Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 02.08.2018
Uruchomiony przez TheRadioVoiceGuy (administrator)  RADIOVOICEGUY (10-08-2018 20:50:43)
Uruchomiony z C:\Users\TheRadioVoiceGuy\Desktop
Załadowane profile: TheRadioVoiceGuy (Dostępne profile: TheRadioVoiceGuy)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Greenshot) C:\Program Files\Greenshot\Greenshot.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(Electronic Arts) D:\Program Files (x86)\Origin\OriginWebHelperService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files\Rainlendar2\Rainlendar2.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PSIService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.2.223\WsAppService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amddvr.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(AVAST Software) C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [527792 2017-08-09] (Greenshot)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242904 2018-07-06] (AVAST Software)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [316392 2018-05-11] (Adobe Systems, Incorporated)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2016-09-26] (Logitech Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-21] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-07-07] (Oracle Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3754168 2018-07-31] (Dropbox, Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-1848013157-3754207559-1183874988-1000\...\Run: [Rainlendar2] => C:\Program Files\Rainlendar2\Rainlendar2.exe [3097640 2015-11-13] ()
HKU\S-1-5-21-1848013157-3754207559-1183874988-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [18385368 2018-06-24] (Piriform Ltd)
HKU\S-1-5-21-1848013157-3754207559-1183874988-1000\...\MountPoints2: F - F:\setup.exe
BootExecute: autocheck autochk * ROBoot64 \??\C:\Windows\system32\ASOROSet.binsdnclean64.exe
GroupPolicy: Ograniczenia ? <==== UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{2240AA70-26F1-4234-910D-6CAF552D906A}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-1848013157-3754207559-1183874988-1000\Software\Microsoft\Internet Explorer\Main,Start Page = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_181\bin\ssv.dll [2018-07-22] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2018-07-06] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_181\bin\jp2ssv.dll [2018-07-22] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_181\bin\ssv.dll [2018-07-22] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2018-07-06] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_181\bin\jp2ssv.dll [2018-07-22] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: 4ddb8szo.default
FF ProfilePath: C:\Users\TheRadioVoiceGuy\AppData\Roaming\Mozilla\Firefox\Profiles\4ddb8szo.default [2018-08-10]
FF Homepage: Mozilla\Firefox\Profiles\4ddb8szo.default -> google.pl
FF Extension: (Easy YouTube mp3) - C:\Users\TheRadioVoiceGuy\AppData\Roaming\Mozilla\Firefox\Profiles\4ddb8szo.default\Extensions\d.lehr@chello.at.xpi [2018-07-07]
FF Extension: (Simple YouTube to MP3/MP4 Converter) - C:\Users\TheRadioVoiceGuy\AppData\Roaming\Mozilla\Firefox\Profiles\4ddb8szo.default\Extensions\jid0-SQnwtgW1b8BsMB5PLV5WScEDWOjw@jetpack.xpi [2018-05-13]
FF Extension: (uBlock Origin) - C:\Users\TheRadioVoiceGuy\AppData\Roaming\Mozilla\Firefox\Profiles\4ddb8szo.default\Extensions\uBlock0@raymondhill.net.xpi [2018-07-17]
FF HKLM-x32\...\Firefox\Extensions: [youcam@cyberlink.com] - C:\Program Files (x86)\CyberLink\YouCam7\BrowserExtension\Firefox => nie znaleziono
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_30_0_0_134.dll [2018-07-10] ()
FF Plugin: @java.com/DTPlugin,version=11.181.2 -> C:\Program Files\Java\jre1.8.0_181\bin\dtplugin\npDeployJava1.dll [2018-07-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.181.2 -> C:\Program Files\Java\jre1.8.0_181\bin\plugin2\npjp2.dll [2018-07-22] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-12] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_134.dll [2018-07-10] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1234204.dll [2018-06-06] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.181.2 -> C:\Program Files (x86)\Java\jre1.8.0_181\bin\dtplugin\npDeployJava1.dll [2018-07-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.181.2 -> C:\Program Files (x86)\Java\jre1.8.0_181\bin\plugin2\npjp2.dll [2018-07-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-29] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-12] (Adobe Systems)

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2321384 2018-05-11] (Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2128872 2018-05-11] (Adobe Systems, Incorporated)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7780400 2018-07-06] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [322464 2018-07-06] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6076936 2018-04-30] ()
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-22] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-22] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [51392 2018-07-31] (Dropbox, Inc.)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [382504 2017-06-08] (EasyAntiCheat Ltd)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-07-12] (Hi-Rez Studios) [Brak podpisu cyfrowego]
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [7770888 2017-05-10] (INCA Internet Co., Ltd.)
S3 Origin Client Service; D:\Program Files (x86)\Origin\OriginClientService.exe [2155328 2017-12-26] (Electronic Arts)
R2 Origin Web Helper Service; D:\Program Files (x86)\Origin\OriginWebHelperService.exe [3025224 2017-12-26] (Electronic Arts)
S3 PAExec; C:\Windows\PAExec.exe [189112 2017-03-14] (Power Admin LLC)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2016-11-04] ()
R2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [174656 2016-12-14] () [Brak podpisu cyfrowego]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945776 2017-12-15] (TeamViewer GmbH)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [873968 2017-06-30] (Tunngle.net GmbH) [Brak podpisu cyfrowego]
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [36504 2016-12-28] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.2.223\WsAppService.exe [473312 2017-03-20] (Wondershare)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [92536 2018-04-25] (Advanced Micro Devices, Inc.)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [197160 2018-07-06] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [229392 2018-07-06] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [201328 2018-07-06] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [346664 2018-07-06] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [59592 2018-07-06] (AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [239680 2018-07-06] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46976 2018-07-06] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [159640 2018-07-06] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [111872 2018-07-06] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [85968 2018-07-06] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1027728 2018-07-06] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [467064 2018-07-23] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [211160 2018-07-06] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [381584 2018-07-06] (AVAST Software)
S3 ffusb2audio; C:\Windows\System32\DRIVERS\ffusb2audio.sys [127280 2016-09-27] (Focusrite Audio Engineering Limited.)
R3 FocusriteUSB; C:\Windows\System32\DRIVERS\FocusriteUSB.sys [87056 2018-01-09] (Focusrite Audio Engineering Ltd.)
R3 FocusriteUSBAudio; C:\Windows\System32\drivers\FocusriteUSBAudio.sys [45072 2018-01-09] (Focusrite Audio Engineering Ltd.)
R3 FocusriteUSBSwRoot; C:\Windows\System32\DRIVERS\FocusriteUSBSwRoot.sys [88592 2018-01-09] (Focusrite Audio Engineering Ltd.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-12-28] (REALiX(tm))
S3 Larmkanal; C:\Windows\System32\DRIVERS\Larmkanal.sys [33112 2015-09-02] (Adoriasoft LLC)
S4 LMIRfsClientNP; Brak ImagePath
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [190032 2016-12-28] (Intel Corporation)
S3 Phosgene; C:\Windows\System32\DRIVERS\Phosgene.sys [34136 2015-09-02] (Adoriasoft LLC)
S1 prodrv06; C:\Windows\SysWOW64\drivers\prodrv06.sys [54368 2004-11-25] (Protection Technology) [Brak podpisu cyfrowego]
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [77248 2004-11-25] (Protection Technology) [Brak podpisu cyfrowego]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [Brak podpisu cyfrowego]
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [Brak podpisu cyfrowego]
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [47736 2016-11-09] (Tunngle.net)
R3 VBAudioVACMME; C:\Windows\System32\DRIVERS\vbaudio_cable64_win7.sys [41192 2013-07-11] (Windows (R) Win 7 DDK provider)
S3 CLMirrorDriver; system32\DRIVERS\CLMirrorDriver.sys [X]
S3 clwvd7; system32\DRIVERS\clwvd7.sys [X]
S3 dbx; system32\DRIVERS\dbx.sys [X]
S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X]
S3 NTLiveGuardN64; \??\D:\CreationMu\LiveGuard\NTLiveGuardN64.sys [X]
S3 VGAOCTool; \??\C:\Users\THERAD~1\AppData\Local\Temp\VGAOCTool.sys [X] <==== UWAGA
S1 ZAM; \??\C:\Windows\System32\drivers\zam64.sys [X]
S1 ZAM_Guard; \??\C:\Windows\System32\drivers\zamguard64.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-08-10 20:48 - 2018-08-10 20:50 - 000015969 _____ C:\Users\TheRadioVoiceGuy\Desktop\FRST.txt
2018-08-10 20:48 - 2018-08-10 20:50 - 000000000 ____D C:\FRST
2018-08-10 20:45 - 2018-08-10 20:45 - 002412544 _____ (Farbar) C:\Users\TheRadioVoiceGuy\Desktop\FRST64.exe
2018-08-04 21:49 - 2018-08-04 21:49 - 000000085 _____ C:\Windows\wininit.ini
2018-08-04 21:17 - 2018-08-05 15:25 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2018-08-04 21:17 - 2018-08-04 21:49 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2018-08-04 21:17 - 2018-08-04 21:17 - 000000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2018-08-03 19:35 - 2018-08-03 19:35 - 000000222 _____ C:\Users\TheRadioVoiceGuy\Desktop\Stardew Valley.url
2018-08-03 11:07 - 2018-08-03 11:07 - 000000000 ____D C:\Users\TheRadioVoiceGuy\Documents\EA Games
2018-08-03 11:07 - 2018-08-03 11:07 - 000000000 ____D C:\Users\Public\Documents\EA Games
2018-08-01 22:04 - 2018-08-01 22:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2018-07-31 03:25 - 2018-07-31 03:25 - 000051392 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2018-07-31 03:25 - 2018-07-31 03:25 - 000050232 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2018-07-31 03:25 - 2018-07-31 03:25 - 000050232 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2018-07-31 03:25 - 2018-07-31 03:25 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2018-07-29 14:26 - 2018-07-29 14:26 - 000000000 ____D C:\Users\TheRadioVoiceGuy\AppData\LocalLow\AMD
2018-07-29 14:10 - 2018-07-29 17:30 - 000000000 ____D C:\Program Files (x86)\Zemana AntiMalware
2018-07-29 14:10 - 2018-07-29 14:53 - 000015849 _____ C:\Windows\ZAM_Guard.krnl.trace
2018-07-29 14:10 - 2018-07-29 14:31 - 000022617 _____ C:\Windows\ZAM.krnl.trace
2018-07-29 14:09 - 2018-07-29 14:09 - 000000000 ____D C:\Users\TheRadioVoiceGuy\AppData\Local\Zemana
2018-07-27 23:03 - 2018-07-27 23:04 - 000000000 ____D C:\AdwCleaner
2018-07-25 22:11 - 2018-08-05 00:15 - 000000000 ____D C:\Users\TheRadioVoiceGuy\Desktop\rapsy
2018-07-22 14:30 - 2018-08-04 21:20 - 000000000 _____ C:\Windows\SysWOW64\last.dump
2018-07-19 23:35 - 2018-07-19 23:35 - 005693084 _____ C:\Users\TheRadioVoiceGuy\Downloads\dupa.zip
2018-07-19 18:18 - 2018-07-19 18:20 - 1619032408 _____ C:\Users\TheRadioVoiceGuy\Desktop\STODOLA.zip
2018-07-18 23:42 - 2018-07-22 20:45 - 000000000 ____D C:\Users\TheRadioVoiceGuy\Documents\The Witcher 3
2018-07-18 23:42 - 2018-07-18 23:42 - 000001353 _____ C:\Users\Public\Desktop\Wiedźmin® 3 - Dziki Gon.lnk
2018-07-18 23:19 - 2018-08-04 21:49 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-08-10 20:48 - 2016-11-22 00:54 - 000000000 ____D C:\Users\TheRadioVoiceGuy\AppData\LocalLow\Mozilla
2018-08-10 20:39 - 2018-07-06 23:45 - 000000000 ____D C:\Users\TheRadioVoiceGuy\AppData\Local\AVAST Software
2018-08-10 20:37 - 2017-06-27 19:44 - 000000000 ____D C:\Users\TheRadioVoiceGuy\.rainlendar2
2018-08-10 20:37 - 2016-11-22 12:51 - 000001168 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2018-08-10 20:37 - 2016-10-19 22:46 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2018-08-10 20:37 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-08-08 23:47 - 2017-05-21 19:23 - 000000000 ____D C:\Program Files (x86)\Steam
2018-08-08 23:47 - 2017-01-03 18:06 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2018-08-08 23:02 - 2016-11-22 12:51 - 000001172 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2018-08-08 22:54 - 2017-08-27 20:46 - 000000000 ____D C:\Users\TheRadioVoiceGuy\AppData\Roaming\TS3Client
2018-08-08 22:45 - 2009-07-14 06:45 - 000021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-08-08 22:45 - 2009-07-14 06:45 - 000021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-08-08 18:47 - 2018-07-05 22:37 - 000003158 _____ C:\Windows\System32\Tasks\StartCN
2018-08-08 18:47 - 2018-07-05 22:37 - 000003072 _____ C:\Windows\System32\Tasks\StartDVR
2018-08-08 18:47 - 2018-04-14 00:10 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software
2018-08-08 18:47 - 2018-02-01 12:48 - 000003490 _____ C:\Windows\System32\Tasks\AdobeGCInvoker-1.0-RADIOVOICEGUY-TheRadioVoiceGuy
2018-08-08 18:47 - 2018-01-25 14:05 - 000003870 _____ C:\Windows\System32\Tasks\CCleaner Update
2018-08-08 18:47 - 2018-01-25 14:05 - 000002822 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2018-08-08 18:47 - 2017-11-02 20:09 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-08-08 18:47 - 2017-08-19 14:57 - 000003626 _____ C:\Windows\System32\Tasks\Update Manager
2018-08-08 18:47 - 2017-06-06 23:45 - 000002918 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (TheRadioVoiceGuy)
2018-08-08 18:47 - 2016-11-22 12:51 - 000004178 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA
2018-08-08 18:47 - 2016-11-22 12:51 - 000003926 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore
2018-08-08 18:47 - 2016-09-27 00:08 - 000004412 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-08-08 16:59 - 2017-03-02 23:25 - 000000000 ____D C:\Users\TheRadioVoiceGuy\AppData\Roaming\StardewValley
2018-08-07 23:04 - 2018-05-24 20:51 - 000001310 _____ C:\Users\Public\Desktop\Skype.lnk
2018-08-07 23:04 - 2018-01-25 23:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2018-08-07 18:48 - 2017-03-02 01:20 - 000000000 ____D C:\Users\TheRadioVoiceGuy\Desktop\Emisja głosu materiały + cennik itd
2018-08-06 20:47 - 2016-12-13 23:21 - 000000000 ____D C:\Users\TheRadioVoiceGuy\AppData\Local\Greenshot
2018-08-05 15:26 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-08-04 21:52 - 2016-09-26 23:57 - 000000000 ____D C:\Users\TheRadioVoiceGuy\AppData\Local\CrashDumps
2018-08-04 21:50 - 2016-12-28 23:28 - 000000000 ____D C:\ProgramData\ProductData
2018-08-04 21:49 - 2017-04-29 13:33 - 000000000 ____D C:\ProgramData\GOG.com
2018-08-04 21:49 - 2016-10-01 13:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2018-08-03 11:14 - 2016-11-02 18:14 - 000000000 ____D C:\Users\TheRadioVoiceGuy\AppData\Roaming\Origin
2018-08-03 11:00 - 2016-11-02 18:11 - 000000000 ____D C:\ProgramData\Origin
2018-08-01 22:04 - 2016-11-22 12:51 - 000000000 ____D C:\Program Files (x86)\Dropbox
2018-07-29 14:30 - 2016-10-28 14:09 - 000000000 ____D C:\Users\TheRadioVoiceGuy\Desktop\Gierki
2018-07-29 14:10 - 2016-09-26 21:20 - 000000000 ____D C:\Users\TheRadioVoiceGuy
2018-07-27 23:14 - 2018-01-25 14:05 - 000000000 ____D C:\Program Files\CCleaner
2018-07-24 23:28 - 2016-12-14 21:02 - 000000000 ____D C:\Users\TheRadioVoiceGuy\AppData\Roaming\Corel
2018-07-24 23:21 - 2017-02-02 12:56 - 000000000 ____D C:\Users\TheRadioVoiceGuy\Documents\Moje pliki PSP
2018-07-24 23:21 - 2016-12-14 20:57 - 000002516 ___SH C:\Windows\SysWOW64\KGyGaAvL.sys
2018-07-24 23:21 - 2016-12-14 20:57 - 000000088 __RSH C:\Windows\SysWOW64\E7DFDDD642.sys
2018-07-23 20:57 - 2018-04-14 00:09 - 000467064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2018-07-22 14:33 - 2017-08-22 20:05 - 000000000 ____D C:\Program Files\Java
2018-07-22 14:33 - 2017-01-05 01:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-07-22 14:33 - 2017-01-05 01:45 - 000000000 ____D C:\Program Files (x86)\Java
2018-07-22 14:30 - 2017-08-22 20:05 - 000110968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2018-07-22 14:29 - 2017-01-05 01:46 - 000098680 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2018-07-21 15:59 - 2017-01-17 13:05 - 000000000 ____D C:\Program Files\TeamSpeak 3 Client
2018-07-18 23:42 - 2009-07-14 07:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2018-07-16 23:18 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache
2018-07-16 20:22 - 2018-02-28 20:47 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2018-07-16 20:22 - 2016-09-26 21:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-07-12 23:19 - 2017-11-02 20:09 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-07-12 23:14 - 2011-04-12 15:21 - 000914006 _____ C:\Windows\system32\perfh015.dat
2018-07-12 23:14 - 2011-04-12 15:21 - 000216190 _____ C:\Windows\system32\perfc015.dat
2018-07-12 23:14 - 2009-07-14 07:13 - 001920900 _____ C:\Windows\system32\PerfStringBackup.INI
2018-07-12 23:07 - 2009-07-14 06:45 - 004978896 _____ C:\Windows\system32\FNTCACHE.DAT
2018-07-12 23:05 - 2017-01-25 04:35 - 000000000 ____D C:\Windows\system32\appraiser
2018-07-11 00:29 - 2016-09-27 00:46 - 001892570 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-07-11 00:26 - 2017-01-24 22:49 - 000000000 ____D C:\Windows\system32\MRT
2018-07-11 00:22 - 2017-01-24 22:48 - 134675576 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Pliki w katalogu głównym wybranych folderów =======

2018-05-22 23:30 - 2018-05-22 23:30 - 002722286 _____ () C:\Program Files (x86)\Auto-Tune 8 Manual.pdf
2018-05-22 23:30 - 2018-05-22 23:30 - 000056051 _____ () C:\Program Files (x86)\VST PC Read Me.pdf
2018-01-09 22:43 - 2018-01-09 22:43 - 000000104 _____ () C:\Users\TheRadioVoiceGuy\AppData\Local\fusioncache.dat
2017-01-03 23:12 - 2017-01-03 23:12 - 000000000 ___SH () C:\Users\TheRadioVoiceGuy\AppData\Local\LumaEmu
2018-03-20 17:42 - 2018-04-13 22:50 - 000007601 _____ () C:\Users\TheRadioVoiceGuy\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2018-08-08 19:10

==================== Koniec  FRST.txt ============================