Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 18-01-2017
Ran by ULA (administrator) on ULA-LAPTOK (18-01-2017 22:30:21)
Running from C:\Users\ULA\Downloads\frst
Loaded Profiles: ULA (Available Profiles: ULA & DefaultAppPool)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Dassault Systèmes) C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\ProgramData\ASGVIS\Dongle Utilities\startvrlservice.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe
() C:\ProgramData\ASGVIS\Dongle Utilities\vrlservice.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8079408 2015-07-12] (Lenovo (Beijing) Limited)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2015-01-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [6199128 2015-07-12] (Lenovo(beijing) Limited)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-290575239-1943465458-3441839995-1000\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1081224 2013-02-05] (Autodesk, Inc.)
HKU\S-1-5-21-290575239-1943465458-3441839995-1000\...\MountPoints2: {ddf9d790-843c-11e4-84b0-b888e37323bf} - G:\Startme.exe
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1081224 2013-02-05] (Autodesk, Inc.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [167312 2015-02-04] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [147576 2015-02-04] (NVIDIA Corporation)
AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [147576 2015-02-04] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Network Server.lnk [2016-09-13]
ShortcutTarget: Network Server.lnk -> C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe (WIBU-SYSTEMS AG)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 62.179.1.61 62.179.1.63
Tcpip\..\Interfaces\{3A15FC55-40EE-4815-9948-642C2EFA6945}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{5712E8CE-D342-4FA6-8384-7780B617A97D}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{944C1B67-934A-4C81-A4A5-788AFB68053C}: [DhcpNameServer] 62.179.1.61 62.179.1.63
Tcpip\..\Interfaces\{DDA35C3D-AEB5-4037-BE3C-7FE4C1B17EDF}: [DhcpNameServer] 217.172.224.160 89.231.1.206

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-290575239-1943465458-3441839995-1000\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKU\S-1-5-21-290575239-1943465458-3441839995-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-07-06] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-06] (Oracle Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\ULA\AppData\Roaming\Mozilla\Firefox\Profiles\w8x9444m.default [2017-01-18]
FF Extension: (Google Translator for Firefox) - C:\Users\ULA\AppData\Roaming\Mozilla\Firefox\Profiles\w8x9444m.default\Extensions\translator@zoli.bod.xpi [2016-09-15]
FF Extension: (Adblock Plus) - C:\Users\ULA\AppData\Roaming\Mozilla\Firefox\Profiles\w8x9444m.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-27]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-11-19] [not signed]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-07-06] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-06] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-20] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-20] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)

Chrome: 
=======
CHR Profile: C:\Users\ULA\AppData\Local\Google\Chrome\User Data\Default [2017-01-18]
CHR Extension: (Prezentacje Google) - C:\Users\ULA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-09-22]
CHR Extension: (Dokumenty Google) - C:\Users\ULA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-22]
CHR Extension: (Dysk Google) - C:\Users\ULA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-22]
CHR Extension: (YouTube) - C:\Users\ULA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-22]
CHR Extension: (Arkusze Google) - C:\Users\ULA\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-09-22]
CHR Extension: (Dokumenty Google offline) - C:\Users\ULA\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-24]
CHR Extension: (AdBlock) - C:\Users\ULA\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-29]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\ULA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-22]
CHR Extension: (Gmail) - C:\Users\ULA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-22]
CHR Extension: (Chrome Media Router) - C:\Users\ULA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-26]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [File not signed]
R2 DraftSight API Service; C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe [123904 2014-09-25] (Dassault Systèmes) [File not signed]
S4 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [244392 2015-06-02] (Foxit Software Inc.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2015-01-16] (NVIDIA Corporation)
S3 InstallShield Licensing Service; C:\Program Files (x86)\Common Files\InstallShield Shared\Service\InstallShield Licensing Service.exe [78536 2015-07-06] (Macrovision                                                    )
S4 McNeelUpdate; C:\Program Files (x86)\McNeelUpdate\5.0\McNeelUpdateService.exe [67224 2014-06-09] (Robert McNeel & Associates)
R2 MSLN; C:\ProgramData\Microsoft\Phone Tools\CoreCon\12.0\3082\NonSDKAddonLangVer.dll [443904 2017-01-18] () [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-01-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833360 2015-01-16] (NVIDIA Corporation)
S4 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (arvato digital services llc)
S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 VRLService; C:\ProgramData\ASGVIS\Dongle Utilities\startvrlservice.exe [212992 2012-12-06] () [File not signed]
R2 W3PCC; C:\ProgramData\Sun\Java\extension.dll [335360 2016-09-12] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
S3 WsAppService; C:\Program Files (x86)\Wondershare\WAF\WsAppService.exe [252816 2015-04-30] (Wondershare)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [104048 2013-10-02] (Qualcomm Atheros Co., Ltd.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-01-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [952832 2013-10-02] (Vimicro Corporation)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [97792 2011-09-22] (WIBU-SYSTEMS AG)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-18 22:26 - 2017-01-18 22:26 - 00000040 _____ C:\Program Files (x86)\settings.dat
2017-01-18 22:26 - 2017-01-18 22:26 - 00000000 ____D C:\Program Files (x86)\reports
2017-01-18 22:26 - 2017-01-18 22:26 - 00000000 _____ C:\Program Files (x86)\metadata
2017-01-18 22:23 - 2017-01-18 22:25 - 00000022 _____ C:\Users\Public\Documents\temp.dat
2017-01-18 22:21 - 2017-01-18 22:30 - 00000000 ____D C:\Users\ULA\Downloads\frst
2017-01-18 20:58 - 2017-01-18 20:58 - 00055231 _____ C:\Users\ULA\Downloads\Shortcut.txt
2017-01-18 20:57 - 2017-01-18 20:59 - 00043558 _____ C:\Users\ULA\Downloads\Addition.txt
2017-01-18 20:56 - 2017-01-18 20:59 - 00023058 _____ C:\Users\ULA\Downloads\FRST.txt
2017-01-18 20:55 - 2017-01-18 22:30 - 00000000 ____D C:\FRST
2017-01-18 20:55 - 2017-01-18 20:55 - 00000000 ____D C:\Users\ULA\Downloads\FRST-OlderVersion
2017-01-18 19:58 - 2017-01-18 19:58 - 00000017 _____ C:\Users\Public\Documents\cfg.ini
2017-01-17 16:42 - 2017-01-17 16:42 - 00000019 _____ C:\Users\Public\Documents\cc.ini
2017-01-15 17:17 - 2017-01-15 17:32 - 00000000 ____D C:\Users\ULA\Downloads\Nine.Lives.2016.720p.BRRip.x264.AAC-ETRG
2017-01-14 17:03 - 2017-01-14 17:03 - 00000000 ____D C:\Users\ULA\Downloads\Asthma.2014.BDRiP.x264-THUGLiNE[PRiME]
2017-01-11 22:24 - 2017-01-18 21:14 - 00697856 _____ C:\Users\ULA\Desktop\U2017.xls
2017-01-11 22:08 - 2017-01-11 22:08 - 02022400 _____ C:\Users\ULA\Downloads\47-Szablon-budzet-domowy-2016-v2-2 (1).xls
2017-01-11 22:03 - 2017-01-11 22:03 - 02022400 _____ C:\Users\ULA\Downloads\47-Szablon-budzet-domowy-2016-v2-2.xls
2017-01-11 22:01 - 2017-01-11 22:01 - 00632459 _____ C:\Users\ULA\Downloads\Budżet-domowy-Racjonalnie-1.01.xlsx
2017-01-11 21:58 - 2016-12-31 16:45 - 00308521 _____ C:\Users\ULA\Desktop\U - Copy.ods
2017-01-11 21:25 - 2017-01-11 21:25 - 01035194 _____ C:\Users\ULA\Downloads\48-Szablon-budzet-domowy-2017-v3-0.xlsx
2017-01-10 21:13 - 2017-01-10 21:13 - 04408376 _____ C:\Users\ULA\Downloads\ranking_Polityka_25_2015.pdf
2017-01-10 21:10 - 2017-01-10 21:10 - 00056065 _____ C:\Users\ULA\Downloads\50930148_F_40111957_01_17_F.pdf
2017-01-10 20:00 - 2017-01-10 20:00 - 00054977 _____ C:\Users\ULA\Downloads\Black.Mirror.S01E03.HDTV.XviD-RiVER.srt
2017-01-10 19:59 - 2017-01-10 19:59 - 09348248 _____ ( ) C:\Users\ULA\Downloads\NapiProjektSetup2.2.0.2399 (1).exe
2017-01-10 19:58 - 2017-01-10 19:58 - 09348248 _____ ( ) C:\Users\ULA\Downloads\NapiProjektSetup2.2.0.2399.exe
2017-01-03 21:33 - 2017-01-03 21:57 - 00000000 ____D C:\Users\ULA\Downloads\Girl Interrupted.1999.DVDRip.XviD-VLiS
2017-01-03 21:28 - 2017-01-15 19:07 - 00000000 ____D C:\Users\ULA\AppData\Roaming\vlc
2017-01-03 18:35 - 2017-01-03 18:59 - 605765542 _____ C:\Users\ULA\Downloads\in.the.room.2015.720p.bluray.hevc.x265.rmteam.mkv
2016-12-27 18:38 - 2016-12-27 18:38 - 00014043 _____ C:\Users\ULA\Downloads\SONAR.ogg
2016-12-27 07:12 - 2016-12-27 07:12 - 00023040 _____ C:\Users\ULA\Downloads\wniosek-o-udzielenie-urlopu-na-zadanie.doc

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-18 22:26 - 2016-12-07 20:32 - 00000000 ____D C:\Users\ULA\AppData\LocalLow\Mozilla
2017-01-18 22:24 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-18 20:53 - 2014-11-06 12:49 - 00000000 ____D C:\Users\ULA\AppData\Roaming\uTorrent
2017-01-18 20:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-01-18 20:32 - 2016-12-06 19:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-01-18 20:06 - 2009-07-14 05:45 - 00026544 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-18 20:06 - 2009-07-14 05:45 - 00026544 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-10 19:59 - 2015-05-02 17:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NapiProjekt
2017-01-10 19:59 - 2015-05-02 17:54 - 00000000 ____D C:\Program Files (x86)\NapiProjekt
2016-12-31 16:45 - 2016-01-10 21:30 - 00308521 _____ C:\Users\ULA\Desktop\U.ods
2016-12-27 17:55 - 2009-07-14 06:13 - 00859310 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-27 17:55 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32
2016-12-27 17:55 - 2009-07-14 03:36 - 00710896 _____ C:\Windows\system32\perfh009.dat
2016-12-27 17:55 - 2009-07-14 03:36 - 00140862 _____ C:\Windows\system32\perfc009.dat
2016-12-26 21:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\catroot2
2016-12-20 22:23 - 2014-11-06 17:21 - 00000000 __SHD C:\Windows\Installer
2016-12-20 22:18 - 2016-09-22 19:12 - 00003480 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-20 22:18 - 2016-09-22 19:12 - 00003352 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-20 22:18 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Tasks

==================== Files in the root of some directories =======

2017-01-18 22:26 - 2017-01-18 22:26 - 0000000 _____ () C:\Program Files (x86)\metadata
2017-01-18 22:26 - 2017-01-18 22:26 - 0000040 _____ () C:\Program Files (x86)\settings.dat
2015-08-06 15:48 - 2015-08-06 15:48 - 0000132 _____ () C:\Users\ULA\AppData\Roaming\Adobe AIFF Format CS6 Prefs
2015-05-13 08:48 - 2016-10-26 22:07 - 0000132 _____ () C:\Users\ULA\AppData\Roaming\Adobe PNG Format CS6 Prefs
2015-04-26 18:04 - 2015-04-26 18:04 - 0007624 _____ () C:\Users\ULA\AppData\Local\Resmon.ResmonCfg
2014-11-18 21:46 - 2014-11-18 21:46 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-01-13 17:13

==================== End of FRST.txt ============================