Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 13-03-2019 01
Uruchomiony przez PAWEŁ (administrator)  PIERWSZY-LAPEK (13-03-2019 22:29:40)
Uruchomiony z C:\Users\PAWEŁ\Desktop
Załadowane profile: PAWEŁ & UpdatusUser (Dostępne profile: PAWEŁ & UpdatusUser & Gość)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka: IE)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
(Microsoft Windows Hardware Compatibility Publisher -> Agere Systems) C:\Windows\System32\agrsmsvc.exe
(Intel(R) Corporation) [Brak podpisu cyfrowego] C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(FingerPower Digital Technology Ltd. -> ) C:\Users\PAWEŁ\AppData\Local\Kingosoft\Kingo Root\update_54326\bin\KingoSoftService.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\Common Files\McAfee\McProxy\McProxy.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\McAfee\VirusScan\Mcshield.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\McAfee\MPF\MpfSrv.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Novatel Wireless, Inc. -> ) C:\Program Files\Novatel Wireless\Novacore\Server\NvtlSrvr.exe
(Protexis Inc. -> ) [Brak podpisu cyfrowego] C:\Program Files\Common Files\Protexis\License Service\PSIService.exe
(RealNetworks, Inc. -> ) C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(Intel(R) Corporation) [Brak podpisu cyfrowego] C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(CyberLink -> ) C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
() [Brak podpisu cyfrowego] C:\Program Files\blueconnect\AssistantServices.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\McAfee\MSC\mcmscsvc.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\McAfee\VirusScan\mcsysmon.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\McAfee.com\Agent\mcagent.exe
(Samsung Electronics Co., Ltd.) [Brak podpisu cyfrowego] C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe
(SAMSUNG Electronics co., LTD.) [Brak podpisu cyfrowego] C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe
(Samsung Electronics Co., Ltd.) [Brak podpisu cyfrowego] C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(SAMSUNG Electronics) [Brak podpisu cyfrowego] C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Synaptics Incorporated -> Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(CyberLink -> Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
(Panda Security S.L -> Panda Security) C:\Program Files\Panda USB Vaccine\USBVaccine.exe
() [Brak podpisu cyfrowego] C:\Program Files\blueconnect\UIExec.exe
(InstallShield Software Corporation) [Brak podpisu cyfrowego] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() [Brak podpisu cyfrowego] C:\Program Files\Unlocker\UnlockerAssistant.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WindowsMobile\wmdSync.exe
(RealNetworks, Inc. -> RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(CyberLink -> Cyberlink) C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Telespree Communications -> Telespree Communications) C:\Program Files\Telespree\Self Service Assistant - Data Usage Meter\SSADataMeter.exe
(Synaptics Incorporated -> Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\McAfee\MSC\mcuimgr.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\conime.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6111232 2008-04-17] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-10-26] (Synaptics Incorporated -> Synaptics, Inc.)
HKLM\...\Run: [RemoteControl] => C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [71216 2007-03-14] (CyberLink -> Cyberlink Corp.)
HKLM\...\Run: [LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [52256 2007-01-08] (CyberLink -> ) [Brak podpisu cyfrowego]
HKLM\...\Run: [mcagent_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [582992 2007-08-03] (McAfee, Inc. -> McAfee, Inc.)
HKLM\...\Run: [SpeedTouch USB Diagnostics] => C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe [888832 2004-03-23] (THOMSON Telecom Belgium) [Brak podpisu cyfrowego]
HKLM\...\Run: [SSC Service Utility] => C:\Program Files\SSCService Utility\ssc_serv.exe [665600 2007-10-09] (SSC Localization Group) [Brak podpisu cyfrowego]
HKLM\...\Run: [UIExec] => C:\Program Files\blueconnect\UIExec.exe [132608 2009-09-15] () [Brak podpisu cyfrowego]
HKLM\...\Run: [ISUSScheduler] => C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-02-16] (InstallShield Software Corporation) [Brak podpisu cyfrowego]
HKLM\...\Run: [UnlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] () [Brak podpisu cyfrowego]
HKLM\...\Run: [Windows Mobile-based device management] => C:\Windows\WindowsMobile\wmdSync.exe [215552 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\Update\realsched.exe [295512 2014-02-17] (RealNetworks, Inc. -> RealNetworks, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [595992 2016-05-20] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [235624 2015-01-09] (Canon Inc. -> CANON INC.)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-3541930631-1061133730-2441918338-1003\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-3541930631-1061133730-2441918338-1003\...\Run: [Gadu-Gadu] => C:\Program Files\Gadu-Gadu\gg.exe [2127296 2008-03-20] (Gadu-Gadu sp. z o.o. -> Gadu-Gadu S.A.)
HKU\S-1-5-21-3541930631-1061133730-2441918338-1003\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-01-02] (Google Inc -> Google Inc.)
HKU\S-1-5-21-3541930631-1061133730-2441918338-1003\...\Run: [Power2GoExpress] => C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe [2512168 2008-02-25] (CyberLink -> Cyberlink)
HKU\S-1-5-21-3541930631-1061133730-2441918338-1003\...\Run: [ISUSPM Startup] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-16] (InstallShield Software Corporation) [Brak podpisu cyfrowego]
HKU\S-1-5-21-3541930631-1061133730-2441918338-1003\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [27427808 2017-02-08] (Skype Software Sarl -> Skype Technologies S.A.) [Brak podpisu cyfrowego]
HKU\S-1-5-21-3541930631-1061133730-2441918338-1003\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-3541930631-1061133730-2441918338-1003\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3541930631-1061133730-2441918338-1003\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3541930631-1061133730-2441918338-1003\...\MountPoints2: {39a91d8f-fe01-11de-8757-9bdfcafa1994} - G:\Install.exe
HKU\S-1-5-21-3541930631-1061133730-2441918338-1007\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Drivers32: [msacm.l3codecp] => C:\Windows\system32\l3codecp.acm [220672 2009-04-11] (Microsoft Windows -> Fraunhofer Institut Integrierte Schaltungen IIS)
HKLM\...\Drivers32: [msacm.clmp3enc] => C:\Program Files\CyberLink\Power2Go\CLMP3Enc.ACM [217088 2005-05-13] (CyberLink Corp.) [Brak podpisu cyfrowego]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\system32\ff_vfw.dll [7680 2008-06-12] () [Brak podpisu cyfrowego]
HKLM\...\Drivers32: [msacm.avis] => C:\Windows\system32\ff_acm.acm [6144 2008-06-12] () [Brak podpisu cyfrowego]
HKLM\...\Drivers32: [MSVideo] => C:\Windows\system32\vfwwdm32.dll [56832 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Drivers32: [VIDC.WMV3] => C:\Windows\system32\wmv9vcm.dll [1696256 2013-05-09] (Microsoft Windows Component Publisher -> Microsoft Corporation)
HKLM\...\Drivers32: [vidc.XVID] => C:\Windows\system32\xvidvfw.dll [180224 2008-12-04] () [Brak podpisu cyfrowego]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] -> 
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\49.0.2623.112\Installer\chrmstp.exe [2016-04-08] (Google Inc -> Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk [2008-07-16]
ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\Users\PAWEŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Przypominacz.lnk [2009-04-09]
ShortcutTarget: Przypominacz.lnk -> C:\Users\PAWEŁ\Desktop\przypom\Przypominacz.exe () [Brak podpisu cyfrowego]
Startup: C:\Users\PAWEŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Self Service Assistant - Data Usage Meter.lnk [2019-03-13]
ShortcutTarget: Self Service Assistant - Data Usage Meter.lnk -> C:\Users\PAWEŁ\AppData\Roaming\Microsoft\Installer\{BDE9D8BB-F146-4BBE-A527-CC89ADC0AB84}\_16496df1.exe () [Brak podpisu cyfrowego]
GroupPolicy\User: Ograniczenia ? <==== UWAGA
GroupPolicyUsers\S-1-5-21-3541930631-1061133730-2441918338-1007\User: Ograniczenia <==== UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Winsock: Catalog9 01 C:\Windows\system32\wpclsp.dll [72192 2008-01-21] (Microsoft Corporation)
Winsock: Catalog9 02 C:\Windows\system32\wpclsp.dll [72192 2008-01-21] (Microsoft Corporation)
Winsock: Catalog9 03 C:\Windows\system32\wpclsp.dll [72192 2008-01-21] (Microsoft Corporation)
Winsock: Catalog9 04 C:\Windows\system32\wpclsp.dll [72192 2008-01-21] (Microsoft Corporation)
Winsock: Catalog9 05 C:\Windows\system32\wpclsp.dll [72192 2008-01-21] (Microsoft Corporation)
Winsock: Catalog9 06 C:\Windows\system32\wpclsp.dll [72192 2008-01-21] (Microsoft Corporation)
Winsock: Catalog9 07 C:\Windows\system32\wpclsp.dll [72192 2008-01-21] (Microsoft Corporation)
Winsock: Catalog9 08 C:\Windows\system32\wpclsp.dll [72192 2008-01-21] (Microsoft Corporation)
Winsock: Catalog9 20 C:\Windows\system32\wpclsp.dll [72192 2008-01-21] (Microsoft Corporation)
Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.20.1.132 10.20.1.133 194.204.152.34
Tcpip\..\Interfaces\{428C6F3E-94C8-400D-B556-DC69ECBD721C}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{C071CFC3-957C-422B-BEAA-8B20BB891200}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{C73CCBDF-67EF-4B9E-AEA3-B02F07C01090}: [DhcpNameServer] 10.20.1.132 10.20.1.133 194.204.152.34

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp:\\www.samsungcomputer.com
HKU\S-1-5-21-3541930631-1061133730-2441918338-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp:\\www.samsungcomputer.com
HKU\S-1-5-21-3541930631-1061133730-2441918338-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14] (RealNetworks, Inc. -> RealDownloader)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12] (DivX, LLC -> DivX, LLC)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-06-03] (Oracle America, Inc. -> Oracle Corporation)
BHO: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> c:\Program Files\McAfee\VirusScan\scriptsn.dll [2007-11-09] (McAfee, Inc. -> McAfee, Inc.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-26] (Google Inc -> Google Inc.)
BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies SA -> Skype Technologies S.A.)
BHO: FDMIECookiesBHO Class -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files\Free Download Manager\iefdm2.dll [2008-12-30] () [Brak podpisu cyfrowego]
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-06-03] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-26] (Google Inc -> Google Inc.)
Toolbar: HKU\S-1-5-21-3541930631-1061133730-2441918338-1003 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-26] (Google Inc -> Google Inc.)
Toolbar: HKU\S-1-5-21-3541930631-1061133730-2441918338-1003 -> Brak nazwy - {32099AAC-C132-4136-9E9A-4E364A424E17} -  Brak pliku
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1236888306441
DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab
DPF: {68282C51-9459-467B-95BF-3C0E89627E55} hxxp://www.mks.com.pl/skaner/SkanerOnline.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1236888483598
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies SA -> Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2017-01-01] (Skype Software Sarl -> Skype Technologies) [Brak podpisu cyfrowego]

FireFox:
========
FF ProfilePath: C:\Users\PAWEŁ\AppData\Roaming\Mozilla\Firefox\Profiles\dqt7twm3.default [2019-03-04]
FF Homepage: Mozilla\Firefox\Profiles\dqt7twm3.default -> hxxp://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official
FF Session Restore: Mozilla\Firefox\Profiles\dqt7twm3.default -> [funkcja włączona]
FF Extension: (AutoPager) - C:\Users\PAWEŁ\AppData\Roaming\Mozilla\Firefox\Profiles\dqt7twm3.default\Extensions\autopager@mozilla.org.xpi [2016-06-22] [Przestarzałe]
FF Extension: (Firebug) - C:\Users\PAWEŁ\AppData\Roaming\Mozilla\Firefox\Profiles\dqt7twm3.default\Extensions\firebug@software.joehewitt.com.xpi [2017-05-21] [Przestarzałe]
FF Extension: (Vividas player plugin) - C:\Users\PAWEŁ\AppData\Roaming\Mozilla\Firefox\Profiles\dqt7twm3.default\Extensions\player@vividas.com [2011-10-29] [Przestarzałe] [Brak podpisu cyfrowego]
FF Extension: (Microsoft .NET Framework Assistant) - C:\Users\PAWEŁ\AppData\Roaming\Mozilla\Firefox\Profiles\dqt7twm3.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-02-01] [Przestarzałe] [Brak podpisu cyfrowego]
FF Extension: (FEBE) - C:\Users\PAWEŁ\AppData\Roaming\Mozilla\Firefox\Profiles\dqt7twm3.default\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2016-01-21] [Przestarzałe]
FF Extension: (lori (Life-of-request info)) - C:\Users\PAWEŁ\AppData\Roaming\Mozilla\Firefox\Profiles\dqt7twm3.default\Extensions\{6dfc4f52-26f0-4e5f-89c7-31d6de480db9}.xpi [2016-06-22] [Przestarzałe]
FF Extension: (CSSViewer) - C:\Users\PAWEŁ\AppData\Roaming\Mozilla\Firefox\Profiles\dqt7twm3.default\Extensions\{8be51513-0433-45c1-9203-7b45019df871} [2011-01-12] [Przestarzałe] [Brak podpisu cyfrowego]
FF Extension: (Bitdefender QuickScan) - C:\Users\PAWEŁ\AppData\Roaming\Mozilla\Firefox\Profiles\dqt7twm3.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2017-05-25] [Przestarzałe]
FF Extension: (User Agent Switcher) - C:\Users\PAWEŁ\AppData\Roaming\Mozilla\Firefox\Profiles\dqt7twm3.default\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi [2016-06-22] [Przestarzałe]
FF SearchPlugin: C:\Users\PAWEŁ\AppData\Roaming\Mozilla\Firefox\Profiles\dqt7twm3.default\searchplugins\sownik-ortograficzny-marcina-mikowskiego.xml [2009-01-13]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-09-02] [Przestarzałe] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\blueconnect\addon
FF Extension: (Bytemobile Optimization Client) - C:\Program Files\blueconnect\addon [2010-01-10] [Przestarzałe] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: (DivX Plus Web Player HTML5 <video>) - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-06-12] [Przestarzałe] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: (RealDownloader) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-02-17] [Przestarzałe] [Brak podpisu cyfrowego]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-13] (Adobe Systems Incorporated -> )
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [2012-04-26] (Adobe Systems, Inc.) [Brak podpisu cyfrowego]
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-12-13] (DivX, LLC -> DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, Inc. -> DivX, LLC.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google Inc -> Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-06-03] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-06-03] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.3.51 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll [2014-02-17] (RealNetworks, Inc. -> RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2013-08-14] (RealNetworks, Inc.) [Brak podpisu cyfrowego]
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2013-08-14] (RealNetworks, Inc.) [Brak podpisu cyfrowego]
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2013-08-14] (RealNetworks, Inc.) [Brak podpisu cyfrowego]
FF Plugin: @real.com/nprpjplug;version=6.0.12.1662 -> C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll [2008-04-28] (RealNetworks, Inc.) [Brak podpisu cyfrowego]
FF Plugin: @real.com/nprpjplug;version=6.0.12.46 -> C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll [2008-04-28] (RealNetworks, Inc.) [Brak podpisu cyfrowego]
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll [2014-02-17] (RealNetworks, Inc. -> RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2013-08-14] (RealNetworks, Inc. -> RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

Chrome: 
=======
CHR Session Restore: Default -> [funkcja włączona]
CHR Profile: C:\Users\PAWEŁ\AppData\Local\Google\Chrome\User Data\Default [2019-03-13]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\PAWEŁ\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-05-03]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]
CHR HKLM\...\Chrome\Extension: [ojcdnngpmbenohhjlickdajclhbcaada] - <Brak Path/update_url>

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AgereModemAudio; C:\Windows\system32\agrsmsvc.exe [9216 2006-10-05] (Microsoft Windows Hardware Compatibility Publisher -> Agere Systems)
R2 EvtEng; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [819200 2008-05-23] (Intel(R) Corporation) [Brak podpisu cyfrowego]
R2 KingoSoftService; C:\Users\PAWEŁ\AppData\Local\Kingosoft\Kingo Root\update_54326\bin\checkupdate.exe [377832 2017-11-13] (FingerPower Digital Technology Ltd. -> )
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes Corporation -> Malwarebytes)
R2 mcmscsvc; C:\Program Files\McAfee\MSC\mcmscsvc.exe [767976 2008-01-09] (McAfee, Inc. -> McAfee, Inc.)
R2 McNASvc; c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe [2458128 2008-01-25] (McAfee, Inc. -> McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [378184 2007-07-24] (McAfee, Inc. -> McAfee, Inc.)
R2 McProxy; c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe [359248 2007-08-15] (McAfee, Inc. -> McAfee, Inc.)
R2 McShield; C:\Program Files\McAfee\VirusScan\Mcshield.exe [144704 2007-07-24] (McAfee, Inc. -> McAfee, Inc.)
R3 McSysmon; C:\Program Files\McAfee\VirusScan\mcsysmon.exe [695624 2007-12-05] (McAfee, Inc. -> McAfee, Inc.)
R2 MpfService; C:\Program Files\McAfee\MPF\MPFSrv.exe [856864 2007-07-18] (McAfee, Inc. -> McAfee, Inc.)
R2 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation -> Microsoft Corporation)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation -> Microsoft Corporation)
R2 NvtlService; C:\Program Files\Novatel Wireless\Novacore\Server\NvtlSrvr.exe [91472 2010-04-23] (Novatel Wireless, Inc. -> )
R2 ProtexisLicensing; C:\Program Files\Common Files\Protexis\License Service\PSIService.exe [174656 2006-11-02] (Protexis Inc. -> ) [Brak podpisu cyfrowego]
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] (RealNetworks, Inc. -> )
R2 RegSrvc; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [466944 2008-05-23] (Intel(R) Corporation) [Brak podpisu cyfrowego]
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2006-12-19] (CyberLink -> )
S2 Samsung Update Plus; C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe [77480 2008-05-13] (Samsung Electronics CO., LTD. -> ) [Brak podpisu cyfrowego]
S2 SkypeUpdate; C:\Program Files\Skype\Updater\Updater.exe [317400 2017-01-16] (Skype Software Sarl -> Skype Technologies) [Brak podpisu cyfrowego]
R2 UI Assistant Service; C:\Program Files\blueconnect\AssistantServices.exe [241664 2009-09-15] () [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Windows -> Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 AgereSoftModem; C:\Windows\System32\DRIVERS\AGRSM.sys [1161888 2006-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Agere Systems)
S3 alcan5wn; C:\Windows\System32\DRIVERS\alcan5wn.sys [53600 2003-12-08] (Microsoft Windows Hardware Compatibility Publisher -> THOMSON)
S3 alcaudsl; C:\Windows\System32\DRIVERS\alcaudsl.sys [70688 2003-12-08] (Microsoft Windows Hardware Compatibility Publisher -> THOMSON)
R3 athr; C:\Windows\System32\DRIVERS\athr.sys [1203712 2009-12-17] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
U0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [22528 2009-09-15] (Bytemobile, Inc.) [Brak podpisu cyfrowego]
S3 btwaudio; C:\Windows\System32\drivers\btwaudio.sys [80424 2008-02-14] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwavdt; C:\Windows\System32\drivers\btwavdt.sys [80936 2007-07-15] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwrchid; C:\Windows\System32\DRIVERS\btwrchid.sys [16168 2007-07-15] (Broadcom Corporation -> Broadcom Corporation.)
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [Brak podpisu cyfrowego]
S3 hwdatacard; C:\Windows\System32\DRIVERS\ewusbmdm.sys [101760 2008-09-26] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S4 iteatapi; C:\Windows\system32\drivers\iteatapi.sys [35944 2006-11-02] (Microsoft Windows -> Integrated Technology Express, Inc.)
S4 iteraid; C:\Windows\system32\drivers\iteraid.sys [35944 2006-11-02] (Microsoft Windows -> Integrated Technology Express, Inc.)
R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2007-05-23] (Microsoft Windows Hardware Compatibility Publisher -> SAMSUNG ELECTRONICS CO., LTD.)
S3 massfilter; C:\Windows\System32\drivers\massfilter.sys [9216 2009-09-01] (Microsoft Windows Hardware Compatibility Publisher -> ZTE Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes Corporation -> Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-10-05] (Malwarebytes Corporation -> Malwarebytes Corporation)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [79304 2007-11-22] (McAfee, Inc. -> McAfee, Inc.)
R3 mfebopk; C:\Windows\System32\drivers\mfebopk.sys [35240 2007-11-22] (McAfee, Inc. -> McAfee, Inc.)
R1 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [565352 2014-02-20] (McAfee, Inc. -> McAfee, Inc.)
S3 mferkdk; C:\Windows\System32\drivers\mferkdk.sys [33832 2007-11-22] (McAfee, Inc. -> McAfee, Inc.)
R3 mfesmfk; C:\Windows\System32\drivers\mfesmfk.sys [40488 2007-12-02] (McAfee, Inc. -> McAfee, Inc.)
R1 MPFP; C:\Windows\System32\Drivers\Mpfp.sys [125728 2007-07-13] (McAfee, Inc. -> McAfee, Inc.)
S3 NETw5v32; C:\Windows\System32\DRIVERS\NETw5v32.sys [3663360 2008-05-20] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
S4 ntrigdigi; C:\Windows\system32\drivers\ntrigdigi.sys [20608 2006-11-02] (Microsoft Windows -> N-trig Innovative Technologies)
R3 NWADI; C:\Windows\System32\DRIVERS\NWADIenum.sys [230400 2009-11-10] (Microsoft Windows Hardware Compatibility Publisher -> Novatel Wireless Inc)
S3 NWRmNet; C:\Windows\System32\DRIVERS\NWRmNet.sys [118784 2009-11-10] (Microsoft Windows Hardware Compatibility Publisher -> Novatel Wireless Inc.)
S3 NWUSBModem; C:\Windows\System32\DRIVERS\nwusbmdm.sys [174720 2009-11-10] (Microsoft Windows Hardware Compatibility Publisher -> Novatel Wireless Inc.)
S3 NWUSBPort; C:\Windows\System32\DRIVERS\nwusbser.sys [174720 2009-11-10] (Microsoft Windows Hardware Compatibility Publisher -> Novatel Wireless Inc.)
S3 NWUSBPort2; C:\Windows\System32\DRIVERS\nwusbser2.sys [174720 2009-11-10] (Microsoft Windows Hardware Compatibility Publisher -> Novatel Wireless Inc.)
S3 PCASp50; C:\Windows\System32\Drivers\PCASp50.sys [27072 2010-04-23] (PRINTING COMMUNICATIONS ASSOC., INC. -> Printing Communications Assoc., Inc. (PCAUSA))
S3 Ser2pl; C:\Windows\System32\DRIVERS\ser2pl.sys [48896 2005-11-01] (Prolific Technology Inc.) [Brak podpisu cyfrowego]
R0 speedfan; C:\Windows\System32\speedfan.sys [5248 2006-09-24] (Windows (R) 2000 DDK provider) [Brak podpisu cyfrowego]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2014-02-21] () [Brak podpisu cyfrowego]
R1 tcpipBM; C:\Windows\System32\Drivers\tcpipBM.sys [18816 2009-09-15] (Bytemobile, Inc.) [Brak podpisu cyfrowego]
S4 uliahci; C:\Windows\system32\drivers\uliahci.sys [238648 2008-01-21] (Microsoft Windows -> ULi Electronics Inc.)
S4 UlSata; C:\Windows\system32\drivers\ulsata.sys [98408 2006-11-02] (Microsoft Windows -> Promise Technology, Inc.)
S4 ulsata2; C:\Windows\system32\drivers\ulsata2.sys [115816 2008-01-21] (Microsoft Windows -> Promise Technology, Inc.)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [Brak podpisu cyfrowego]
R3 VMC302; C:\Windows\System32\Drivers\VMC302.sys [242560 2008-04-05] (Microsoft Windows Hardware Compatibility Publisher -> Vimicro Corporation)
R3 yukonwlh; C:\Windows\System32\DRIVERS\yk60x86.sys [298496 2007-12-28] (Microsoft Windows Hardware Compatibility Publisher -> Marvell)
S3 ZTEusbmdm6k; C:\Windows\System32\DRIVERS\ZTEusbmdm6k.sys [105088 2009-09-01] (Microsoft Windows Hardware Compatibility Publisher -> ZTE Incorporated)
S3 ZTEusbnmea; C:\Windows\System32\DRIVERS\ZTEusbnmea.sys [105088 2009-09-01] (Microsoft Windows Hardware Compatibility Publisher -> ZTE Incorporated)
S3 ZTEusbser6k; C:\Windows\System32\DRIVERS\ZTEusbser6k.sys [105088 2009-09-01] (Microsoft Windows Hardware Compatibility Publisher -> ZTE Incorporated)
U3 ad20wtk8; C:\Windows\System32\Drivers\ad20wtk8.sys [0 ]Microsoft Corporation<==== UWAGA (zerobajtowy plik/folder)
S3 cpuz132; \??\C:\Users\PAWE~1\AppData\Local\Temp\cpuz132\cpuz132_x32.sys [X] <==== UWAGA
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 LVRS; system32\DRIVERS\lvrs.sys [X]
S3 LVUSBSta; system32\drivers\LVUSBSta.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 pepifilter; system32\DRIVERS\lv302af.sys [X]
S3 PID_PEPI; system32\DRIVERS\LV302V32.SYS [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2019-03-13 22:29 - 2019-03-13 22:30 - 000035901 _____ C:\Users\PAWEŁ\Desktop\FRST.txt
2019-03-13 22:21 - 2019-03-13 22:29 - 000000000 ____D C:\FRST
2019-03-13 20:29 - 2019-03-13 20:29 - 000158184 _____ C:\Windows\Minidump\Mini031319-01.dmp
2019-03-10 03:35 - 2019-03-10 03:35 - 000001736 _____ C:\10032019mbam.txt
2019-03-09 18:28 - 2019-03-09 18:28 - 000000000 ____D C:\Users\PAWEŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minitube
2019-03-09 18:28 - 2019-03-09 18:28 - 000000000 ____D C:\Users\PAWEŁ\AppData\Local\Minitube
2019-03-09 18:28 - 2019-03-09 18:28 - 000000000 ____D C:\Users\PAWEŁ\AppData\Local\Flavio Tordini
2019-03-09 18:24 - 2019-03-09 18:25 - 021307016 _____ C:\Users\PAWEŁ\Downloads\minitube.exe
2019-03-08 00:59 - 2019-03-08 01:01 - 008055786 _____ C:\Users\PAWEŁ\Desktop\DNVM001.mp4
2019-03-08 00:49 - 2019-03-03 01:50 - 395311072 _____ C:\Users\PAWEŁ\Desktop\DNVM0011.AVI
2019-03-07 16:42 - 2019-03-07 16:42 - 001556998 _____ C:\Users\PAWEŁ\Downloads\Oswiadczenie_majatkowe_zlozone_w_zwiazku_z_objeciem_funkcji_radnego.pdf
2019-03-06 00:18 - 2019-03-06 00:23 - 000000000 ____D C:\Users\PAWEŁ\Desktop\NARZĘDZIA
2019-03-06 00:02 - 2019-03-13 22:23 - 001792000 _____ (Farbar) C:\Users\PAWEŁ\Desktop\FRST.exe
2019-03-05 23:05 - 2019-03-05 23:05 - 000000646 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asystent aktualizacji do systemu Windows 10.lnk
2019-03-05 23:05 - 2019-03-05 23:05 - 000000000 ____D C:\Windows10Upgrade
2019-03-05 02:06 - 2018-12-10 23:04 - 000499424 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2019-02-28 19:06 - 2019-02-28 19:06 - 000158288 _____ C:\Windows\Minidump\Mini022819-01.dmp
2019-02-28 03:06 - 2019-02-28 03:06 - 075355404 _____ C:\Users\PAWEŁ\Downloads\28_02_2019-[02-00-01]_trojka.ogg
2019-02-25 00:44 - 2019-03-13 00:44 - 000000208 _____ C:\Users\PAWEŁ\AppData\Roaming\WB.CFG
2019-02-24 04:45 - 2019-02-24 04:45 - 000000000 ____D C:\Users\PAWEŁ\Downloads\CamStudioPortable
2019-02-24 04:45 - 2019-02-24 04:45 - 000000000 ____D C:\Users\PAWEŁ\AppData\Local\chromium
2019-02-24 04:44 - 2019-02-24 04:44 - 000000000 ____D C:\Users\PAWEŁ\AppData\Local\Lusituposuh
2019-02-23 14:25 - 2019-02-23 14:25 - 000276800 _____ C:\Users\PAWEŁ\Downloads\part000001.jpeg
2019-02-23 03:15 - 2019-02-23 03:15 - 000070953 _____ C:\Users\PAWEŁ\Downloads\Potwierdzenie_Transakcji_190223_031539.pdf
2019-02-14 01:15 - 2019-02-14 01:16 - 073480688 _____ C:\Users\PAWEŁ\Downloads\14_02_2019-[00-00-01]_CiemnaStronaMocy.ogg

==================== Jeden miesiąc (zmodyfikowane) ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2019-03-13 22:29 - 2006-11-02 13:47 - 000004912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2019-03-13 22:29 - 2006-11-02 13:47 - 000004912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2019-03-13 21:59 - 2008-10-25 02:23 - 000000000 ____D C:\Users\PAWEŁ\AppData\Local\Google
2019-03-13 21:58 - 2008-10-25 10:35 - 000000000 ____D C:\Users\PAWEŁ\AppData\Roaming\Skype
2019-03-13 20:56 - 2008-10-22 22:07 - 000000000 ____D C:\Users\PAWEŁ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2019-03-13 20:31 - 2008-07-16 15:28 - 000023084 _____ C:\Windows\system32\Config.MPF
2019-03-13 20:29 - 2013-01-10 01:57 - 230799114 _____ C:\Windows\MEMORY.DMP
2019-03-13 20:29 - 2009-01-25 20:14 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2019-03-13 20:29 - 2008-11-05 13:20 - 000000000 ____D C:\Windows\Minidump
2019-03-13 20:29 - 2006-11-02 14:01 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-03-11 22:34 - 2016-03-24 21:48 - 000000000 ____D C:\Users\PAWEŁ\Desktop\allegro sprzedaż
2019-03-11 22:27 - 2008-07-16 13:38 - 000764988 _____ C:\Windows\system32\perfh015.dat
2019-03-11 22:27 - 2008-07-16 13:38 - 000170250 _____ C:\Windows\system32\perfc015.dat
2019-03-11 22:27 - 2006-11-02 12:18 - 000000000 ____D C:\Windows\inf
2019-03-11 22:27 - 2006-11-02 11:33 - 001755410 _____ C:\Windows\system32\PerfStringBackup.INI
2019-03-10 02:55 - 2015-09-19 18:46 - 000170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2019-03-09 18:21 - 2009-10-09 10:50 - 000000000 ____D C:\Users\PAWEŁ\AppData\Roaming\vlc
2019-03-08 01:07 - 2009-10-08 20:55 - 000000000 ____D C:\Users\PAWEŁ\AppData\Roaming\dvdcss
2019-03-08 01:07 - 2008-10-23 12:51 - 000222720 _____ C:\Users\PAWEŁ\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-03-06 00:27 - 2011-12-13 13:26 - 000000000 ____D C:\Users\PAWEŁ\Desktop\SKANERY ANTYWIRUSOWE
2019-03-06 00:18 - 2015-09-23 23:40 - 000000000 ____D C:\Users\PAWEŁ\Desktop\GRAFIKA I ODZYSK
2019-03-03 23:41 - 2008-07-17 06:45 - 000000012 _____ C:\Windows\bthservsdp.dat
2019-03-03 23:41 - 2006-11-02 14:01 - 000032610 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2019-03-01 01:45 - 2018-02-09 18:00 - 000000000 ____D C:\Users\PAWEŁ\AppData\LocalLow\Mozilla
2019-03-01 01:00 - 2008-07-16 15:27 - 000000348 _____ C:\Windows\Tasks\McQcTask.job
2019-02-28 22:15 - 2014-05-06 01:03 - 000000000 ____D C:\Users\PAWEŁ\Downloads\exiftool-9.59
2019-02-23 18:40 - 2015-11-07 13:43 - 000001085 _____ C:\Users\PAWEŁ\Desktop\WAWEL.txt
2019-02-15 15:12 - 2010-11-28 21:54 - 000001356 _____ C:\Users\PAWEŁ\AppData\Local\d3d9caps.dat
2019-02-15 01:00 - 2008-07-16 15:27 - 000000362 _____ C:\Windows\Tasks\McDefragTask.job

==================== Pliki w katalogu głównym wybranych folderów =======

2010-12-20 18:59 - 2010-12-20 19:06 - 000001024 ___SH () C:\ProgramData\doc2imgpro.dll
2015-09-27 01:42 - 2015-09-27 01:42 - 000000024 ___SH () C:\Users\PAWEŁ\AppData\Roaming\1D959CA221C7573.sys
2009-02-28 19:16 - 2018-09-24 12:46 - 000006490 _____ () C:\Users\PAWEŁ\AppData\Roaming\PrimoPDFSet.xml
2011-02-15 13:11 - 2011-10-24 08:01 - 000011681 _____ () C:\Users\PAWEŁ\AppData\Roaming\PStrip.bak
2011-02-15 13:12 - 2011-10-24 00:29 - 000011704 _____ () C:\Users\PAWEŁ\AppData\Roaming\PStrip.bk!
2011-02-15 13:12 - 2011-10-23 23:56 - 000011681 _____ () C:\Users\PAWEŁ\AppData\Roaming\PStrip.bko
2011-02-15 12:50 - 2011-10-24 08:02 - 000011704 _____ () C:\Users\PAWEŁ\AppData\Roaming\PStrip.ini
2013-05-08 23:33 - 2013-05-08 23:38 - 000000004 _____ () C:\Users\PAWEŁ\AppData\Roaming\skype.ini
2015-09-27 01:42 - 2015-09-27 01:42 - 000000024 ___SH () C:\Users\PAWEŁ\AppData\Roaming\System5908ConfigCollection.dat
2008-10-24 12:28 - 2008-10-24 12:28 - 000027503 _____ () C:\Users\PAWEŁ\AppData\Roaming\UserTile.png
2019-02-25 00:44 - 2019-03-13 00:44 - 000000208 _____ () C:\Users\PAWEŁ\AppData\Roaming\WB.CFG
2010-04-02 19:19 - 2010-04-02 19:19 - 000000552 _____ () C:\Users\PAWEŁ\AppData\Local\d3d8caps.dat
2010-11-28 21:54 - 2019-02-15 15:12 - 000001356 _____ () C:\Users\PAWEŁ\AppData\Local\d3d9caps.dat
2008-10-23 12:51 - 2019-03-08 01:07 - 000222720 _____ () C:\Users\PAWEŁ\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-01-07 04:44 - 2010-01-07 04:44 - 000004096 ____H () C:\Users\PAWEŁ\AppData\Local\keyfile3.drm
2017-04-18 15:33 - 2017-04-18 15:33 - 000003216 _____ () C:\Users\PAWEŁ\AppData\Local\unins000.dat
2017-04-18 15:33 - 2017-04-18 15:33 - 000711640 _____ () C:\Users\PAWEŁ\AppData\Local\unins000.exe
2017-04-18 15:33 - 2017-04-18 15:33 - 000011761 _____ () C:\Users\PAWEŁ\AppData\Local\unins000.msg

Pliki do przeniesienia lub usunięcia:
====================
C:\Users\PAWEŁ\AppData\Roaming\skype.ini


Niektóre pliki w TEMP:
====================
2012-07-27 17:34 - 2012-07-27 23:57 - 000192512 _____ () C:\Users\Gość\AppData\Local\Temp\sfamcc00001.dll
2017-01-15 00:45 - 2008-04-24 14:44 - 000114688 ____R (Huawei Technologies Co., Ltd.) C:\Users\PAWEŁ\AppData\Local\Temp\DataCard_Setup.exe
2014-11-09 01:43 - 2014-11-09 01:43 - 001872289 _____ (DeskShare Inc. ) C:\Users\PAWEŁ\AppData\Local\Temp\DigitalMediaConverter.exe
2011-03-30 10:40 - 2011-03-30 10:40 - 000095576 _____ (Microsoft Corporation) C:\Users\PAWEŁ\AppData\Local\Temp\DSETUP.dll
2011-03-30 10:40 - 2011-03-30 10:40 - 001566040 _____ () C:\Users\PAWEŁ\AppData\Local\Temp\dsetup32.dll
2011-03-30 10:40 - 2011-03-30 10:40 - 000517976 _____ () C:\Users\PAWEŁ\AppData\Local\Temp\DXSETUP.exe
2016-03-08 01:33 - 2010-08-06 11:40 - 000029696 _____ (Irfan Skiljan, IrfanView) C:\Users\PAWEŁ\AppData\Local\Temp\iv_uninstall.exe
2017-07-21 17:13 - 2017-07-21 17:13 - 000739904 _____ (Oracle Corporation) C:\Users\PAWEŁ\AppData\Local\Temp\jre-8u141-windows-au.exe
2017-07-27 14:17 - 2017-07-27 14:17 - 000740416 _____ (Oracle Corporation) C:\Users\PAWEŁ\AppData\Local\Temp\jre-8u144-windows-au.exe
2015-10-22 10:52 - 2015-10-22 10:52 - 000585824 _____ (Oracle Corporation) C:\Users\PAWEŁ\AppData\Local\Temp\jre-8u65-windows-au.exe
2016-03-24 10:23 - 2016-03-24 10:23 - 000736320 _____ (Oracle Corporation) C:\Users\PAWEŁ\AppData\Local\Temp\jre-8u77-windows-au.exe
2016-06-03 14:51 - 2016-06-03 14:51 - 000739904 _____ (Oracle Corporation) C:\Users\PAWEŁ\AppData\Local\Temp\jre-8u91-windows-au.exe
2017-01-24 23:07 - 2015-03-23 15:28 - 001207376 _____ (CANON INC.) C:\Users\PAWEŁ\AppData\Local\Temp\MSETUP4.EXE
2017-01-15 00:45 - 2008-02-20 14:16 - 000007168 ____R () C:\Users\PAWEŁ\AppData\Local\Temp\ResetDevice.exe
2012-12-15 14:23 - 2019-02-10 13:35 - 000192512 _____ () C:\Users\PAWEŁ\AppData\Local\Temp\sfamcc00001.dll
2019-02-05 21:04 - 2019-02-10 13:35 - 000172032 _____ () C:\Users\PAWEŁ\AppData\Local\Temp\sfareca00001.dll
2010-01-12 11:07 - 2010-01-12 11:07 - 000094432 _____ (AltrixSoft) C:\Users\PAWEŁ\AppData\Local\Temp\Utils.dll
2015-09-18 19:38 - 2015-09-18 19:38 - 000010869 _____ () C:\Users\PAWEŁ\AppData\Local\Temp\{03BD1B92-3C25-425F-8201-AF3170AEB948}-45.0.2454.93_chrome_installer.exe

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\dllhost.exe => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2019-03-13 20:46

==================== Koniec  FRST.txt ============================