Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 02.08.2018
Uruchomiony przez Angela (administrator)  ANGELA-KOMPUTER (11-08-2018 17:51:14)
Uruchomiony z C:\Users\Angela\Downloads
Załadowane profile: Angela &  (Dostępne profile: Angela)
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Google) C:\Users\Angela\AppData\Local\Google\Chrome\User Data\SwReporter\32.166.201\software_reporter_tool.exe
(Google) C:\Users\Angela\AppData\Local\Google\Chrome\User Data\SwReporter\32.166.201\software_reporter_tool.exe
(Google) C:\Users\Angela\AppData\Local\Google\Chrome\User Data\SwReporter\32.166.201\software_reporter_tool.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\Install\{53A988BA-49A6-4593-822C-AEA17AF9B39B}\68.0.3440.106_67.0.3396.99_chrome_updater.exe
(Google Inc.) C:\Windows\Temp\CR_5EA80.tmp\setup.exe
(Google Inc.) C:\Windows\Temp\CR_5EA80.tmp\setup.exe
(TeamViewer GmbH) C:\Users\Angela\AppData\Local\Temp\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Users\Angela\AppData\Local\Temp\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Users\Angela\AppData\Local\Temp\TeamViewer\tv_x64.exe
(TeamViewer GmbH) C:\Users\Angela\AppData\Local\Temp\TeamViewer\TeamViewer_Desktop.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2009-11-19] ()
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [98024 2018-07-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle Corporation)
HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08092018191828563\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08112018174038978\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-21-290078031-2182304185-614061559-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8721624 2016-05-13] (Piriform Ltd)
HKU\S-1-5-21-290078031-2182304185-614061559-1000\...\MountPoints2: {1a13658b-76e5-11e7-8d41-20cf306cfefe} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-290078031-2182304185-614061559-1000\...\MountPoints2: {975c985c-6df7-11e6-a643-20cf306cfefe} - H:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-290078031-2182304185-614061559-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08092018191829374\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8721624 2016-05-13] (Piriform Ltd)
HKU\S-1-5-21-290078031-2182304185-614061559-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08092018191829374\...\MountPoints2: {1a13658b-76e5-11e7-8d41-20cf306cfefe} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-290078031-2182304185-614061559-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08092018191829374\...\MountPoints2: {975c985c-6df7-11e6-a643-20cf306cfefe} - H:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-290078031-2182304185-614061559-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08112018174040395\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8721624 2016-05-13] (Piriform Ltd)
HKU\S-1-5-21-290078031-2182304185-614061559-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08112018174040395\...\MountPoints2: {1a13658b-76e5-11e7-8d41-20cf306cfefe} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-290078031-2182304185-614061559-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08112018174040395\...\MountPoints2: {975c985c-6df7-11e6-a643-20cf306cfefe} - H:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
Startup: C:\Users\Angela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk [2017-03-03]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: 127.0.0.1 validation.sls.microsoft.com
Tcpip\Parameters: [DhcpNameServer] 192.168.100.1
Tcpip\..\Interfaces\{34AAB2D8-5B74-4A11-9D81-E5C0C1482C72}: [DhcpNameServer] 192.168.100.1

Internet Explorer:
==================
HKU\S-1-5-21-290078031-2182304185-614061559-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=190
HKU\S-1-5-21-290078031-2182304185-614061559-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
HKU\S-1-5-21-290078031-2182304185-614061559-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08092018191829374\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=190
HKU\S-1-5-21-290078031-2182304185-614061559-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08092018191829374\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
HKU\S-1-5-21-290078031-2182304185-614061559-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08112018174040395\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=190
HKU\S-1-5-21-290078031-2182304185-614061559-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08112018174040395\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-290078031-2182304185-614061559-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-290078031-2182304185-614061559-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08092018191829374 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-290078031-2182304185-614061559-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08112018174040395 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-03-09] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_171\bin\ssv.dll [2018-04-19] (Oracle Corporation)
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2018-07-17] (McAfee, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-19] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-03-09] (Microsoft Corporation)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2018-07-17] (McAfee, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2018-07-17] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2018-07-17] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2018-07-17] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2018-07-17] (McAfee, Inc.)

FireFox:
========
FF DefaultProfile: 17rvfcb1.default
FF ProfilePath: C:\Users\Angela\AppData\Roaming\Mozilla\Firefox\Profiles\17rvfcb1.default [2018-08-11]
FF Extension: (Firefox Hotfix) - C:\Users\Angela\AppData\Roaming\Mozilla\Firefox\Profiles\17rvfcb1.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-09-06] [Przestarzałe]
FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2017-07-20] [Przestarzałe]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi [2018-05-15]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi
FF Plugin: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-19] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-19] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-19] (Google Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxps://www.google.pl/
CHR Profile: C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default [2018-08-11]
CHR Extension: (Prezentacje) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-14]
CHR Extension: (Dokumenty) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14]
CHR Extension: (Dysk Google) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-27]
CHR Extension: (Bloker reklam AdGuard) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2018-04-14]
CHR Extension: (YouTube) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-27]
CHR Extension: (BM Ultra) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\cifcimpkiapbddmbhapcgdhljheandjo [2016-12-05]
CHR Extension: (Arkusze) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-14]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2018-07-22]
CHR Extension: (Dokumenty Google offline) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-27]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-08]
CHR Extension: (Hover Zoom+) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\pccckmaobkjjboncdfnnofkonhgpceea [2018-06-24]
CHR Extension: (Gmail) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-27]
CHR Extension: (Chrome Media Router) - C:\Users\Angela\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-24]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [880040 2018-07-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [225384 2018-07-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [225384 2018-07-07] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164808 2018-07-07] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [429096 2018-07-20] (Avira Operations GmbH & Co. KG)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-06-27] (Nero AG)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [604824 2018-07-17] (McAfee, Inc.)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [Brak podpisu cyfrowego]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [64504 2017-06-15] (Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [199920 2018-07-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [153040 2018-07-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [35328 2017-03-03] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2017-03-03] (Avira Operations GmbH & Co. KG)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [152688 2018-06-19] (Malwarebytes)
S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-08] (QUALCOMM Incorporated)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [191208 2018-07-31] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [114920 2018-08-09] (Malwarebytes)
R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [48360 2018-08-09] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-07-31] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [92792 2018-08-11] (Malwarebytes)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [111608 2017-02-14] (McAfee, Inc.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-08-11 17:51 - 2018-08-11 17:52 - 000019374 _____ C:\Users\Angela\Downloads\FRST.txt
2018-08-11 17:51 - 2018-08-11 17:51 - 000019552 _____ C:\Users\Angela\Downloads\Log FRST z 31.rar
2018-08-11 17:49 - 2018-08-11 17:49 - 000000000 ____D C:\Users\Angela\Downloads\FRST-OlderVersion
2018-08-11 17:48 - 2018-08-11 17:48 - 000000000 ____D C:\Users\Angela\Downloads\Log FRST z 31
2018-08-11 17:47 - 2018-08-11 17:47 - 000000000 ____D C:\Users\Angela\AppData\Roaming\TeamViewer
2018-08-11 17:47 - 2018-08-11 17:47 - 000000000 ____D C:\Users\Angela\AppData\Local\TeamViewer
2018-08-11 17:45 - 2018-08-11 17:46 - 020688888 _____ (TeamViewer GmbH) C:\Users\Angela\Downloads\TeamViewer_Setup.exe
2018-08-11 17:40 - 2018-08-11 17:40 - 000092792 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2018-07-31 21:42 - 2018-08-11 17:51 - 000000000 ____D C:\FRST
2018-07-31 21:41 - 2018-08-11 17:49 - 002412544 _____ (Farbar) C:\Users\Angela\Downloads\FRST64.exe
2018-07-31 20:48 - 2018-07-31 20:48 - 000140094 _____ C:\Users\Angela\Downloads\Damian Krzanowski - oferta na film (1).pdf
2018-07-31 18:01 - 2018-07-31 18:01 - 000002069 _____ C:\Users\Angela\Desktop\Raport Malwarebytes.txt
2018-07-31 17:53 - 2018-08-09 19:17 - 000048360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2018-07-31 17:52 - 2018-08-09 19:17 - 000114920 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2018-07-31 17:52 - 2018-07-31 17:52 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-07-31 17:52 - 2018-07-31 17:52 - 000191208 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2018-07-31 17:51 - 2018-07-31 17:51 - 000001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-07-31 17:51 - 2018-07-31 17:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-07-31 17:51 - 2018-07-31 17:51 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-07-31 17:51 - 2018-07-31 17:51 - 000000000 ____D C:\Program Files\Malwarebytes
2018-07-31 17:51 - 2018-06-19 14:09 - 000152688 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2018-07-31 17:48 - 2018-07-31 17:50 - 077509952 _____ (Malwarebytes ) C:\Users\Angela\Downloads\mb3-setup-consumer-3.5.1.2522-1.0.391-1.0.6125.exe
2018-07-30 21:37 - 2018-07-30 21:37 - 000140094 _____ C:\Users\Angela\Downloads\Damian Krzanowski - oferta na film.pdf
2018-07-22 23:13 - 2018-07-22 23:13 - 000050073 _____ C:\Users\Angela\Downloads\Potwierdzenie wykonania operacji_20180722_231335.pdf

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-08-11 17:46 - 2017-12-12 19:30 - 000000000 ____D C:\Users\Angela\Desktop\zdjęcia
2018-08-11 17:42 - 2009-07-14 06:45 - 000031088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-08-11 17:42 - 2009-07-14 06:45 - 000031088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-08-11 17:40 - 2016-06-05 13:15 - 000000000 ____D C:\Users\Angela\Desktop\Angielka
2018-08-11 17:39 - 2016-06-10 19:39 - 000000270 _____ C:\Windows\Tasks\{1E55891B-B67B-3FAD-4842-2944A9A9A645}.job
2018-08-11 17:38 - 2017-10-09 21:58 - 000003316 _____ C:\Windows\System32\Tasks\Avira_Antivirus_Systray
2018-08-11 17:36 - 2016-12-14 21:30 - 000000202 _____ C:\Windows\Tasks\AutoKMSDaily.job
2018-08-09 19:21 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-08-09 19:20 - 2016-08-23 20:02 - 000000000 ____D C:\Users\Angela\AppData\Local\HTC MediaHub
2018-08-09 19:16 - 2016-05-27 17:29 - 000000202 _____ C:\Windows\Tasks\AutoKMS.job
2018-08-09 19:16 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-08-04 16:36 - 2016-05-27 17:01 - 000000000 ____D C:\Users\Angela\AppData\Roaming\AIMP
2018-08-04 16:04 - 2011-04-12 15:21 - 000756808 _____ C:\Windows\system32\perfh015.dat
2018-08-04 16:04 - 2011-04-12 15:21 - 000162124 _____ C:\Windows\system32\perfc015.dat
2018-08-04 16:04 - 2009-07-14 07:13 - 001712398 _____ C:\Windows\system32\PerfStringBackup.INI
2018-07-31 21:19 - 2017-01-18 15:22 - 000000000 ____D C:\Users\Angela\Downloads\Dokumenty
2018-07-30 19:45 - 2016-05-27 18:53 - 000000000 ____D C:\ProgramData\Package Cache
2018-07-30 19:45 - 2016-05-27 18:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2018-07-28 09:57 - 2016-09-25 14:31 - 000000000 ____D C:\Program Files (x86)\McAfee
2018-07-22 21:35 - 2016-05-28 17:04 - 000000000 ____D C:\Users\Angela\AppData\Local\ElevatedDiagnostics

==================== Pliki w katalogu głównym wybranych folderów =======

2016-06-10 20:39 - 2016-06-11 10:21 - 000000075 _____ () C:\Users\Angela\AppData\Roaming\WB.CFG
2017-03-21 21:32 - 2017-03-21 21:54 - 000003584 _____ () C:\Users\Angela\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-04-28 17:27 - 2017-04-28 17:27 - 000000017 _____ () C:\Users\Angela\AppData\Local\resmon.resmoncfg

Pliki do przeniesienia lub usunięcia:
====================
C:\Windows\Tasks\{1E55891B-B67B-3FAD-4842-2944A9A9A645}.job


==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2018-07-28 21:40

==================== Koniec  FRST.txt ============================