. 2017-05-09 22:07 - 2017-04-28 02:03 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
  449. 2017-05-09 22:07 - 2017-04-28 02:03 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
  450. 2017-05-09 22:07 - 2017-04-28 02:02 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
  451. 2017-05-09 22:07 - 2017-04-28 02:01 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
  452. 2017-05-09 22:07 - 2017-04-28 02:01 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
  453. 2017-05-09 22:07 - 2017-04-28 02:00 - 08244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
  454. 2017-05-09 22:07 - 2017-04-28 01:59 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
  455. 2017-05-09 22:07 - 2017-04-28 01:59 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
  456. 2017-05-09 22:07 - 2017-04-28 01:59 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
  457. 2017-05-09 22:07 - 2017-04-28 01:59 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
  458. 2017-05-09 22:07 - 2017-04-28 01:59 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
  459. 2017-05-09 22:07 - 2017-04-28 01:58 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
  460. 2017-05-09 22:07 - 2017-04-28 01:58 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
  461. 2017-05-09 22:07 - 2017-04-28 01:57 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
  462. 2017-05-09 22:07 - 2017-04-28 01:57 - 04730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
  463. 2017-05-09 22:07 - 2017-04-28 01:57 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
  464. 2017-05-09 22:07 - 2017-04-28 01:57 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
  465. 2017-05-09 22:07 - 2017-04-28 01:54 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
  466. 2017-05-09 22:07 - 2017-04-28 01:54 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
  467. 2017-05-09 22:07 - 2017-04-28 01:54 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
  468. 2017-05-09 22:07 - 2017-04-28 01:54 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
  469. 2017-05-09 22:07 - 2017-04-28 01:52 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
  470. 2017-05-07 20:06 - 2017-05-07 20:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sherlock Holmes - The Devil's Daughter
  471. 2017-05-07 13:58 - 2017-05-07 14:01 - 00000000 ____D C:\Program Files\The Sims 4
  472. 2017-05-07 12:31 - 2017-05-07 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4
  473. 2017-05-07 12:22 - 2017-05-08 17:05 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\The.Sims.4.Deluxe.v1.20.60.1020.Incl.Dine.Out-ALI213
  474. 2017-05-07 12:17 - 2017-06-03 20:02 - 00000000 ____D C:\Users\aczyr\AppData\Local\CrashDumps
  475. 2017-05-07 12:16 - 2017-05-07 12:16 - 00000000 ____D C:\Users\aczyr\AppData\Local\DBG
  476. 2017-05-06 16:58 - 2017-05-06 16:58 - 00000322 _____ C:\Users\aczyr\Downloads\mea_pl.reg
  477. 2017-05-06 10:52 - 2017-05-06 10:52 - 00080384 _____ () C:\Users\aczyr\Downloads\AndromedaLanguagePatcher.exe
  478.  
  479. ==================== One Month Modified files and folders ========
  480.  
  481. (If an entry is included in the fixlist, the file/folder will be moved.)
  482.  
  483. 2017-06-05 16:34 - 2017-05-03 18:25 - 00000000 ____D C:\ProgramData\NVIDIA
  484. 2017-06-05 16:34 - 2017-05-03 16:32 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome
  485. 2017-06-05 16:33 - 2017-05-03 21:10 - 00000000 ___RD C:\Users\aczyr\Creative Cloud Files
  486. 2017-06-05 16:33 - 2017-05-03 16:39 - 00000000 ____D C:\Users\aczyr\AppData\Local\Adobe
  487. 2017-06-05 16:33 - 2017-05-03 15:39 - 00000000 ____D C:\Program Files (x86)\Steam
  488. 2017-06-05 16:33 - 2017-05-03 15:28 - 00000000 ___RD C:\Users\aczyr\OneDrive
  489. 2017-06-05 16:32 - 2017-05-03 18:30 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
  490. 2017-06-05 16:32 - 2017-05-03 18:26 - 00000000 ____D C:\Users\aczyr
  491. 2017-06-05 16:32 - 2017-03-18 13:40 - 00786432 _____ C:\WINDOWS\system32\config\BBI
  492. 2017-06-05 16:30 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp
  493. 2017-06-04 17:52 - 2017-05-04 04:21 - 01080832 _____ C:\WINDOWS\system32\perfh015.dat
  494. 2017-06-04 17:52 - 2017-05-04 04:21 - 00238340 _____ C:\WINDOWS\system32\perfc015.dat
  495. 2017-06-04 17:52 - 2017-05-03 15:29 - 02367598 _____ C:\WINDOWS\system32\PerfStringBackup.INI
  496. 2017-06-04 17:46 - 2017-05-03 18:25 - 00392992 _____ C:\WINDOWS\system32\FNTCACHE.DAT
  497. 2017-06-04 17:46 - 2017-05-03 16:34 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\qBittorrent
  498. 2017-06-04 16:16 - 2017-05-03 18:25 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
  499. 2017-06-03 20:11 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF
  500. 2017-06-03 19:34 - 2017-05-03 15:26 - 00000000 ____D C:\Users\aczyr\AppData\Local\VirtualStore
  501. 2017-06-03 13:07 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps
  502. 2017-06-03 13:07 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness
  503. 2017-06-03 13:05 - 2017-05-03 18:25 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
  504. 2017-06-03 13:05 - 2017-05-03 16:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
  505. 2017-06-01 11:21 - 2017-05-05 16:26 - 00034328 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
  506. 2017-05-31 14:10 - 2017-05-03 15:54 - 00565416 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
  507. 2017-05-31 12:09 - 2017-05-04 20:11 - 00000000 ____D C:\WINDOWS\Minidump
  508. 2017-05-31 12:09 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports
  509. 2017-05-29 21:18 - 2017-05-03 19:13 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\vlc
  510. 2017-05-29 18:38 - 2017-05-04 18:36 - 00001496 _____ C:\Users\aczyr\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
  511. 2017-05-29 18:14 - 2017-05-03 16:15 - 00000000 ____D C:\ProgramData\Package Cache
  512. 2017-05-29 18:10 - 2017-05-04 18:32 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Alien Skin
  513. 2017-05-29 18:10 - 2017-05-04 18:17 - 00000000 ____D C:\Users\aczyr\AppData\Local\Alien Skin
  514. 2017-05-28 20:16 - 2017-05-04 18:19 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
  515. 2017-05-28 20:16 - 2017-05-03 16:41 - 00000000 ____D C:\Program Files\Common Files\Adobe
  516. 2017-05-28 20:16 - 2017-05-03 16:39 - 00000000 ____D C:\ProgramData\Adobe
  517. 2017-05-28 14:54 - 2017-05-03 15:38 - 00002350 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
  518. 2017-05-28 14:54 - 2017-05-03 15:38 - 00000000 ____D C:\Program Files (x86)\Google
  519. 2017-05-25 22:02 - 2017-05-04 18:18 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\IrfanView
  520. 2017-05-25 21:38 - 2017-05-03 18:52 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\TIDAL
  521. 2017-05-25 21:38 - 2017-05-03 18:52 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TIDAL
  522. 2017-05-25 16:49 - 2017-05-04 20:14 - 00000000 ____D C:\Program Files\Malwarebytes
  523. 2017-05-25 11:04 - 2017-05-03 15:26 - 00000000 ____D C:\Users\aczyr\AppData\Local\Packages
  524. 2017-05-25 10:42 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
  525. 2017-05-25 10:41 - 2017-05-04 20:00 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
  526. 2017-05-25 10:22 - 2017-05-03 17:47 - 00000000 ____D C:\Program Files (x86)\GOG Galaxy
  527. 2017-05-23 13:19 - 2017-05-03 15:53 - 00000000 ____D C:\WINDOWS\system32\MRT
  528. 2017-05-23 13:18 - 2017-05-03 15:53 - 132223576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
  529. 2017-05-20 22:13 - 2017-05-03 21:51 - 00000000 ____D C:\Users\aczyr\AppData\Local\Ubisoft Game Launcher
  530. 2017-05-20 16:25 - 2017-05-03 21:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
  531. 2017-05-20 12:52 - 2017-05-03 18:52 - 00000000 ____D C:\Users\aczyr\AppData\Local\SquirrelTemp
  532. 2017-05-20 12:21 - 2017-03-19 04:30 - 00000000 ____D C:\WINDOWS\OCR
  533. 2017-05-20 12:20 - 2017-05-03 15:44 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Launchy
  534. 2017-05-20 12:20 - 2017-05-03 15:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  535. 2017-05-20 12:20 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\PrintDialog
  536. 2017-05-20 12:20 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
  537. 2017-05-20 12:20 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences
  538. 2017-05-20 12:20 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Sysprep
  539. 2017-05-20 12:18 - 2017-05-03 18:34 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
  540. 2017-05-20 12:18 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\registration
  541. 2017-05-20 11:10 - 2017-05-05 22:45 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\DAEMON Tools Lite
  542. 2017-05-20 11:10 - 2017-05-03 17:43 - 00000000 ___DC C:\WINDOWS\Panther
  543. 2017-05-19 18:03 - 2017-05-03 15:40 - 01609232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
  544. 2017-05-19 18:03 - 2017-05-03 15:40 - 00226712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
  545. 2017-05-19 17:47 - 2017-05-03 15:40 - 04136736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
  546. 2017-05-19 17:47 - 2017-05-03 15:40 - 03647864 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
  547. 2017-05-19 14:22 - 2017-05-03 15:40 - 00045061 _____ C:\WINDOWS\system32\nvinfo.pb
  548. 2017-05-13 17:48 - 2017-05-03 18:40 - 00000000 ____D C:\Users\aczyr\AppData\Roaming\Splashify
  549. 2017-05-12 19:18 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache
  550. 2017-05-10 14:03 - 2017-05-03 15:26 - 00000000 __RHD C:\Users\Public\AccountPictures
  551. 2017-05-10 00:16 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser
  552. 2017-05-10 00:16 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer
  553. 2017-05-10 00:16 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
  554.  
  555. ==================== Files in the root of some directories =======
  556.  
  557. 2017-05-04 18:36 - 2017-05-29 18:38 - 0001496 _____ () C:\Users\aczyr\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
  558. 2017-05-03 18:26 - 2017-05-03 18:26 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
  559.  
  560. ==================== Bamital & volsnap ======================
  561.  
  562. (There is no automatic fix for files that do not pass verification.)
  563.  
  564. C:\WINDOWS\system32\winlogon.exe => File is digitally signed
  565. C:\WINDOWS\system32\wininit.exe => File is digitally signed
  566. C:\WINDOWS\explorer.exe => File is digitally signed
  567. C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
  568. C:\WINDOWS\system32\svchost.exe => File is digitally signed
  569. C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
  570. C:\WINDOWS\system32\services.exe => File is digitally signed
  571. C:\WINDOWS\system32\User32.dll => File is digitally signed
  572. C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
  573. C:\WINDOWS\system32\userinit.exe => File is digitally signed
  574. C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
  575. C:\WINDOWS\system32\rpcss.dll => File is digitally signed
  576. C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
  577. C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
  578. C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
  579.  
  580. LastRegBack: 2017-05-28 15:09
  581.  
  582. ==================== End of FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!