Sprawdzanie aktywności komputera i keylogger

[Zimny4Ever]

Witam!

Mam problem, osoba z rodziny kontroluje mnie do której godziny siedzę przy kompie, prawdopodobnie kontroluje też co piszę, z kim, na jakie strony wchodzę itd.

Wie ktoś może jak sprawdzić czy jest jakaś aplikacja śledząca na komputerze oraz jak ją usunąć?

Pozdrawiam

[Kasaj]

raczej co to piszesz nie może zobaczyć bo jak ? po za tym szpiegowanie na innych komputerach to chyba wirus nie aplikacja rozumiem kontrola rodzicielska albo coś takiego.Tu jest strona gdzie masz prgoramy/wirusy dzięki nimi można śledzic kogos na kompie co robi itp http://download.komputerswiat.pl/bezpieczenstwo/szpiegowanie 

 

przeskanuj kompa

[Zimny4Ever]

@Kasaj

Jakimś konkretnym antywirusem?

[Zimny4Ever]

Z pliku FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-05-2015 02
Ran by Mati (administrator) on MATI-KOMPUTER on 17-05-2015 22:12:16
Running from C:\Users\Mati\Downloads
Loaded Profiles: Mati (Available profiles: Mati)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/


==================== Processes (Whitelisted) =================


(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)


(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Valve Corporation) D:\Steam\Steam.exe
(GG Network S.A.) C:\Users\Mati\AppData\Local\GG\Application\gghub.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\Ignatu Software\SmartPower\SmartPower.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\Ignatu Software\SmartPower\SmartPower Idle Monitor.exe
(GG Network S.A.) C:\Users\Mati\AppData\Local\GG\Application\ggapp.exe
() C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe
(Razer, Inc.) C:\Users\Mati\AppData\Local\Razer\InGameEngine\cache\RzStats.Manager\RzCefRenderProcess.exe
(Valve Corporation) D:\Steam\bin\steamwebhelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(GG Network S.A.) C:\Users\Mati\AppData\Local\GG\Application\ggdrive\ggdrive.exe
(GG Network S.A.) C:\Users\Mati\AppData\Local\GG\Application\xulrunner\gghub.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\Mati\Desktop\sfbor\sfBot.exe
(Adobe Systems Incorporated ) C:\Program Files (x86)\Adobe\Adobe Audition CS6\dynamiclinkmanager.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Audition CS6\Adobe Audition CS6.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) D:\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe




==================== Registry (Whitelisted) ==================


(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)


HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1931024 2010-07-19] (Intel(R) Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2015-02-03] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-07] (Apple Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [590144 2015-03-12] (Razer Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-03-07] (Oracle Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SmartPower Idle Monitor] => C:\Program Files (x86)\Ignatu Software\SmartPower\SmartPower Idle Monitor.exe [45056 2014-12-29] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3953536465-74852115-2363369328-1000\...\Run: [jafdeqiphm] => wscript.exe //B "C:\Users\Mati\AppData\Local\Temp\jafdeqiphm..vbs" <===== ATTENTION
HKU\S-1-5-21-3953536465-74852115-2363369328-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-3953536465-74852115-2363369328-1000\...\Run: [Steam] => D:\Steam\steam.exe [2888384 2015-05-15] (Valve Corporation)
HKU\S-1-5-21-3953536465-74852115-2363369328-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3953536465-74852115-2363369328-1000\...\Run: [GG] => C:\Users\Mati\AppData\Local\GG\Application\gghub.exe [4078144 2015-04-21] (GG Network S.A.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2015-04-08] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [178512 2015-03-13] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [164568 2015-03-13] (NVIDIA Corporation)
Startup: C:\Users\Mati\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\jafdeqiphm..vbs [2015-04-05] ()


==================== Internet (Whitelisted) ====================


(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)


HKU\S-1-5-21-3953536465-74852115-2363369328-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-04-07] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-07] (Oracle Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1


FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-07] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\3.0.40818.0\npctrl.dll [2009-08-17] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)


Chrome: 
=======
CHR Profile: C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-05]
CHR Extension: (Google Docs) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-05]
CHR Extension: (Google Drive) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-05]
CHR Extension: (YouTube) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-05]
CHR Extension: (Google Search) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-05]
CHR Extension: (Tampermonkey) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2015-05-02]
CHR Extension: (Lounge Assistant) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\enjonnlehciedbcidabdglnnihcncbml [2015-05-02]
CHR Extension: (Google Sheets) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-05]
CHR Extension: (AdBlock) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-17]
CHR Extension: (Bookmark Manager) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-17]
CHR Extension: (Google Wallet) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-05]
CHR Extension: (Gmail) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-05]
CHR Extension: (Lounge Companion (Dota 2 & CS:GO)) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\pokidbfaabncipciiigfhncfmgmdjdaj [2015-04-26]


==================== Services (Whitelisted) =================


(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)


R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [429784 2015-03-10] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2015-03-10] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [794328 2015-03-10] (BlueStack Systems, Inc.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-07-19] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] ()
R2 SmartPower; C:\Program Files (x86)\Ignatu Software\SmartPower\SmartPower.exe [34304 2014-12-29] () [File not signed]
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)


==================== Drivers (Whitelisted) ====================


(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)


R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [145624 2015-03-10] (BlueStack Systems)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-03-13] (NVIDIA Corporation)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39592 2014-12-30] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129600 2015-03-03] (Razer, Inc.)
R3 rzvkeyboard; C:\Windows\System32\DRIVERS\rzvkeyboard.sys [31912 2014-12-30] (Razer Inc)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]


==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)




==================== One Month Created Files and Folders ========


(If an entry is included in the fixlist, the file\folder will be moved.)


2015-05-17 22:12 - 2015-05-17 22:12 - 00015751 _____ () C:\Users\Mati\Downloads\FRST.txt
2015-05-17 22:12 - 2015-05-17 22:12 - 00000000 ____D () C:\FRST
2015-05-17 22:11 - 2015-05-17 22:11 - 02107392 _____ (Farbar) C:\Users\Mati\Downloads\FRST64.exe
2015-05-17 21:19 - 2015-05-17 21:19 - 04648336 _____ (AVG Technologies) C:\Users\Mati\Downloads\avg_isct_stb_all_2015_5645_WAO_1.exe
2015-05-17 00:52 - 2015-05-17 00:52 - 00001573 _____ () C:\Users\Mati\Desktop\GG dysk.lnk
2015-05-17 00:52 - 2015-05-17 00:52 - 00000000 ___SD () C:\Users\Mati\GG dysk
2015-05-17 00:52 - 2015-05-17 00:52 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\Mozilla
2015-05-17 00:51 - 2015-05-17 19:02 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\GG
2015-05-17 00:51 - 2015-05-17 00:52 - 00000000 ____D () C:\Users\Mati\AppData\Local\GG
2015-05-17 00:51 - 2015-05-17 00:51 - 00001143 _____ () C:\Users\Mati\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenFM.lnk
2015-05-17 00:51 - 2015-05-17 00:51 - 00001135 _____ () C:\Users\Mati\Desktop\OpenFM.lnk
2015-05-17 00:51 - 2015-05-17 00:51 - 00001104 _____ () C:\Users\Mati\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
2015-05-17 00:51 - 2015-05-17 00:51 - 00001096 _____ () C:\Users\Mati\Desktop\GG.lnk
2015-05-17 00:51 - 2015-05-17 00:51 - 00000000 ____D () C:\Users\Mati\AppData\Local\OpenFM
2015-05-17 00:49 - 2015-05-17 00:49 - 00395056 _____ () C:\Users\Mati\Downloads\gg-install.exe
2015-05-16 01:04 - 2015-05-16 01:04 - 00000000 ____D () C:\ProgramData\SmartPower
2015-05-16 01:03 - 2015-05-16 01:03 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartPower
2015-05-16 01:03 - 2015-05-16 01:03 - 00000000 ____D () C:\Program Files (x86)\Ignatu Software
2015-05-16 01:02 - 2015-05-16 01:02 - 00322892 _____ () C:\Users\Mati\Downloads\SmartPower_1_6_0.zip
2015-05-15 16:05 - 2015-05-15 16:05 - 05111695 _____ () C:\Users\Mati\Downloads\jendrjizwrotkadomixu (1).rar
2015-05-15 16:02 - 2015-05-15 16:03 - 05111695 _____ () C:\Users\Mati\Downloads\jendrjizwrotkadomixu.rar
2015-05-14 21:40 - 2015-05-14 21:43 - 00283264 _____ () C:\Users\Mati\Downloads\Gang Albanii - Marihuana.mp4.sfk
2015-05-14 21:40 - 2015-05-14 21:40 - 11991438 _____ () C:\Users\Mati\Downloads\Gang Albanii - Marihuana.mp4
2015-05-14 21:37 - 2015-05-14 21:38 - 00184720 _____ () C:\Users\Mati\Downloads\MIX (1).mp3.sfk
2015-05-14 20:39 - 2015-05-14 20:39 - 00040775 _____ () C:\Users\Mati\AppData\Local\recently-used.xbel
2015-05-14 20:03 - 2015-05-14 20:03 - 00356358 _____ () C:\Users\Mati\Downloads\pobrane.htm
2015-05-14 19:34 - 2015-05-14 19:34 - 00000061 _____ () C:\Users\Mati\Downloads\wmp_18194.m3u
2015-05-14 19:04 - 2015-05-14 19:04 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\SFBot
2015-05-14 17:06 - 2015-05-14 19:04 - 00000000 ____D () C:\Users\Mati\Desktop\sfbor
2015-05-14 17:05 - 2015-05-14 17:05 - 08393419 _____ () C:\Users\Mati\Downloads\SFBot_v2.1.0.zip
2015-05-14 16:47 - 2015-05-14 16:47 - 06274177 _____ () C:\Users\Mati\Downloads\sfbot.rar
2015-05-14 16:38 - 2015-05-14 16:38 - 08291518 _____ () C:\Users\Mati\Downloads\SFBot_v2.0.1_win.zip
2015-05-14 14:28 - 2015-05-15 14:01 - 00236901 _____ () C:\Users\Mati\Desktop\wiesz kto.sesx
2015-05-14 13:41 - 2015-05-17 20:10 - 00000602 _____ () C:\Users\Mati\Desktop\wiesz kto.txt
2015-05-14 12:35 - 2015-05-14 14:28 - 00000000 ____D () C:\Users\Mati\Desktop\wiesz kto
2015-05-14 12:33 - 2015-05-14 12:33 - 15210993 _____ () C:\Users\Mati\Downloads\orca_share_media1431551981627.rar
2015-05-14 11:57 - 2015-05-01 15:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-14 11:57 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 21:27 - 2015-05-13 21:27 - 00125575 _____ () C:\Users\Mati\Desktop\logo.xcf
2015-05-13 20:48 - 2015-05-15 13:08 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\TS3Client
2015-05-13 20:48 - 2015-05-13 20:48 - 00000967 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2015-05-13 20:48 - 2015-05-13 20:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-05-13 20:48 - 2015-05-13 20:48 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2015-05-13 20:46 - 2015-05-13 20:47 - 30014480 _____ (TeamSpeak Systems GmbH) C:\Users\Mati\Downloads\TeamSpeak3-Client-win64-3.0.16.exe
2015-05-13 18:33 - 2015-05-13 18:33 - 00000000 ____D () C:\ProgramData\WEBZEN
2015-05-13 18:32 - 2015-05-13 18:32 - 05760976 _____ () C:\Users\Mati\Downloads\Rappelz_pl_Downloader.exe
2015-05-13 13:02 - 2015-05-05 03:29 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-13 13:02 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-05-13 13:02 - 2015-04-22 04:28 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-13 13:02 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-05-13 13:02 - 2015-04-21 19:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-13 13:02 - 2015-04-21 19:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-13 13:02 - 2015-04-21 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-13 13:02 - 2015-04-21 18:51 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-13 13:02 - 2015-04-21 18:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-13 13:02 - 2015-04-21 18:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-13 13:02 - 2015-04-21 18:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-13 13:02 - 2015-04-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-13 13:02 - 2015-04-21 18:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-13 13:02 - 2015-04-21 18:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-13 13:02 - 2015-04-21 18:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-13 13:02 - 2015-04-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-13 13:02 - 2015-04-21 18:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-13 13:02 - 2015-04-21 18:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-13 13:02 - 2015-04-21 18:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-13 13:02 - 2015-04-21 18:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-13 13:02 - 2015-04-21 18:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-13 13:02 - 2015-04-21 18:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-13 13:02 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-05-13 13:02 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-05-13 13:02 - 2015-04-21 18:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-13 13:02 - 2015-04-21 18:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 13:02 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-05-13 13:02 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-05-13 13:02 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-05-13 13:02 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-05-13 13:02 - 2015-04-21 18:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-13 13:02 - 2015-04-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-13 13:02 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-05-13 13:02 - 2015-04-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-13 13:02 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-05-13 13:02 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-05-13 13:02 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-05-13 13:02 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-05-13 13:02 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-05-13 13:02 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-05-13 13:02 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-05-13 13:02 - 2015-04-21 17:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-13 13:02 - 2015-04-21 17:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-13 13:02 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-05-13 13:02 - 2015-04-21 17:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-13 13:02 - 2015-04-21 17:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-13 13:02 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-05-13 13:02 - 2015-04-21 17:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-13 13:02 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-05-13 13:02 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-05-13 13:02 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-05-13 13:02 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-05-13 13:02 - 2015-04-21 17:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-13 13:02 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-05-13 13:02 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-05-13 13:02 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-05-13 13:02 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-05-13 13:02 - 2015-04-21 17:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-13 13:02 - 2015-04-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-13 13:02 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-05-13 13:02 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-05-13 13:02 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-05-13 13:02 - 2015-04-18 05:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-13 13:02 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-05-13 13:02 - 2015-04-04 05:29 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-13 13:02 - 2015-04-04 05:29 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-13 13:02 - 2015-04-04 05:22 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-13 13:02 - 2015-04-04 05:22 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-13 13:02 - 2015-04-04 05:22 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-13 13:02 - 2015-04-04 05:22 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-13 13:02 - 2015-04-04 05:22 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-13 13:02 - 2015-04-04 05:22 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-13 13:02 - 2015-04-04 05:22 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-13 13:02 - 2015-04-04 05:22 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-13 13:02 - 2015-04-04 05:22 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-13 13:02 - 2015-04-04 05:22 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-13 13:02 - 2015-04-04 05:20 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-13 13:02 - 2015-04-04 05:20 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-13 13:02 - 2015-04-04 05:17 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-13 13:02 - 2015-04-04 05:17 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-13 13:02 - 2015-04-04 05:15 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-13 13:02 - 2015-04-04 05:05 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-05-13 13:02 - 2015-04-04 05:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-05-13 13:02 - 2015-04-04 05:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-05-13 13:02 - 2015-04-04 05:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-05-13 13:02 - 2015-04-04 05:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-05-13 13:02 - 2015-04-04 05:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-05-13 13:02 - 2015-04-04 05:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-05-13 13:02 - 2015-04-04 05:04 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-05-13 13:02 - 2015-04-04 05:04 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-05-13 13:02 - 2015-04-04 05:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-05-13 13:02 - 2015-04-04 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-05-13 13:02 - 2015-04-04 04:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-05-13 12:59 - 2015-04-20 05:17 - 01647104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-13 12:59 - 2015-04-20 05:17 - 01179136 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-13 12:59 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-05-13 12:59 - 2015-04-20 04:11 - 03204608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-13 12:59 - 2015-04-13 05:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-13 12:59 - 2015-04-08 05:29 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-13 12:59 - 2015-04-08 05:29 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-13 12:59 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-05-13 12:59 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-05-13 12:59 - 2015-02-18 09:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-12 14:35 - 2015-05-12 14:44 - 00300416 _____ () C:\Users\Mati\Downloads\Tyga - Hookah ft Young Thug.mp4.sfk
2015-05-12 14:34 - 2015-05-12 14:35 - 19530722 _____ () C:\Users\Mati\Downloads\Tyga - Hookah ft Young Thug.mp4
2015-05-12 14:29 - 2015-05-12 14:34 - 00262240 _____ () C:\Users\Mati\Downloads\Tyga - Make It Work.mp4.sfk
2015-05-12 14:29 - 2015-05-12 14:29 - 16855577 _____ () C:\Users\Mati\Downloads\Tyga - Make It Work.mp4
2015-05-12 14:21 - 2015-05-12 14:25 - 00450704 _____ () C:\Users\Mati\Downloads\OT Genasis - CoCo Live at Webster Hall with Wiz Khalifa.mp4-0-3269933333-1.sfk
2015-05-12 14:21 - 2015-05-12 14:25 - 00301608 _____ () C:\Users\Mati\Downloads\Chief Keef - Love Sosa  Shot by DGainzBeats.mp4-0-2188019166-1.sfk
2015-05-12 13:57 - 2015-05-12 14:07 - 00000205 _____ () C:\Users\Mati\Desktop\sd.txt
2015-05-12 11:04 - 2015-05-12 11:05 - 00450784 _____ () C:\Users\Mati\Downloads\OT Genasis - CoCo Live at Webster Hall with Wiz Khalifa.mp4.sfk
2015-05-12 11:03 - 2015-05-12 11:03 - 28663593 _____ () C:\Users\Mati\Downloads\OT Genasis - CoCo Live at Webster Hall with Wiz Khalifa.mp4
2015-05-12 10:58 - 2015-05-12 10:59 - 23269002 _____ () C:\Users\Mati\Downloads\Brewski - Chauffeur Official Video Shot By AZaeProduction.mp4
2015-05-12 10:58 - 2015-05-12 10:59 - 00272000 _____ () C:\Users\Mati\Downloads\Rae Sremmurd - No Type.mp4.sfk
2015-05-12 10:58 - 2015-05-12 10:58 - 14141363 _____ () C:\Users\Mati\Downloads\Rae Sremmurd - No Type.mp4
2015-05-12 10:53 - 2015-05-12 10:54 - 00301664 _____ () C:\Users\Mati\Downloads\Chief Keef - Love Sosa  Shot by DGainzBeats.mp4.sfk
2015-05-12 10:53 - 2015-05-12 10:53 - 13130424 _____ () C:\Users\Mati\Downloads\Chief Keef - Love Sosa  Shot by DGainzBeats.mp4
2015-05-12 10:48 - 2015-05-12 10:48 - 00345984 _____ () C:\Users\Mati\Downloads\DJane HouseKat feat Rameez - Girls in Luv Official Video.mp4.sfk
2015-05-12 10:47 - 2015-05-12 10:47 - 18695067 _____ () C:\Users\Mati\Downloads\DJane HouseKat feat Rameez - Girls in Luv Official Video.mp4
2015-05-12 10:26 - 2015-05-12 10:46 - 00399208 _____ () C:\Users\Mati\Downloads\Chief Keef Sosa Chamberlain WSHH Exclusive - Official Music Video.mp4-0-2896226666-1.sfk
2015-05-12 10:26 - 2015-05-12 10:46 - 00354600 _____ () C:\Users\Mati\Downloads\Sierra Leone Watching Feat Sy Ari Da Kid Prod by TM88 WSHH Exclusive - Official Music Video.mp4-0-2572570000-1.sfk
2015-05-12 10:26 - 2015-05-12 10:46 - 00203256 _____ () C:\Users\Mati\Downloads\ASAP Rocky Purple Swag.mp4-0-1474389583-1.sfk
2015-05-12 00:24 - 2015-05-14 22:48 - 00090960 _____ () C:\Users\Mati\Desktop\Untitled.veg
2015-05-12 00:24 - 2015-05-12 11:21 - 00076224 _____ () C:\Users\Mati\Desktop\Untitled.veg.bak
2015-05-12 00:22 - 2015-05-12 00:24 - 00203328 _____ () C:\Users\Mati\Downloads\ASAP Rocky Purple Swag.mp4.sfk
2015-05-12 00:21 - 2015-05-12 00:22 - 12275950 _____ () C:\Users\Mati\Downloads\ASAP Rocky Purple Swag.mp4
2015-05-12 00:11 - 2015-05-12 00:14 - 00354656 _____ () C:\Users\Mati\Downloads\Sierra Leone Watching Feat Sy Ari Da Kid Prod by TM88 WSHH Exclusive - Official Music Video.mp4.sfk
2015-05-12 00:10 - 2015-05-12 00:10 - 19567460 _____ () C:\Users\Mati\Downloads\Sierra Leone Watching Feat Sy Ari Da Kid Prod by TM88 WSHH Exclusive - Official Music Video.mp4
2015-05-12 00:01 - 2015-05-12 00:02 - 00399264 _____ () C:\Users\Mati\Downloads\Chief Keef Sosa Chamberlain WSHH Exclusive - Official Music Video.mp4.sfk
2015-05-12 00:01 - 2015-05-12 00:01 - 21903407 _____ () C:\Users\Mati\Downloads\Chief Keef Sosa Chamberlain WSHH Exclusive - Official Music Video.mp4
2015-05-11 23:55 - 2015-05-11 23:55 - 00301312 _____ () C:\Users\Mati\Desktop\amnesiaa_mixdown.mp3.sfk
2015-05-11 19:14 - 2015-05-11 19:14 - 163173383 _____ () C:\Users\Mati\Desktop\amnesia.rar
2015-05-11 14:48 - 2015-05-11 22:09 - 00000598 _____ () C:\Users\Mati\Desktop\Nowy dokument tekstowy.txt
2015-05-11 11:54 - 2015-05-17 19:50 - 00000000 ____D () C:\Users\Mati\Desktop\Bounced Files
2015-05-11 11:50 - 2015-05-11 11:50 - 01438584 _____ () C:\Users\Mati\Desktop\proba.wav
2015-05-11 11:50 - 2015-05-11 11:50 - 00059704 _____ () C:\Users\Mati\Desktop\proba.pkf
2015-05-11 11:44 - 2015-05-11 12:40 - 00000000 ____D () C:\Users\Mati\Desktop\amnesia
2015-05-11 10:41 - 2015-05-11 15:04 - 00284385 _____ () C:\Users\Mati\Desktop\amnesia.sesx
2015-05-10 23:45 - 2015-05-10 23:45 - 01880102 _____ () C:\Users\Mati\Desktop\Bez nazwy-4.psd
2015-05-10 23:45 - 2015-05-10 23:45 - 00186750 _____ () C:\Users\Mati\Desktop\Bez nazwy-3.psd
2015-05-10 23:01 - 2015-05-10 23:01 - 01009050 _____ () C:\Users\Mati\Downloads\video-1431174267.mp4.mp4
2015-05-10 23:01 - 2015-05-10 23:01 - 01009050 _____ () C:\Users\Mati\Downloads\video-1431174267.mp4 (1).mp4
2015-05-10 22:32 - 2015-05-10 22:32 - 00000132 _____ () C:\Users\Mati\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
2015-05-10 20:28 - 2015-05-10 20:28 - 00001075 _____ () C:\Users\Mati\Desktop\Adobe Photoshop CS6 (64 Bit).lnk
2015-05-10 20:26 - 2015-05-10 20:26 - 00001037 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2015-05-10 20:22 - 2015-05-10 20:22 - 00001519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2015-05-10 20:22 - 2015-05-10 20:22 - 00001353 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2015-05-10 20:20 - 2015-05-10 20:28 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2015-05-10 20:19 - 2015-05-10 20:19 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2015-05-10 20:06 - 2015-05-10 20:10 - 00000000 ____D () C:\Adobe Photoshop CS6 v13.0 Extended Final x86 x64 [PL] [Crack] torrenty.org
2015-05-10 19:48 - 2015-05-10 19:48 - 00014730 _____ () C:\Users\Mati\Downloads\[www.tnt24.info] Adobe Photoshop CS6 v13.0 Extended Final x86 x64 [PL] [Crack][Armaros].torrent
2015-05-10 14:14 - 2015-05-17 20:23 - 00000000 ____D () C:\Users\Mati\Desktop\Desktop_Recorded
2015-05-10 14:05 - 2015-05-10 20:39 - 00323024 _____ () C:\Users\Mati\Desktop\AMNESIA REMIX.sesx
2015-05-10 00:10 - 2015-05-10 20:39 - 00864149 _____ () C:\Users\Mati\Desktop\lol.xcf
2015-05-10 00:09 - 2015-05-10 00:09 - 00010869 _____ () C:\Users\Mati\Downloads\freshman.zip
2015-05-04 20:10 - 2015-05-04 20:12 - 85691463 _____ () C:\Users\Mati\Downloads\plejlista kościelisko.zip
2015-05-04 20:09 - 2015-05-12 14:07 - 00000000 ____D () C:\Users\Mati\Desktop\lol
2015-05-02 03:49 - 2015-05-02 03:50 - 66519004 _____ () C:\Users\Mati\Downloads\koldi_alcomind_-_koldiusz_cezar.zip
2015-05-02 03:33 - 2015-05-02 03:34 - 69557257 _____ () C:\Users\Mati\Downloads\wac_toja_-_middle_finger.zip
2015-05-02 03:32 - 2015-05-02 03:33 - 98845409 _____ () C:\Users\Mati\Downloads\eklektyka.zip
2015-05-02 03:32 - 2015-05-02 03:33 - 49824278 _____ () C:\Users\Mati\Downloads\dla_moich_mord.zip
2015-05-02 03:31 - 2015-05-02 03:32 - 110233375 _____ () C:\Users\Mati\Downloads\zegarmistrz_wiata.zip
2015-05-02 02:57 - 2015-05-02 03:01 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\Apple Computer
2015-05-02 02:57 - 2015-05-02 02:57 - 00000000 ____D () C:\Users\Mati\AppData\Local\Apple Computer
2015-05-02 02:57 - 2015-05-02 02:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-05-02 02:57 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2015-05-02 02:56 - 2015-05-02 02:56 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-05-02 02:56 - 2015-05-02 02:56 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-05-02 02:56 - 2015-05-02 02:56 - 00000000 ____D () C:\Program Files\iTunes
2015-05-02 02:56 - 2015-05-02 02:56 - 00000000 ____D () C:\Program Files\iPod
2015-05-02 02:56 - 2015-05-02 02:56 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-05-02 02:54 - 2015-05-02 02:54 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-05-02 02:54 - 2015-05-02 02:54 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2015-05-02 02:54 - 2015-05-02 02:54 - 00000000 ____D () C:\Users\Mati\AppData\Local\Apple
2015-05-02 02:54 - 2015-05-02 02:54 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2015-05-02 02:52 - 2015-05-02 02:56 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-05-02 02:52 - 2015-05-02 02:54 - 00000000 ____D () C:\ProgramData\Apple
2015-05-02 02:52 - 2015-05-02 02:53 - 00000000 ____D () C:\Program Files\Bonjour
2015-05-02 02:52 - 2015-05-02 02:53 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2015-05-02 02:49 - 2015-05-02 02:50 - 152362800 _____ (Apple Inc.) C:\Users\Mati\Downloads\iTunes6464Setup.exe
2015-05-02 02:42 - 2015-05-02 02:43 - 112218391 _____ () C:\Users\Mati\Downloads\BEDOES - TBK MIXTAPE 2014 HOSTED BY SWAGSHOP.PL.rar
2015-05-01 22:14 - 2015-05-01 22:14 - 01322875 _____ () C:\Users\Mati\Downloads\moon_flower.zip
2015-05-01 22:09 - 2015-05-01 22:09 - 00219980 _____ () C:\Users\Mati\Downloads\traphouse.zip
2015-05-01 18:07 - 2015-05-01 18:07 - 00298216 _____ () C:\Users\Mati\Downloads\Rzabka • Ratatatata x prod. by @TSKSOMD x OFFICIAL VIDEO.mp3.sfk
2015-05-01 17:53 - 2015-05-01 17:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pivot Stickfigure Animator
2015-05-01 17:53 - 2015-05-01 17:53 - 00000000 ____D () C:\Program Files (x86)\Pivot Stickfigure Animator
2015-05-01 17:52 - 2015-05-01 17:52 - 00495261 _____ () C:\Users\Mati\Downloads\Pivot225.zip
2015-05-01 16:05 - 2015-05-01 16:15 - 00096584 _____ () C:\Users\Mati\Downloads\Trap Music Mix 2015 Best of Trap music - Trap Remix 2015 - TRAP MIX (Mix by DYJ).mp3.sfk
2015-05-01 15:44 - 2015-05-01 15:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2015-05-01 15:43 - 2015-05-01 15:43 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\Publish Providers
2015-05-01 15:43 - 2015-05-01 15:43 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\NVIDIA
2015-05-01 14:30 - 2015-05-01 14:30 - 00001062 _____ () C:\Users\Mati\Desktop\Vegas Pro 13.0 (64-bit).lnk
2015-05-01 14:30 - 2015-05-01 14:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-05-01 14:29 - 2015-05-01 15:43 - 00000000 ____D () C:\Users\Mati\AppData\Local\Sony
2015-05-01 14:29 - 2015-05-01 14:29 - 00000000 ____D () C:\ProgramData\Sony
2015-05-01 14:29 - 2015-05-01 14:29 - 00000000 ____D () C:\Program Files\Sony
2015-05-01 14:29 - 2015-05-01 14:29 - 00000000 ____D () C:\Program Files (x86)\Sony
2015-05-01 14:27 - 2015-05-01 16:21 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\Sony
2015-05-01 14:18 - 2015-05-01 15:47 - 00000020 _____ () C:\Windows\capsys184523.log
2015-05-01 14:18 - 2015-05-01 14:18 - 00000000 ____D () C:\Users\Mati\Documents\Action!
2015-05-01 14:18 - 2015-05-01 14:18 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\Mirillis
2015-05-01 14:18 - 2015-05-01 14:18 - 00000000 ____D () C:\Users\Mati\AppData\Local\Mirillis
2015-05-01 14:18 - 2015-05-01 14:18 - 00000000 ____D () C:\ProgramData\Mirillis
2015-05-01 14:16 - 2015-05-01 14:16 - 00016340 _____ () C:\Users\Mati\Downloads\[www.tnt24.info] SONY Vegas Pro 13.0 Build 373 - 64bit [PL] [Patch KHG-TEAM].torrent
2015-05-01 14:15 - 2015-05-01 14:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
2015-05-01 14:15 - 2015-05-01 14:15 - 00000000 ____D () C:\Program Files (x86)\Mirillis
2015-05-01 14:14 - 2015-05-01 14:14 - 22726260 _____ () C:\Users\Mati\Downloads\Action + Crack.rar
2015-04-26 23:04 - 2015-04-26 23:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2015-04-26 23:04 - 2015-04-26 23:04 - 00000000 ____D () C:\ProgramData\BlueStacks
2015-04-26 23:04 - 2015-04-26 23:04 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2015-04-26 23:03 - 2015-04-27 14:24 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2015-04-26 23:03 - 2015-04-26 23:03 - 13611736 _____ (BlueStack Systems Inc.) C:\Users\Mati\Downloads\BlueStacks-ThinInstaller.exe
2015-04-26 23:03 - 2015-04-26 23:03 - 00000000 ____D () C:\Users\Mati\AppData\Local\Bluestacks
2015-04-26 19:06 - 2015-04-26 19:06 - 00021160 _____ () C:\Users\Mati\Downloads\[www.tnt24.info] Gang Albanii - Królowie Życia (2015) [mp3@320kbs].torrent
2015-04-26 02:51 - 2015-04-26 02:51 - 00001245 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Audition CS6.lnk
2015-04-26 02:49 - 2015-04-26 02:49 - 00000997 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2015-04-26 02:49 - 2015-04-26 02:49 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2015-04-26 02:49 - 2015-04-26 02:49 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2015-04-26 02:39 - 2015-04-26 02:39 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\Macromedia
2015-04-26 02:38 - 2015-04-26 02:38 - 02420104 _____ (Adobe Systems, Incorporated) C:\Users\Mati\Downloads\amtlib.dll
2015-04-26 02:34 - 2015-04-26 02:37 - 260861279 _____ () C:\Users\Mati\Downloads\Adobe Audition CS6 full +crack{Nbabullyz}.rar
2015-04-26 02:33 - 2015-04-26 02:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PSPaudioware
2015-04-26 02:33 - 2015-04-26 02:33 - 00000000 ____D () C:\Program Files (x86)\VSTPlugins
2015-04-26 02:31 - 2015-04-26 02:31 - 00000000 ____D () C:\vst
2015-04-26 02:30 - 2015-04-26 02:30 - 17210788 _____ () C:\Users\Mati\Downloads\PSPaudioware.PSP.Vintage.Warmer.2.VST.RTAS.v2.5.0.x86.x64.Incl.Keygen-ASSiGN.7z
2015-04-25 02:19 - 2015-05-14 20:37 - 00000000 ____D () C:\Users\Mati\AppData\Local\gtk-2.0
2015-04-25 01:53 - 2015-04-25 01:53 - 00000000 ____D () C:\Users\Mati\.thumbnails
2015-04-25 01:52 - 2015-05-14 21:27 - 00000000 ____D () C:\Users\Mati\.gimp-2.8
2015-04-25 01:52 - 2015-04-25 01:52 - 00000000 ____D () C:\Users\Mati\AppData\Local\gegl-0.2
2015-04-25 01:51 - 2015-04-25 01:51 - 00000894 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2015-04-25 01:50 - 2015-04-25 01:51 - 00000000 ____D () C:\Program Files\GIMP 2
2015-04-25 01:45 - 2015-04-25 01:50 - 91931728 _____ (The GIMP Team ) C:\Users\Mati\Downloads\gimp-2.8.14-setup-1.exe
2015-04-25 00:04 - 2015-04-25 00:04 - 00000000 ____D () C:\ProgramData\Steam
2015-04-25 00:00 - 2015-04-25 00:00 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\Saints Row IV
2015-04-25 00:00 - 2015-04-25 00:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Gamblers
2015-04-24 20:43 - 2015-04-24 20:43 - 00024750 _____ () C:\Users\Mati\Downloads\[www.tnt24.info] Saints Row 4  -2013- [MULTi8-PL] [Steam-Rip] [RG Gamers] [Update 8] [DVD9] [.exe_.bin].torrent
2015-04-23 14:41 - 2015-04-23 14:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune
2015-04-23 14:41 - 2015-04-23 14:41 - 00000000 ____D () C:\Program Files (x86)\HD Tune
2015-04-22 14:01 - 2015-04-22 14:01 - 00262144 _____ () C:\Windows\Minidump\042215-25989-01.dmp
2015-04-19 19:45 - 2015-04-19 19:45 - 00262144 _____ () C:\Windows\Minidump\041915-26910-01.dmp
2015-04-19 19:42 - 2015-04-22 14:01 - 358461730 _____ () C:\Windows\MEMORY.DMP
2015-04-19 19:42 - 2015-04-22 14:01 - 00000000 ____D () C:\Windows\Minidump
2015-04-19 19:42 - 2015-04-19 19:42 - 00268992 _____ () C:\Windows\Minidump\041915-27549-01.dmp


==================== One Month Modified Files and Folders =======


(If an entry is included in the fixlist, the file\folder will be moved.)


2015-05-17 22:04 - 2015-04-06 18:36 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\Skype
2015-05-17 21:34 - 2015-04-05 23:49 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-17 21:34 - 2015-04-05 23:49 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-17 19:53 - 2009-07-14 06:51 - 00038051 _____ () C:\Windows\setupact.log
2015-05-17 19:15 - 2009-07-14 06:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-17 19:15 - 2009-07-14 06:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-17 19:10 - 2015-04-05 22:23 - 01505778 _____ () C:\Windows\WindowsUpdate.log
2015-05-17 19:01 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-17 00:52 - 2015-04-05 22:26 - 00000000 ____D () C:\Users\Mati
2015-05-16 21:29 - 2015-04-05 23:49 - 00004044 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-16 21:29 - 2015-04-05 23:49 - 00003792 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-15 23:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-05-15 23:07 - 2009-07-14 19:55 - 00804364 _____ () C:\Windows\system32\perfh015.dat
2015-05-15 23:07 - 2009-07-14 19:55 - 00180110 _____ () C:\Windows\system32\perfc015.dat
2015-05-15 23:07 - 2009-07-14 07:13 - 01850138 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-15 11:35 - 2009-07-14 06:45 - 04890144 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-14 11:59 - 2009-07-14 20:09 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-10 21:32 - 2015-04-12 19:53 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\uTorrent
2015-05-10 20:53 - 2015-04-12 20:15 - 00000000 ____D () C:\Users\Mati\AppData\Local\Adobe
2015-05-10 20:42 - 2015-04-10 09:44 - 00000000 ____D () C:\Users\Mati\AppData\Roaming\Adobe
2015-05-10 20:41 - 2015-04-05 23:49 - 00058792 _____ () C:\Users\Mati\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-10 20:28 - 2015-04-12 20:59 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2015-05-10 20:27 - 2015-04-12 20:45 - 00000000 ____D () C:\Program Files\Adobe
2015-05-10 20:26 - 2015-04-12 20:18 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-05-10 20:22 - 2015-04-12 20:29 - 00000000 ____D () C:\ProgramData\Adobe
2015-05-05 15:27 - 2009-07-14 20:09 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-05-03 15:28 - 2015-04-06 18:35 - 00000000 ____D () C:\ProgramData\Skype
2015-04-26 23:04 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2015-04-25 00:02 - 2015-04-06 20:54 - 00079871 _____ () C:\Windows\DirectX.log


==================== Files in the root of some directories =======


2015-05-10 22:32 - 2015-05-10 22:32 - 0000132 _____ () C:\Users\Mati\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
2015-05-14 20:39 - 2015-05-14 20:39 - 0040775 _____ () C:\Users\Mati\AppData\Local\recently-used.xbel


==================== Bamital & volsnap Check =================


(There is no automatic fix for files that do not pass verification.)


C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed




LastRegBack: 2015-05-15 01:17


==================== End Of Log ============================

Z pliku addition

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-05-2015 02
Ran by Mati at 2015-05-17 22:13:30
Running from C:\Users\Mati\Downloads
Boot Mode: Normal
==========================================================




==================== Accounts: =============================


Administrator (S-1-5-21-3953536465-74852115-2363369328-500 - Administrator - Disabled)
Gość (S-1-5-21-3953536465-74852115-2363369328-501 - Limited - Disabled)
Mati (S-1-5-21-3953536465-74852115-2363369328-1000 - Administrator - Enabled) => C:\Users\Mati


==================== Security Center ========================


(If an entry is included in the fixlist, it will be removed.)


AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}


==================== Installed Programs ======================


(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)


µTorrent (HKU\S-1-5-21-3953536465-74852115-2363369328-1000\...\uTorrent) (Version: 3.4.3.39944 - BitTorrent Inc.)
Action! (HKLM-x32\...\Mirillis Action!) (Version: 1.16.0 - Mirillis)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Audition CS6 (HKLM-x32\...\{30FD541D-3C9D-41C4-B240-A994EE4E0231}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Aktualizacje NVIDIA 2.4.1.21 (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.17.9138 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{4FCF716C-CEB4-499D-AFB8-A5375105EC2A}) (Version: 0.9.17.9138 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
GG (HKU\S-1-5-21-3953536465-74852115-2363369328-1000\...\GG) (Version: 12 - GG Network S.A.)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.152 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version:  - EFD Software)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2405 - Intel Corporation)
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40818.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{C688457E-03FD-4941-923B-A27F4D42A7DD}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Native Client (HKLM\...\{BBDE8A3D-64A2-43A6-95F3-C27B87DF7AC1}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{4E968D9C-21A7-4915-B698-F7AEB913541D}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 Setup Support Files  (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{2A2F3AE8-246A-4252-BB26-1BEB45627074}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{0826F9E4-787E-481D-83E0-BC6A57B056D5}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - ENU (HKLM-x32\...\Microsoft Visual Basic 2010 Express - ENU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.30319 - Microsoft Corporation)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Oprogramowanie systemu PhysX 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.88 - NVIDIA Corporation)
Obsługa programów Apple (32-bitowa) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Obsługa programów Apple (64-bitowa) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
OpenFM (HKU\S-1-5-21-3953536465-74852115-2363369328-1000\...\OpenFM) (Version: 2 - GG Network S.A.)
Oprogramowanie Intel(R) PROSet/Wireless WiFi (HKLM\...\{4327107B-E95E-415C-9194-458FCED6BF12}) (Version: 13.03.0000 - Intel Corporation)
Pakiet sterowników systemu Windows - Intel (NETwLv64) net  (06/15/2010 13.2.0.137) (HKLM\...\5B5B6662D4C1F520435B0055F256F8087E03FB4D) (Version: 06/15/2010 13.2.0.137 - Intel)
Pakiet sterowników systemu Windows - Intel (NETwNs64) net  (07/14/2010 13.3.0.24) (HKLM\...\A9484A70350AF25B96D72992CB318FBFF1541A87) (Version: 07/14/2010 13.3.0.24 - Intel)
Panel sterowania NVIDIA 347.88 (Version: 347.88 - NVIDIA Corporation) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
Pivot Stickfigure Animator (HKLM-x32\...\{BEAD39CD-901D-4267-8B8B-EAA83CB4B70D}) (Version: 2.2.5 - Peter Bone)
Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile PLK Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended PLK Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
PSP VintageWarmer2 2.5.0 64bit (HKLM-x32\...\PSP VintageWarmer2 2.5.0 64bit) (Version: 2.5.0 64bit - PSPaudioware.com)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.19.24735 - Razer Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.41.216.2011 - Realtek)
Saints Row IV (HKLM-x32\...\Saints Row IV_R.G. Gamblers_is1) (Version:  - R.G. Gamblers, Panky)
Service Pack 1 for SQL Server 2008 (KB968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Skype™ 7.4 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.)
SmartPower (HKLM-x32\...\{B4B15A80-CF29-464E-BC94-7C068E84B595}) (Version: 1.6.0 - James Chiffey (Ignatu Software))
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Vegas Pro 13.0 (64-bit) (HKLM\...\{3814DB30-091D-11E4-BDE0-F04DA23A5C58}) (Version: 13.0.373 - Sony)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{112C23F2-C036-4D40-BED4-0CB47BF5555C}) (Version: 4.0.8080.0 - Microsoft Corporation)
WinRAR 5.21 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)


==================== Custom CLSID (selected items): ==========================


(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


CustomCLSID: HKU\S-1-5-21-3953536465-74852115-2363369328-1000_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 -> C:\Users\Mati\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll (GG Network S.A.)


==================== Restore Points  =========================


05-05-2015 15:25:52 Windows Update
08-05-2015 22:35:34 Windows Update
14-05-2015 11:56:02 Windows Update
15-05-2015 03:00:12 Windows Update
16-05-2015 01:03:11 Installed SmartPower


==================== Hosts content: ==========================


(If needed Hosts: directive could be included in the fixlist to reset Hosts.)


2009-07-14 04:34 - 2015-04-26 02:38 - 00001028 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1                   activate.adobe.com
127.0.0.1                   practivate.adobe.com
127.0.0.1                   lmlicenses.wip4.adobe.com
127.0.0.1                   lm.licenses.adobe.com




==================== Scheduled Tasks (Whitelisted) =============


(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)


Task: {34163785-F206-4904-9F16-A74B6425A273} - System32\Tasks\{5A81C550-723B-4904-B1AB-A764808402BC} => pcalua.exe -a "C:\Users\Mati\Downloads\Adobe_Audition_2.0_Tryout\Audition 2.0 Setup.exe" -d C:\Users\Mati\Downloads\Adobe_Audition_2.0_Tryout
Task: {472C944B-D3CB-4FE1-8509-A6038919D572} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {E47DB456-041A-449F-9C76-F65006E1BDDA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-05] (Google Inc.)
Task: {FB5D9252-DFE3-4E61-AD91-1FF227EBFFE8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-05] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe


==================== Loaded Modules (Whitelisted) ==============


2015-04-07 17:08 - 2015-03-13 21:41 - 00011920 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2015-04-07 17:09 - 2015-03-13 18:16 - 00118472 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-02-05 01:24 - 2015-02-05 01:25 - 00187072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2011-05-24 08:16 - 2011-05-24 08:16 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2010-07-19 16:48 - 2010-07-19 16:48 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2014-12-29 16:04 - 2014-12-29 16:04 - 00034304 _____ () C:\Program Files (x86)\Ignatu Software\SmartPower\SmartPower.exe
2010-07-19 16:48 - 2010-07-19 16:48 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2014-12-29 16:04 - 2014-12-29 16:04 - 00045056 _____ () C:\Program Files (x86)\Ignatu Software\SmartPower\SmartPower Idle Monitor.exe
2015-03-14 07:49 - 2015-03-14 07:49 - 00291840 _____ () C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
2015-05-14 19:03 - 2011-07-21 12:44 - 20237824 _____ () C:\Users\Mati\Desktop\sfbor\sfBot.exe
2015-04-07 17:13 - 2015-03-28 05:45 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-04-05 23:01 - 2015-03-13 21:41 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2015-04-07 00:35 - 2015-04-16 19:40 - 00776192 _____ () D:\Steam\SDL2.dll
2015-04-07 00:35 - 2015-04-23 04:16 - 04962816 _____ () D:\Steam\v8.dll
2015-04-07 00:35 - 2015-04-23 04:16 - 01556992 _____ () D:\Steam\icui18n.dll
2015-04-07 00:35 - 2015-04-23 04:16 - 01187840 _____ () D:\Steam\icuuc.dll
2015-04-07 00:35 - 2015-05-15 03:58 - 02396352 _____ () D:\Steam\video.dll
2015-04-07 00:35 - 2014-12-01 23:31 - 02396672 _____ () D:\Steam\libavcodec-56.dll
2015-04-07 00:35 - 2014-12-01 23:31 - 00442880 _____ () D:\Steam\libavutil-54.dll
2015-04-07 00:35 - 2014-12-01 23:31 - 00479744 _____ () D:\Steam\libavformat-56.dll
2015-04-07 00:35 - 2014-12-01 23:31 - 00332800 _____ () D:\Steam\libavresample-2.dll
2015-04-07 00:35 - 2014-12-01 23:31 - 00485888 _____ () D:\Steam\libswscale-3.dll
2015-04-07 00:35 - 2015-05-15 03:57 - 00703168 _____ () D:\Steam\bin\chromehtml.DLL
2015-02-05 11:20 - 2015-02-05 11:20 - 00137728 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2015-04-21 16:17 - 2015-04-21 16:17 - 03715648 _____ () C:\Users\Mati\AppData\Local\GG\Application\xulrunner\mozjs.dll
2015-04-06 20:57 - 2014-11-26 03:12 - 40622592 _____ () C:\Users\Mati\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libcef.dll
2015-04-06 20:57 - 2014-11-26 03:12 - 00911360 _____ () C:\Users\Mati\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libglesv2.dll
2015-04-06 20:57 - 2014-11-26 03:12 - 00134144 _____ () C:\Users\Mati\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libegl.dll
2015-04-07 00:35 - 2015-05-11 21:01 - 36302728 _____ () D:\Steam\bin\libcef.dll
2015-04-21 16:17 - 2015-04-21 16:17 - 00122432 _____ () C:\Users\Mati\AppData\Local\GG\Application\ggdrive\ZLIB1.dll
2015-04-21 16:17 - 2015-04-21 16:17 - 16361120 _____ () C:\Users\Mati\AppData\Local\GG\Application\FMSBWChecker\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
2015-05-14 12:13 - 2015-05-05 06:06 - 01252680 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\libglesv2.dll
2015-05-14 12:13 - 2015-05-05 06:06 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\libegl.dll
2012-03-26 12:38 - 2012-03-26 12:38 - 23308960 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\AuUI.dll
2012-03-26 12:37 - 2012-03-26 12:37 - 00090272 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\AuCore.dll
2012-03-26 12:37 - 2012-03-26 12:37 - 03207840 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\AuDSP.dll
2012-03-26 12:37 - 2012-03-26 12:37 - 01937568 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\AuAudioComponents.dll
2012-03-26 12:37 - 2012-03-26 12:37 - 04693152 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\AuBackEnd.dll
2012-03-26 12:37 - 2012-03-26 12:37 - 05330080 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\AuApplication.dll
2012-03-26 12:38 - 2012-03-26 12:38 - 01685664 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\AuUIToolkit.dll
2012-03-26 12:38 - 2012-03-26 12:38 - 01469088 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\AuScripting.dll
2012-03-26 12:37 - 2012-03-26 12:37 - 02935968 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\AuAudioComponentsUI.dll
2012-03-26 12:38 - 2012-03-26 12:38 - 02037920 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\ImageRenderer.dll
2012-03-26 12:39 - 2012-03-26 12:39 - 00500896 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\plug-ins\ControlSurface\EuCon.acsrf
2012-03-26 12:39 - 2012-03-26 12:39 - 00408736 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\plug-ins\ControlSurface\Mackie.acsrf
2012-03-26 12:39 - 2012-03-26 12:39 - 00046752 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\plug-ins\ControlSurface\RedRover.acsrf
2012-03-26 12:39 - 2012-03-26 12:39 - 00296608 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\plug-ins\Session\SesxNative.ases
2012-03-26 12:39 - 2012-03-26 12:39 - 01095328 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\plug-ins\Amio\AmioMp3.amio
2012-03-26 12:39 - 2012-03-26 12:39 - 00177824 _____ () C:\Program Files (x86)\Adobe\Adobe Audition CS6\plug-ins\Amio\AmioWav.amio
2015-05-14 12:13 - 2015-05-05 06:06 - 14982472 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\PepperFlash\pepflashplayer.dll
2015-05-14 12:15 - 2015-05-11 21:01 - 08958344 _____ () D:\Steam\bin\pdf.dll


==================== Alternate Data Streams (Whitelisted) =========


(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)




==================== Safe Mode (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)




==================== EXE Association (Whitelisted) ===============


(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)




==================== Internet Explorer trusted/restricted ===============


(If an entry is included in the fixlist, the associated entry will be removed from the registry.)




==================== Other Areas ============================


(Currently there is no automatic fix for this section.)


HKU\S-1-5-21-3953536465-74852115-2363369328-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Mati\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1


==================== MSCONFIG/TASK MANAGER disabled items ==


(Currently there is no automatic fix for this section.)




==================== FirewallRules (Whitelisted) ===============


(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


FirewallRules: [{F1E85EC8-429E-4BEE-8C5C-9F95CDFBA4AD}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{E49A82BD-14C4-42ED-9B62-CDF56B0235FC}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{FFB7E0D1-7F1E-4A95-8A4B-10DEFEF4C69C}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{0154F10E-2035-4F03-82E9-E0EC1CB5040A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{35C03970-4A03-488C-A69C-683F487C0289}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FEE4A3E3-7951-4565-991E-1824486B650F}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{9A16DC51-46E2-4EB6-B79E-D22F866F1457}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{E4EB2374-23EA-488A-88AB-373E09F228E7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{687AE018-BBCE-41B1-8A73-1CBDB28A0E81}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{94121CD3-E6A1-4373-B0DA-AD2B2B26542C}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{5F831B32-02DD-45F1-BF6D-77D29B1EF090}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{787B29D6-1635-4CB4-BB88-EA8BF6CDBF82}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{E2BFEFB7-BC84-4D89-B040-57689080C680}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{512922DA-F834-4C72-B914-94C326B56987}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{AB7A4DBA-93E1-47AD-9363-3589C6CA7321}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{051B322B-E803-4757-A388-10B3C75908F7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{08A8F1D8-B957-4F6E-B572-2659F9CE26C2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{B8CA0302-1D3E-4217-9687-AB0DA05CD1B8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{C9354063-B0DE-4CBF-A498-AC177739BF2F}] => (Allow) C:\Users\Mati\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E333CE1A-1B7B-44DB-8260-A1DB5BAAAF24}] => (Allow) C:\Users\Mati\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{EDE0F4C4-14EA-480E-96E7-C39DFB5D4835}D:\saints row iv\saintsrowiv.exe] => (Allow) D:\saints row iv\saintsrowiv.exe
FirewallRules: [UDP Query User{501F60B8-09B3-4065-B8A7-7F88C09F6E02}D:\saints row iv\saintsrowiv.exe] => (Allow) D:\saints row iv\saintsrowiv.exe
FirewallRules: [{ECEB6022-0925-4B41-84FC-B1483120DB2E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{683983E7-42C5-4E75-AAB2-4EC325C8DA5C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9E8C8642-78D5-4345-8466-5FFAB0190667}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{55628EB9-E720-4CD4-95A3-0295CF8D9D3C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{58F8D541-12EA-40EA-AAB5-7D0034190278}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{8B351719-5C68-40F5-8B25-7ED1C464F633}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Faulty Device Manager Devices =============


Name: Kontroler Uniwersalnej magistrali szeregowej (USB)
Description: Kontroler Uniwersalnej magistrali szeregowej (USB)
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


Name: Generic Bluetooth Adapter
Description: Generic Bluetooth Adapter
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: GenericAdapter
Service: BTHUSB
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 




==================== Event log errors: =========================


Application errors:
==================
Error: (05/17/2015 07:05:03 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Nie można uruchomić usługi. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   w BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)


Error: (05/17/2015 07:04:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: NvStreamNetworkService.exe, wersja: 4.1.1943.6202, sygnatura czasowa: 0x551399be
Nazwa modułu powodującego błąd: NvStreamNetworkService.exe, wersja: 4.1.1943.6202, sygnatura czasowa: 0x551399be
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00000000004e920f
Identyfikator procesu powodującego błąd: 0x96c
Godzina uruchomienia aplikacji powodującej błąd: 0xNvStreamNetworkService.exe0
Ścieżka aplikacji powodującej błąd: NvStreamNetworkService.exe1
Ścieżka modułu powodującego błąd: NvStreamNetworkService.exe2
Identyfikator raportu: NvStreamNetworkService.exe3


Error: (05/17/2015 01:08:02 AM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]


Error: (05/16/2015 09:28:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 67611519


Error: (05/16/2015 09:28:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 67611519


Error: (05/16/2015 09:28:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


Error: (05/16/2015 09:28:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 67610490


Error: (05/16/2015 09:28:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 67610490


Error: (05/16/2015 09:28:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


Error: (05/16/2015 09:28:18 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 67609491




System errors:
=============
Error: (05/17/2015 07:05:03 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Usługa BlueStacks Android Service zakończyła działanie; wystąpił następujący błąd: 
%%1064


Error: (05/17/2015 07:04:17 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Usługa BlueStacks Android Service zawiesiła się podczas uruchamiania.


Error: (05/17/2015 07:01:07 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: W lokalnym adapterze Bluetooth wystąpił nieokreślony błąd. Adapter nie będzie używany. Sterownik został usunięty z pamięci.


Error: (05/17/2015 01:08:00 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}


Error: (05/17/2015 01:07:55 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}


Error: (05/16/2015 10:16:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Steam Client Service z powodu następującego błędu: 
%%1053


Error: (05/16/2015 10:16:10 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Steam Client Service.


Error: (05/15/2015 07:27:41 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Usługa BlueStacks Android Service zakończyła działanie; wystąpił następujący błąd: 
%%1064


Error: (05/15/2015 07:24:44 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: W lokalnym adapterze Bluetooth wystąpił nieokreślony błąd. Adapter nie będzie używany. Sterownik został usunięty z pamięci.


Error: (05/15/2015 05:23:34 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}




Microsoft Office Sessions:
=========================
Error: (05/17/2015 07:05:03 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Nie można uruchomić usługi. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   w BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   w System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)


Error: (05/17/2015 07:04:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvStreamNetworkService.exe4.1.1943.6202551399beNvStreamNetworkService.exe4.1.1943.6202551399bec000000500000000004e920f96c01d090c32b1884b7C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exeC:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exec451d38b-fcb6-11e4-862b-bcaec567cf8a


Error: (05/17/2015 01:08:02 AM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]


Error: (05/16/2015 09:28:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 67611519


Error: (05/16/2015 09:28:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 67611519


Error: (05/16/2015 09:28:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


Error: (05/16/2015 09:28:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 67610490


Error: (05/16/2015 09:28:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 67610490


Error: (05/16/2015 09:28:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


Error: (05/16/2015 09:28:18 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 67609491




==================== Memory info =========================== 


Processor: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz
Percentage of memory in use: 71%
Total physical RAM: 4007.08 MB
Available physical RAM: 1157.08 MB
Total Pagefile: 8012.36 MB
Available Pagefile: 2477.77 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB


==================== Drives ================================


Drive c: () (Fixed) (Total:522.93 GB) (Free:464.71 GB) NTFS
Drive d: () (Fixed) (Total:73.14 GB) (Free:40.7 GB) NTFS


==================== MBR & Partition Table ==================


========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 44935790)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=73.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=522.9 GB) - (Type=07 NTFS)


==================== End Of Log ============================

[Aranthor]

raczej co to piszesz nie może zobaczyć bo jak ?

Istnieje możliwość przechwycenia przez aplikację wszystkich wprowadzonych na klawiaturze znaków. Wiedziałbyś o tym, gdybyś przeczytał opis przynajmniej jednego z programów, do których podałeś linka.

 

 

Wie ktoś może jak sprawdzić czy jest jakaś aplikacja śledząca na komputerze oraz jak ją usunąć?

Jeśli masz dostęp do konta administratora, nie powinno być problemów z wykryciem oraz usunięciem aplikacji. Wykonaj logi FRST.

[Aranthor]

Występują nieliczne problemy z systemem:

 

 

Jeśli chcesz je naprawić, zapisz zawartość tej strony do pliku fixlist.txt znajdującego się w tym samym folderze co FRST, uruchom narzędzie i wciśnij przycisk fix.

 

 

 

Na podstawie logów można wykluczyć obecność aplikacji szpiegowskich, jak i kontroli rodzicielskiej - nie można jej włączyć dla konta z uprawnieniami administratora.

 

 

osoba z rodziny kontroluje mnie do której godziny siedzę przy kompie

Jeśli osoba ma dostęp do jedynego aktywnego konta administratora (Mati), może odczytać godzinę logowania, wylogowania itp. z dziennika zdarzeń systemu. Inną możliwością jest to, że osoba monitoruje ruch w sieci lokalnej (logi routera) lub po prostu widzi, kiedy korzystasz z komputera.