Mam wszystko włączone w "msconfig" są tu 2x screen http://prntscr.com/cri3vc http://prntscr.com/cri4bx
Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 04-10-2016
Uruchomiony przez Neo (administrator) NEO-KOMPUTER (09-10-2016 00:40:45)
Uruchomiony z C:\Users\Neo\Desktop\Nowy folder (2)
Załadowane profile: Neo (Dostępne profile: Neo)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Procesy (filtrowane) =================
(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
() C:\Program Files\EslWire\service\WireHelperSvc.exe
(SoftEther VPN Project at University of Tsukuba, Japan.) C:\Program Files\SoftEther VPN Client\vpnclient.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(SoftEther VPN Project at University of Tsukuba, Japan.) C:\Program Files\SoftEther VPN Client\vpnclient.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
() C:\Program Files\No-IP\ducservice.exe
(Electronic Arts) D:\Origin\OriginWebHelperService.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Skillbrains) C:\Program Files\Skillbrains\lightshot\5.3.0.0\Lightshot.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Rejestr (filtrowane) ====================
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
HKLM\...\Run: [AvastUI.exe] = & gt; C:\Program Files\AVAST Software\Avast\AvastUI.exe [9107616 2016-10-01] (AVAST Software)
HKLM\...\Run: [SunJavaUpdateSched] = & gt; C:\Program Files\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKLM\...\Run: [SoftEther VPN Client UI Helper] = & gt; C:\Program Files\SoftEther VPN Client\vpnclient.exe [3973352 2016-09-13] (SoftEther VPN Project at University of Tsukuba, Japan.)
HKLM\...\Run: [Lightshot] = & gt; C:\Program Files\Skillbrains\lightshot\Lightshot.exe [226560 2014-10-16] ()
HKLM\...\Run: [APSDaemon] = & gt; C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM\...\Run: [Aeria Ignite] = & gt; C:\Program Files\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment)
HKLM\...\Run: [AdobeAAMUpdater-1.0] = & gt; " C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe "
HKLM\...\Run: [Adobe Creative Cloud] = & gt; " C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe " --showwindow=false --onOSstartup=true
HKU\S-1-5-21-314501420-2261803728-2016192299-1000\...\Run: [uTorrent] = & gt; C:\Users\Neo\AppData\Roaming\uTorrent\uTorrent.exe [2375360 2016-09-26] (BitTorrent Inc.)
HKU\S-1-5-21-314501420-2261803728-2016192299-1000\...\Run: [Steam] = & gt; D:\STEAM\steam.exe [2858272 2016-09-20] (Valve Corporation)
HKU\S-1-5-21-314501420-2261803728-2016192299-1000\...\Run: [Overwolf] = & gt; C:\Program Files\Overwolf\OverwolfLauncher.exe [247344 2016-09-27] ()
HKU\S-1-5-21-314501420-2261803728-2016192299-1000\...\Run: [nw] = & gt; " C:\Program Files\Crytek\GFACE Launcher\live\nw.exe " --autostart
HKU\S-1-5-21-314501420-2261803728-2016192299-1000\...\Run: [NoIPDUCv4] = & gt; C:\Program Files\No-IP\DUC40.exe [347648 2015-07-21] ()
HKU\S-1-5-21-314501420-2261803728-2016192299-1000\...\Run: [Napisy24.pl] = & gt; C:\Program Files\Napisy24\Napisy24.exe [5598144 2016-02-25] (Napisy24.pl)
HKU\S-1-5-21-314501420-2261803728-2016192299-1000\...\Run: [MyComGames] = & gt; C:\Users\Neo\AppData\Local\MyComGames\MyComGames.exe [4886928 2016-10-08] (MY.COM B.V.)
HKU\S-1-5-21-314501420-2261803728-2016192299-1000\...\Run: [Google Update] = & gt; " C:\Users\Neo\AppData\Local\Google\Update\GoogleUpdate.exe " /c
HKU\S-1-5-21-314501420-2261803728-2016192299-1000\...\Run: [gflauncher] = & gt; " D:\gry\Warface\GFACE Launcher\live\gflauncher.exe " --autostart
HKU\S-1-5-21-314501420-2261803728-2016192299-1000\...\Run: [GarenaPlus] = & gt; " C:\Program Files\Garena Plus\GarenaMessenger.exe " -autolaunch
HKU\S-1-5-21-314501420-2261803728-2016192299-1000\...\Run: [ESL Wire] = & gt; C:\Program Files\EslWire\wire.exe [2294272 2016-09-13] (Turtle Entertainment GmbH)
HKU\S-1-5-21-314501420-2261803728-2016192299-1000\...\Run: [EADM] = & gt; D:\Origin\Origin.exe [3503088 2016-09-14] (Electronic Arts)
HKU\S-1-5-21-314501420-2261803728-2016192299-1000\...\Run: [CyberGhost] = & gt; " C:\Program Files\CyberGhost 5\CyberGhost.exe " /autostart /min
HKU\S-1-5-21-314501420-2261803728-2016192299-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
ShellIconOverlayIdentifiers: [00avast] - & gt; {472083B0-C522-11CF-8763-00608CC02F24} = & gt; C:\Program Files\AVAST Software\Avast\ashShell.dll [2016-10-01] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SoftEther VPN Client Manager Startup.lnk [2016-09-13]
ShortcutTarget: SoftEther VPN Client Manager Startup.lnk - & gt; C:\Program Files\SoftEther VPN Client\vpncmgr.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
==================== Internet (filtrowane) ====================
(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1B34E97C-E503-4FA1-A245-B9FBF1C72282}: [DhcpNameServer] 10.211.254.254 8.8.8.8
Tcpip\..\Interfaces\{6A215F0D-253A-4DD2-A28B-E79AE89CAFB5}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7E4C3248-3EA0-4E5A-BA69-439415D71523}: [DhcpNameServer] 192.168.0.1 91.149.220.2
Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
BHO: Java(tm) Plug-In SSV Helper - & gt; {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - & gt; C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-07-23] (Oracle Corporation)
BHO: avast! Online Security - & gt; {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - & gt; C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-01] (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - & gt; {DBC80044-A445-435b-BC74-9C25C1C588A9} - & gt; C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-23] (Oracle Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF DefaultProfile: 3ffdy5q0.default
FF ProfilePath: C:\Users\Neo\AppData\Roaming\OpenFM\Profiles\8wapkuvx.default [2015-09-25]
FF ProfilePath: C:\Users\Neo\AppData\Roaming\Mozilla\Firefox\Profiles\3ffdy5q0.default [2016-10-08]
FF Keyword.URL: Mozilla\Firefox\Profiles\3ffdy5q0.default - & gt; hxxp://go.mail.ru/distib/ep/?product_id=%7BB54F31ED-3975-43AC-8AEA-2DDAB37F620E%7D & gp=811014
FF Extension: (Firefox Hotfix) - C:\Users\Neo\AppData\Roaming\Mozilla\Firefox\Profiles\3ffdy5q0.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-09-11]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-10-08]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-10-08]
FF Plugin: @adobe.com/FlashPlayer - & gt; C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-14] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 - & gt; C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 - & gt; C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-23] (Oracle Corporation)
FF Plugin: @nvidia.com/3DVision - & gt; C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-10-13] (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - & gt; C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-10-13] (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - & gt; C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-10-08] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - & gt; C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-10-08] (Google Inc.)
FF Plugin HKU\S-1-5-21-314501420-2261803728-2016192299-1000: @my.com/Games - & gt; C:\Users\Neo\AppData\Local\MyComGames\NPMyComDetector.dll [2016-09-14] (MY.COM B.V.)
FF Plugin HKU\S-1-5-21-314501420-2261803728-2016192299-1000: @unity3d.com/UnityPlayer,version=1.0 - & gt; C:\Users\Neo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)
Chrome:
=======
CHR Profile: C:\Users\Neo\AppData\Local\Google\Chrome\User Data\Default [2016-10-09]
CHR Extension: (Prezentacje Google) - C:\Users\Neo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-07]
CHR Extension: (Dokumenty Google) - C:\Users\Neo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-07]
CHR Extension: (Dysk Google) - C:\Users\Neo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-07]
CHR Extension: (YouTube) - C:\Users\Neo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-07]
CHR Extension: (Adblock Plus) - C:\Users\Neo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-07]
CHR Extension: (Avast SafePrice) - C:\Users\Neo\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-10-08]
CHR Extension: (Arkusze Google) - C:\Users\Neo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-07]
CHR Extension: (Dokumenty Google offline) - C:\Users\Neo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-07]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Neo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-07]
CHR Extension: (Gmail) - C:\Users\Neo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-07]
CHR Extension: (Chrome Media Router) - C:\Users\Neo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-07]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Usługi (filtrowane) ====================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-10-01] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [223600 2016-10-02] (AVAST Software)
S3 EasyAntiCheat; C:\Windows\system32\EasyAntiCheat.exe [249104 2016-07-11] (EasyAntiCheat Ltd)
R2 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [614416 2016-04-12] ()
R2 NoIPDUCService4; C:\Program Files\No-IP\ducservice.exe [12288 2015-07-20] () [Brak podpisu cyfrowego]
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2130440 2016-09-14] (Electronic Arts)
R2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [2195472 2016-09-14] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files\Overwolf\OverwolfUpdater.exe [1310960 2016-09-27] (Overwolf LTD)
R2 SEVPNCLIENT; C:\Program Files\SoftEther VPN Client\vpnclient.exe [3973352 2016-09-13] (SoftEther VPN Project at University of Tsukuba, Japan.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
===================== Sterowniki (filtrowane) ======================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R1 appdrv01; C:\Windows\System32\Drivers\appdrv01.sys [3110512 2010-07-04] (Protection Technology)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [34008 2016-10-01] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [35096 2016-10-01] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [92256 2016-10-01] (AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [26776 2016-10-02] (AVAST Software)
R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [338936 2016-10-02] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [91232 2016-10-01] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [60424 2016-10-01] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [735488 2016-10-01] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [433768 2016-10-01] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [118664 2016-10-01] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [224616 2016-10-01] (AVAST Software)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [25104 2015-06-21] (Disc Soft Ltd)
R0 ESLWireAC; C:\Windows\System32\drivers\ESLWireACD.sys [41608 2016-08-15] ( & lt; Turtle Entertainment & gt; )
R3 EuMusDesignVirtualAudioCableWdm; C:\Windows\System32\DRIVERS\vrtaucbl.sys [50728 2016-02-22] (Eugene V. Muzychenko)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [23712 2015-04-15] (REALiX(tm))
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R3 Neo_VPN; C:\Windows\System32\DRIVERS\Neo_0058.sys [37920 2016-02-17] (SoftEther Corporation)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [42128 2015-12-18] (NVIDIA Corporation)
S3 SCREAMINGBDRIVER; C:\Windows\System32\drivers\ScreamingBAudio.sys [34384 2009-11-26] (Screaming Bee LLC)
S3 SEE; C:\Windows\System32\drivers\see.sys [55328 2016-02-17] (SoftEther Corporation)
R0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [83320 2007-02-08] (Protection Technology (StarForce))
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2010-07-04] () [Brak podpisu cyfrowego]
R3 Stmatm; C:\Windows\System32\DRIVERS\stmatm.sys [60533 2008-04-23] (STMicroelectronics )
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [31776 2015-06-02] (The OpenVPN Project)
S3 tapwp01; C:\Windows\System32\DRIVERS\tapwp01.sys [35288 2014-12-11] (The OpenVPN Project)
S3 TaurusUsb; C:\Windows\System32\DRIVERS\torususb.sys [684672 2008-04-23] ()
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [17792 2008-12-26] (Avnex) [Brak podpisu cyfrowego]
==================== NetSvcs (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
==================== Jeden miesiąc - utworzone pliki i foldery ========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2016-10-08 20:31 - 2016-10-08 20:31 - 00000000 ____D C:\Program Files\Origin Games
2016-10-08 20:22 - 2016-10-08 20:23 - 01326881 _____ C:\Users\Neo\Downloads\Niepotwierdzony 677366.crdownload
2016-10-08 16:25 - 2016-10-08 20:29 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-10-08 16:25 - 2016-10-08 16:25 - 00001020 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-10-08 16:25 - 2016-10-08 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-10-08 16:25 - 2016-10-08 16:25 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-10-08 16:25 - 2016-03-10 14:09 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-10-08 16:25 - 2016-03-10 14:08 - 00126336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-10-08 16:25 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-10-08 16:23 - 2016-10-08 16:24 - 22851472 _____ (Malwarebytes ) C:\Users\Neo\Downloads\mbam-setup-bc.1878-2.2.1.1043.exe
2016-10-08 16:18 - 2016-10-09 00:40 - 00000000 ____D C:\FRST
2016-10-08 16:15 - 2016-10-09 00:40 - 00000000 ____D C:\Users\Neo\Desktop\Nowy folder (2)
2016-10-08 10:37 - 2016-10-08 10:37 - 00002179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-10-08 10:37 - 2016-10-08 10:37 - 00002167 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-10-08 10:33 - 2016-10-09 00:38 - 00001030 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-10-08 10:33 - 2016-10-08 21:01 - 00001026 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-10-08 10:18 - 2016-10-08 10:19 - 03874368 _____ C:\Users\Neo\Downloads\adwcleaner_6.021.exe
2016-10-08 09:46 - 2016-10-08 09:46 - 00001963 _____ C:\Users\Public\Desktop\Avast Internet Security.lnk
2016-10-08 09:44 - 2016-10-01 19:12 - 00319760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-10-07 11:04 - 2016-10-07 18:11 - 00000001 _____ C:\Users\Neo\Documents\Przelew24.txt
2016-10-06 19:09 - 2016-10-08 10:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-10-04 01:29 - 2016-10-08 16:19 - 00000000 ____D C:\Users\Neo\AppData\LocalLow\Temp
2016-10-03 17:01 - 2016-10-03 17:01 - 00000611 _____ C:\Users\Neo\Documents\Libro.txt
2016-10-02 10:01 - 2016-10-08 09:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-10-02 09:55 - 2016-10-01 19:14 - 00433768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswB5D3.tmp
2016-10-02 09:55 - 2016-10-01 19:12 - 00224616 _____ (AVAST Software) C:\Windows\system32\Drivers\aswB7B8.tmp
2016-10-02 09:55 - 2016-10-01 19:12 - 00118664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswB9FB.tmp
2016-10-02 09:55 - 2016-10-01 19:12 - 00092256 _____ (AVAST Software) C:\Windows\system32\Drivers\aswB14C.tmp
2016-10-02 09:55 - 2016-10-01 19:12 - 00091232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswAD62.tmp
2016-10-02 09:55 - 2016-10-01 19:12 - 00060424 _____ (AVAST Software) C:\Windows\system32\Drivers\aswB3CE.tmp
2016-10-02 09:55 - 2016-10-01 19:12 - 00034008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswAF19.tmp
2016-10-02 09:54 - 2016-10-02 09:53 - 00338936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetSec.sys
2016-10-02 09:54 - 2016-10-01 19:14 - 00735488 _____ (AVAST Software) C:\Windows\system32\Drivers\aswA9D7.tmp
2016-10-02 09:54 - 2016-10-01 19:11 - 00035096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswA7C3.tmp
2016-10-02 09:53 - 2016-10-02 09:53 - 00026776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetNd6.sys
2016-10-01 19:12 - 2016-10-01 19:12 - 00921280 _____ (Microsoft Corporation) C:\Windows\ucrtbase.dll
2016-10-01 19:12 - 2016-10-01 19:12 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-09-26 23:35 - 2016-09-26 23:35 - 00000017 _____ C:\Users\Neo\Downloads\steam key.txt
2016-09-26 23:35 - 2016-09-26 23:35 - 00000000 ____D C:\ProgramData\Avira
2016-09-26 09:22 - 2016-09-26 09:22 - 00002591 _____ C:\Users\Neo\Desktop\µTorrent.lnk
2016-09-26 09:21 - 2016-10-08 21:04 - 00000000 ____D C:\Users\Neo\AppData\Roaming\uTorrent
2016-09-26 09:21 - 2016-09-26 09:21 - 02375360 _____ (BitTorrent Inc.) C:\Users\Neo\Downloads\uTorrent.exe
2016-09-24 01:38 - 2016-09-24 01:38 - 00000000 ____D C:\G2 GAME LAOD
2016-09-21 13:46 - 2016-08-05 17:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-09-20 11:14 - 2016-09-20 11:14 - 00000199 _____ C:\Users\Neo\Desktop\Counter-Strike Global Offensive.url
2016-09-18 16:19 - 2016-09-26 23:38 - 00000419 _____ C:\Users\Neo\Documents\CS-GO.txt
2016-09-18 14:38 - 2016-09-27 20:10 - 00000000 ____D C:\Users\Neo\Desktop\CS-GO
2016-09-15 09:27 - 2016-09-15 10:03 - 00000060 _____ C:\Users\Neo\Documents\GREPOLIS.txt
2016-09-14 23:22 - 2016-09-01 20:41 - 00346320 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-09-14 23:22 - 2016-09-01 05:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-09-14 23:22 - 2016-09-01 05:17 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-09-14 23:22 - 2016-09-01 05:08 - 20312064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-09-14 23:22 - 2016-09-01 04:48 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-09-14 23:22 - 2016-09-01 04:46 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-09-14 23:22 - 2016-09-01 04:46 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-09-14 23:22 - 2016-09-01 04:46 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-09-14 23:22 - 2016-09-01 04:44 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-09-14 23:22 - 2016-09-01 04:34 - 02286592 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-09-14 23:22 - 2016-09-01 04:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-09-14 23:22 - 2016-09-01 04:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-09-14 23:22 - 2016-09-01 04:26 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-09-14 23:22 - 2016-09-01 04:24 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-09-14 23:22 - 2016-09-01 04:24 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-09-14 23:22 - 2016-09-01 04:24 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-09-14 23:22 - 2016-09-01 04:23 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-09-14 23:22 - 2016-09-01 04:14 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-09-14 23:22 - 2016-09-01 04:08 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-09-14 23:22 - 2016-09-01 03:59 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-09-14 23:22 - 2016-09-01 03:57 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-09-14 23:22 - 2016-09-01 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-09-14 23:22 - 2016-09-01 03:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-09-14 23:22 - 2016-09-01 03:48 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-09-14 23:22 - 2016-09-01 03:45 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-09-14 23:22 - 2016-09-01 03:34 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-09-14 23:22 - 2016-09-01 03:31 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-09-14 23:22 - 2016-09-01 03:30 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-09-14 23:22 - 2016-09-01 03:29 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-09-14 23:22 - 2016-09-01 03:29 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-09-14 23:22 - 2016-09-01 03:27 - 13808128 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-09-14 23:22 - 2016-09-01 03:24 - 04607488 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-09-14 23:22 - 2016-09-01 02:43 - 02445824 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-09-14 23:22 - 2016-09-01 02:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-09-14 23:22 - 2016-09-01 02:38 - 01316352 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-09-14 23:19 - 2016-09-02 17:21 - 04000488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2016-09-14 23:19 - 2016-09-02 17:21 - 03944680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-09-14 23:19 - 2016-09-02 17:21 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-09-14 23:19 - 2016-09-02 17:21 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-09-14 23:19 - 2016-09-02 17:18 - 01310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-09-14 23:19 - 2016-09-02 17:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-09-14 23:19 - 2016-09-02 16:53 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-09-14 23:19 - 2016-09-02 16:53 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-09-14 23:19 - 2016-09-02 16:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-09-14 23:19 - 2016-09-02 16:53 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-09-14 23:19 - 2016-09-02 16:53 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-09-14 23:19 - 2016-09-02 16:51 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-09-14 23:19 - 2016-09-02 16:49 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-09-14 23:19 - 2016-09-02 16:49 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-09-14 23:19 - 2016-09-02 16:49 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-09-14 23:19 - 2016-09-02 16:49 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-09-14 23:19 - 2016-09-02 16:49 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-09-14 23:19 - 2016-09-02 16:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-09-14 23:19 - 2016-09-02 16:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-09-14 23:19 - 2016-08-12 18:21 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-09-14 23:19 - 2016-08-12 18:21 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-09-14 23:19 - 2016-08-12 18:21 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-09-14 23:19 - 2016-06-06 17:23 - 01176064 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-09-14 23:19 - 2016-06-06 17:23 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-09-14 23:19 - 2016-06-06 17:23 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-09-14 23:19 - 2016-06-06 17:23 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-09-14 23:19 - 2016-05-13 23:50 - 02945536 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-09-14 23:19 - 2016-05-13 23:50 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-09-14 23:19 - 2016-05-13 23:47 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-09-14 23:19 - 2016-05-13 23:39 - 02060288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-09-14 23:19 - 2016-05-13 23:38 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-09-14 23:19 - 2016-05-13 23:38 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-09-14 23:19 - 2016-05-13 23:38 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-09-14 23:19 - 2016-05-13 23:38 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-09-14 23:19 - 2016-05-13 23:38 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-09-14 23:19 - 2016-05-13 23:38 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-09-14 23:19 - 2016-05-13 23:38 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-09-14 23:19 - 2016-05-12 17:18 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-09-14 23:19 - 2016-05-12 17:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-09-14 23:19 - 2016-05-04 19:21 - 00105192 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-09-14 23:19 - 2016-05-04 19:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-09-14 23:19 - 2016-05-04 19:17 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-09-14 23:19 - 2016-05-04 19:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-09-14 23:19 - 2016-05-04 19:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-09-14 23:19 - 2016-05-04 19:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-09-14 23:19 - 2016-05-04 16:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-09-14 23:17 - 2016-07-07 17:20 - 01309928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-09-14 23:17 - 2016-07-07 17:20 - 00240872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-09-14 23:17 - 2016-07-07 17:20 - 00187624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-09-14 23:17 - 2016-07-07 16:57 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-09-14 23:17 - 2016-07-01 17:13 - 00741888 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-09-14 23:17 - 2016-07-01 17:13 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2016-09-14 23:13 - 2016-08-16 04:48 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-09-14 23:13 - 2016-08-16 04:28 - 02399232 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-09-14 23:13 - 2016-08-06 17:15 - 00581632 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-09-14 01:07 - 2016-09-14 01:07 - 00000000 ____D C:\Users\Neo\.QtWebEngineProcess
2016-09-14 00:46 - 2016-09-14 00:46 - 00000000 ____D C:\Users\Neo\.Origin
2016-09-13 21:00 - 2016-09-13 21:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoftEther VPN Client
2016-09-12 15:38 - 2016-09-12 15:38 - 00001851 _____ C:\Users\Neo\Desktop\First Assault.lnk
2016-09-12 13:20 - 2016-09-12 13:20 - 00000000 ____D C:\Users\Neo\AppData\Local\NexonLauncher
2016-09-12 01:31 - 2016-09-12 01:31 - 00000984 _____ C:\Users\Neo\Desktop\Nexon Launcher.lnk
2016-09-12 01:30 - 2016-09-12 13:23 - 00000000 ____D C:\Users\Neo\AppData\Roaming\NexonLauncher
2016-09-11 23:54 - 2016-09-11 23:54 - 00000000 ____D C:\Nexon
2016-09-11 23:43 - 2016-09-11 23:43 - 00000000 ____D C:\Users\Neo\AppData\Local\Crashpad
2016-09-10 13:49 - 2016-10-07 23:51 - 00000000 ____D C:\Users\Neo\Doctor Web
2016-09-10 00:59 - 2016-09-10 13:17 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2016-09-09 23:21 - 2016-09-09 23:47 - 00000000 ____D C:\Users\Neo\AppData\LocalLow\Heroes and Generals
2016-09-09 23:11 - 2016-09-09 23:12 - 00000000 ____D C:\Users\Neo\AppData\Roaming\HeroesAndGeneralsDesktop
==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2016-10-09 00:39 - 2016-02-29 16:01 - 00000000 ____D C:\Users\Neo\Desktop\Zdjęcia SKILL
2016-10-09 00:36 - 2015-06-04 09:30 - 00000000 ____D C:\Windows\pss
2016-10-09 00:09 - 2015-08-14 21:23 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-10-08 21:33 - 2015-04-15 16:38 - 00000000 ____D C:\ProgramData\Origin
2016-10-08 21:12 - 2009-07-14 06:34 - 00023568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-10-08 21:12 - 2009-07-14 06:34 - 00023568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-10-08 21:06 - 2016-03-24 17:29 - 00000000 ____D C:\Users\Neo\AppData\Local\Purplizer
2016-10-08 21:04 - 2016-04-22 01:20 - 00000000 ____D C:\Users\Neo\AppData\Local\MyComGames
2016-10-08 21:04 - 2016-01-09 14:58 - 00000000 ____D C:\Users\Neo\AppData\Local\Overwolf
2016-10-08 21:03 - 2016-08-15 20:45 - 00000000 ____D C:\Users\Neo\AppData\Local\ESL Wire Game Client
2016-10-08 21:03 - 2016-03-24 17:27 - 00000000 ____D C:\Program Files\Overwolf
2016-10-08 21:03 - 2015-12-09 00:11 - 00000000 ____D C:\Users\Neo\AppData\Local\Origin
2016-10-08 21:03 - 2015-10-01 00:43 - 00000000 ____D C:\Program Files\Common Files\Overwolf
2016-10-08 21:02 - 2016-05-11 14:17 - 00000000 ____D C:\Program Files\SoftEther VPN Client
2016-10-08 21:01 - 2013-01-08 16:27 - 00000000 ____D C:\ProgramData\NVIDIA
2016-10-08 21:01 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-10-08 21:00 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration
2016-10-08 20:31 - 2016-09-03 23:01 - 00000000 ____D C:\Users\Neo\AppData\Roaming\Origin
2016-10-08 20:23 - 2015-04-26 21:07 - 00000000 ____D C:\Users\Neo\AppData\Roaming\TS3Client
2016-10-08 16:25 - 2015-05-28 11:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-10-08 16:20 - 2016-05-29 02:52 - 00000008 __RSH C:\Users\Neo\ntuser.pol
2016-10-08 16:20 - 2016-05-29 02:50 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-10-08 16:20 - 2015-06-04 14:55 - 00000069 _____ C:\Windows\NeroDigital.ini
2016-10-08 16:20 - 2009-12-16 21:09 - 00000000 ____D C:\Users\Neo
2016-10-08 16:18 - 2016-05-09 20:35 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-10-08 10:41 - 2016-08-21 18:43 - 00000000 ____D C:\NVIDIA
2016-10-08 10:41 - 2016-08-15 20:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESL Wire
2016-10-08 10:41 - 2016-08-15 20:45 - 00000000 ____D C:\ProgramData\ESL Wire
2016-10-08 10:41 - 2016-08-15 20:45 - 00000000 ____D C:\Program Files\EslWire
2016-10-08 10:41 - 2016-07-21 01:47 - 00000000 ___SD C:\Windows\system32\GWX
2016-10-08 10:41 - 2016-04-16 16:37 - 00000000 ____D C:\Users\Neo\AppData\Local\ComDev
2016-10-08 10:41 - 2016-02-12 13:39 - 00000000 ____D C:\Users\Neo\AppData\Local\Unity
2016-10-08 10:41 - 2015-10-01 00:14 - 00000000 ____D C:\ProgramData\Overwolf
2016-10-08 10:41 - 2010-04-19 21:34 - 00000000 ____D C:\Windows\Minidump
2016-10-08 10:41 - 2010-03-08 20:00 - 00000000 ____D C:\Program Files\FinePixViewerS
2016-10-08 10:40 - 2016-07-11 15:30 - 00000000 ____D C:\Users\Neo\Desktop\hack
2016-10-08 10:40 - 2016-04-19 15:44 - 00000000 ____D C:\Users\Neo\AppData\Local\Mozilla
2016-10-08 10:36 - 2016-04-16 21:07 - 00000000 ____D C:\Program Files\Google
2016-10-08 10:33 - 2016-04-19 00:48 - 00000000 ____D C:\Users\Neo\AppData\Local\Deployment
2016-10-08 09:45 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\inf
2016-10-07 23:32 - 2016-08-01 22:31 - 00000364 _____ C:\DelFix.txt
2016-10-07 21:59 - 2016-02-11 16:54 - 00000000 ____D C:\Users\Neo\Desktop\----13---
2016-10-07 19:20 - 2016-04-27 10:06 - 00000000 ____D C:\Users\Neo\Desktop\FILM Z SKILLA
2016-10-07 17:07 - 2015-06-04 20:12 - 00001001 _____ C:\Users\Neo\Documents\alicja.txt
2016-10-07 16:48 - 2016-03-16 22:12 - 00000000 ____D C:\Users\Neo\Desktop\ZDJĘCIA Skill 2016
2016-10-01 19:14 - 2015-12-18 17:12 - 00735488 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-10-01 19:14 - 2015-12-18 17:12 - 00433768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2016-10-01 19:12 - 2015-12-18 17:12 - 00224616 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-10-01 19:12 - 2015-12-18 17:12 - 00118664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-10-01 19:12 - 2015-12-18 17:12 - 00092256 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-10-01 19:12 - 2015-12-18 17:12 - 00091232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-10-01 19:12 - 2015-12-18 17:12 - 00060424 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-10-01 19:12 - 2015-12-18 17:12 - 00034008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-10-01 19:11 - 2016-03-18 17:28 - 00035096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-09-28 23:39 - 2009-12-16 21:01 - 00162773 _____ C:\Windows\Minidump\092816-25328-01.dmp
2016-09-28 08:55 - 2015-12-05 17:22 - 00000000 ____D C:\Program Files\Engelmann Media
2016-09-28 08:55 - 2015-08-04 23:47 - 00000000 ____D C:\Program Files\Winamp
2016-09-28 08:55 - 2015-01-31 14:20 - 00000000 ____D C:\Program Files\Use VLC for YouTube
2016-09-28 08:55 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender
2016-09-27 00:30 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Branding
2016-09-27 00:05 - 2009-12-16 21:01 - 00162773 _____ C:\Windows\Minidump\092716-25156-01.dmp
2016-09-26 23:57 - 2009-12-16 21:01 - 00163285 _____ C:\Windows\Minidump\092616-28750-01.dmp
2016-09-26 14:48 - 2009-12-16 14:14 - 00864238 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-26 14:48 - 2009-07-14 10:07 - 00066904 _____ C:\Windows\system32\perfh015.dat
2016-09-26 14:48 - 2009-07-14 10:07 - 00029986 _____ C:\Windows\system32\perfc015.dat
2016-09-24 00:30 - 2015-05-19 18:57 - 00000000 ____D C:\ProgramData\Package Cache
2016-09-18 15:38 - 2015-07-08 09:58 - 00000000 ____D C:\Users\Neo\Desktop\TeamSpeak3
2016-09-17 11:20 - 2015-07-15 20:34 - 00000000 ____D C:\Users\Neo\AppData\Roaming\.minecraft
2016-09-16 10:18 - 2016-08-15 20:45 - 00000892 _____ C:\Users\Public\Desktop\ESL Wire.lnk
2016-09-15 16:59 - 2016-02-17 12:57 - 00000160 _____ C:\Users\Neo\Documents\Skill AZJA.txt
2016-09-15 07:53 - 2009-07-14 06:33 - 01627384 _____ C:\Windows\system32\FNTCACHE.DAT
2016-09-15 01:53 - 2013-08-14 21:00 - 00000000 ____D C:\Windows\system32\MRT
2016-09-15 01:46 - 2009-12-17 19:36 - 141747376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-09-14 01:18 - 2010-12-25 13:25 - 00000000 ____D C:\Windows\system32\directx
2016-09-14 01:16 - 2016-07-07 12:09 - 00000000 ___HD C:\temp
2016-09-14 01:09 - 2015-08-14 21:23 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-09-14 01:09 - 2015-08-14 21:23 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-09-14 01:09 - 2009-12-17 00:16 - 00000000 ____D C:\Windows\system32\Macromed
2016-09-13 21:00 - 2016-07-01 14:40 - 00000000 ____D C:\Users\Neo\Desktop\Azja
2016-09-13 21:00 - 2016-05-11 14:17 - 00002022 _____ C:\ProgramData\Microsoft\Windows\Start Menu\SoftEther VPN Client Manager.lnk
2016-09-11 09:58 - 2015-12-08 17:54 - 00001363 _____ C:\Users\Neo\Documents\KODY SKILL.txt
2016-09-10 01:09 - 2015-12-25 13:58 - 00000000 ____D C:\Users\Neo\AppData\Local\Adobe
2016-09-09 15:17 - 2016-08-22 00:22 - 00000000 ____D C:\Users\Neo\Downloads\Nowy folder
2016-09-09 13:11 - 2016-07-06 13:05 - 00000000 ____D C:\Users\Neo\Downloads\Cross
==================== Pliki w katalogu głównym wybranych folderów =======
2015-12-29 14:48 - 2016-05-16 08:05 - 0005632 _____ () C:\Users\Neo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-08-04 21:02 - 2016-08-04 21:02 - 0030225 _____ () C:\Users\Neo\AppData\Local\recently-used.xbel
2016-03-04 10:44 - 2016-03-04 10:56 - 0007605 _____ () C:\Users\Neo\AppData\Local\resmon.resmoncfg
2015-11-26 20:38 - 2015-11-26 20:38 - 0000003 _____ () C:\Users\Neo\AppData\Local\updater.log
2015-11-26 20:38 - 2015-11-26 20:38 - 0000412 _____ () C:\Users\Neo\AppData\Local\UserProducts.xml
2010-10-21 17:33 - 2010-10-21 17:37 - 0002516 ___SH () C:\ProgramData\KGyGaAvL.sys
Niektóre pliki w TEMP:
====================
C:\Users\Neo\AppData\Local\Temp\ALLRemote.exe
C:\Users\Neo\AppData\Local\Temp\cb183989f03eb626f56b7119b0933708.dll
C:\Users\Neo\AppData\Local\Temp\ed6e8e8c4b588010c8f64663407c6196.dll
==================== Bamital & volsnap ======================
(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
C:\Windows\explorer.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\services.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\User32.dll = & gt; Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll = & gt; Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll = & gt; Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys = & gt; Plik podpisany cyfrowo
LastRegBack: 2015-02-06 13:33
==================== Koniec FRST.txt ============================