Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 04.03.2018
Uruchomiony przez Agnieszka2 (administrator)  SRODOWISKO (05-03-2018 14:13:47)
Uruchomiony z C:\Users\Agnieszka2\Desktop\Download
Załadowane profile: Agnieszka2 (Dostępne profile: admin & agnieszka & Agnieszka2)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(cFos Software GmbH) C:\Program Files\cFosSpeed\spd.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Antivirus\ekrn.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
(cFos Software GmbH) C:\Program Files\cFosSpeed\cfosspeed.exe
(f.lux Software LLC) C:\Users\Agnieszka2\AppData\Local\FluxSoftware\Flux\flux.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7547424 2009-06-25] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe [3159744 2013-10-07] (ESET)
HKLM\...\Run: [UnlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [cFosSpeed] => C:\Program Files\cFosSpeed\cFosSpeed.exe [1220952 2017-11-02] (cFos Software GmbH)
HKLM\...\Policies\Explorer\Run: [14810] => c:\progra~2\mslpli.exe
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 1
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-2950158651-1325095086-3268382461-1003\...\Run: [f.lux] => C:\Users\Agnieszka2\AppData\Local\FluxSoftware\Flux\flux.exe [1678840 2017-10-10] (f.lux Software LLC)
HKU\S-1-5-21-2950158651-1325095086-3268382461-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6851288 2016-07-13] (Piriform Ltd)
HKU\S-1-5-21-2950158651-1325095086-3268382461-1003\...\Policies\Explorer: [TaskbarNoNotification] 1
HKU\S-1-5-21-2950158651-1325095086-3268382461-1003\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-2950158651-1325095086-3268382461-1003\...\MountPoints2: {df4a7ccf-77b3-11e5-9881-6cf049d0667d} - E:\Startme.exe
Startup: C:\Users\agnieszka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk [2013-03-14]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [147456 2008-12-12] (Apple Inc.)
Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4 194.204.152.34 194.204.159.1
Tcpip\..\Interfaces\{804E50B2-C6A4-438E-A197-3FAE4F1CFB4D}: [DhcpNameServer] 8.8.8.8 8.8.4.4 194.204.152.34 194.204.159.1

Internet Explorer:
==================
HKU\S-1-5-21-2950158651-1325095086-3268382461-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.onet.pl/
SearchScopes: HKU\S-1-5-21-2950158651-1325095086-3268382461-1003 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKU\S-1-5-21-2950158651-1325095086-3268382461-1003 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-10-19] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-19] (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF ProfilePath: C:\Users\Agnieszka2\AppData\Roaming\Mozilla\Firefox\Profiles\pieom04s.default [2018-03-05]
FF Extension: (uBlock Origin) - C:\Users\Agnieszka2\AppData\Roaming\Mozilla\Firefox\Profiles\pieom04s.default\Extensions\uBlock0@raymondhill.net.xpi [2017-11-15]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Endpoint Antivirus\Mozilla Thunderbird
FF Extension: (ESET Endpoint Security Extension) - C:\Program Files\ESET\ESET Endpoint Antivirus\Mozilla Thunderbird [2014-03-06] [Przestarzałe] [Brak podpisu cyfrowego]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-19] ()
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-19] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-19] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-11] (Adobe Systems Inc.)

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.bip.lewin-klodzki.pl/"
CHR Profile: C:\Users\Agnieszka2\AppData\Local\Google\Chrome\User Data\Default [2018-03-05]
CHR Extension: (Prezentacje) - C:\Users\Agnieszka2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (h264ify) - C:\Users\Agnieszka2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aleakchihdccplidncghkekgioiakgal [2017-08-03]
CHR Extension: (Dokumenty) - C:\Users\Agnieszka2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Dysk Google) - C:\Users\Agnieszka2\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-24]
CHR Extension: (YouTube) - C:\Users\Agnieszka2\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-24]
CHR Extension: (uBlock Origin) - C:\Users\Agnieszka2\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2018-02-13]
CHR Extension: (Adobe Acrobat) - C:\Users\Agnieszka2\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-06]
CHR Extension: (Eliminator Slajdów) - C:\Users\Agnieszka2\AppData\Local\Google\Chrome\User Data\Default\Extensions\eplekpmdodlgejgogbojajncdlapamff [2017-07-06]
CHR Extension: (Arkusze) - C:\Users\Agnieszka2\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Dokumenty Google offline) - C:\Users\Agnieszka2\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-24]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Agnieszka2\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-24]
CHR Extension: (Gmail) - C:\Users\Agnieszka2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-24]
CHR Extension: (Chrome Media Router) - C:\Users\Agnieszka2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-09]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [479576 2017-11-02] (cFos Software GmbH)
S3 EhttpSrv; C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe [34296 2013-10-07] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Endpoint Antivirus\ekrn.exe [1025584 2013-10-07] (ESET)
S3 ESHASRV; C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe [185104 2013-10-07] (ESET)
R2 FirebirdGuardianDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2017-02-15] (Firebird Project) [Brak podpisu cyfrowego]
R3 FirebirdServerDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe [3825664 2017-02-15] (Firebird Project) [Brak podpisu cyfrowego]
S3 ICDSPTSV; C:\Windows\System32\IcdSptSv.exe [69632 2003-04-02] (Sony Corporation) [Brak podpisu cyfrowego]
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [32384 2016-10-03] (The OpenVPN Project)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [154768 2016-12-14] (Sandboxie Holdings, LLC)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [10945776 2017-12-15] (TeamViewer GmbH)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 cFosSpeed; C:\Windows\System32\DRIVERS\cfosspeed6.sys [1105240 2017-11-02] (cFos Software GmbH)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [177472 2013-10-25] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [128056 2013-09-09] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [113088 2013-09-09] (ESET)
S3 ICDUSB2; C:\Windows\System32\Drivers\ICDUSB2.sys [39048 2002-11-28] (Sony Corporation)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [177808 2016-12-14] (Sandboxie Holdings, LLC)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [Brak podpisu cyfrowego]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-03-05 14:13 - 2018-03-05 14:13 - 000000000 ____D C:\FRST
2018-03-05 12:36 - 2015-04-16 06:56 - 000000000 ____D C:\lan_W7
2018-03-05 12:36 - 2014-06-17 13:13 - 000718552 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2018-03-05 12:36 - 2014-06-17 13:13 - 000076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2018-03-05 10:11 - 2013-12-23 11:31 - 000000000 ____D C:\Users\Agnieszka2\Desktop\TF-3239DL_V3_131220
2018-03-01 07:29 - 2018-03-01 07:29 - 001278484 _____ C:\Users\Agnieszka2\Desktop\PIT.pdf
2018-02-28 07:13 - 2018-02-28 07:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cFosSpeed Traffic Shaping
2018-02-28 07:13 - 2018-02-28 07:13 - 000000000 ____D C:\Program Files\cFosSpeed
2018-02-28 07:13 - 2017-11-02 17:11 - 001105240 _____ (cFos Software GmbH) C:\Windows\system32\Drivers\cfosspeed6.sys
2018-02-28 07:12 - 2018-02-28 07:39 - 000033339 _____ C:\Windows\cFosSpeed_Setup_Log.txt
2018-02-14 07:25 - 2018-02-10 20:03 - 000347296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-02-14 07:25 - 2018-02-10 07:20 - 020274176 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-02-14 07:25 - 2018-02-10 07:08 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-02-14 07:25 - 2018-02-10 07:07 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-02-14 07:25 - 2018-02-10 06:57 - 000499712 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-02-14 07:25 - 2018-02-10 06:57 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-02-14 07:25 - 2018-02-10 06:57 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-02-14 07:25 - 2018-02-10 06:57 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-02-14 07:25 - 2018-02-10 06:56 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-02-14 07:25 - 2018-02-10 06:54 - 002294272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-02-14 07:25 - 2018-02-10 06:52 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-02-14 07:25 - 2018-02-10 06:51 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-02-14 07:25 - 2018-02-10 06:50 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-02-14 07:25 - 2018-02-10 06:49 - 000662528 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-02-14 07:25 - 2018-02-10 06:49 - 000620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-02-14 07:25 - 2018-02-10 06:49 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-02-14 07:25 - 2018-02-10 06:49 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-02-14 07:25 - 2018-02-10 06:45 - 000668160 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-02-14 07:25 - 2018-02-10 06:42 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-02-14 07:25 - 2018-02-10 06:39 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-02-14 07:25 - 2018-02-10 06:38 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-02-14 07:25 - 2018-02-10 06:38 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-02-14 07:25 - 2018-02-10 06:36 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-02-14 07:25 - 2018-02-10 06:35 - 004498944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-02-14 07:25 - 2018-02-10 06:35 - 000279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-02-14 07:25 - 2018-02-10 06:35 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-02-14 07:25 - 2018-02-10 06:34 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-02-14 07:25 - 2018-02-10 06:33 - 013680640 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-02-14 07:25 - 2018-02-10 06:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-02-14 07:25 - 2018-02-10 06:27 - 002058752 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-02-14 07:25 - 2018-02-10 06:27 - 000694784 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-02-14 07:25 - 2018-02-10 06:27 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-02-14 07:25 - 2018-02-10 06:26 - 001155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-02-14 07:25 - 2018-02-10 06:14 - 002767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-02-14 07:25 - 2018-02-10 06:10 - 001314304 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-02-14 07:25 - 2018-02-10 06:08 - 000710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-02-14 07:25 - 2018-01-12 17:29 - 004014312 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2018-02-14 07:25 - 2018-01-12 17:29 - 003959016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-02-14 07:25 - 2018-01-12 17:29 - 001309928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-02-14 07:25 - 2018-01-12 17:29 - 000250600 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2018-02-14 07:25 - 2018-01-12 17:29 - 000240872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2018-02-14 07:25 - 2018-01-12 17:29 - 000187624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2018-02-14 07:25 - 2018-01-12 17:29 - 000137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-02-14 07:25 - 2018-01-12 17:29 - 000067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-02-14 07:25 - 2018-01-12 17:27 - 001310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 001062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000554496 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-02-14 07:25 - 2018-01-12 17:26 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-02-14 07:25 - 2018-01-12 17:16 - 003405824 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2018-02-14 07:25 - 2018-01-12 17:05 - 000055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2018-02-14 07:25 - 2018-01-12 17:05 - 000025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2018-02-14 07:25 - 2018-01-12 17:05 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2018-02-14 07:25 - 2018-01-12 17:02 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-02-14 07:25 - 2018-01-12 17:02 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-02-14 07:25 - 2018-01-12 17:02 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-02-14 07:25 - 2018-01-12 17:02 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-02-14 07:25 - 2018-01-12 17:02 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-02-14 07:25 - 2018-01-12 16:59 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-02-14 07:25 - 2018-01-12 16:57 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-02-14 07:25 - 2018-01-12 16:57 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-02-14 07:25 - 2018-01-12 16:57 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-02-14 07:25 - 2018-01-12 16:57 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-02-14 07:25 - 2018-01-12 16:56 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-02-14 07:25 - 2018-01-12 16:56 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-02-14 07:25 - 2018-01-12 16:56 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-02-14 07:25 - 2018-01-11 17:22 - 000805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2018-02-14 07:25 - 2018-01-11 17:01 - 002403328 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-02-14 07:25 - 2018-01-05 17:14 - 000309480 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-02-14 07:25 - 2018-01-05 17:11 - 000111104 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2018-02-14 07:25 - 2018-01-05 17:11 - 000071168 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-02-14 07:25 - 2018-01-05 17:11 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2018-02-14 07:25 - 2018-01-05 17:11 - 000010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2018-02-14 07:25 - 2018-01-05 16:50 - 000034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-02-14 07:25 - 2017-12-05 18:08 - 001176576 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2018-02-14 07:25 - 2017-12-05 18:08 - 000179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2018-02-14 07:25 - 2017-12-05 18:08 - 000145920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2018-02-14 07:25 - 2017-12-05 18:08 - 000135168 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2018-02-14 07:25 - 2017-12-05 18:08 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2018-02-14 07:25 - 2017-12-05 18:08 - 000072704 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2018-02-14 07:25 - 2017-12-05 16:54 - 000334848 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2018-02-14 07:23 - 2018-01-22 00:42 - 000117480 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-02-14 07:23 - 2018-01-22 00:20 - 000533504 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-02-14 07:23 - 2018-01-19 15:05 - 001893888 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-02-14 07:23 - 2018-01-19 15:05 - 001314304 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-02-14 07:23 - 2018-01-19 15:05 - 000594944 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-02-14 07:23 - 2018-01-19 15:05 - 000508416 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-02-14 07:23 - 2018-01-19 15:05 - 000337920 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2018-02-14 07:23 - 2018-01-19 15:05 - 000311808 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-02-14 07:23 - 2018-01-19 15:05 - 000212992 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-02-14 07:23 - 2018-01-19 15:05 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-02-12 10:26 - 2018-02-12 10:14 - 000489093 _____ C:\Users\Agnieszka2\Desktop\SKMBT_C36018021210130.pdf
2018-02-08 14:21 - 2018-02-08 14:22 - 000000000 ____D C:\ProgramData\firebird
2018-02-08 14:20 - 2018-02-08 14:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firebird 2.5 (Win32)
2018-02-06 09:29 - 2018-02-06 09:29 - 000001784 _____ C:\Users\Agnieszka2\AppData\Local\recently-used.xbel

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-03-05 14:13 - 2016-08-08 07:11 - 000000000 ____D C:\Users\Agnieszka2\Desktop\Download
2018-03-05 13:58 - 2014-03-26 12:32 - 000001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf48e7fcc0379.job
2018-03-05 13:37 - 2013-06-10 16:47 - 000000000 ____D C:\Users\Agnieszka2\Desktop\Dokumenty\Documents\Pliki programu Outlook
2018-03-05 13:32 - 2009-07-14 05:34 - 000015168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-03-05 13:32 - 2009-07-14 05:34 - 000015168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-03-05 13:31 - 2012-05-31 07:39 - 000001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2018-03-05 13:31 - 2010-10-13 07:03 - 001679254 _____ C:\Windows\system32\PerfStringBackup.INI
2018-03-05 13:31 - 2009-07-14 09:07 - 000743782 _____ C:\Windows\system32\perfh015.dat
2018-03-05 13:31 - 2009-07-14 09:07 - 000157264 _____ C:\Windows\system32\perfc015.dat
2018-03-05 13:31 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\inf
2018-03-05 13:28 - 2017-04-06 06:07 - 000001241 _____ C:\Users\agnieszka\Desktop\cFosSpeed Calibration.lnk
2018-03-05 13:28 - 2013-05-27 09:20 - 000002211 _____ C:\Users\agnieszka\Desktop\Google Chrome.lnk
2018-03-05 13:28 - 2011-04-12 14:18 - 000147384 _____ C:\Users\agnieszka\AppData\Local\GDIPFONTCACHEV1.DAT
2018-03-05 13:28 - 2009-07-14 05:46 - 000001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2018-03-05 13:24 - 2009-07-14 05:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-03-05 13:23 - 2017-11-15 10:15 - 000000000 ____D C:\Users\Agnieszka2\AppData\LocalLow\Mozilla
2018-03-05 12:36 - 2010-10-13 07:05 - 000000000 ____D C:\Program Files\Realtek
2018-03-05 11:04 - 2016-10-04 07:48 - 000000000 ____D C:\Users\Agnieszka2\Desktop\Materiały drzewa
2018-03-05 10:29 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\system32\NDF
2018-03-05 08:56 - 2017-10-25 09:51 - 000000000 ____D C:\Users\Agnieszka2\Desktop\Afrykarium 14.11
2018-03-01 12:17 - 2016-10-24 09:08 - 000002176 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-02-28 08:29 - 2017-01-27 13:24 - 000023643 _____ C:\Users\Agnieszka2\Desktop\Tauron.xlsx
2018-02-27 13:52 - 2017-01-04 09:52 - 000001122 _____ C:\Users\Agnieszka2\Desktop\Numery.txt
2018-02-26 13:23 - 2016-11-03 08:56 - 000000044 _____ C:\Users\Agnieszka2\Desktop\748698428.txt
2018-02-26 07:21 - 2015-10-12 09:05 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-02-19 07:13 - 2017-07-17 08:49 - 000000000 ____D C:\Users\Agnieszka2\Desktop\Zdjęcia
2018-02-15 09:54 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\rescache
2018-02-14 08:01 - 2009-07-14 05:33 - 000526224 _____ C:\Windows\system32\FNTCACHE.DAT
2018-02-14 07:58 - 2015-04-16 05:59 - 000000000 ____D C:\Windows\system32\appraiser
2018-02-14 07:36 - 2013-08-14 14:05 - 000000000 ____D C:\Windows\system32\MRT
2018-02-14 07:29 - 2017-10-12 06:51 - 127229528 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-02-14 07:29 - 2012-05-29 11:10 - 127229528 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-02-13 09:20 - 2013-06-10 16:59 - 000000000 ____D C:\Users\Agnieszka2\AppData\Roaming\TeamViewer
2018-02-09 10:02 - 2013-07-02 11:55 - 000000000 ____D C:\Users\Agnieszka2\AppData\Local\ElevatedDiagnostics
2018-02-08 14:20 - 2013-07-22 09:49 - 000000000 ____D C:\Program Files\Firebird
2018-02-06 09:29 - 2017-01-18 14:35 - 000000000 ____D C:\Users\Agnieszka2\Desktop\Grafika
2018-02-06 09:29 - 2016-08-23 07:35 - 000000000 ____D C:\Users\Agnieszka2\AppData\Local\gtk-2.0
2018-02-06 09:00 - 2016-08-23 07:19 - 000000000 ____D C:\Users\Agnieszka2\.gimp-2.8

==================== Pliki w katalogu głównym wybranych folderów =======

2012-01-19 14:27 - 2012-01-19 14:27 - 000776208 _____ (Adobe Systems Incorporated) C:\Users\agnieszka\install_flashplayer11x32ax_gtba_aih.exe
2011-05-25 10:45 - 2011-05-25 10:45 - 015310807 _____ (Projekty Bankowe PolSoft) C:\Users\agnieszka\jcesetup.exe
2016-02-04 11:43 - 2016-02-04 11:43 - 000001095 _____ () C:\Program Files\Wideo — skrót.lnk
2017-12-04 08:07 - 2017-12-04 08:07 - 000000001 _____ () C:\Users\Agnieszka2\AppData\Local\llftool.4.40.agreement
2017-06-22 11:28 - 2017-06-22 11:30 - 000000600 _____ () C:\Users\Agnieszka2\AppData\Local\PUTTY.RND
2018-02-06 09:29 - 2018-02-06 09:29 - 000001784 _____ () C:\Users\Agnieszka2\AppData\Local\recently-used.xbel

Niektóre pliki w TEMP:
====================
2012-05-31 07:38 - 2012-05-31 07:39 - 002376368 _____ (Google Inc.) C:\Users\admin\AppData\Local\Temp\GoogleToolbarInstaller_en32_signed.exe
2013-06-06 15:35 - 2006-05-24 18:10 - 000455600 _____ (Macrovision Corporation) C:\Users\admin\AppData\Local\Temp\_isF278.exe
2013-05-09 11:05 - 2013-05-09 11:05 - 017605512 _____ (Adobe Systems Incorporated) C:\Users\agnieszka\AppData\Local\Temp\fp_pl_pfs_installer.exe
2013-05-27 09:01 - 2012-12-24 19:49 - 000152312 _____ (Krzysztof Kowalczyk) C:\Users\agnieszka\AppData\Local\Temp\sum~inst.exe
2013-05-06 06:20 - 2013-05-20 08:38 - 000395248 _____ (Babylon Ltd.) C:\Users\agnieszka\AppData\Local\Temp\uninst1.exe
2013-06-06 14:25 - 2006-05-24 18:10 - 000455600 _____ (Macrovision Corporation) C:\Users\agnieszka\AppData\Local\Temp\_is4365.exe
2013-06-06 15:26 - 2006-05-24 18:10 - 000455600 _____ (Macrovision Corporation) C:\Users\agnieszka\AppData\Local\Temp\_is64E9.exe
2013-06-06 08:47 - 2006-05-24 18:10 - 000455600 _____ (Macrovision Corporation) C:\Users\agnieszka\AppData\Local\Temp\_is9159.exe
2013-06-06 11:41 - 2006-05-24 18:10 - 000455600 _____ (Macrovision Corporation) C:\Users\agnieszka\AppData\Local\Temp\_isB7BB.exe
2013-06-06 11:57 - 2006-05-24 18:10 - 000455600 _____ (Macrovision Corporation) C:\Users\agnieszka\AppData\Local\Temp\_isC715.exe
2013-06-06 12:18 - 2006-05-24 18:10 - 000455600 _____ (Macrovision Corporation) C:\Users\agnieszka\AppData\Local\Temp\_isF814.exe

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2018-03-01 13:46

==================== Koniec  FRST.txt ============================