Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 30-11-2017
Uruchomiony przez KOCHANA AGUNIA (administrator)  KOCHANAAGUNIA (03-12-2017 00:46:09)
Uruchomiony z C:\Users\KOCHANA AGUNIA\Downloads
Załadowane profile: KOCHANA AGUNIA (Dostępne profile: KOCHANA AGUNIA)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\windows\System32\nvvsvc.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
() C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe
(Microsoft Corporation) C:\windows\System32\rundll32.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\windows\WindowsMobile\wmdc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Intel Corporation) C:\windows\System32\igfxext.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe
(Intel Corporation) C:\windows\System32\hkcmd.exe
(Intel Corporation) C:\windows\System32\igfxtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE
() C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\OFFICEVIRT.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2721576 2011-06-17] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
HKLM\...\Run: [Windows Mobile Device Center] => C:\windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [175552 2016-05-10] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll => C:\windows\SysWOW64\nvinit.dll [153392 2016-05-10] (NVIDIA Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{4383592E-4296-408E-8E34-858399F1794F}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://samsung.msn.com
HKU\S-1-5-21-1771593470-3012635902-189330645-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://samsung.msn.com
HKU\S-1-5-21-1771593470-3012635902-189330645-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1771593470-3012635902-189330645-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-01] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-01] (Microsoft Corporation.)

FireFox:
========
FF DefaultProfile: sdld2ekx.default
FF ProfilePath: C:\Users\KOCHANA AGUNIA\AppData\Roaming\Mozilla\Firefox\Profiles\sdld2ekx.default [2017-12-03]
FF Homepage: Mozilla\Firefox\Profiles\sdld2ekx.default -> hxxp://www.google.pl/
FF Extension: (ADB Helper) - C:\Users\KOCHANA AGUNIA\AppData\Roaming\Mozilla\Firefox\Profiles\sdld2ekx.default\Extensions\adbhelper@mozilla.org [2017-09-26] [Przestarzałe]
FF Extension: (Valence) - C:\Users\KOCHANA AGUNIA\AppData\Roaming\Mozilla\Firefox\Profiles\sdld2ekx.default\Extensions\fxdevtools-adapters@mozilla.org [2017-08-03] [Przestarzałe]
FF Extension: (Disable Media WMF NV12 format) - C:\Users\KOCHANA AGUNIA\AppData\Roaming\Mozilla\Firefox\Profiles\sdld2ekx.default\features\{82042c87-9f1e-4eb2-a520-b978eccc0178}\disable-media-wmf-nv12@mozilla.org.xpi [2017-11-22] [Przestarzałe]
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-12-02] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-12-02] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll [Brak pliku]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-09] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\KOCHANA AGUNIA\AppData\Local\Google\Chrome\User Data\Default [2017-12-02]
CHR Extension: (Prezentacje) - C:\Users\KOCHANA AGUNIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
CHR Extension: (Dokumenty) - C:\Users\KOCHANA AGUNIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
CHR Extension: (Dysk Google) - C:\Users\KOCHANA AGUNIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-06-30]
CHR Extension: (YouTube) - C:\Users\KOCHANA AGUNIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-06-30]
CHR Extension: (Arkusze) - C:\Users\KOCHANA AGUNIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
CHR Extension: (Dokumenty Google offline) - C:\Users\KOCHANA AGUNIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-06-30]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\KOCHANA AGUNIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-29]
CHR Extension: (Gmail) - C:\Users\KOCHANA AGUNIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-06-30]
CHR Extension: (Chrome Media Router) - C:\Users\KOCHANA AGUNIA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-17]
CHR Profile: C:\Users\KOCHANA AGUNIA\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-07-10]
CHR Profile: C:\Users\KOCHANA AGUNIA\AppData\Local\Google\Chrome\User Data\System Profile [2017-07-10]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-05-02] (NVIDIA Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-05-02] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-05-02] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-05-02] (NVIDIA Corporation)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] () [Brak podpisu cyfrowego]
R2 SamsungDeviceConfigurationWinService; C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe [31624 2012-02-13] () [Brak podpisu cyfrowego]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R0 MpFilter; C:\windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R1 MpKsl9b896622; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C56A3A00-8251-4981-975D-750CD8FF14F4}\MpKsl9b896622.sys [58120 2017-12-02] (Microsoft Corporation)
R3 NisDrv; C:\windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-05-02] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R2 SGDrv; C:\windows\System32\DRIVERS\SGdrv64.sys [7680 2011-04-11] (Phoenix Technologies Ltd.)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-12-03 00:46 - 2017-12-03 00:47 - 000015112 _____ C:\Users\KOCHANA AGUNIA\Downloads\FRST.txt
2017-12-03 00:43 - 2017-12-03 00:46 - 000000000 ____D C:\FRST
2017-12-03 00:42 - 2017-12-03 00:42 - 002391552 _____ (Farbar) C:\Users\KOCHANA AGUNIA\Downloads\FRST64.exe
2017-12-02 22:43 - 2017-12-02 22:44 - 000000078 _____ C:\Users\KOCHANA AGUNIA\Desktop\problem.txt
2017-12-01 21:37 - 2017-12-01 21:37 - 000000190 _____ C:\Users\KOCHANA AGUNIA\Desktop\przykładowe wymagania.txt
2017-12-01 14:54 - 2017-12-01 14:56 - 000000000 ____D C:\Users\KOCHANA AGUNIA\Desktop\Ang
2017-11-28 18:47 - 2017-11-28 18:51 - 027654809 _____ C:\Users\KOCHANA AGUNIA\Downloads\hwdp029.rar
2017-11-25 10:03 - 2017-11-25 10:03 - 003536040 _____ C:\Users\KOCHANA AGUNIA\Downloads\Instrukcja obsługi monitora AOC I2475PXQU Polish.pdf
2017-11-17 03:28 - 2017-11-17 03:29 - 011202048 _____ () C:\Users\KOCHANA AGUNIA\Downloads\Win7_Manual_pol.exe
2017-11-08 22:51 - 2017-11-08 22:56 - 000000000 ____D C:\AdwCleaner
2017-11-07 23:52 - 2017-11-07 23:52 - 008261584 _____ (Malwarebytes) C:\Users\KOCHANA AGUNIA\Downloads\adwcleaner_7.0.4.0.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-12-02 22:31 - 2016-11-15 18:48 - 000000000 ____D C:\Users\KOCHANA AGUNIA\AppData\LocalLow\Mozilla
2017-12-02 22:31 - 2016-06-13 19:49 - 000803328 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2017-12-02 22:31 - 2016-06-13 19:49 - 000144896 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-12-02 22:31 - 2016-06-13 19:49 - 000000000 ____D C:\windows\system32\Macromed
2017-12-02 22:31 - 2016-05-29 18:20 - 000000000 ____D C:\Users\KOCHANA AGUNIA\AppData\Local\Adobe
2017-12-02 22:31 - 2011-10-11 11:25 - 000000000 ____D C:\windows\SysWOW64\Macromed
2017-12-02 22:28 - 2009-07-14 05:45 - 000020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-12-02 22:28 - 2009-07-14 05:45 - 000020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-12-02 22:25 - 2011-10-12 02:37 - 000737924 _____ C:\windows\system32\perfh015.dat
2017-12-02 22:25 - 2011-10-12 02:37 - 000154322 _____ C:\windows\system32\perfc015.dat
2017-12-02 22:25 - 2009-07-14 06:13 - 001662744 _____ C:\windows\system32\PerfStringBackup.INI
2017-12-02 22:25 - 2009-07-14 04:20 - 000000000 ____D C:\windows\inf
2017-12-02 22:20 - 2009-07-14 06:08 - 000000006 ____H C:\windows\Tasks\SA.DAT
2017-12-02 21:32 - 2016-05-22 14:03 - 000000000 ____D C:\Users\KOCHANA AGUNIA\AppData\Roaming\SoftGrid Client
2017-12-01 14:53 - 2017-11-02 18:01 - 000000000 ____D C:\Users\KOCHANA AGUNIA\Downloads\ZZZZ JACEK
2017-12-01 14:47 - 2016-05-29 18:21 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-11-29 16:46 - 2016-07-31 21:45 - 000000000 ____D C:\Users\KOCHANA AGUNIA\Desktop\a
2017-11-26 19:58 - 2016-11-03 20:00 - 000000000 ____D C:\Users\KOCHANA AGUNIA\Desktop\mk2016
2017-11-24 13:40 - 2017-10-09 20:28 - 000000000 ____D C:\Users\KOCHANA AGUNIA\Desktop\wsei
2017-11-22 12:13 - 2016-05-24 11:37 - 000000000 ____D C:\Users\KOCHANA AGUNIA\Desktop\PROGRAMY
2017-11-21 11:50 - 2009-07-14 06:08 - 000032608 _____ C:\windows\Tasks\SCHEDLGU.TXT
2017-11-20 21:32 - 2010-11-21 04:27 - 000545440 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2017-11-18 10:32 - 2016-11-15 18:18 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-11-18 10:32 - 2016-08-05 17:19 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-17 10:00 - 2016-05-22 14:40 - 000000000 ____D C:\Users\KOCHANA AGUNIA\AppData\Roaming\Mozilla
2017-11-15 22:21 - 2016-05-29 18:21 - 000004476 _____ C:\windows\System32\Tasks\Adobe Acrobat Update Task
2017-11-15 11:41 - 2016-05-22 15:37 - 000007597 _____ C:\Users\KOCHANA AGUNIA\AppData\Local\Resmon.ResmonCfg
2017-11-15 11:41 - 2009-07-14 04:20 - 000000000 ____D C:\PerfLogs
2017-11-14 17:14 - 2017-07-02 12:07 - 000003480 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-11-14 17:14 - 2017-07-02 12:07 - 000003352 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-11-07 15:49 - 2016-08-30 13:54 - 000000000 ____D C:\Users\KOCHANA AGUNIA\Downloads\Nowy folder (2)
2017-11-07 11:53 - 2016-08-30 12:25 - 000000000 ____D C:\Users\KOCHANA AGUNIA\Desktop\Studia
2017-11-04 22:44 - 2016-10-31 19:48 - 000000000 ____D C:\Users\KOCHANA AGUNIA\Desktop\foto
2017-11-03 04:37 - 2016-05-30 10:34 - 000000000 ____D C:\Users\KOCHANA AGUNIA\.smplayer

==================== Pliki w katalogu głównym wybranych folderów =======

2016-05-22 15:37 - 2017-11-15 11:41 - 000007597 _____ () C:\Users\KOCHANA AGUNIA\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\windows\explorer.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\windows\system32\services.exe => Plik podpisany cyfrowo
C:\windows\system32\User32.dll => Plik podpisany cyfrowo
C:\windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-11-29 00:50

==================== Koniec  FRST.txt ============================