Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 25-06-2017 01
Uruchomiony przez Krzysztof (administrator)  GRZELAK (27-06-2017 22:02:30)
Uruchomiony z C:\Users\Krzysztof\Desktop
Załadowane profile: Krzysztof (Dostępne profile: Krzysztof)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Windows (R) Win 7 DDK provider) C:\Windows\System32\DbxSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\wusa.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213832 2017-06-26] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-08-13] (Advanced Micro Devices, Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-1886510041-2021175145-3369468900-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9532120 2017-04-11] (Piriform Ltd)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-04-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-06-26] (AVAST Software)
Startup: C:\Users\Krzysztof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SpectraView II Gamma Loader.lnk [2017-06-25]
ShortcutTarget: SpectraView II Gamma Loader.lnk -> C:\Program Files (x86)\NEC Display Solutions\SpectraView II\SpectraView.exe (NEC Display Solutions, Ltd.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{05912885-6891-43D3-B03E-0C3556A88A30}: [DhcpNameServer] 192.168.1.1 0.0.0.0

Internet Explorer:
==================
HKU\S-1-5-21-1886510041-2021175145-3369468900-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-06-26] (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-06-06] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-06-26] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-06-06] (Oracle Corporation)
DPF: HKLM-x32 {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} hxxp://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1472310253913

FireFox:
========
FF DefaultProfile: lzuu7vup.default-1496673006182
FF ProfilePath: C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\lzuu7vup.default-1496673006182 [2017-06-27]
FF Extension: (Avast SafePrice) - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\lzuu7vup.default-1496673006182\Extensions\sp@avast.com.xpi [2017-06-26]
FF Extension: (uBlock Origin) - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\lzuu7vup.default-1496673006182\Extensions\uBlock0@raymondhill.net.xpi [2017-06-27]
FF Extension: (Avast Online Security) - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\lzuu7vup.default-1496673006182\Extensions\wrc@avast.com.xpi [2017-06-26]
FF HKLM-x32\...\Firefox\Extensions: [{20978f0f-2978-4992-ae97-7d373c44e04e}] - C:\Program Files (x86)\Common Files\Techland\Translator\MozillaTranslator
FF Extension: (Mozilla Translator) - C:\Program Files (x86)\Common Files\Techland\Translator\MozillaTranslator [2016-04-27] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Thunderbird\Extensions: [{20978f0f-2978-4992-ae97-7d373c44e04e}] - C:\Program Files (x86)\Common Files\Techland\Translator\MozillaTranslator
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll [2017-06-16] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Brak pliku]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-16] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-06-06] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-06-06] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2017-01-05] ( Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [Brak pliku]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 appdrvrem01; C:\Windows\System32\appdrvrem01.exe [551824 2016-04-27] (Protection Technology)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7430992 2017-06-26] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263312 2017-06-26] (AVAST Software)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [42792 2016-09-20] (Windows (R) Win 7 DDK provider)
R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [155080 2017-05-05] (Malwarebytes Corporation)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [382248 2016-04-28] (Nero AG)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 ALCXWDM; C:\Windows\System32\drivers\RTKVAC64.SYS [3479712 2008-09-16] (Realtek Semiconductor Corp.)
R1 appdrv01; C:\Windows\System32\Drivers\appdrv01.sys [2771056 2016-04-27] (Protection Technology)
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [319984 2017-06-26] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [198944 2017-06-26] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [343264 2017-06-26] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [57704 2017-06-26] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [46984 2017-06-26] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [146664 2017-06-26] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [110352 2017-06-26] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [84392 2017-06-26] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1015848 2017-06-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [585608 2017-06-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [198768 2017-06-26] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [360792 2017-06-26] (AVAST Software)
R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [77440 2017-05-05] ()
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2016-08-15] (GEAR Software Inc.)
S3 phantomtap; C:\Windows\System32\DRIVERS\phantomtap.sys [35664 2017-05-18] (The OpenVPN Project)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [394296 2016-07-10] (Duplex Secure Ltd.)
S3 NDSPCIIO; \??\C:\Windows\system32\DRIVERS\NDSPCIIO64.SYS [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-06-27 22:02 - 2017-06-27 22:03 - 00010943 _____ C:\Users\Krzysztof\Desktop\FRST.txt
2017-06-27 22:02 - 2017-06-27 22:02 - 00000000 ____D C:\FRST
2017-06-27 22:01 - 2017-06-27 22:00 - 02441216 _____ (Farbar) C:\Users\Krzysztof\Desktop\FRST64.exe
2017-06-27 22:00 - 2017-06-27 22:00 - 02441216 _____ (Farbar) C:\Users\Krzysztof\Downloads\FRST64.exe
2017-06-27 21:01 - 2017-06-27 21:01 - 00000000 ___HT C:\Windows\wusa.lock
2017-06-27 21:01 - 2017-06-27 21:01 - 00000000 ____D C:\0db2b15c21054909017057e01ac8
2017-06-27 20:45 - 2017-06-27 20:46 - 36137230 _____ C:\Users\Krzysztof\Desktop\windows6.1-kb4012212-ia64_93a42b16dbea87fa04e2b527676a499f9fbba554.msu
2017-06-27 15:24 - 2017-06-27 15:38 - 00148396 _____ C:\Users\Krzysztof\Desktop\Regulations.pdf
2017-06-27 14:08 - 2017-06-27 14:08 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-06-27 09:40 - 2017-06-27 20:17 - 00019029 _____ C:\Users\Krzysztof\Desktop\Brazil.sww
2017-06-26 16:55 - 2017-06-26 16:55 - 00003914 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-06-26 16:55 - 2017-06-26 16:55 - 00001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2017-06-26 16:55 - 2017-06-26 16:55 - 00000000 ____D C:\Users\Krzysztof\AppData\Roaming\AVAST Software
2017-06-26 16:55 - 2017-06-26 16:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2017-06-26 16:54 - 2017-06-26 16:54 - 00585608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-06-26 16:54 - 2017-06-26 16:54 - 00400464 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-06-26 16:54 - 2017-06-26 16:54 - 00360792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-06-26 16:54 - 2017-06-26 16:54 - 00198768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-06-26 16:54 - 2017-06-26 16:54 - 00146664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-06-26 16:54 - 2017-06-26 16:54 - 00110352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-06-26 16:54 - 2017-06-26 16:54 - 00084392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-06-26 16:54 - 2017-06-26 16:54 - 00046984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-06-26 16:54 - 2017-06-26 16:53 - 01015848 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-06-26 16:54 - 2017-06-26 16:53 - 00343264 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-06-26 16:54 - 2017-06-26 16:53 - 00319984 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-06-26 16:54 - 2017-06-26 16:53 - 00198944 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-06-26 16:54 - 2017-06-26 16:53 - 00057704 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-06-26 16:50 - 2017-06-26 16:50 - 00000000 ____D C:\Program Files\AVAST Software
2017-06-26 16:49 - 2017-06-26 18:29 - 00000000 ____D C:\ProgramData\AVAST Software
2017-06-26 11:36 - 2017-06-26 11:54 - 00000000 ____D C:\Users\Public\Documents\NEC Display Solutions
2017-06-26 10:05 - 2017-06-26 10:05 - 00000000 ____D C:\Users\Krzysztof\Desktop\Nowy folder (2)
2017-06-26 10:04 - 2017-06-26 10:04 - 01492097 _____ C:\Users\Krzysztof\Downloads\NEC_Desktop_LCD_Installer.zip
2017-06-26 09:06 - 2017-06-26 09:06 - 00000000 ____D C:\ProgramData\ATI
2017-06-26 09:02 - 2017-06-26 09:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ATI Problem Report Wizard
2017-06-26 09:01 - 2017-06-26 09:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
2017-06-26 09:00 - 2017-06-26 09:00 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2017-06-26 08:57 - 2017-06-26 09:01 - 00000000 ____D C:\Program Files\ATI Technologies
2017-06-26 08:57 - 2017-06-26 08:57 - 00000000 ____D C:\Program Files\ATI
2017-06-26 08:27 - 2017-06-26 08:42 - 00000000 ____D C:\ProgramData\AMD
2017-06-25 23:21 - 2017-06-25 23:21 - 00001292 _____ C:\Users\Krzysztof\Desktop\SpectraView.lnk
2017-06-25 22:41 - 2017-06-25 22:43 - 52536206 _____ C:\Users\Krzysztof\Downloads\NEC_SpectraView_Windows_v1.1.34_multilanguage(1).zip
2017-06-25 19:24 - 2017-06-25 19:24 - 03283348 _____ C:\Users\Krzysztof\Downloads\Manual_EA245WMi_PL.pdf
2017-06-25 14:45 - 2017-06-26 10:06 - 00000000 ____D C:\Program Files (x86)\NEC Display Solutions
2017-06-25 14:45 - 2017-06-25 23:17 - 00000000 ____D C:\Users\Krzysztof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NEC Display Solutions
2017-06-24 15:54 - 2017-06-25 21:02 - 00000000 ____D C:\Users\Krzysztof\Desktop\Pliki po kalibracji
2017-06-22 19:15 - 2017-06-22 19:17 - 52536206 _____ C:\Users\Krzysztof\Downloads\NEC_SpectraView_Windows_v1.1.34_multilanguage.zip
2017-06-22 17:42 - 2017-06-22 17:42 - 00017986 _____ C:\Users\Krzysztof\Desktop\The Best OF HITS.lbl
2017-06-19 20:23 - 2017-06-19 20:23 - 05691797 _____ C:\Users\Krzysztof\Desktop\ToSha64bit.rar
2017-06-18 22:17 - 2017-06-18 22:53 - 1306334885 _____ C:\Users\Krzysztof\Downloads\BRZ.part2.rar
2017-06-18 21:19 - 2017-06-18 22:16 - 2097152000 _____ C:\Users\Krzysztof\Downloads\BRZ.part1.rar
2017-06-16 17:11 - 2017-06-16 17:11 - 00401920 _____ () C:\Users\Krzysztof\Downloads\setup.exe
2017-06-13 21:50 - 2017-06-15 07:40 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-06-13 13:00 - 2017-06-13 13:00 - 00477007 _____ C:\Users\Krzysztof\Downloads\oerterpapplet2.0.zip
2017-06-13 10:46 - 2017-06-13 10:46 - 00047404 _____ C:\Users\Krzysztof\Downloads\DelRAW.7z
2017-06-12 16:20 - 2015-05-23 05:46 - 00000000 ____D C:\Users\Krzysztof\Desktop\Chess Informant ECO (A,B,C,D,E)
2017-06-12 15:10 - 2017-06-12 15:11 - 32907116 _____ C:\Users\Krzysztof\Downloads\ECO ABCDE_2_pdf.rar
2017-06-12 15:09 - 2017-06-12 15:09 - 12966847 _____ C:\Users\Krzysztof\Downloads\Chess_Informant_ECO_(A,B,C,D,E)_2.rar
2017-06-12 15:08 - 2017-06-12 15:08 - 12966847 _____ C:\Users\Krzysztof\Downloads\Chess_Informant_ECO_(A,B,C,D,E).rar
2017-06-12 14:56 - 2017-06-12 14:57 - 36410031 _____ C:\Users\Krzysztof\Downloads\ECO ABCDE.pdf
2017-06-07 17:31 - 2017-06-07 16:16 - 00060485 _____ C:\Users\Krzysztof\Desktop\Baracuda2017.pgn
2017-06-02 09:12 - 2017-01-11 18:52 - 03426816 _____ (Ubaldo Andrea Farina) C:\Users\Krzysztof\Desktop\Chiron-4-64bit.exe
2017-06-02 09:11 - 2017-06-02 09:11 - 06695353 _____ C:\Users\Krzysztof\Downloads\C4.rar
2017-05-30 11:41 - 2015-01-20 20:11 - 03245513 _____ C:\Users\Krzysztof\Desktop\TopGM_8move.pgn
2017-05-30 11:40 - 2017-05-30 11:40 - 02027712 _____ C:\Users\Krzysztof\Downloads\PGN&EPD Testsets.7z
2017-05-29 01:27 - 2017-05-29 01:27 - 08613115 _____ C:\Users\Krzysztof\Downloads\170528-cutechess-32bit.zip
2017-05-29 01:02 - 2017-05-29 01:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cute Chess
2017-05-29 01:02 - 2017-05-29 01:02 - 00000000 ____D C:\Program Files (x86)\cutechess
2017-05-29 00:23 - 2017-05-29 01:29 - 00000000 ____D C:\Users\Krzysztof\AppData\Roaming\cutechess
2017-05-29 00:20 - 2017-05-29 00:20 - 10414834 _____ C:\Users\Krzysztof\Downloads\170528-cutechess.zip
2017-05-28 14:18 - 2017-05-28 14:23 - 178509806 _____ C:\Users\Krzysztof\Downloads\DSh_egbb2.rar
2017-05-28 14:12 - 2017-05-28 14:16 - 149199355 _____ C:\Users\Krzysztof\Downloads\DSh_egbb1.rar
2017-05-28 00:12 - 2017-05-28 00:12 - 06465024 _____ C:\Users\Krzysztof\Downloads\DeepJuniorYokohamaSetup-(13.8.04).msi
2017-05-28 00:07 - 2017-05-28 00:08 - 06966784 _____ C:\Users\Krzysztof\Downloads\DeepJuniorYokohamaSetup
2017-05-28 00:04 - 2017-05-28 00:04 - 00000065 _____ C:\Users\Krzysztof\Downloads\Key_for_Deep_Junior_Yokohama_13.8.txt

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-06-27 21:05 - 2016-12-12 16:23 - 00000000 ____D C:\Users\Krzysztof\AppData\LocalLow\Mozilla
2017-06-27 20:03 - 2016-04-27 18:34 - 00000000 ____D C:\Users\Krzysztof\AppData\Roaming\The Bat!
2017-06-27 12:10 - 2009-07-14 06:45 - 00014816 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-06-27 12:10 - 2009-07-14 06:45 - 00014816 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-06-27 12:02 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-26 16:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-06-26 16:29 - 2016-05-22 19:22 - 00000000 ____D C:\ProgramData\Package Cache
2017-06-26 15:21 - 2016-05-14 22:02 - 00000000 ____D C:\Users\Krzysztof\AppData\Roaming\vlc
2017-06-26 14:15 - 2016-04-27 19:14 - 00000000 ____D C:\ProgramData\Comodo
2017-06-26 14:15 - 2016-04-27 18:07 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
2017-06-26 13:48 - 2016-06-14 16:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2017-06-26 09:02 - 2016-04-27 12:12 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2017-06-24 17:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
2017-06-22 11:40 - 2016-04-27 13:28 - 00000000 ____D C:\Users\Krzysztof\AppData\Roaming\foobar2000
2017-06-16 16:56 - 2016-09-07 06:56 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-06-16 16:56 - 2016-09-07 06:56 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-16 16:56 - 2016-09-07 06:56 - 00004412 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-06-16 16:56 - 2016-07-06 04:49 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-06-16 16:56 - 2016-07-06 04:49 - 00000000 ____D C:\Windows\system32\Macromed
2017-06-15 12:27 - 2016-04-27 20:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-06-09 20:56 - 2016-04-27 18:22 - 00000871 _____ C:\Users\Public\Desktop\VLC media player.lnk
2017-06-07 21:09 - 2017-03-18 06:15 - 00000000 ____D C:\Users\Krzysztof\Desktop\Line2PGN
2017-06-06 18:07 - 2017-03-09 14:42 - 00000000 ____D C:\Program Files (x86)\Java
2017-06-06 08:19 - 2017-03-09 14:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-06-06 08:19 - 2016-06-25 15:40 - 00000000 ____D C:\ProgramData\Oracle
2017-06-06 08:17 - 2017-03-09 14:43 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2017-05-30 15:30 - 2009-07-14 07:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT

==================== Pliki w katalogu głównym wybranych folderów =======

2016-05-31 08:50 - 2016-05-31 08:50 - 0011312 _____ () C:\Users\Krzysztof\AppData\Roaming\ALIEN.ini
2016-06-11 21:31 - 2017-03-06 16:37 - 0001586 _____ () C:\Users\Krzysztof\AppData\Roaming\ex_log.txt
2016-07-22 10:08 - 2016-07-23 13:43 - 0015863 _____ () C:\Users\Krzysztof\AppData\Roaming\winboard48.ini
2016-05-27 21:43 - 2016-05-27 21:43 - 0000982 _____ () C:\Users\Krzysztof\AppData\Local\recently-used.xbel
2017-03-30 17:26 - 2017-03-30 17:26 - 0000016 _____ () C:\ProgramData\mntemp

Niektóre pliki w TEMP:
====================
2017-06-26 14:42 - 2017-06-26 14:44 - 0000000 ____D () C:\Users\Krzysztof\AppData\Local\Temp\avgnt.exe

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2016-09-05 12:28

==================== Koniec  FRST.txt ============================