Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 02.01.2018
Uruchomiony przez TOMEK (administrator)  TOMEK-KOMPUTER (07-01-2018 22:14:31)
Uruchomiony z C:\Users\TOMEK\Desktop\PROGRAMY OCHRONNE
Załadowane profile: TOMEK &  (Dostępne profile: TOMEK)
Platform: Microsoft Windows 7 Home Premium  (X86) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(IVT Corporation) C:\Program Files\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\USBChargerPlus\USBChargerPlus.exe
(Intel Corporation) C:\Windows\System32\esif_uf.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(IVT Corporation) C:\Program Files\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe
(IVT Corporation) C:\Program Files\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [ATKOSD2] => C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [406328 2014-05-15] (ASUSTek Computer Inc.)
HKLM\...\Run: [ATKMEDIA] => C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe [209720 2014-06-23] (ASUSTek Computer Inc.)
HKLM\...\Run: [BtTray] => C:\Program Files\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [389368 2014-02-17] (IVT Corporation)
HKLM\...\Run: [RTHDCPL] => C:\Windows\RTHDCPL.EXE [18702336 2009-08-14] (Realtek Semiconductor Corp.)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 77.91.63.252 77.91.63.250
Tcpip\..\Interfaces\{550271A2-5E5B-4A3F-A026-B9DC7C9A3FBB}: [DhcpNameServer] 77.91.63.252 77.91.63.250

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-1006242395-2345654396-3546285009-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=190
HKU\S-1-5-21-1006242395-2345654396-3546285009-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
HKU\S-1-5-21-1006242395-2345654396-3546285009-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01072018221137668\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=190
HKU\S-1-5-21-1006242395-2345654396-3546285009-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01072018221137668\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
HKU\S-1-5-21-1006242395-2345654396-3546285009-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01072018221155419\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=190
HKU\S-1-5-21-1006242395-2345654396-3546285009-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01072018221155419\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
SearchScopes: HKU\S-1-5-21-1006242395-2345654396-3546285009-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1006242395-2345654396-3546285009-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01072018221137668 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1006242395-2345654396-3546285009-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01072018221155419 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Web Helper BHO Class -> {A23E6775-A971-490B-A91B-1F6F17B3FC2A} -> C:\Users\TOMEK\AppData\Local\Temp\Data1002.cat => Brak pliku
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\system32\skype4com.dll [2013-12-16] (Skype Technologies)

FireFox:
========
FF DefaultProfile: 16ieva7m.default
FF ProfilePath: C:\Users\TOMEK\AppData\Roaming\Mozilla\Firefox\Profiles\16ieva7m.default [2018-01-07]
FF Homepage: Mozilla\Firefox\Profiles\16ieva7m.default -> hxxp://www.gazeta.pl/0,0.html?p=190
FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-01-06] (Intel Corporation)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-01-06] (Intel Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)

Chrome: 
=======
CHR DefaultProfile: Profile 2
CHR HomePage: Profile 2 -> hxxp://www.gazeta.pl/0,0.html?p=190
CHR Profile: C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\derjageerdingnzoy [2018-01-07] <==== UWAGA
CHR Extension: (Prezentacje Google) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\derjageerdingnzoy\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-04-14]
CHR Extension: (Dokumenty Google) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\derjageerdingnzoy\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-14]
CHR Extension: (Dysk Google) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\derjageerdingnzoy\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-14]
CHR Extension: (YouTube) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\derjageerdingnzoy\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-14]
CHR Extension: (Arkusze Google) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\derjageerdingnzoy\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-14]
CHR Extension: (Dokumenty Google offline) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\derjageerdingnzoy\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-13]
CHR Extension: (AdBlock) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\derjageerdingnzoy\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-10-10]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\derjageerdingnzoy\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-14]
CHR Extension: (Gmail) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\derjageerdingnzoy\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-14]
CHR Extension: (Chrome Media Router) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\derjageerdingnzoy\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-22]
CHR Profile: C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Profile 2 [2018-01-07]
CHR Extension: (Dokumenty Google) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-12]
CHR Extension: (Dysk Google) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-12]
CHR Extension: (YouTube) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-12]
CHR Extension: (Fair Ads) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gagfkmknmijppikpcikmbbkdkhggcmge [2018-01-07]
CHR Extension: (Dokumenty Google offline) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-12]
CHR Extension: (AdBlock) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-04-04]
CHR Extension: (Fair AdBlocker) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh [2018-01-07]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-04]
CHR Extension: (Gmail) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-12]
CHR Extension: (Chrome Media Router) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-01-07]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ASLDRService; C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe [115512 2014-03-26] (ASUSTek Computer Inc.)
R2 ATKGFNEXSrv; C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896 2011-11-21] (ASUS)
R2 BlueSoleilCS; C:\Program Files\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1579880 2014-02-17] (IVT Corporation)
R3 BsHelpCS; C:\Program Files\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [76640 2013-12-16] (IVT Corporation)
S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [280696 2016-01-13] (Intel Corporation)
R3 dhcpsvc; C:\Program Files\Wifisrv\dhcpsvc.dll [144528 2017-10-18] ()
R2 esifsvc; C:\Windows\system32\esif_uf.exe [1037568 2014-09-18] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [274040 2016-01-13] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [686552 2014-05-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2015-01-06] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4563920 2017-11-01] (Malwarebytes)
S4 MCSvc; C:\ProgramData\Microsoft\Blend\14.0\1033\ResourceCacher.dll [318976 2017-03-03] () [Brak podpisu cyfrowego] <==== UWAGA
S2 quztionnodifierkrg.exe; C:\Program Files\Thiphlverther\quztionnodifierkrg.exe [708832 2016-06-29] () [Brak podpisu cyfrowego]
S2 Refgexnafl; C:\Users\TOMEK\AppData\Roaming\Qumbuck\Qumbuck.exe [170496 2016-06-28] () [Brak podpisu cyfrowego]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)
S2 Loogki; "C:\Users\TOMEK\AppData\Roaming\OkycgeXobha\Jehsaty.exe" -cms [X]
S2 odtclientsrv; "C:\Program Files\Odtheratezotain\odtclientsrv.html5" {79740E79-A383-47A7-B513-3DF6563D007F} {8C4CE252-7DB2-4F8E-8E76-BAD0E5826A83} [X]

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 160WifiNetPro; C:\Program Files\Wifisrv\160WifiNetPro.sys [116880 2017-10-18] ()
R3 AiCharger; C:\Windows\System32\DRIVERS\AiCharger.sys [14720 2014-09-11] (ASUSTek Computer Inc.)
R2 ASMMAP; C:\Program Files\ASUS\ATK Package\ATKGFNEX\ASMMAP.sys [13880 2009-07-02] (ASUS)
R3 athr; C:\Windows\System32\DRIVERS\athr.sys [3307008 2014-09-08] (Qualcomm Atheros Communications, Inc.)
R1 ATKWMIACPIIO; C:\Program Files\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi.sys [17720 2013-07-02] (ASUSTek Computer Inc.)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [20320 2012-06-15] (IVT Corporation)
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [43312 2013-04-26] (Ralink Corporation)
R3 dptf_cpu; C:\Windows\System32\DRIVERS\dptf_cpu.sys [36120 2014-09-18] (Intel Corporation)
R3 dptf_pch; C:\Windows\System32\DRIVERS\dptf_pch.sys [35064 2014-09-18] (Intel Corporation)
S3 dwifihelp; C:\Program Files\Wifisrv\dwifihelp.sys [39152 2015-12-02] ()
R3 esif_lf; C:\Windows\System32\DRIVERS\esif_lf.sys [193104 2014-09-18] (Intel Corporation)
S3 IntcAzAudAddService; C:\Windows\System32\drivers\RtkHDAud.sys [5884416 2009-08-18] (Realtek Semiconductor Corp.) [Brak podpisu cyfrowego]
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [168376 2018-01-07] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [221112 2018-01-07] (Malwarebytes)
R3 MEI; C:\Windows\System32\DRIVERS\TeeDriver.sys [111904 2015-01-06] (Intel Corporation)
R3 RSUSBVSTOR; C:\Windows\System32\Drivers\RtsUVStor.sys [244440 2013-07-09] (Realtek Semiconductor Corp.)
R0 wifinetmini; C:\Windows\System32\wifinetmini.sys [14704 2015-12-02] ()
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [29872 2012-12-19] (IVT Corporation)
S0 ddfkapoe; System32\drivers\iaysrdae.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-01-07 22:11 - 2018-01-07 22:11 - 000221112 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-01-07 22:11 - 2018-01-07 22:11 - 000168376 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2018-01-07 21:55 - 2018-01-07 21:55 - 011201632 _____ (Piriform Ltd) C:\Users\TOMEK\Downloads\ccsetup538 (1).exe
2018-01-07 21:55 - 2018-01-07 21:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2018-01-07 21:55 - 2018-01-07 21:55 - 000000000 ____D C:\Program Files\CCleaner
2018-01-07 19:59 - 2018-01-07 20:09 - 000000000 ____D C:\Users\TOMEK\Desktop\FOTKI
2018-01-07 19:58 - 2018-01-07 19:58 - 000000040 _____ C:\Program Files\settings.dat
2018-01-07 19:58 - 2018-01-07 19:58 - 000000000 ____D C:\Program Files\reports
2018-01-07 19:46 - 2018-01-07 19:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-01-07 19:45 - 2018-01-07 19:45 - 000000000 ____D C:\ProgramData\MB3CoreBackup
2018-01-07 19:44 - 2018-01-07 19:44 - 000191776 _____ C:\Users\TOMEK\Desktop\bookmarks_07.01.2018.html

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-01-07 22:14 - 2016-06-29 13:51 - 000000000 ____D C:\Users\TOMEK\Desktop\PROGRAMY OCHRONNE
2018-01-07 22:14 - 2016-06-29 13:07 - 000000000 ____D C:\FRST
2018-01-07 22:10 - 2017-02-04 14:03 - 000059896 _____ C:\Windows\system32\Drivers\mbae.sys
2018-01-07 22:10 - 2009-07-14 05:34 - 000016624 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-01-07 22:10 - 2009-07-14 05:34 - 000016624 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-01-07 22:07 - 2016-04-13 23:39 - 001523412 _____ C:\Windows\system32\PerfStringBackup.INI
2018-01-07 22:07 - 2009-07-14 09:07 - 000689264 _____ C:\Windows\system32\perfh015.dat
2018-01-07 22:07 - 2009-07-14 09:07 - 000131802 _____ C:\Windows\system32\perfc015.dat
2018-01-07 22:07 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\inf
2018-01-07 22:03 - 2016-04-13 11:59 - 000000000 __SHD C:\Users\TOMEK\IntelGraphicsProfiles
2018-01-07 22:03 - 2015-01-05 14:20 - 000000936 _____ C:\Windows\system32\bscs.ini
2018-01-07 22:03 - 2009-07-14 05:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-01-07 21:56 - 2016-04-14 00:28 - 000000000 ____D C:\Windows\Panther
2018-01-07 19:58 - 2016-05-01 17:12 - 000000000 ____D C:\Users\TOMEK\AppData\Roaming\Opera Software
2018-01-07 19:58 - 2016-05-01 17:12 - 000000000 ____D C:\Users\TOMEK\AppData\Local\Opera Software
2018-01-07 19:58 - 2016-05-01 17:02 - 000000000 ____D C:\Program Files\Opera
2018-01-06 20:51 - 2009-07-14 05:53 - 000032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-12-08 16:50 - 2016-08-07 16:48 - 000000000 ____D C:\Users\TOMEK\Desktop\BMW

==================== Pliki w katalogu głównym wybranych folderów =======

2017-03-03 18:58 - 2017-03-03 18:58 - 000000000 _____ () C:\Program Files\metadata
2018-01-07 19:58 - 2018-01-07 19:58 - 000000040 _____ () C:\Program Files\settings.dat
2016-06-29 12:52 - 2016-05-16 07:57 - 010167000 _____ (深圳市驱动人生软件技术有限公司) C:\Users\TOMEK\AppData\Roaming\160wifi_wcid-6089.exe
2016-06-29 12:54 - 2016-05-26 09:51 - 004761392 _____ () C:\Users\TOMEK\AppData\Roaming\usbboxlite_4001_o_8209_hn.exe
2016-06-29 12:43 - 2016-06-29 12:43 - 000848437 _____ () C:\Users\TOMEK\AppData\Roaming\X-is.bin

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-12-29 12:26

==================== Koniec  FRST.txt ============================