Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 20-04-2017
Uruchomiony przez admin (administrator)  ISAMUXPOMPA (21-04-2017 19:39:40)
Uruchomiony z C:\Users\admin\Desktop\FRST
Załadowane profile: admin (Dostępne profile: admin)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(IObit) C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\PubMonitor.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFTips.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Desktop.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [6004512 2017-01-11] (IObit)
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHJE.EXE [283232 2012-02-29] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4557504 2016-10-06] (Disc Soft Ltd)
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [Advanced SystemCare 10] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [3919136 2017-02-08] (IObit)
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\MountPoints2: {1fd6adbd-1493-11e7-a5d0-c80aa90ece07} - F:\AutoRun.exe
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\MountPoints2: {1fd6adc1-1493-11e7-a5d0-c80aa90ece07} - F:\AutoRun.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Brak pliku
BootExecute: autocheck autochk * SmartDefragBootTime.exe

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{0A6F6C4D-74A9-421C-A7F8-3846B8CF6A1F}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{A022C0B8-67B1-496C-8D30-EA5C1A70A46A}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{D8F0A4D8-62FF-4D5B-BC9B-39614E0CC36D}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
BHO: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-02-22] (McAfee, Inc.)
BHO-x32: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-02-22] (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-02-22] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-02-22] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-02-22] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-02-22] (McAfee, Inc.)

FireFox:
========
FF ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\0rtbcgd5.default-1465042315559 [2017-04-21]
FF user.js: detected! => C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\0rtbcgd5.default-1465042315559\user.js [2017-02-24]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\0rtbcgd5.default-1465042315559 -> Google
FF Extension: (Firefox Hotfix) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\0rtbcgd5.default-1465042315559\Extensions\firefox-hotfix@mozilla.org.xpi [2016-09-03]
FF Extension: (uBlock Origin) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\0rtbcgd5.default-1465042315559\Extensions\uBlock0@raymondhill.net.xpi [2017-02-25]
FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2017-03-29]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-19] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-19] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-11] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-11] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-06-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-06-03] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1693114668-2537149228-3336235061-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\admin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default [2017-04-21]
CHR Extension: (Adblock Plus) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-03-23]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-15]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AdvancedSystemCareService10; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [462624 2016-12-12] (IObit)
S4 AESTFilters; C:\Program Files\IDT\WDM\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation) [Brak podpisu cyfrowego]
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1468608 2016-10-06] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [395024 2016-12-07] (EasyAntiCheat Ltd)
S3 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-03-28] (Hi-Rez Studios) [Brak podpisu cyfrowego]
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2013-02-06] ()
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [1740576 2017-01-10] (IObit)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [3046688 2016-12-16] (IObit)
S3 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [188352 2017-02-22] (McAfee, Inc.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5867216 2016-08-08] (INCA Internet Co., Ltd.)
S4 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1286896 2016-05-19] (Overwolf LTD)
S4 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [340480 2013-12-04] (IDT, Inc.) [Brak podpisu cyfrowego]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7757040 2017-04-06] (TeamViewer GmbH)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [129152 2017-02-24] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-08-04] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-08-04] (Disc Soft Ltd)
S3 ew_hwusbdev; C:\Windows\System32\DRIVERS\ew_hwusbdev.sys [109568 2013-01-25] (Huawei Technologies Co., Ltd.) [Brak podpisu cyfrowego]
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-04-19] (REALiX(tm))
R3 IMFFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\IMFFilter.sys [22208 2016-12-16] (IObit)
R3 johci; C:\Windows\System32\DRIVERS\johci.sys [26208 2012-07-16] (JMicron Technology Corp.)
S3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [46240 2016-06-06] (McAfee, Inc.)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2016-12-16] (IObit.com)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21360 2016-03-22] (IObit)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1828736 2009-03-13] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [394296 2017-03-16] (Duplex Secure Ltd.)
S3 STHDA; C:\Windows\System32\DRIVERS\stwrt64.sys [551936 2013-12-04] (IDT, Inc.) [Brak podpisu cyfrowego]
S3 ubohci; C:\Windows\System32\DRIVERS\ubohci.sys [132608 2012-10-05] (Unibrain) [Brak podpisu cyfrowego]
S2 ubsbm; C:\Windows\System32\DRIVERS\ubsbm.sys [24064 2012-10-05] (Unibrain) [Brak podpisu cyfrowego]
S2 ubumapi; C:\Windows\System32\DRIVERS\ubumapi.sys [92160 2012-10-05] (Unibrain) [Brak podpisu cyfrowego]
R3 VBAudioVACMME; C:\Windows\System32\DRIVERS\vbaudio_cable64_win7.sys [41192 2014-09-02] (Windows (R) Win 7 DDK provider)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-04-21 19:38 - 2017-04-21 19:39 - 00000000 ____D C:\Users\admin\Desktop\FRST
2017-04-21 19:17 - 2017-04-21 19:36 - 00000000 ____D C:\Users\admin\AppData\Roaming\foobar2000
2017-04-21 19:16 - 2017-04-21 19:16 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
2017-04-21 19:16 - 2017-04-21 19:16 - 00001035 _____ C:\Users\Public\Desktop\foobar2000.lnk
2017-04-21 19:16 - 2017-04-21 19:16 - 00000000 ____D C:\Program Files (x86)\foobar2000
2017-04-21 19:15 - 2017-04-21 19:15 - 03958951 _____ (foobar2000.org) C:\Users\admin\Downloads\foobar2000_v1.3.15.exe
2017-04-21 19:00 - 2017-04-21 19:00 - 01139147 _____ C:\Users\admin\Downloads\VBCABLE_Driver_Pack43 (2).zip
2017-04-21 18:44 - 2017-04-21 18:44 - 00000000 ____D C:\Users\admin\Desktop\ts
2017-04-21 18:43 - 2017-04-21 18:44 - 01139147 _____ C:\Users\admin\Downloads\VBCABLE_Driver_Pack43 (1).zip
2017-04-18 14:08 - 2017-04-21 19:09 - 00000000 ____D C:\Program Files\VB
2017-04-18 14:07 - 2014-09-02 18:01 - 00041192 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\vbaudio_cable64_win7.sys
2017-04-18 14:06 - 2017-04-18 14:06 - 01139147 _____ C:\Users\admin\Downloads\VBCABLE_Driver_Pack43.zip
2017-04-17 18:27 - 2017-04-17 18:27 - 44577682 _____ C:\Users\admin\Downloads\CSGO_Changer_OBT6.rar
2017-04-15 20:19 - 2017-04-15 20:19 - 00000971 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2017-04-14 22:23 - 2017-04-14 22:37 - 00000000 ____D C:\Users\admin\AppData\Local\FalloutShelter
2017-04-09 10:53 - 2017-04-09 11:15 - 78186716 _____ C:\Users\admin\Downloads\mp3
2017-03-29 21:08 - 2017-03-29 21:08 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
2017-03-29 21:08 - 2017-03-29 21:08 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcecm_01007.Wdf
2017-03-29 21:08 - 2017-03-29 21:08 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
2017-03-29 21:07 - 2017-03-29 21:07 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
2017-03-29 21:06 - 2013-02-17 05:16 - 00244736 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys
2017-03-29 21:06 - 2013-02-17 05:15 - 00076800 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2017-03-29 21:06 - 2013-01-25 05:35 - 00105984 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2017-03-29 21:06 - 2013-01-25 03:16 - 00109568 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys
2017-03-29 21:06 - 2013-01-23 09:02 - 00452096 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys
2017-03-29 21:06 - 2013-01-23 08:57 - 00225920 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2017-03-29 21:06 - 2013-01-23 05:32 - 00091648 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2017-03-29 21:06 - 2013-01-23 05:32 - 00030720 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys
2017-03-29 21:06 - 2012-12-22 03:46 - 00014976 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys
2017-03-29 21:06 - 2012-08-20 02:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2017-03-29 21:06 - 2012-08-20 02:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll
2017-03-29 21:06 - 2010-10-08 10:59 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2017-03-29 21:06 - 2010-09-26 12:09 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys
2017-03-29 21:06 - 2010-08-06 01:43 - 01001472 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys
2017-03-29 21:05 - 2017-03-29 21:08 - 00000000 ____D C:\ProgramData\DatacardService
2017-03-29 21:05 - 2017-03-29 21:05 - 00000000 ____D C:\Program Files (x86)\MobileWiFi
2017-03-25 16:27 - 2017-03-25 16:27 - 00000000 ____D C:\Program Files\McAfee
2017-03-25 16:27 - 2017-03-25 16:27 - 00000000 ____D C:\Program Files\AVAST Software
2017-03-25 16:26 - 2017-03-29 17:20 - 00000000 ____D C:\Program Files (x86)\McAfee
2017-03-25 16:25 - 2017-03-25 16:26 - 00000000 ____D C:\ProgramData\McAfee
2017-03-25 16:25 - 2017-03-25 16:25 - 00000000 ____D C:\Users\admin\AppData\Roaming\WorldofTanks
2017-03-25 16:25 - 2017-03-25 16:25 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks
2017-03-25 16:24 - 2017-03-25 16:24 - 01273144 _____ ( ) C:\Users\admin\Downloads\pobierz_Razer_cortex_V7.6.8.66.exe
2017-03-22 20:45 - 2017-03-22 20:45 - 00000874 _____ C:\Users\Public\Desktop\AxessManager.lnk
2017-03-22 20:45 - 2017-03-22 20:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Axesstel
2017-03-22 20:45 - 2017-03-22 20:45 - 00000000 ____D C:\Program Files (x86)\Axesstel
2017-03-22 19:51 - 2017-03-22 20:09 - 00000000 ____D C:\Users\admin\AppData\Local\ElevatedDiagnostics

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-04-21 19:39 - 2016-06-03 22:42 - 00000000 ____D C:\FRST
2017-04-21 19:36 - 2016-04-19 21:30 - 00000000 ____D C:\Users\admin\AppData\Roaming\TS3Client
2017-04-21 19:22 - 2009-07-14 06:45 - 00028352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-04-21 19:22 - 2009-07-14 06:45 - 00028352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-04-21 19:18 - 2011-02-04 19:20 - 00740672 _____ C:\Windows\system32\perfh015.dat
2017-04-21 19:18 - 2011-02-04 19:20 - 00156214 _____ C:\Windows\system32\perfc015.dat
2017-04-21 19:18 - 2009-07-14 07:13 - 01670518 _____ C:\Windows\system32\PerfStringBackup.INI
2017-04-21 19:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-04-21 19:16 - 2017-02-22 20:29 - 00002892 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (admin)
2017-04-21 19:12 - 2016-04-19 00:55 - 00000000 ____D C:\ProgramData\ProductData
2017-04-21 19:11 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-04-21 19:10 - 2016-06-27 14:43 - 00000000 ____D C:\Program Files (x86)\Steam
2017-04-21 19:10 - 2016-06-02 20:02 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2017-04-21 18:15 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2017-04-21 16:38 - 2016-04-23 12:14 - 00000000 ___RD C:\Users\admin\Desktop\instalki
2017-04-21 16:36 - 2016-07-15 12:18 - 00000000 ___RD C:\Users\admin\Desktop\MUZA
2017-04-21 16:34 - 2016-10-03 23:40 - 00000000 ____D C:\Users\admin\Desktop\gry
2017-04-21 16:33 - 2016-06-27 15:14 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-04-21 16:02 - 2016-04-19 00:47 - 00000000 ____D C:\Users\admin\AppData\Local\Google
2017-04-21 13:37 - 2016-10-14 17:17 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2017-04-14 22:25 - 2016-11-05 16:55 - 00000000 ____D C:\Users\admin\AppData\Local\CrashDumps
2017-04-14 15:14 - 2016-04-19 21:29 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2017-04-13 19:47 - 2016-04-19 01:13 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-04-13 19:46 - 2016-04-19 01:13 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-04-08 00:26 - 2016-04-20 23:37 - 00000000 ____D C:\Users\admin\AppData\Roaming\.minecraft
2017-03-30 19:14 - 2009-07-14 07:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-03-29 17:19 - 2016-04-23 12:52 - 00000000 ____D C:\ProgramData\AVAST Software
2017-03-22 20:43 - 2016-04-18 23:44 - 00000000 ____D C:\Users\admin
2017-03-22 20:41 - 2016-05-16 15:29 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-03-22 20:41 - 2010-11-21 09:16 - 00000000 ___RD C:\Users\Public\Recorded TV
2017-03-22 20:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration

==================== Pliki w katalogu głównym wybranych folderów =======

2005-07-29 16:49 - 2005-07-30 21:03 - 0002321 _____ () C:\Program Files (x86)\Polonizacja - Readme.txt
2016-07-15 14:23 - 2016-07-15 14:23 - 0000045 _____ () C:\Users\admin\AppData\Roaming\WB.CFG
2016-04-20 16:19 - 2016-06-07 20:45 - 0007597 _____ () C:\Users\admin\AppData\Local\Resmon.ResmonCfg

Niektóre pliki w TEMP:
====================
2017-04-21 13:36 - 2017-02-24 01:36 - 0037376 _____ (Microsoft) C:\Users\admin\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
2017-04-21 13:36 - 2017-02-23 18:05 - 0020480 _____ (Microsoft) C:\Users\admin\AppData\Local\Temp\HiRezLauncherControls.dll
2017-03-25 16:25 - 2017-03-25 16:25 - 1273144 _____ (                                                            ) C:\Users\admin\AppData\Local\Temp\ICReinstall_pobierz_Razer_cortex_V7.6.8.66.exe

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-04-14 14:41

==================== Koniec  FRST.txt ============================