Zużycie pamięci RAM

[Bawołek]

Witam, od jakiegoś tygodnia mam problem z pamięcią RAM.
Specyfikacja komputera :
 

Microsoft Windows 8.1 (x64) Build 9600
CPU: Intel Core i3-2120 3,40 GHz
GPU: GIGABYTE Radeon HD 7850 1GB GDDR5 SDRAM 256-bit
RAM: Kingston 8GB DDR3-1600 800 MHz
MotherBoard: GIGABYTE B75M-D3V

 
Mianowicie od razu przy włączeniu systemu gdy nie mam włączonych programów, gier moje zużycie RAM'u sięga cały czas 79% (mam 8gb). Aby to naprawić (przynajmniej na jakiś czas) muszę restartować komputer aż za drugim lub trzecim razem będzie zużycie normalne na poziomie 15%. Wiecie może czym to jest spowodowane? Niżej wrzucam skany z Fabar Recovery Scan Tool.

W czasie robienia scanów zużycie było na normalnym poziomie 

FRST.txt

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:17-10-2015
Ran by Mikołaj (administrator) on KOMPUTERE (18-10-2015 12:17:44)
Running from D:\Download
Loaded Profiles: Mikołaj (Available Profiles: Mikołaj)
Platform: Windows Embedded 8.1 Industry Pro (X64) Language: Angielski (Stany Zjednoczone)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzSurroundVADStreamingService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
() C:\Program Files (x86)\X7 Oscar Keyboard Editor\OscarEditor.exe
() C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe
(Disc Soft Ltd) D:\DAEMON Tools Lite\DiscSoftBusService.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(TeamSpeak Systems GmbH) D:\TeamSpeak 3\ts3client_win64.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-09] (Realtek Semiconductor)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-05-26] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [593216 2015-08-31] (Razer Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1242689616-2139182455-2406777970-1001\...\Run: [steam] => D:\Steam\steam.exe [2901584 2015-10-14] (Valve Corporation)
HKU\S-1-5-21-1242689616-2139182455-2406777970-1001\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3098424 2015-08-19] (Nota Inc.)
HKU\S-1-5-21-1242689616-2139182455-2406777970-1001\...\Run: [OscarEditor] => C:\Program Files (x86)\X7 Oscar Keyboard Editor\\OscarEditor.exe [3543040 2010-12-18] ()
HKU\S-1-5-21-1242689616-2139182455-2406777970-1001\...\Run: [OscarKeyboard] => C:\Program Files (x86)\X7 Oscar Keyboard Editor\OscarEditor.exe [3543040 2010-12-18] ()
HKU\S-1-5-21-1242689616-2139182455-2406777970-1001\...\Run: [OscarX7Mouse5Mode] => C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe [3521024 2012-03-20] ()
HKU\S-1-5-21-1242689616-2139182455-2406777970-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8418584 2015-07-17] (Piriform Ltd)
HKU\S-1-5-21-1242689616-2139182455-2406777970-1001\...\Run: [GoogleChromeAutoLaunch_7160243A0C7CC4107B34EB39D013EB64] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [811848 2015-10-09] (Google Inc.)
HKU\S-1-5-21-1242689616-2139182455-2406777970-1001\...\Run: [DAEMON Tools Lite Automount] => D:\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-1242689616-2139182455-2406777970-1001\...\MountPoints2: {f4a9d5a8-7508-11e5-8268-902b341c7de3} - "F:\setup.exe"

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{32E70849-91D1-46DA-A8BD-59AEB5974513}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1242689616-2139182455-2406777970-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl?ocid=iehp

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-10-04] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-10-04] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1220162.dll [2015-08-31] (Adobe Systems, Inc.)
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-11] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems)

Chrome:
=======
CHR HomePage: Default -> hxxp://google.pl/
CHR StartupUrls: Default -> "hxxp://www.google.pl/"
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.823\_platform_specific\win_x86\widevinecdmadapter.dll => No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\PepperFlash\pepflashplayer.dll ()
CHR Profile: C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-04]
CHR Extension: (Theme Creator) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\akpelnjfckgfiplcikojhomllgombffc [2015-08-04]
CHR Extension: (Dokumenty Google) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-04]
CHR Extension: (Dysk Google) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-04]
CHR Extension: (YouTube) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-08-04]
CHR Extension: (Steam inventory helper) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2015-08-04]
CHR Extension: (Google Search) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-08-04]
CHR Extension: (Wysoki kontrast.) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\djcfdncoelnlbldjfhinnjlhdjlikmph [2015-08-04]
CHR Extension: (Arkusze Google) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-04]
CHR Extension: (FBDown Video Downloader) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhplmmllnpjjlncfjpbbpjadoeijkogc [2015-09-23]
CHR Extension: (LoungeDestroyer) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2015-08-04]
CHR Extension: (Dokumenty Google offline) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-04]
CHR Extension: (Twitch Now) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2015-08-04]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-04]
CHR Extension: (AdBlock Pro) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch [2015-08-04]
CHR Extension: (Enhanced Steam) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2015-08-04]
CHR Extension: (Marc Ecko) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\opjonmehjfmkejjifhhknofdnacklmjk [2015-08-04]
CHR Extension: (Gmail) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-04]

Opera:
=======
OPR Extension: (Steam Trader Helper) - C:\Users\Mikołaj\AppData\Roaming\Opera Software\Opera Stable\Extensions\fljmocdpncmhecbphaechibhfgiiefpe [2015-09-26]
OPR Extension: (Twitch Now) - C:\Users\Mikołaj\AppData\Roaming\Opera Software\Opera Stable\Extensions\hiahmjdojdodmjjhhddegdnhcpjmokmo [2015-09-26]
OPR Extension: (Adblock Plus) - C:\Users\Mikołaj\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2015-09-26]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1225216 2015-10-01] ()
R3 Disc Soft Lite Bus Service; D:\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [238376 2015-09-01] (EasyAntiCheat Ltd)
S2 MBAMService; D:\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2078216 2015-10-05] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-08-10] ()
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187048 2015-06-23] ()
R2 RzSurroundVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzSurroundVADStreamingService.exe [4254720 2015-07-29] (A-Volute) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [102912 2015-07-15] (Advanced Micro Devices)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows ® Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows ® Win 7 DDK provider)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-10-17] (Disc Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-06-12] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129472 2015-06-27] (Razer, Inc.)
R3 RZSURROUNDVADService; C:\Windows\system32\drivers\RzSurroundVAD.sys [40640 2015-07-29] (Windows ® Win 7 DDK provider)
R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2013-05-05] (Scarlet.Crush Productions)
R3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
R3 VBAudioVACMME; C:\Windows\system32\DRIVERS\vbaudio_cable64_win7.sys [41192 2013-07-11] (Windows ® Win 7 DDK provider)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-18 12:14 - 2015-10-18 12:17 - 00000000 ____D C:\FRST
2015-10-18 11:53 - 2015-10-18 11:53 - 00000612 _____ C:\Windows\PFRO.log
2015-10-17 23:35 - 2015-10-17 23:35 - 00000822 _____ C:\Users\Public\Desktop\Total War Attila-The Last Roman.lnk
2015-10-17 23:35 - 2015-10-17 23:35 - 00000000 ____D C:\ProgramData\Steam
2015-10-17 23:35 - 2015-10-17 23:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GTX Box Team
2015-10-17 22:21 - 2015-10-17 22:21 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Disc_Soft_Ltd
2015-10-17 22:20 - 2015-10-17 22:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2015-10-17 21:46 - 2015-10-17 21:47 - 00000000 ____D C:\Users\Mikołaj\Desktop\Nowy folder (2)
2015-10-17 18:33 - 2015-10-17 18:33 - 00000000 ____D C:\Users\Mikołaj\AppData\LocalLow\uTorrent
2015-10-17 16:25 - 2015-09-19 05:18 - 00035384 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-10-17 16:25 - 2015-09-18 15:42 - 01290752 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-10-17 16:25 - 2015-09-18 15:42 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-10-17 16:25 - 2015-09-18 15:42 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-10-17 16:25 - 2015-09-18 15:42 - 00699904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-10-17 16:25 - 2015-09-18 15:42 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-10-17 16:25 - 2015-09-18 15:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-10-17 14:15 - 2015-10-18 11:53 - 00000464 _____ C:\Windows\setupact.log
2015-10-17 14:15 - 2015-10-17 14:15 - 00000000 _____ C:\Windows\setuperr.log
2015-10-13 19:55 - 2015-09-10 20:02 - 25851392 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-13 19:55 - 2015-09-10 19:19 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-13 19:55 - 2015-09-10 19:18 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-13 19:55 - 2015-09-10 19:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-10-13 19:55 - 2015-09-10 19:14 - 05990400 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-13 19:55 - 2015-09-10 19:09 - 20358144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-10-13 19:55 - 2015-09-10 19:06 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-10-13 19:55 - 2015-09-10 19:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-13 19:55 - 2015-09-10 18:51 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-10-13 19:55 - 2015-09-10 18:39 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-10-13 19:55 - 2015-09-10 18:37 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-10-13 19:55 - 2015-09-10 18:37 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-10-13 19:55 - 2015-09-10 18:35 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-10-13 19:55 - 2015-09-10 18:33 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-10-13 19:55 - 2015-09-10 18:28 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-10-13 19:55 - 2015-09-10 18:28 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-10-13 19:55 - 2015-09-10 18:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-10-13 19:55 - 2015-09-10 18:24 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-13 19:55 - 2015-09-10 18:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-10-13 19:55 - 2015-09-10 18:19 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-10-13 19:55 - 2015-09-10 18:19 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-10-13 19:55 - 2015-09-10 18:19 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-10-13 19:55 - 2015-09-10 18:17 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-10-13 19:55 - 2015-09-10 18:17 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-10-13 19:55 - 2015-09-10 18:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-10-13 19:55 - 2015-09-10 18:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-10-13 19:55 - 2015-09-10 18:02 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-10-13 19:55 - 2015-09-10 18:01 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-10-13 19:55 - 2015-09-10 18:00 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-10-13 19:55 - 2015-09-10 17:57 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-10-13 19:55 - 2015-09-10 17:57 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-10-13 19:55 - 2015-09-10 17:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-10-13 19:55 - 2015-09-10 17:55 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-10-13 19:55 - 2015-09-10 17:55 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-10-13 19:55 - 2015-09-10 17:45 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-13 19:55 - 2015-09-10 17:34 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-10-13 19:55 - 2015-09-10 17:31 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-10-13 19:55 - 2015-09-10 17:27 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-10-13 19:55 - 2015-09-10 17:26 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-10-13 19:53 - 2015-09-29 14:31 - 07457624 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-13 19:53 - 2015-09-29 14:31 - 01658536 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-10-13 19:53 - 2015-09-29 14:31 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-10-13 19:53 - 2015-09-29 14:31 - 01487008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-10-13 19:53 - 2015-09-29 14:31 - 01355848 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-10-13 19:53 - 2015-09-29 14:29 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-10-13 19:53 - 2015-09-28 20:45 - 03705344 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-13 19:53 - 2015-09-28 20:26 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-10-13 19:53 - 2015-09-28 20:25 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-10-13 19:53 - 2015-09-28 20:25 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-10-13 19:53 - 2015-09-28 20:25 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-10-13 19:53 - 2015-09-28 20:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-10-13 19:53 - 2015-09-28 20:22 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-10-13 19:53 - 2015-09-28 20:22 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-10-13 19:53 - 2015-09-28 20:15 - 02243072 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-10-13 19:53 - 2015-09-28 20:13 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-13 19:53 - 2015-09-28 20:12 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-10-13 19:53 - 2015-09-24 19:51 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfg.exe
2015-10-13 19:53 - 2015-09-24 19:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2015-10-13 19:53 - 2015-09-24 19:30 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2015-10-13 19:53 - 2015-09-24 18:42 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2015-10-13 19:53 - 2015-09-24 18:40 - 00737280 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2015-10-13 19:53 - 2015-08-27 04:43 - 22372152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-13 19:53 - 2015-08-27 04:42 - 19795904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-13 19:53 - 2015-08-22 15:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-13 19:53 - 2015-08-07 23:40 - 01736520 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-10-13 19:53 - 2015-08-07 23:40 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-10-13 19:53 - 2015-08-07 23:40 - 01134752 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-10-13 19:53 - 2015-08-07 23:40 - 00686960 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-10-13 19:53 - 2015-08-07 23:40 - 00507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-10-13 19:53 - 2015-08-07 16:13 - 00862720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-10-13 19:53 - 2015-08-06 19:05 - 00669184 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2015-10-13 19:53 - 2015-08-06 18:47 - 04710400 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2015-10-13 19:53 - 2015-08-06 18:37 - 00536576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2015-10-13 19:53 - 2015-08-06 18:18 - 04068352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2015-10-13 19:53 - 2015-07-16 20:58 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\NcdAutoSetup.dll
2015-10-12 23:00 - 2015-06-27 01:27 - 00129472 _____ (Razer, Inc.) C:\Windows\system32\Drivers\rzpnk.sys
2015-10-12 23:00 - 2015-06-12 17:51 - 00037184 _____ (Razer, Inc.) C:\Windows\system32\Drivers\rzpmgrk.sys
2015-10-12 22:59 - 2015-10-12 22:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2015-10-12 22:52 - 2015-10-12 22:52 - 00000000 ____D C:\Windows\system32\appmgmt
2015-10-12 20:21 - 2015-10-12 20:21 - 00000000 ____D C:\ProgramData\RzSurroundVAD_1.1.60.0
2015-10-12 20:20 - 2015-10-12 23:00 - 00000000 ____D C:\Program Files (x86)\Razer
2015-10-12 20:14 - 2015-10-12 23:00 - 00000000 ____D C:\ProgramData\Razer
2015-10-12 20:14 - 2015-10-12 22:53 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Razer
2015-10-11 15:23 - 2015-10-11 15:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-10-11 15:21 - 2015-10-18 11:54 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-11 15:21 - 2015-10-17 23:27 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-11 15:21 - 2015-10-11 15:21 - 00004042 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-10-11 15:21 - 2015-10-11 15:21 - 00003806 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-10-10 20:12 - 2015-10-18 12:06 - 01569096 _____ C:\Windows\WindowsUpdate.log
2015-10-04 22:38 - 2015-10-11 22:24 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Arma 3
2015-10-04 22:38 - 2015-10-04 22:41 - 00000000 ____D C:\Users\Mikołaj\Documents\Arma 3
2015-10-04 22:38 - 2015-10-04 22:38 - 00000000 ____D C:\ProgramData\Bohemia Interactive
2015-10-04 22:37 - 2015-10-04 23:02 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Arma 3 Launcher
2015-10-04 22:37 - 2015-10-04 22:37 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Bohemia_Interactive
2015-10-03 23:02 - 2015-10-03 23:02 - 00000066 _____ C:\Users\Mikołaj\Desktop\eska party.m3u
2015-10-03 22:58 - 2015-10-03 22:58 - 00000066 _____ C:\Users\Mikołaj\Desktop\eska poznań.m3u
2015-10-03 22:52 - 2015-10-03 22:52 - 00000066 _____ C:\Users\Mikołaj\Desktop\ESKA dance.m3u
2015-10-03 13:03 - 2015-10-03 13:08 - 00000070 _____ C:\Users\Mikołaj\Desktop\rmf fm.m3u
2015-10-03 12:52 - 2015-10-03 12:52 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Macromedia
2015-10-03 12:50 - 2015-10-03 12:50 - 00001245 _____ C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenFM.lnk
2015-10-03 12:50 - 2015-10-03 12:50 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\OpenFM
2015-10-03 12:50 - 2015-10-03 12:50 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Mozilla
2015-10-03 12:50 - 2015-10-03 12:50 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\OpenFM
2015-10-01 21:41 - 2015-10-12 12:31 - 00000000 ____D C:\Users\Mikołaj\Desktop\muza
2015-10-01 21:23 - 2015-10-01 21:56 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Winamp
2015-10-01 21:23 - 2015-10-01 21:23 - 00000532 _____ C:\Users\Public\Desktop\Winamp.lnk
2015-10-01 21:11 - 2015-10-01 21:11 - 00000000 ____D C:\Program Files\VB
2015-10-01 21:11 - 2013-07-11 08:57 - 00041192 _____ (Windows ® Win 7 DDK provider) C:\Windows\system32\Drivers\vbaudio_cable64_win7.sys
2015-10-01 20:21 - 2015-10-01 20:21 - 00000000 ____D C:\Users\Mikołaj\Documents\SavedGames
2015-10-01 20:21 - 2015-10-01 20:21 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA
2015-09-26 15:44 - 2015-10-01 18:03 - 00003874 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1443275078
2015-09-26 15:44 - 2015-10-01 18:03 - 00001063 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-09-26 14:46 - 2015-10-17 23:07 - 00000992 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-09-26 14:46 - 2015-10-17 14:17 - 00003962 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-09-26 14:28 - 2015-09-26 14:28 - 05012880 _____ (Adobe Systems Inc.) C:\Users\Mikołaj\Downloads\Shockwave_Installer_Slim.exe
2015-09-26 14:28 - 2015-09-26 14:28 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2015-09-23 17:35 - 2015-09-23 19:24 - 00000000 ____D C:\Users\Mikołaj\Desktop\znajdzki
2015-09-21 19:55 - 2015-09-21 19:55 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\obs-studio
2015-09-21 19:54 - 2015-09-21 19:54 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OBS Multiplatform
2015-09-20 13:57 - 2015-09-20 13:57 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab
2015-09-19 17:55 - 2015-09-19 17:56 - 00007600 _____ C:\Users\Mikołaj\AppData\Local\Resmon.ResmonCfg
2015-09-19 15:16 - 2015-09-19 15:16 - 00000000 ____D C:\Users\Mikołaj\Desktop\Nowy folder (3)
2015-09-19 14:50 - 2015-09-19 15:00 - 1069648098 _____ C:\Users\Mikołaj\Desktop\VirtualMT2.rar

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-18 12:02 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-10-18 11:58 - 2015-08-05 13:17 - 00003756 _____ C:\Windows\System32\Tasks\AutoKMS
2015-10-18 11:57 - 2015-08-09 22:11 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Adobe
2015-10-18 11:56 - 2015-08-04 19:39 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{7B43BFE2-B146-425C-8C37-B15B8097686C}
2015-10-18 11:55 - 2015-08-04 19:36 - 00000000 ___DO C:\Users\Mikołaj\OneDrive
2015-10-18 11:54 - 2015-08-04 20:41 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\TS3Client
2015-10-18 11:53 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-17 23:39 - 2015-08-07 16:08 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\uTorrent
2015-10-17 23:08 - 2015-08-04 19:41 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1242689616-2139182455-2406777970-1001
2015-10-17 22:21 - 2015-08-13 15:36 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\DAEMON Tools Lite
2015-10-17 22:20 - 2015-08-13 15:36 - 00030264 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2015-10-17 22:20 - 2015-08-04 19:45 - 00019079 _____ C:\Windows\system32\lvcoinst.log
2015-10-17 20:25 - 2015-08-06 12:31 - 00000000 ____D C:\Windows\system32\MRT
2015-10-17 20:20 - 2015-08-06 12:31 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-10-17 20:20 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-10-17 20:19 - 2015-08-06 16:21 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-10-17 20:19 - 2015-08-06 16:21 - 00000000 ____D C:\Windows\system32\appraiser
2015-10-17 18:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-10-17 14:15 - 2015-08-04 20:25 - 01074176 ___SH C:\Users\Mikołaj\Desktop\Thumbs.db
2015-10-17 13:46 - 2015-08-04 20:32 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-10-14 23:03 - 2015-08-09 22:35 - 00000000 ____D C:\ProgramData\Origin
2015-10-14 21:31 - 2015-08-10 19:08 - 00348360 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2015-10-14 21:31 - 2015-08-09 23:03 - 00348360 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2015-10-14 21:30 - 2015-08-09 23:03 - 00280904 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2015-10-14 14:54 - 2015-08-04 19:57 - 00805892 _____ C:\Windows\system32\perfh015.dat
2015-10-14 14:54 - 2015-08-04 19:57 - 00163272 _____ C:\Windows\system32\perfc015.dat
2015-10-14 14:54 - 2014-03-18 11:54 - 01825074 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-13 23:18 - 2013-08-22 15:25 - 00008192 ___SH C:\Windows\system32\config\BBI
2015-10-13 23:17 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2015-10-11 23:59 - 2015-08-16 23:03 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Skype
2015-10-11 15:23 - 2015-08-04 19:40 - 00000000 ____D C:\Program Files (x86)\Google
2015-10-04 12:42 - 2015-09-03 22:58 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-03 13:06 - 2015-08-04 20:07 - 00000171 _____ C:\Users\Mikołaj\Desktop\adadad.txt
2015-10-03 00:02 - 2015-08-04 19:31 - 00000000 ____D C:\Users\Mikołaj
2015-10-02 19:23 - 2015-09-10 20:34 - 00000000 ____D C:\Users\Mikołaj\Desktop\Rangi TeamSpeak3
2015-10-02 16:24 - 2015-08-06 19:13 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-02 16:24 - 2015-08-06 19:13 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-01 18:03 - 2015-09-04 11:07 - 00000000 ____D C:\Program Files (x86)\Opera
2015-09-26 12:55 - 2015-09-04 11:22 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Opera Software
2015-09-25 11:48 - 2015-08-05 13:21 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Notepad++
2015-09-25 11:44 - 2015-08-14 14:02 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Audacity
2015-09-25 11:44 - 2015-08-04 20:06 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Anvsoft

==================== Files in the root of some directories =======

2015-10-01 20:21 - 2015-10-04 15:30 - 0002128 _____ () C:\Users\Mikołaj\AppData\Roaming\SpeedRunnersLog.txt
2015-09-13 20:21 - 2015-09-13 20:21 - 0000000 ___SH () C:\Users\Mikołaj\AppData\Local\LumaEmu
2015-09-19 17:55 - 2015-09-19 17:56 - 0007600 _____ () C:\Users\Mikołaj\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-10-17 16:14

==================== End of FRST.txt ============================

 

shortcut

 

Users shortcut scan result (x64) Version:17-10-2015
Ran by Mikołaj (2015-10-18 12:18:15)
Running from D:\Download
Boot Mode: Normal

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)



Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.lnk -> D:\adobe\Adobe Photoshop CC 2015\Photoshop.exe (Adobe Systems, Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk -> D:\Audacity\audacity.exe (The Audacity Team)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Camera.lnk -> C:\Windows\Camera\Camera.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileManager.lnk -> C:\Windows\FileManager\FileManager.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotosApp.lnk -> C:\Windows\FileManager\PhotosApp.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Store.lnk -> C:\Windows\WinStore\WinStore.htm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Co nowego w ostatniej wersji.lnk -> D:\WinRAR\CoNowego.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Podręcznik RARa dla konsoli.lnk -> D:\WinRAR\Rar.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Pomoc WinRARa.lnk -> D:\WinRAR\WinRAR.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> D:\WinRAR\WinRAR.exe (Alexander Roshal)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client\TeamSpeak 3 Client.lnk -> D:\TeamSpeak 3\ts3client_win64.exe (TeamSpeak Systems GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client\Uninstall.lnk -> D:\TeamSpeak 3\Uninstall.exe (TeamSpeak Systems GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> D:\Steam\Steam.exe (Valve Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Gamblers\Cities Skylines\Cities Skylines.lnk -> D:\Cities Skylines\LumaGameLauncher_x64.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Gamblers\Cities Skylines\Uninstall Cities Skylines.lnk -> C:\Users\Mikołaj\AppData\Roaming\Cities Skylines\Uninstall\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Narzędzie zgłaszania błędów Origin.lnk -> D:\Origin\OriginER.exe (Electronic Arts)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Origin.lnk -> D:\Origin\Origin.exe (Electronic Arts)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++\Notepad++.lnk -> D:\Notepad++\notepad++.exe (Don HO [email protected]<script data-cfhash='f9e31' type="text/javascript"> /* */</script>)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories\Microsoft Xbox 360 Accessories Help.lnk -> C:\Program Files\Microsoft Xbox 360 Accessories\Xboxhelp.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories\Microsoft Xbox 360 Accessories Status.lnk -> C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Deinstalacja programu Malwarebytes Anti-Malware.lnk -> D:\Malwarebytes Anti-Malware\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware Notifications.lnk -> D:\Malwarebytes Anti-Malware\mbam.exe (Malwarebytes Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware.lnk -> D:\Malwarebytes Anti-Malware\mbam.exe (Malwarebytes Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk -> D:\Malwarebytes Anti-Malware\Chameleon\Windows\chameleon.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HOMM III COMPLETE\Deinstalacja programu HOMM III COMPLETE.lnk -> D:\HOMM III COMPLETE\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HOMM III COMPLETE\HOMM III COMPLETE.lnk -> D:\HOMM III COMPLETE\h3wog.exe (The 3DO Company)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo\Gyazo GIF.lnk -> C:\Program Files (x86)\Gyazo\GyazoGIF.exe (Nota Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo\Gyazo.lnk -> C:\Program Files (x86)\Gyazo\Gyazowin.exe (Nota Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GTX Box Team\Total War Attila-The Last Roman\Deinstalacja.lnk -> D:\GTX Box Team\Total War Attila-The Last Roman\Uninstall\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GTX Box Team\Total War Attila-The Last Roman\Total War Attila-The Last Roman.lnk -> D:\GTX Box Team\Total War Attila-The Last Roman\Attila.exe (The Creative Assembly Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Lords of the Fallen\Lords of the Fallen.lnk -> D:\Lords of the Fallen\bin\LordsOfTheFallen.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Lords of the Fallen\Uninstall Lords of the Fallen.lnk -> D:\Lords of the Fallen\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite\DAEMON Tools Lite.lnk -> D:\DAEMON Tools Lite\DTLauncher.exe (Disc Soft Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID\CPU-Z\CPU-Z.lnk -> D:\CPU-Z\cpuz.exe (CPUID)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID\CPU-Z\Edit CPU-Z Config File.lnk -> D:\CPU-Z\cpuz.ini ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID\CPU-Z\Uninstall CPU-Z.lnk -> D:\CPU-Z\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk -> C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvsoft\Any Audio Converter\Any Audio Converter.lnk -> D:\Any Audio Converter\AACFree.exe (Anvsoft)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvsoft\Any Audio Converter\Deinstalacja programu Any Audio Converter.lnk -> D:\Any Audio Converter\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvsoft\Any Audio Converter\Strona WWW programu Any Audio Converter.lnk -> D:\Any Audio Converter\AACFree.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center\AMD Catalyst Control Center.lnk -> C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe (Advanced Micro Devices Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (32-bit).lnk -> C:\Windows\SysWOW64\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (64-bit).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Print Management.lnk -> C:\Windows\System32\printmanagement.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk -> C:\Windows\System32\psr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Program Files\Windows Journal\Journal.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\A4TECH Software\X7 Oscar Keyboard Editor\Uninstall X7 Oscar Keyboard Editor.lnk -> C:\Program Files (x86)\InstallShield Installation Information\{AB363F8A-FE88-4188-9D4F-B9014989A7E7}\setup.exe (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\A4TECH Software\X7 Oscar Keyboard Editor\X7 Oscar Keyboard Editor.lnk -> C:\Windows\Installer\{AB363F8A-FE88-4188-9D4F-B9014989A7E7}\OscarEditor.exe1_988DDD0A29114B1F9D20AB8E7D32595B.exe (Macrovision Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\A4TECH Software\5-Mode Oscar Editor\Run 5-Mode Oscar Editor.lnk -> C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe ()
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk -> C:\Users\Mikołaj\Documents ()
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk -> C:\Users\Mikołaj\Pictures ()
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Windows.Defender.lnk -> C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\Links\Desktop.lnk -> C:\Users\Mikołaj\Desktop ()
Shortcut: C:\Users\Mikołaj\Links\Downloads.lnk -> C:\Users\Mikołaj\Downloads ()
Shortcut: C:\Users\Mikołaj\Desktop\Rangi TeamSpeak3\ikony ts\icon\ikony\ikony — skrót.lnk -> C:\Users\Mikołaj\Desktop\Dominika \Ikonki TS\ikony ts\icon\ikony (No File)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk -> C:\Users\Mikołaj\Documents ()
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenFM.lnk -> C:\Users\Mikołaj\AppData\Local\OpenFM\Application\openfm.exe ()
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk -> C:\Users\Mikołaj\Pictures ()
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Co nowego w ostatniej wersji.lnk -> D:\WinRAR\CoNowego.txt ()
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Podręcznik RARa dla konsoli.lnk -> D:\WinRAR\Rar.txt ()
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Pomoc WinRARa.lnk -> D:\WinRAR\WinRAR.chm ()
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> D:\WinRAR\WinRAR.exe (Alexander Roshal)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Windows.Defender.lnk -> C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan\Help and HOW-TO.lnk -> D:\SpeedFan\speedfan.chm ()
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan\Release info.lnk -> D:\SpeedFan\speedfan.txt ()
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan\SpeedFan.lnk -> D:\SpeedFan\speedfan.exe (Almico Software (almico.com))
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan\Uninstall SpeedFan.lnk -> D:\SpeedFan\uninstall.exe ()
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OBS Multiplatform\OBS Multiplatform (32bit).lnk -> D:\obs-studio\bin\32bit\obs32.exe ()
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OBS Multiplatform\OBS Multiplatform (64bit).lnk -> D:\obs-studio\bin\64bit\obs64.exe ()
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OBS Multiplatform\Uninstall.lnk -> D:\obs-studio\uninstall.exe ()
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6\Counter Strike 1.6.lnk -> D:\Counter Strike 1.6\hl.exe (No File)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gyazo GIF.lnk -> C:\Program Files (x86)\Gyazo\GyazoGIF.exe (Nota Inc.)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gyazo.lnk -> C:\Program Files (x86)\Gyazo\Gyazowin.exe (Nota Inc.)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gyazo GIF.lnk -> C:\Program Files (x86)\Gyazo\GyazoGIF.exe (Nota Inc.)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gyazo.lnk -> C:\Program Files (x86)\Gyazo\Gyazowin.exe (Nota Inc.)
Shortcut: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Steam.lnk -> D:\Steam\Steam.exe (Valve Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Local\OpenFM\Application\openfm.lnk -> C:\Users\Mikołaj\AppData\Local\OpenFM\Application\openfm.exe ()
Shortcut: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\Lords of the Fallen.lnk -> D:\Lords of the Fallen\bin\LordsOfTheFallen.exe ()
Shortcut: C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk -> D:\Malwarebytes Anti-Malware\mbam.exe (Malwarebytes Corporation)
Shortcut: C:\Users\Public\Desktop\Total War Attila-The Last Roman.lnk -> D:\GTX Box Team\Total War Attila-The Last Roman\Attila.exe (The Creative Assembly Ltd)
Shortcut: C:\Users\Public\Desktop\Winamp.lnk -> D:\Winamp\winamp.exe (Nullsoft, Inc.)




ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\core\PDapp.exe (Adobe Systems Incorporated) -> --appletID=CCM_UI --appletVersion=1.0 --workflow=CCM_workflow_launch
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> -sta {C90FB8CA-3295-4462-A721-2935E83694BA}
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer\Razer Synapse\Razer Synapse.lnk -> C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe (Razer Inc.) -> -launch
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories\Check For Updates.lnk -> C:\Program Files\Microsoft Xbox 360 Accessories\AUSetting.exe (Microsoft Corporation) -> -forcecheck
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo\Gyazo Settings.lnk -> C:\Program Files (x86)\Gyazo\GyStation.exe (Nota Inc.) -> /option
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center\Pomoc.lnk -> C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CLI.exe (Advanced Micro Devices Inc.) -> Start Help -help
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Security Configuration Management.lnk -> C:\Windows\System32\secpol.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\A4TECH Software\5-Mode Oscar Editor\Uninstall 5-Mode Oscar Editor.lnk -> C:\ProgramData\Microsoft\Windows\Templates\A4Tech\OscarX7Editor5Mode\Setup.exe () -> uninstall
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - Network Connections.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> ::{7007ACC7-3202-11D1-AAD2-00805FC1270E}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
ShortcutWithArgument: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\SendTo\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) -> /sendto:
ShortcutWithArgument: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - Network Connections.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> ::{7007ACC7-3202-11D1-AAD2-00805FC1270E}
ShortcutWithArgument: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System
ShortcutWithArgument: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions
ShortcutWithArgument: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures
ShortcutWithArgument: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}
ShortcutWithArgument: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}


InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam Support Center.url -> hxxp://support.steampowered.com/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner Homepage.url -> hxxp://www.piriform.com/ccleaner
InternetURL: C:\Users\Mikołaj\OneDrive\Dokumenty\Notes użytkownika Mikołaj.url -> hxxps://onedrive.live.com/redir.aspx?cid=86ecfb46d3610711&resid=86ECFB46D3610711!165&type=3
InternetURL: C:\Users\Mikołaj\Favorites\Bing.url -> hxxp://go.microsoft.com/fwlink/p/?LinkId=255142
InternetURL: C:\Users\Mikołaj\Desktop\Rangi TeamSpeak3\ts2\ts2\16x16-free-application-icons\index.url -> hxxp://www.small-icons.com/stock-icons/16x16-free-application-icons.htm
InternetURL: C:\Users\Mikołaj\Desktop\Rangi TeamSpeak3\ikony ts\16x16-pixel-toolbar-icons\index.url -> hxxp://www.small-icons.com/stock-icons/16x16-pixel-toolbar-icons.htm
InternetURL: C:\Users\Mikołaj\Desktop\Nowy folder\Microsoft Toolkit 2.5.2\PROGRAMAS WEB FULL.url -> hxxp://programaswebfull.com/
InternetURL: C:\Users\Mikołaj\Desktop\DS4Tool_1.1_Final\1 minNatalie Domzalowska.url -> hxxps://www.facebook.com/messages/100004766262929

==================== End of Shortcut.txt =============================

 

Addition

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version:17-10-2015
Ran by Mikołaj (2015-10-18 12:18:02)
Running from D:\Download
Windows Embedded 8.1 Industry Pro (X64) (2015-08-04 17:32:46)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1242689616-2139182455-2406777970-500 - Administrator - Disabled)
Guest (S-1-5-21-1242689616-2139182455-2406777970-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1242689616-2139182455-2406777970-1003 - Limited - Enabled)
Mikołaj (S-1-5-21-1242689616-2139182455-2406777970-1001 - Administrator - Enabled) => C:\Users\Mikołaj

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1242689616-2139182455-2406777970-1001\...\uTorrent) (Version: 3.4.5.41202 - BitTorrent Inc.)
5-Mode Oscar Editor (HKLM-x32\...\OscarX7Mouse5Mode) (Version: 12.03.0001 - A4Tech)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Flash Player 19 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.0.162 - Adobe Systems, Inc.)
AMD Catalyst Install Manager (HKLM\...\{572C982F-95F5-0562-AE8F-8A9D7D024A88}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Any Audio Converter 5.8.2 (HKLM-x32\...\Any Audio Converter_is1) (Version: - Any-Audio-Converter.com)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)
Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
CCleaner (HKLM\...\CCleaner) (Version: 5.08 - Piriform)
Cities Skylines (HKLM-x32\...\Cities Skylines_R.G. Gamblers_is1) (Version: - R.G. Gamblers, Fanfar)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
CPUID CPU-Z 1.72.1 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)
Depth Hunter 2: Deep Dive (HKLM-x32\...\Steam App 248530) (Version: - Biart Company LLC)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.71 - Google Inc.)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Gyazo 3.1.5 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)
HOMM III COMPLETE wersja 1.0 (HKLM-x32\...\{9C4B0DFF-B285-44BF-9039-54E77195BA1D}_is1) (Version: 1.0 - )
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Lords of the Fallen (HKLM-x32\...\Lords of the Fallen_is1) (Version: - )
Malwarebytes Anti-Malware wersja 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Might & Magic: Duel of Champions (HKLM-x32\...\Steam App 256410) (Version: - BlueByte)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.3 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation)
OBS Multiplatform (HKLM-x32\...\OBS Multiplatform) (Version: 0.11.4 - OBS Project)
OpenFM (HKU\S-1-5-21-1242689616-2139182455-2406777970-1001\...\OpenFM) (Version: 2 - GG Network S.A.)
Opera Stable 32.0.1948.69 (HKLM-x32\...\Opera 32.0.1948.69) (Version: 32.0.1948.69 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Quake Live (HKLM-x32\...\Steam App 282440) (Version: - id Software)
Razer Surround (HKLM-x32\...\Razer Surround) (Version: 1.05.18 - Razer Inc.)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.27599 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
Rust (HKLM-x32\...\Steam App 252490) (Version: - Facepunch Studios)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab Detection (HKLM-x32\...\{63F2EA9C-41C3-4F6C-86FE-E5AF523D69D3}) (Version: 6.1.6.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.17 - TeamSpeak Systems GmbH)
Total War Attila-The Last Roman wersja 1.3.0.0 (HKLM-x32\...\Total War Attila-The Last Roman_is1) (Version: 1.3.0.0 - GTX Box Team)
Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton)
VBCABLE, The Virtual Audio Cable (HKLM\...\VB:VBCABLE {87459874-1236-4469}) (Version: - VB-Audio Software)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
WinRAR 5.01 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
X7 Oscar Keyboard Editor (HKLM-x32\...\InstallShield_{AB363F8A-FE88-4188-9D4F-B9014989A7E7}) (Version: 10.12.0003 - A4TECH)
X7 Oscar Keyboard Editor (x32 Version: 10.12.0003 - A4TECH) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

01-10-2015 13:49:13 Scheduled Checkpoint
04-10-2015 22:36:09 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
04-10-2015 22:36:26 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
12-10-2015 22:51:30 Removed Razer Synapse.
17-10-2015 16:14:32 Windows Update

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2D8D044E-4CA3-4337-BD14-1FDB9D460CCD} - System32\Tasks\[email protected]=> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-05-26] (Adobe Systems Incorporated)
Task: {4EA8BADE-3B47-4EBF-8D86-9A9012686D2A} - \ShopperProJSUpd -> No File <==== ATTENTION
Task: {500093D7-E435-4649-AE93-4FE0674DBDFC} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-10-17] (Microsoft Corporation)
Task: {5938B965-1078-4756-BFD5-964CAD447915} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2015-08-05] ()
Task: {5D76B599-4A2C-4B31-BCB3-813B837991F1} - System32\Tasks\Opera scheduled Autoupdate 1443275078 => C:\Program Files (x86)\Opera\launcher.exe [2015-09-25] (Opera Software)
Task: {740C2E11-6CF9-4FD1-9970-D22AC48B4C0F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-11] (Google Inc.)
Task: {9359215C-8ED1-48FF-BA56-9D4CF502C611} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-11] (Google Inc.)
Task: {9863CCD8-2996-4AA0-A3B6-DDBEC5A040D1} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe
Task: {A0A85DB4-E691-4098-AA3F-D24363C06513} - \SPBIW_UpdateTask_Time_313030393338303139382d2d37505a2a6c55326c342341 -> No File <==== ATTENTION
Task: {A8C4385F-CD4D-460D-BE5F-E0BD56980B07} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\ScheduleWepCEIP => C:\Windows\system32\WepsqmTask.exe [2014-03-18] (Microsoft Corporation)
Task: {B39CF76C-0F86-4A63-946E-348AA4F45E29} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\system32\CompatTelRunner.exe [2015-09-19] (Microsoft Corporation)
Task: {D30E6B89-38F5-4873-B3F5-D1917E25E756} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_226_pepper.exe [2015-10-17] (Adobe Systems Incorporated)
Task: {E45C5F1F-F4CF-42AD-A93A-925721BF78A7} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe
Task: {FC83018A-803B-461A-9A27-1BADE16DDC0D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-07-17] (Piriform Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_226_pepper.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-08-09 23:03 - 2015-08-10 19:13 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-06-23 21:11 - 2015-06-23 21:11 - 00187048 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2010-12-18 10:11 - 2010-12-18 10:11 - 03543040 _____ () C:\Program Files (x86)\X7 Oscar Keyboard Editor\OscarEditor.exe
2015-08-07 22:51 - 2012-03-20 17:52 - 03521024 ____N () C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe
2015-08-04 09:54 - 2015-10-11 11:35 - 00175080 _____ () D:\TeamSpeak 3\quazip.dll
2015-08-04 09:53 - 2015-10-11 11:35 - 00103400 _____ () D:\TeamSpeak 3\soundbackends\directsound_win64.dll
2015-08-04 09:54 - 2015-10-11 11:35 - 00108008 _____ () D:\TeamSpeak 3\soundbackends\windowsaudiosession_win64.dll
2015-08-04 09:54 - 2015-10-11 11:35 - 00312296 _____ () D:\TeamSpeak 3\plugins\clientquery_plugin.dll
2015-08-04 09:54 - 2015-10-11 11:35 - 00483816 _____ () D:\TeamSpeak 3\plugins\teamspeak_control_plugin.dll
2015-07-17 15:10 - 2015-09-24 19:37 - 00317440 _____ () D:\TeamSpeak 3\ssleay32.dll
2015-07-17 15:10 - 2015-09-24 19:37 - 01709056 _____ () D:\TeamSpeak 3\LIBEAY32.dll
2015-07-17 19:34 - 2015-07-17 19:34 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1045.dll
2010-12-02 17:56 - 2010-12-02 17:56 - 00815104 _____ () C:\Program Files (x86)\X7 Oscar Keyboard Editor\Data\X7_Keyboard\Forms\OSD_Text\OSD_Text.dll
2010-10-11 10:13 - 2010-10-11 10:13 - 00087040 _____ () C:\Program Files (x86)\X7 Oscar Keyboard Editor\DLL\DLL_MouseDeviceManager.dll
2010-12-02 20:01 - 2010-12-02 20:01 - 00994304 _____ () C:\Program Files (x86)\X7 Oscar Keyboard Editor\Data\X7_Keyboard\Forms\TrayIconWebAdvertisement\TrayIconWebAdvertisement.dll
2010-12-02 19:29 - 2010-12-02 19:29 - 00900608 _____ () C:\Program Files (x86)\X7 Oscar Keyboard Editor\Data\X7_Keyboard\Forms\ProfileHint\ProfileHint.dll
2010-12-03 14:43 - 2010-12-03 14:43 - 00943104 _____ () C:\Program Files (x86)\X7 Oscar Keyboard Editor\Data\X7_Keyboard\Forms\KeySettingRemind\KeySettingRemind.dll
2010-09-20 14:18 - 2010-09-20 14:18 - 00085504 _____ () C:\Program Files (x86)\X7 Oscar Keyboard Editor\DLL\DLL_ZoomControl.dll
2010-09-20 14:18 - 2010-09-20 14:18 - 00054272 _____ () C:\Program Files (x86)\X7 Oscar Keyboard Editor\DLL\DLL_ScrollbarControl.dll
2010-09-20 14:19 - 2010-09-20 14:19 - 00062976 _____ () C:\Program Files (x86)\X7 Oscar Keyboard Editor\DLL\DLL_AnalyzeGesturesInRight.dll
2010-11-01 20:16 - 2010-11-01 20:16 - 00062976 _____ () C:\Program Files (x86)\X7 Oscar Keyboard Editor\DLL\DLL_AnalyzeGesturesInOne.dll
2015-08-07 22:51 - 2010-12-02 17:56 - 00815104 ____N () C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\Data\X7_5Mode\Forms\OSD_Text\OSD_Text.dll
2015-08-07 22:51 - 2011-01-09 20:45 - 00088064 ____N () C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\DLL\DLL_MouseDeviceManager.dll
2015-08-07 22:51 - 2011-04-06 16:06 - 00067072 ____N () C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\DLL\DLL_PenSuit.dll
2015-08-07 22:51 - 2012-02-07 11:20 - 02413568 ____N () C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\Data\X7_5Mode\Forms\ScreenCapture\ScreenCapture.dll
2015-08-07 22:51 - 2011-03-21 19:33 - 00999424 ____N () C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\Data\X7_5Mode\Forms\TrayIconWebAdvertisement\TrayIconWebAdvertisement.dll
2015-08-07 22:51 - 2011-05-20 16:52 - 00901632 ____N () C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\Data\X7_5Mode\Forms\ProfileHint\ProfileHint.dll
2015-08-07 22:51 - 2010-12-03 14:43 - 00943104 ____N () C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\Data\X7_5Mode\Forms\KeySettingRemind\KeySettingRemind.dll
2015-08-07 22:51 - 2010-09-20 14:18 - 00085504 ____N () C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\DLL\DLL_ZoomControl.dll
2015-08-07 22:51 - 2010-09-20 14:18 - 00054272 ____N () C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\DLL\DLL_ScrollbarControl.dll
2015-08-07 22:51 - 2011-04-12 15:14 - 00063488 ____N () C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\DLL\DLL_AnalyzeGesturesInRight.dll
2015-08-07 22:51 - 2010-11-01 20:16 - 00062976 ____N () C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\DLL\DLL_AnalyzeGesturesInOne.dll
2015-08-07 22:51 - 2011-08-10 13:43 - 00118272 ____N () C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\DLL\DLL_Wheel4D.dll
2015-09-05 03:42 - 2015-09-05 03:42 - 00137728 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2015-10-14 15:32 - 2015-10-09 02:53 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libglesv2.dll
2015-10-14 15:32 - 2015-10-09 02:53 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libegl.dll
2015-10-16 11:26 - 2015-10-15 13:20 - 16493256 _____ () C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\PepperFlash\19.0.0.226\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Mikołaj\OneDrive:ms-properties

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1242689616-2139182455-2406777970-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\536020.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1242689616-2139182455-2406777970-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_7160243A0C7CC4107B34EB39D013EB64"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{85129455-547F-4BE2-B1E1-BA4D0D8A2828}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{2FF63806-0E91-4FC2-ABCC-F760420AF21B}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{37F1F5BC-759B-43B7-9697-769AB23A3178}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{DEA7D2F2-A1B5-4510-B59B-82F508DFA985}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{D6428655-6F38-4CFA-84EF-08E7F2530F48}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{74B2A722-7D78-4DD3-8B7E-EF0E54C19576}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{55C533E2-4BB3-456D-B8C3-839CE713652E}] => (Allow) C:\Users\Mikołaj\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{00630C19-8A0F-4106-9B77-837B9A62A9D0}] => (Allow) C:\Users\Mikołaj\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{3DF7AF56-4BBD-4796-9475-6E808B1C9DA8}] => (Allow) C:\Users\Mikołaj\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7C39498C-0E82-4E5A-A35B-D8432B7814B4}] => (Allow) C:\Users\Mikołaj\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E2A5B55C-5C4B-4061-9CB1-4B466986620E}] => (Allow) C:\Users\Mikołaj\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{57B67867-2C2B-43DB-9AB5-B4B10F2C2A9E}] => (Allow) C:\Users\Mikołaj\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E184B78F-E0E7-4382-AC29-9C5E69D47AC2}] => (Allow) D:\Steam\steamapps\common\DepthHunter2\dh2.exe
FirewallRules: [{CFB34C3C-FF18-4C2F-9F0F-8A740745934D}] => (Allow) D:\Steam\steamapps\common\DepthHunter2\dh2.exe
FirewallRules: [{46025CAB-3219-4577-900C-6B7D57DAB032}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{567B951C-BDC0-4C46-A43A-B900FD885509}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A8CCE30C-C510-4432-8466-6B080692DAFB}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{F4FBF974-92FF-44DD-BC87-5D2F4F52E030}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{4FC92901-2C40-4139-9D91-7505EA3CC952}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{3928AAF8-7CF0-4CE0-8410-F583C5257B12}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{7FD3197D-5DD1-4BB7-8843-351B24F1CE24}] => (Allow) D:\Steam\steamapps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{6BC1E970-3787-4B3B-B758-0AF7C935AE86}] => (Allow) D:\Steam\steamapps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{F1B7E422-BA70-4E5E-94FF-83DDFC666108}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{814297F4-A1BA-4EC2-BCF0-086366BC053A}] => (Allow) D:\Steam\steamapps\common\Quake Live\quakelive_steam.exe
FirewallRules: [{958A5291-6083-42CB-9190-9FDBAA8612E0}] => (Allow) D:\Steam\steamapps\common\Quake Live\quakelive_steam.exe
FirewallRules: [{6F9B5296-7E6B-4C1B-B82A-91ACCBFEDB8B}] => (Allow) D:\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{B77A7224-73F5-45AB-982C-EAFCC901334A}] => (Allow) D:\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{7E41267B-17DD-49DC-98D8-EF826020E031}] => (Allow) D:\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{2F19B09E-0066-4FEA-90A2-B1F788426CEB}] => (Allow) D:\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{AF855465-2A0B-443A-BB81-79AB807DF316}] => (Allow) D:\Winamp\winamp.exe
FirewallRules: [{55A6D04D-7EB7-451E-8CBB-F010FC19FF1E}] => (Allow) D:\Winamp\winamp.exe
FirewallRules: [{E9092423-28BC-41A8-B4F9-5B71A1EAEFB3}] => (Allow) D:\Steam\steamapps\common\Unturned\Unturned.exe
FirewallRules: [{4B08BC2B-1BD9-4D23-96F3-44F7AAC4E9A7}] => (Allow) D:\Steam\steamapps\common\Unturned\Unturned.exe
FirewallRules: [{9CA3B807-D0BE-44A1-9C6E-34A7A96C41D6}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{90A286EB-0795-4A07-B19B-068D7BA153CD}] => (Allow) D:\GTX Box Team\Total War Attila-The Last Roman\Attila.exe
FirewallRules: [{0285728C-B290-4A6E-9081-14909F5C55A8}] => (Allow) D:\GTX Box Team\Total War Attila-The Last Roman\Attila.exe

==================== Faulty Device Manager Devices =============

Name: GT-S6310
Description: SAMSUNG Mobile MTP Device
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: SAMSUNG Electronics Co., Ltd.
Service: WUDFWpdMtp
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/17/2015 10:59:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: Attila.exe, wersja: 1.4.1.0, sygnatura czasowa: 0x5608f9f0
Nazwa modułu powodującego błąd: Attila.dll, wersja: 1.3.0.0, sygnatura czasowa: 0x558a1673
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x0028c122
Identyfikator procesu powodującego błąd: 0xbf108
Godzina uruchomienia aplikacji powodującej błąd: 0xAttila.exe0
Ścieżka aplikacji powodującej błąd: Attila.exe1
Ścieżka modułu powodującego błąd: Attila.exe2
Identyfikator raportu: Attila.exe3
Pełna nazwa pakietu powodującego błąd: Attila.exe4
Identyfikator aplikacji względem pakietu powodującego błąd: Attila.exe5

Error: (10/17/2015 10:59:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: Attila.exe, wersja: 1.4.1.0, sygnatura czasowa: 0x5608f9f0
Nazwa modułu powodującego błąd: Attila.dll, wersja: 1.3.0.0, sygnatura czasowa: 0x558a1673
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x0028c122
Identyfikator procesu powodującego błąd: 0xbf108
Godzina uruchomienia aplikacji powodującej błąd: 0xAttila.exe0
Ścieżka aplikacji powodującej błąd: Attila.exe1
Ścieżka modułu powodującego błąd: Attila.exe2
Identyfikator raportu: Attila.exe3
Pełna nazwa pakietu powodującego błąd: Attila.exe4
Identyfikator aplikacji względem pakietu powodującego błąd: Attila.exe5

Error: (10/17/2015 10:59:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: Attila.exe, wersja: 1.4.1.0, sygnatura czasowa: 0x5608f9f0
Nazwa modułu powodującego błąd: Attila.dll, wersja: 1.3.0.0, sygnatura czasowa: 0x558a1673
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x0028c122
Identyfikator procesu powodującego błąd: 0xbefb8
Godzina uruchomienia aplikacji powodującej błąd: 0xAttila.exe0
Ścieżka aplikacji powodującej błąd: Attila.exe1
Ścieżka modułu powodującego błąd: Attila.exe2
Identyfikator raportu: Attila.exe3
Pełna nazwa pakietu powodującego błąd: Attila.exe4
Identyfikator aplikacji względem pakietu powodującego błąd: Attila.exe5

Error: (10/17/2015 10:59:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: Attila.exe, wersja: 1.4.1.0, sygnatura czasowa: 0x5608f9f0
Nazwa modułu powodującego błąd: Attila.dll, wersja: 1.3.0.0, sygnatura czasowa: 0x558a1673
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x0028c122
Identyfikator procesu powodującego błąd: 0xbefb8
Godzina uruchomienia aplikacji powodującej błąd: 0xAttila.exe0
Ścieżka aplikacji powodującej błąd: Attila.exe1
Ścieżka modułu powodującego błąd: Attila.exe2
Identyfikator raportu: Attila.exe3
Pełna nazwa pakietu powodującego błąd: Attila.exe4
Identyfikator aplikacji względem pakietu powodującego błąd: Attila.exe5

Error: (10/17/2015 10:58:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: Attila.exe, wersja: 1.4.1.0, sygnatura czasowa: 0x5608f9f0
Nazwa modułu powodującego błąd: Attila.dll, wersja: 1.3.0.0, sygnatura czasowa: 0x558a1673
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x0028c122
Identyfikator procesu powodującego błąd: 0xbe950
Godzina uruchomienia aplikacji powodującej błąd: 0xAttila.exe0
Ścieżka aplikacji powodującej błąd: Attila.exe1
Ścieżka modułu powodującego błąd: Attila.exe2
Identyfikator raportu: Attila.exe3
Pełna nazwa pakietu powodującego błąd: Attila.exe4
Identyfikator aplikacji względem pakietu powodującego błąd: Attila.exe5

Error: (10/17/2015 10:58:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: Attila.exe, wersja: 1.4.1.0, sygnatura czasowa: 0x5608f9f0
Nazwa modułu powodującego błąd: Attila.dll, wersja: 1.3.0.0, sygnatura czasowa: 0x558a1673
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x0028c122
Identyfikator procesu powodującego błąd: 0xbe950
Godzina uruchomienia aplikacji powodującej błąd: 0xAttila.exe0
Ścieżka aplikacji powodującej błąd: Attila.exe1
Ścieżka modułu powodującego błąd: Attila.exe2
Identyfikator raportu: Attila.exe3
Pełna nazwa pakietu powodującego błąd: Attila.exe4
Identyfikator aplikacji względem pakietu powodującego błąd: Attila.exe5

Error: (10/17/2015 10:57:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: Attila.exe, wersja: 1.4.1.0, sygnatura czasowa: 0x5608f9f0
Nazwa modułu powodującego błąd: Attila.dll, wersja: 1.3.0.0, sygnatura czasowa: 0x558a1673
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x0028c122
Identyfikator procesu powodującego błąd: 0xbe498
Godzina uruchomienia aplikacji powodującej błąd: 0xAttila.exe0
Ścieżka aplikacji powodującej błąd: Attila.exe1
Ścieżka modułu powodującego błąd: Attila.exe2
Identyfikator raportu: Attila.exe3
Pełna nazwa pakietu powodującego błąd: Attila.exe4
Identyfikator aplikacji względem pakietu powodującego błąd: Attila.exe5

Error: (10/17/2015 10:57:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: Attila.exe, wersja: 1.4.1.0, sygnatura czasowa: 0x5608f9f0
Nazwa modułu powodującego błąd: Attila.dll, wersja: 1.3.0.0, sygnatura czasowa: 0x558a1673
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x0028c122
Identyfikator procesu powodującego błąd: 0xbe498
Godzina uruchomienia aplikacji powodującej błąd: 0xAttila.exe0
Ścieżka aplikacji powodującej błąd: Attila.exe1
Ścieżka modułu powodującego błąd: Attila.exe2
Identyfikator raportu: Attila.exe3
Pełna nazwa pakietu powodującego błąd: Attila.exe4
Identyfikator aplikacji względem pakietu powodującego błąd: Attila.exe5

Error: (10/17/2015 10:57:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: Attila.exe, wersja: 1.4.1.0, sygnatura czasowa: 0x5608f9f0
Nazwa modułu powodującego błąd: Attila.dll, wersja: 1.3.0.0, sygnatura czasowa: 0x558a1673
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x0028c122
Identyfikator procesu powodującego błąd: 0xbe10c
Godzina uruchomienia aplikacji powodującej błąd: 0xAttila.exe0
Ścieżka aplikacji powodującej błąd: Attila.exe1
Ścieżka modułu powodującego błąd: Attila.exe2
Identyfikator raportu: Attila.exe3
Pełna nazwa pakietu powodującego błąd: Attila.exe4
Identyfikator aplikacji względem pakietu powodującego błąd: Attila.exe5

Error: (10/17/2015 10:57:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: Attila.exe, wersja: 1.4.1.0, sygnatura czasowa: 0x5608f9f0
Nazwa modułu powodującego błąd: Attila.dll, wersja: 1.3.0.0, sygnatura czasowa: 0x558a1673
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x0028c122
Identyfikator procesu powodującego błąd: 0xbe10c
Godzina uruchomienia aplikacji powodującej błąd: 0xAttila.exe0
Ścieżka aplikacji powodującej błąd: Attila.exe1
Ścieżka modułu powodującego błąd: Attila.exe2
Identyfikator raportu: Attila.exe3
Pełna nazwa pakietu powodującego błąd: Attila.exe4
Identyfikator aplikacji względem pakietu powodującego błąd: Attila.exe5


System errors:
=============
Error: (10/18/2015 11:52:15 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Usługa Superfetch zakończyła działanie; wystąpił następujący błąd:
%%1062

Error: (10/17/2015 11:39:21 PM) (Source: DCOM) (EventID: 10010) (User: KOMPUTERE)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (10/17/2015 11:39:21 PM) (Source: DCOM) (EventID: 10010) (User: KOMPUTERE)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (10/17/2015 05:58:02 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80240055: Update for Windows 8.1 for x64-based Systems (KB2976978).

Error: (10/17/2015 04:16:45 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070002: Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2 x64 Edition - October 2015 (KB890830).

Error: (10/17/2015 04:16:45 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalacja nie powiodła się: system Windows nie mógł zainstalować następującej aktualizacji, ponieważ wystąpił błąd 0x80070002: Update for Windows 8.1 for x64-based Systems (KB2976978).

Error: (10/15/2015 10:59:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi Steam Client Service z powodu następującego błędu:
%%1053

Error: (10/15/2015 10:59:13 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Steam Client Service.

Error: (10/14/2015 09:25:18 PM) (Source: DCOM) (EventID: 10010) (User: KOMPUTERE)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (10/14/2015 09:25:18 PM) (Source: DCOM) (EventID: 10010) (User: KOMPUTERE)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}


==================== Memory info ===========================

Processor: Intel® Core i3-2120 CPU @ 3.30GHz
Percentage of memory in use: 33%
Total physical RAM: 8137.71 MB
Available physical RAM: 5402.12 MB
Total Virtual: 9737.71 MB
Available Virtual: 6059.72 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.31 GB) (Free:63.44 GB) NTFS
Drive d: () (Fixed) (Total:368.1 GB) (Free:190.77 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 7A452D4E)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=97.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=368.1 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================