Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 26-12-2017
Uruchomiony przez RN (administrator)  HP (30-12-2017 23:42:24)
Uruchomiony z C:\Users\RN\Desktop
Załadowane profile: RN (Dostępne profile: RN)
Platform: Windows 8.1 Pro (Update) (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.11.2.7\n360.exe
(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Utils\SwiService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.11.2.7\n360.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(GOG.com) C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
(GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
() C:\Program Files (x86)\GOG Galaxy\GOG Galaxy Notifications Renderer.exe
(GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
(GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
() C:\Windows\System32\nvwmi64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Akamai Technologies, Inc.) C:\Users\RN\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\RN\AppData\Local\Akamai\netsession_win.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-11-12] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2816240 2014-04-07] (Synaptics Incorporated)
HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2171960 2016-01-28] ()
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [336672 2014-05-16] (Hewlett-Packard Company)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285832 2013-01-02] (Intel Corporation)
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [529480 2016-02-24] (Autodesk Inc.)
HKU\S-1-5-21-3411993014-2033446167-2670152363-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3111712 2017-12-15] (Valve Corporation)
HKU\S-1-5-21-3411993014-2033446167-2670152363-1001\...\Run: [Akamai NetSession Interface] => C:\Users\RN\AppData\Local\Akamai\netsession_win.exe [4490200 2017-01-03] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3411993014-2033446167-2670152363-1001\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1208712 2014-05-14] (Autodesk, Inc.)
HKU\S-1-5-21-3411993014-2033446167-2670152363-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-03] (Skype Technologies S.A.)
HKU\S-1-5-21-3411993014-2033446167-2670152363-1001\...\Run: [GalaxyClient] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [5362760 2017-12-21] (GOG.com)
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1208712 2014-05-14] (Autodesk, Inc.)
Startup: C:\Users\RN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk [2017-12-16]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{11DE033B-78EE-473F-B235-2B18A0C60235}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{41E7DD7A-3191-4D11-B4BA-3ED7AD770821}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-3411993014-2033446167-2670152363-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.pl/
HKU\S-1-5-21-3411993014-2033446167-2670152363-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB
SearchScopes: HKU\S-1-5-21-3411993014-2033446167-2670152363-1001 -> DefaultScope {1A95DC8F-4A6D-4938-B715-50B59B516306} URL = 
SearchScopes: HKU\S-1-5-21-3411993014-2033446167-2670152363-1001 -> {1A95DC8F-4A6D-4938-B715-50B59B516306} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-12-19] (Microsoft Corporation)
BHO: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine\22.11.2.7\coIEPlg.dll [2017-11-11] (Symantec Corporation)
BHO: Brak nazwy -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> Brak pliku
BHO-x32: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine32\22.11.2.7\coIEPlg.dll [2017-11-11] (Symantec Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\22.11.2.7\coIEPlg.dll [2017-11-11] (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine32\22.11.2.7\coIEPlg.dll [2017-11-11] (Symantec Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-09-29] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-09-29] (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-12-19] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)

Chrome: 
=======
CHR Profile: C:\Users\RN\AppData\Local\Google\Chrome\User Data\Default [2017-12-30]
CHR Extension: (Dokumenty) - C:\Users\RN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14]
CHR Extension: (Dysk Google) - C:\Users\RN\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-21]
CHR Extension: (YouTube) - C:\Users\RN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-21]
CHR Extension: (Norton Security Toolbar) - C:\Users\RN\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2017-10-04]
CHR Extension: (uBlock Origin) - C:\Users\RN\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2017-12-21]
CHR Extension: (Dokumenty Google offline) - C:\Users\RN\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-21]
CHR Extension: (Norton Identity Safe) - C:\Users\RN\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2016-11-21]
CHR Extension: (Imagus) - C:\Users\RN\AppData\Local\Google\Chrome\User Data\Default\Extensions\immpkjjlgappgfkkfieppnmlhakdmaab [2017-11-29]
CHR Extension: (PowerPoint Online) - C:\Users\RN\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2016-12-07]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\RN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Gmail) - C:\Users\RN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-21]
CHR Extension: (Chrome Media Router) - C:\Users\RN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-15]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.11.2.7\Exts\Chrome.crx <nie znaleziono>
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.11.2.7\Exts\Chrome.crx <nie znaleziono>
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1145928 2016-02-24] (Autodesk Inc.)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2013-11-13] (Broadcom Corporation.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1530376 2017-06-26] ()
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7760552 2017-12-07] (Microsoft Corporation)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [400656 2017-02-04] (EasyAntiCheat Ltd)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [532552 2017-12-21] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [8345672 2017-12-08] (GOG.com)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-09-20] (Hi-Rez Studios) [Brak podpisu cyfrowego]
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [683296 2014-05-16] (Hewlett-Packard Company)
R3 hpqwmiex; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [1006424 2013-01-23] (Hewlett-Packard Company) [Brak podpisu cyfrowego]
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165336 2013-01-14] (Intel Corporation)
R2 mitsijm2015; C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe [968480 2013-10-11] (Autodesk, Inc.)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\22.11.2.7\N360.exe [326144 2017-11-11] (Symantec Corporation)
R2 NVWMI; C:\Windows\system32\nvwmi64.exe [3167288 2016-01-28] ()
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119176 2017-01-17] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2181648 2017-01-17] (Electronic Arts)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [327680 2012-11-12] (IDT, Inc.) [Brak podpisu cyfrowego]
R2 SwiService; C:\Program Files (x86)\Sierra Wireless Inc\Utils\SWIService.exe [277296 2013-08-15] (Sierra Wireless, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-11-13] (Broadcom Corporation.)
R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\22.8.0.50\Definitions\BASHDefs\20171213.001\BHDrvx64.sys [1872024 2017-10-11] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\160B020.007\ccSetx64.sys [187544 2017-11-11] (Symantec Corporation)
R3 e1cexpress; C:\Windows\system32\DRIVERS\e1c64x64.sys [469264 2013-06-20] (Intel Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [508056 2017-10-19] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [158360 2017-10-19] (Symantec Corporation)
R3 HpqKbFiltr; C:\Windows\System32\drivers\HpqKbFiltr64.sys [28376 2014-05-15] (Hewlett-Packard Company)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\22.8.0.50\Definitions\IPSDefs\20171214.001\IDSvia64.sys [1056920 2017-10-14] (Symantec Corporation)
R3 johci; C:\Windows\System32\drivers\johci.sys [26208 2012-07-16] (JMicron Technology Corp.)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-09-04] (Intel Corporation)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2014-04-07] (Synaptics Incorporated)
R3 SNP2UVC; C:\Windows\system32\DRIVERS\snp2uvc.sys [1866080 2012-11-20] ()
S3 SRTSP; C:\Windows\System32\Drivers\N360x64\160B020.007\SRTSP64.SYS [812696 2017-11-11] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\160B020.007\SRTSPX64.SYS [49304 2017-11-11] (Symantec Corporation)
S3 swg3kmbb02; C:\Windows\system32\DRIVERS\swg3kmbb02.sys [501520 2013-08-15] (Sierra Wireless Incorporated)
S3 swg3kser02; C:\Windows\system32\DRIVERS\swg3kser02.sys [271888 2013-08-15] (Sierra Wireless Incorporated)
R0 SymEFASI; C:\Windows\System32\drivers\N360x64\160B020.007\SYMEFASI64.SYS [1938584 2017-11-11] (Symantec Corporation)
S4 SymELAM; C:\Windows\system32\drivers\N360x64\160B020.007\SymELAM.sys [24608 2017-11-11] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [102600 2017-11-18] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\160B020.007\Ironx64.SYS [309984 2017-11-11] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\160B020.007\SYMNETS.SYS [566936 2017-11-11] (Symantec Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\Windows\system32\DRIVERS\WirelessButtonDriver64.sys [31840 2016-03-24] (HP)
R3 wmbclass; C:\Windows\system32\DRIVERS\wmbclass.sys [268288 2013-11-01] (Microsoft Corporation)
S3 NAVENG; \??\C:\Program Files (x86)\Norton 360\NortonData\22.8.0.50\Definitions\SDSDefs\20161121.001\ENG64.SYS [X]
S3 NAVEX15; \??\C:\Program Files (x86)\Norton 360\NortonData\22.8.0.50\Definitions\SDSDefs\20161121.001\EX64.SYS [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-12-30 23:42 - 2017-12-30 23:42 - 000000000 ____D C:\Users\RN\Desktop\FRST
2017-12-30 22:55 - 2017-12-30 22:55 - 000057613 _____ C:\Users\RN\Desktop\Shortcut.txt
2017-12-30 22:54 - 2017-12-30 23:42 - 000020509 _____ C:\Users\RN\Desktop\FRST.txt
2017-12-30 22:54 - 2017-12-30 23:42 - 000000000 ____D C:\FRST
2017-12-30 22:54 - 2017-12-30 22:55 - 000087314 _____ C:\Users\RN\Desktop\Addition.txt
2017-12-30 22:53 - 2017-12-30 22:53 - 002391552 _____ (Farbar) C:\Users\RN\Downloads\FRST64.exe
2017-12-30 22:53 - 2017-12-30 22:53 - 002391552 _____ (Farbar) C:\Users\RN\Desktop\FRST64.exe
2017-12-30 15:12 - 2017-12-30 15:12 - 000002020 _____ C:\Users\RN\Desktop\MBIILauncher — skrót.lnk
2017-12-30 02:32 - 2017-12-30 02:32 - 000000000 ____D C:\Windows\System32\Tasks\Remediation
2017-12-29 23:19 - 2017-12-29 23:19 - 000000000 ____D C:\Users\RN\AppData\Local\Movie_Battles_Team
2017-12-29 23:17 - 2017-12-29 23:17 - 004289024 _____ (Movie Battles Team) C:\Users\RN\Downloads\MBIILauncher.exe
2017-12-25 15:58 - 2017-12-25 15:58 - 000000000 ____D C:\Users\RN\AppData\Local\Colossal Order
2017-12-25 12:28 - 2017-12-25 12:28 - 000000000 ____D C:\Users\RN\Documents\Rayman Legends
2017-12-25 12:25 - 2017-12-25 12:25 - 000000000 ____D C:\Users\RN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2017-12-25 00:10 - 2017-12-25 00:10 - 000000000 ____D C:\Users\RN\AppData\Local\Fallout4
2017-12-23 14:22 - 2017-12-23 14:22 - 083783938 _____ (The Code::Blocks Team) C:\Users\RN\Downloads\codeblocks-16.01mingw-setup.exe
2017-12-23 14:14 - 2017-12-23 14:36 - 000000000 ____D C:\Users\RN\AppData\Roaming\CodeBlocks
2017-12-23 14:14 - 2017-12-23 14:35 - 000000000 ____D C:\Users\RN\Desktop\C++
2017-12-23 14:14 - 2017-12-23 14:26 - 000000000 ____D C:\Program Files (x86)\CodeBlocks
2017-12-23 14:14 - 2017-12-23 14:25 - 000001107 _____ C:\Users\RN\Desktop\CodeBlocks.lnk
2017-12-23 14:14 - 2017-12-23 14:14 - 000000000 ____D C:\Users\RN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2017-12-23 14:14 - 2017-12-23 14:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2017-12-23 14:13 - 2017-12-23 14:13 - 034486727 _____ (The Code::Blocks Team) C:\Users\RN\Downloads\codeblocks-16.01-setup.exe
2017-12-19 23:23 - 2017-12-19 23:23 - 000094838 _____ C:\Users\RN\Downloads\układy-jednofazowe (1).odt
2017-12-19 23:21 - 2017-12-19 23:21 - 000094838 _____ C:\Users\RN\Downloads\układy-jednofazowe.odt
2017-12-16 16:15 - 2017-12-16 16:15 - 000000000 ____D C:\Users\RN\Documents\Notesy programu OneNote
2017-12-11 18:43 - 2017-12-11 21:06 - 000000000 ____D C:\Users\RN\Desktop\Nowy folder
2017-12-11 18:42 - 2017-12-11 18:42 - 020142524 _____ C:\Users\RN\Downloads\Jomminy.rar
2017-12-11 06:38 - 2017-12-11 06:38 - 002575350 _____ C:\Users\RN\Downloads\wm_w_05.pdf
2017-12-11 00:19 - 2017-12-11 00:19 - 001101657 _____ C:\Users\RN\Downloads\miedź (1).pdf
2017-12-11 00:14 - 2017-12-11 00:14 - 000207090 _____ C:\Users\RN\Downloads\struktura_i_waciwoci_miedzi_i_jej_stopw_instrukcja_12_2014 (1).pdf
2017-12-10 15:38 - 2017-12-10 15:38 - 001732998 _____ C:\Users\RN\Downloads\wm_w_01.pdf
2017-12-10 15:37 - 2017-12-10 15:38 - 000800083 _____ C:\Users\RN\Downloads\WM_cwiczenia_1.pdf
2017-12-10 15:37 - 2017-12-10 15:37 - 001808137 _____ C:\Users\RN\Downloads\wm_w_03.pdf
2017-12-10 15:37 - 2017-12-10 15:37 - 001073710 _____ C:\Users\RN\Downloads\wm_w_04.pdf
2017-12-10 15:37 - 2017-12-10 15:37 - 000493735 _____ C:\Users\RN\Downloads\wm_w_04_c.pdf
2017-12-10 15:37 - 2017-12-10 15:37 - 000256553 _____ C:\Users\RN\Downloads\pręty.pdf
2017-12-10 15:37 - 2017-12-10 15:37 - 000035500 _____ C:\Users\RN\Downloads\zestaw_pytan_WM-I.pdf
2017-12-10 15:36 - 2017-12-11 06:38 - 000000000 ____D C:\Users\RN\Desktop\wytrzymałość
2017-12-10 15:36 - 2017-12-10 15:36 - 008060118 _____ C:\Users\RN\Downloads\wm_w_02.pdf
2017-12-10 10:41 - 2017-12-10 10:41 - 001101657 _____ C:\Users\RN\Downloads\miedź.pdf
2017-12-10 10:41 - 2017-12-10 10:41 - 000207090 _____ C:\Users\RN\Downloads\struktura_i_waciwoci_miedzi_i_jej_stopw_instrukcja_12_2014.pdf
2017-12-09 15:18 - 2017-12-09 15:18 - 000000000 ____D C:\Users\RN\Documents\Diablo III
2017-12-09 14:41 - 2017-12-09 14:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2017-12-09 12:04 - 2017-12-09 12:04 - 001446792 _____ C:\Users\RN\Downloads\SteamSetup (1).exe
2017-12-05 10:33 - 2017-12-05 10:33 - 000014796 _____ C:\Users\RN\Downloads\wykres1-termodynamika.xlsx
2017-12-05 10:07 - 2017-12-05 10:34 - 000022026 _____ C:\Users\RN\Desktop\wykres1 termodynamika.xlsx
2017-12-04 23:06 - 2017-12-04 23:06 - 001393292 _____ C:\Users\RN\Desktop\16__pomiar_cisnienia_oraz_kalibracja (1).pdf
2017-12-04 23:04 - 2017-12-04 23:04 - 000933192 _____ C:\Users\RN\Desktop\27__wyznaczanie_linii_wrzenia_wody.pdf
2017-12-04 23:04 - 2017-12-04 23:04 - 000604533 _____ C:\Users\RN\Desktop\19__pomiar_strumienia_ciepla.pdf
2017-12-03 23:44 - 2017-12-03 23:44 - 000641696 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140.dll
2017-12-03 23:44 - 2017-12-03 23:44 - 000389296 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140.dll
2017-12-03 23:44 - 2017-12-03 23:44 - 000331432 _____ (Microsoft Corporation) C:\Windows\system32\concrt140.dll
2017-12-03 23:44 - 2017-12-03 23:44 - 000087728 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140.dll
2017-12-03 23:38 - 2017-12-03 23:38 - 000440128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp140.dll
2017-12-03 23:38 - 2017-12-03 23:38 - 000263856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vccorlib140.dll
2017-12-03 23:38 - 2017-12-03 23:38 - 000242496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\concrt140.dll
2017-12-03 23:38 - 2017-12-03 23:38 - 000083792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcruntime140.dll
2017-12-02 23:47 - 2017-12-02 23:47 - 005393320 _____ C:\Users\RN\Downloads\Tibia_Setup.exe
2017-12-02 23:47 - 2017-12-02 23:47 - 000000000 ____D C:\Users\RN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tibia
2017-12-02 23:47 - 2017-12-02 23:47 - 000000000 ____D C:\Users\RN\AppData\Local\Tibia
2017-12-02 19:20 - 2017-12-02 22:03 - 000000000 ____D C:\Users\RN\medivia
2017-12-02 19:20 - 2017-12-02 19:20 - 018212749 _____ C:\Users\RN\Downloads\medivia-2.1.0-windows-32bits.zip

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-12-30 23:38 - 2016-11-20 22:47 - 000000000 ____D C:\Users\RN\Desktop\memfolder
2017-12-30 22:36 - 2016-07-28 22:58 - 000003948 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{901222E6-FB8F-4CCF-AA76-914A3B0B176F}
2017-12-30 20:27 - 2017-03-09 18:08 - 000000000 ____D C:\Users\RN\AppData\Local\Akamai
2017-12-30 19:27 - 2016-10-21 15:44 - 000000000 ____D C:\Program Files (x86)\Steam
2017-12-29 15:23 - 2016-11-21 09:20 - 000000000 ____D C:\Users\RN\AppData\Roaming\Skype
2017-12-29 11:22 - 2016-07-28 21:41 - 000000000 ____D C:\Users\RN
2017-12-29 11:19 - 2016-11-20 21:19 - 000000000 ____D C:\Users\RN\AppData\Local\Battle.net
2017-12-29 03:00 - 2016-10-23 20:09 - 000739840 ___SH C:\Users\RN\Desktop\Thumbs.db
2017-12-28 16:47 - 2017-02-12 19:50 - 000000000 ____D C:\Program Files (x86)\Heroes of the Storm
2017-12-28 00:15 - 2016-11-20 21:19 - 000000000 ____D C:\Program Files (x86)\Battle.net
2017-12-27 21:07 - 2016-07-28 21:46 - 000003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3411993014-2033446167-2670152363-1001
2017-12-27 20:16 - 2016-07-28 21:45 - 001828496 _____ C:\Windows\system32\PerfStringBackup.INI
2017-12-27 20:16 - 2013-08-23 00:12 - 000808198 _____ C:\Windows\system32\perfh015.dat
2017-12-27 20:16 - 2013-08-23 00:12 - 000164014 _____ C:\Windows\system32\perfc015.dat
2017-12-27 20:16 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\Inf
2017-12-27 20:09 - 2016-10-27 19:46 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2017-12-27 20:09 - 2013-08-22 15:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-12-25 12:44 - 2016-11-21 17:42 - 000000000 ___RD C:\Users\RN\Desktop\gry
2017-12-25 12:41 - 2017-02-09 17:56 - 000000000 ____D C:\Users\RN\AppData\Local\Ubisoft Game Launcher
2017-12-25 12:25 - 2017-02-09 17:56 - 000000000 ____D C:\Program Files (x86)\Ubisoft
2017-12-25 00:10 - 2016-10-23 19:47 - 000000000 ____D C:\Users\RN\Documents\My Games
2017-12-23 14:30 - 2013-08-22 14:25 - 000262144 ___SH C:\Windows\system32\config\ELAM
2017-12-23 14:26 - 2013-08-22 14:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2017-12-23 14:24 - 2016-07-28 21:41 - 000000000 ____D C:\Users\RN\AppData\Local\VirtualStore
2017-12-21 13:06 - 2017-09-14 15:46 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy
2017-12-19 05:11 - 2013-08-22 16:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-12-19 05:10 - 2016-12-24 21:09 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-12-18 19:01 - 2017-04-16 10:32 - 000003493 _____ C:\Users\RN\Desktop\Nowy dokument tekstowy.txt
2017-12-17 01:08 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\AppReadiness
2017-12-14 01:34 - 2016-10-21 14:33 - 000002221 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-12-14 01:34 - 2016-10-21 14:33 - 000002209 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-12-12 08:15 - 2017-07-06 16:07 - 000000000 ____D C:\Program Files (x86)\Diablo III
2017-12-09 16:09 - 2017-05-15 19:49 - 000000000 ____D C:\Users\RN\Desktop\metaloznawstwo
2017-12-06 19:30 - 2017-11-25 19:34 - 000000000 ____D C:\Program Files (x86)\Hearthstone
2017-12-05 19:06 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\NDF
2017-12-03 13:23 - 2017-01-17 19:50 - 000000000 ____D C:\ProgramData\Origin
2017-12-03 13:20 - 2017-01-17 19:56 - 000000000 ____D C:\Users\RN\AppData\Roaming\Origin
2017-12-01 18:26 - 2013-08-22 16:36 - 000000000 ___HD C:\Program Files\WindowsApps

==================== Pliki w katalogu głównym wybranych folderów =======

2017-06-24 17:27 - 2017-06-24 17:27 - 000004543 _____ () C:\Users\RN\AppData\Local\recently-used.xbel

Niektóre pliki w TEMP:
====================
2017-12-25 21:48 - 2017-12-25 21:48 - 058804680 _____ (Skype Technologies S.A.) C:\Users\RN\AppData\Local\Temp\SkypeSetup.exe

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-12-30 04:03

==================== Koniec  FRST.txt ============================