Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 18-09-2019 01
Uruchomiony przez user (administrator)  USER-PC (GBT___ GBTUACPI) (20-09-2019 20:19:28)
Uruchomiony z C:\Users\user\Desktop
Załadowane profile: user (Dostępne profile: user)
Platform: Microsoft® Windows Vista™ Business  (X86) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Advanced Micro Devices Inc.) [Brak podpisu cyfrowego] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) [Brak podpisu cyfrowego] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(Microsoft Corporation) [Brak podpisu cyfrowego] C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\conime.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Microsoft Windows Hardware Compatibility Publisher -> ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Ralink Technology, Corp.) [Brak podpisu cyfrowego] C:\Program Files\RALINK\Common\RaUI.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego]
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6266880 2008-07-03] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\ecmdS.exe [171344 2019-09-20] (ESET, spol. s r.o. -> ESET)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2159104 2006-11-02] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2159104 2006-11-02] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2263679057-4077580800-3675057294-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [201728 2006-11-02] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2263679057-4077580800-3675057294-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\FISHDO~1\FISHDO~1.SCR
HKLM\...\Drivers32: [msacm.l3acm] => C:\Windows\system32\l3codecp.acm [220672 2010-01-21] (Microsoft Windows -> Fraunhofer Institut Integrierte Schaltungen IIS)
HKLM\...\Drivers32: [VIDC.ACDV] => C:\Windows\system32\ACDV.dll [462848 2005-06-20] (ACD Systems) [Brak podpisu cyfrowego]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\system32\ff_vfw.dll [79360 2012-02-26] () [Brak podpisu cyfrowego]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\system32\lagarith.dll [216064 2011-12-07] ( ) [Brak podpisu cyfrowego]
HKLM\...\Drivers32: [vidc.XVID] => C:\Windows\system32\xvidvfw.dll [240640 2011-05-30] () [Brak podpisu cyfrowego]
SubSystems: [Windows] => "%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16" <==== UWAGA
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ralink Wireless Utility.lnk [2009-01-23]
ShortcutTarget: Ralink Wireless Utility.lnk -> C:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.) [Brak podpisu cyfrowego]

==================== Zaplanowane zadania (filtrowane) =============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {61CE81D7-7046-43AE-A382-850C1F8CD2EB} - System32\Tasks\CCleanerSkipUAC => C:\CCleaner\CCleaner.exe [3591960 2013-05-24] (Piriform Ltd -> Piriform Ltd)
Task: {68A4EFE8-739B-4C6C-A26D-FA21D526A6B0} - System32\Tasks\{C0AE6C78-37E1-47B3-94B5-06A496374630} => C:\Windows\system32\pcalua.exe -a C:\WINDOWS\ISUNINST.EXE -c -f"C:\Program Files\Common Files\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Common Files\Adobe\Acrobat 5.0\NT\Uninst.dll"
Task: {C9157074-284B-42B6-95E2-E9DA6628FBFA} - System32\Tasks\{DF190F4E-2332-44D5-8851-9F7C8F9C5EF5} => C:\Windows\system32\pcalua.exe -a "C:\Windows\Tahiti Hidden Pearl\uninstall.exe" -c "/U:C:\Users\user\Desktop\Uninstall\uninstall.xml"
Task: {C9867172-CD10-424F-9939-340B9BC5AC88} - System32\Tasks\DSite => C:\Users\user\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== UWAGA
Task: {CD091734-0CF1-47BA-B7CC-2623268EF303} - System32\Tasks\QtraxPlayer => C:\Program Files\Microsoft Silverlight\sllauncher.exe 2968044317.portal.qtrax.com
Task: {F5980EEE-A15C-49F6-815A-5E742EAE39F1} - System32\Tasks\Microsoft\Support\ATS\OAS Integration => C:\Users\user\AppData\Local\Temp\MATS-Temp\IXPsfqprmvr.4nu\MATSWiz.exe <==== UWAGA

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

Task: C:\Windows\Tasks\DSite.job => C:\Users\user\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{63FB3912-7BC7-46C1-A0C4-4ACDDA9B429E}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{AC86AD1D-7134-4958-B057-CC0D70C306BD}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.idg.pl
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.idg.pl
HKU\S-1-5-21-2263679057-4077580800-3675057294-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.pl/
HKU\S-1-5-21-2263679057-4077580800-3675057294-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.idg.pl
SearchScopes: HKU\.DEFAULT -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Octh Class -> {000123B4-9B42-4900-B3F7-F4B073EFC214} -> C:\Orbitdownloader\orbitcth.dll [2009-10-14] (GlobalNet Limited -> Orbitdownloader.com) [Brak podpisu cyfrowego]
BHO: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> c:\Acrobat reader\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16] (Adobe Systems, Incorporated -> )
BHO: ALLYouTubeDownloader -> {61DB16C5-B733-43F4-872E-B20DC9E72740} -> C:\Program Files\ALLYouTubeDownloader\ALLYouTubeDownloader.dll [2012-12-16] (ALLCinema Ltd.) [Brak podpisu cyfrowego]
BHO: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> C:\ALLPlayer\Iplex\IplexToALLPlayer.dll [2011-02-09] (ALLCinema Ltd.) [Brak podpisu cyfrowego]
Toolbar: HKLM - Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Orbitdownloader\GrabPro.dll [2009-10-14] (GlobalNet Limited -> ) [Brak podpisu cyfrowego]
Toolbar: HKU\S-1-5-21-2263679057-4077580800-3675057294-1000 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Brak pliku
Toolbar: HKU\S-1-5-21-2263679057-4077580800-3675057294-1000 -> Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Orbitdownloader\GrabPro.dll [2009-10-14] (GlobalNet Limited -> ) [Brak podpisu cyfrowego]
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {A3256902-51FA-45A0-8A97-FC1143C169D9} hxxp://support.microsoft.com/mats/DiagWebControl.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\qq520og1.default-1568999797508 [2019-09-20]
FF Homepage: Mozilla\Firefox\Profiles\qq520og1.default-1568999797508 -> google.com
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-07-04] [Przestarzałe] [Brak podpisu cyfrowego]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => nie znaleziono
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_278.dll [2012-10-04] (Adobe Systems Incorporated -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll [2012-03-29] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-2263679057-4077580800-3675057294-1000: @adobe.com/Acrobat,version=5.1 -> c:\Acrobat reader\Reader\Browser\nppdf32.dll [2002-08-12] (Adobe Systems Inc.) [Brak podpisu cyfrowego]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [692224 2008-07-04] (Microsoft Windows Hardware Compatibility Publisher -> ATI Technologies Inc.)
S4 DUMeterSvc; C:\DU Meter\DUMeterSvc.exe [2385304 2013-03-01] (Hagel Technologies Ltd. -> Hagel Technologies Ltd.) [Brak podpisu cyfrowego]
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1943336 2019-09-20] (ESET, spol. s r.o. -> ESET)
S3 ekrnEpfw; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1943336 2019-09-20] (ESET, spol. s r.o. -> ESET)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Brak podpisu cyfrowego]
S4 MBAMScheduler; C:\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation -> Malwarebytes Corporation)
S4 MBAMService; C:\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation -> Malwarebytes Corporation)
R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Brak podpisu cyfrowego]
S4 OMSI download service; C:\Sony Ericsson PC Suite\SupServ.exe [90112 2009-04-30] () [Brak podpisu cyfrowego]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [265912 2009-01-24] (Microsoft Windows -> Microsoft Corporation)
S4 RelevantKnowledge; C:\Program Files\RelevantKnowledge\rlservice.exe /service [X] <==== UWAGA

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AegisP; C:\Windows\System32\DRIVERS\AegisP.sys [21275 2009-01-23] (Meetinghouse Data Communications) [Brak podpisu cyfrowego]
R0 amdide; C:\Windows\System32\DRIVERS\amdide.sys [10632 2007-10-12] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R3 atikmdag; C:\Windows\System32\DRIVERS\atikmdag.sys [3847168 2008-07-04] (Microsoft Windows Hardware Compatibility Publisher -> ATI Technologies Inc.)
U5 Browser; C:\Windows\System32\svchost.exe [22016 2006-11-02] (Microsoft Windows -> Microsoft Corporation) <==== UWAGA (Brak ServiceDLL)
S3 dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [20032 2013-04-18] (SAMSUNG ELECTRONICS CO.,LTD. -> Devguru Co., Ltd)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [83864 2013-05-02] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 DUMeterDrv; C:\DU Meter\DUMETR32.SYS [19944 2013-03-01] (Hagel Technologies Ltd. -> Hagel Technologies Ltd.) [Brak podpisu cyfrowego]
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [128368 2019-09-03] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [88280 2019-09-03] (ESET, spol. s r.o. -> ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [148512 2019-09-03] (ESET, spol. s r.o. -> ESET)
S3 ENTECH; C:\Windows\system32\DRIVERS\ENTECH.sys [27672 2007-08-20] (EnTech Taiwan -> EnTech Taiwan)
R1 epfwtdir; C:\Windows\System32\DRIVERS\epfwtdir.sys [62488 2018-07-12] (ESET, spol. s r.o. -> ESET)
S4 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [96656 2019-09-03] (ESET, spol. s r.o. -> ESET)
S3 EverestDriver; C:\EVEREST Ultimate Edition\kerneld.wnt [27760 2010-03-31] (LAVALYS -> )
S3 gdrv; C:\Windows\gdrv.sys [16608 2009-12-28] (GIGABYTE UNITED INC. -> Windows (R) 2000 DDK provider)
S4 iteatapi; C:\Windows\system32\drivers\iteatapi.sys [35944 2006-11-02] (Microsoft Windows -> Integrated Technology Express, Inc.)
S4 iteraid; C:\Windows\system32\drivers\iteraid.sys [35944 2006-11-02] (Microsoft Windows -> Integrated Technology Express, Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation -> Malwarebytes Corporation)
S4 Mraid35x; C:\Windows\system32\drivers\mraid35x.sys [33384 2006-11-02] (Microsoft Windows -> LSI Logic Corporation)
S4 ntrigdigi; C:\Windows\system32\drivers\ntrigdigi.sys [20608 2006-11-02] (Microsoft Windows -> N-trig Innovative Technologies)
R3 pfc; C:\Windows\System32\drivers\pfc.sys [10368 2012-12-12] (Padus, Inc.) [Brak podpisu cyfrowego]
S3 RT61; C:\Windows\System32\DRIVERS\RT61.sys [380928 2006-05-04] (Microsoft Windows Hardware Compatibility Publisher -> Ralink Technology Inc.)
S3 rt61x86; C:\Windows\System32\DRIVERS\netr61.sys [357376 2007-05-11] (Microsoft Windows Hardware Compatibility Publisher -> Ralink Technology Corp.)
R3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [147168 2008-06-18] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
R3 RTL8169; C:\Windows\System32\DRIVERS\Rtlh86.sys [122368 2008-05-02] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Corporation )
S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [89256 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [15016 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [120744 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [114216 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [25512 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [110632 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [115752 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [181912 2013-05-02] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [181912 2013-05-02] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.(www.devguru.co.kr))
R1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2006-07-24] () [Brak podpisu cyfrowego]
S4 uliahci; C:\Windows\system32\drivers\uliahci.sys [235112 2006-11-02] (Microsoft Windows -> ULi Electronics Inc.)
S4 UlSata; C:\Windows\system32\drivers\ulsata.sys [98408 2006-11-02] (Microsoft Windows -> Promise Technology, Inc.)
S4 ulsata2; C:\Windows\system32\drivers\ulsata2.sys [115816 2006-11-02] (Microsoft Windows -> Promise Technology, Inc.)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 RasSstp; system32\DRIVERS\rassstp.sys [X]
S0 wiia; System32\drivers\ppjw.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2019-09-20 20:19 - 2019-09-20 20:20 - 000017725 _____ C:\Users\user\Desktop\FRST.txt
2019-09-20 20:18 - 2019-09-20 20:19 - 000000000 ____D C:\FRST
2019-09-20 20:15 - 2019-09-20 20:15 - 001450496 _____ (Farbar) C:\Users\user\Desktop\FRST.exe
2019-09-19 18:48 - 2019-09-19 18:48 - 000000253 _____ C:\Users\user\Desktop\REGULAMIN USŁUGI „Allegro Smart!” - Allegro.pl.URL
2019-09-16 16:19 - 2019-09-16 16:20 - 000000000 ____D C:\CPUID HWMonitor
2019-09-16 16:19 - 2019-09-16 16:19 - 000000612 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2019-09-16 16:19 - 2019-09-16 16:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2019-09-11 18:33 - 2019-09-11 18:33 - 000000024 _____ C:\Users\user\Desktop\mail.txt
2019-09-11 09:45 - 2019-09-11 09:45 - 000001688 _____ C:\Users\user\Desktop\services.lnk
2019-09-04 11:28 - 2019-09-04 11:28 - 000001637 _____ C:\Users\user\Desktop\Paint.lnk
2019-09-04 11:14 - 2019-09-04 11:14 - 000000000 ____D C:\Users\user\AppData\Roaming\ESET
2019-09-03 07:17 - 2019-09-03 07:17 - 000096656 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2019-08-31 18:59 - 2019-08-31 18:59 - 000054310 _____ C:\Windows\system32\NOTICE_mod
2019-08-31 18:39 - 2019-08-31 18:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2019-08-31 18:39 - 2019-08-31 18:39 - 000000000 ____D C:\ProgramData\ESET
2019-08-31 18:39 - 2019-08-31 18:39 - 000000000 ____D C:\Program Files\ESET
2019-08-23 00:39 - 2019-08-23 00:39 - 000050676 _____ C:\Users\user\Desktop\listing-banners_15677417_268bda1c-853a-4bf4-9f3b-128f71a9c418

==================== Jeden miesiąc (zmodyfikowane) ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2019-09-20 20:18 - 2006-12-05 07:23 - 000535274 _____ C:\Windows\system32\perfh015.dat
2019-09-20 20:18 - 2006-12-05 07:23 - 000086210 _____ C:\Windows\system32\perfc015.dat
2019-09-20 20:18 - 2006-11-02 13:18 - 000000000 ____D C:\Windows\inf
2019-09-20 20:18 - 2006-11-02 12:33 - 001326184 _____ C:\Windows\system32\PerfStringBackup.INI
2019-09-20 20:16 - 2010-01-08 18:29 - 000000000 ____D C:\Windows\Minidump
2019-09-20 20:14 - 2019-08-19 18:03 - 000000000 ____D C:\Users\user\AppData\LocalLow\Mozilla
2019-09-20 20:14 - 2019-08-19 18:02 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-09-20 20:12 - 2006-11-02 15:01 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-09-20 20:12 - 2006-11-02 14:47 - 000004480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2019-09-20 20:12 - 2006-11-02 14:47 - 000004480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2019-09-20 19:45 - 2013-07-08 11:45 - 000000282 _____ C:\Windows\Tasks\DSite.job
2019-09-20 17:47 - 2006-11-02 15:01 - 000032594 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2019-09-18 00:39 - 2009-01-24 20:12 - 000000069 _____ C:\Windows\NeroDigital.ini
2019-09-17 18:38 - 2009-01-24 15:45 - 000228864 _____ C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-09-17 15:00 - 2013-06-07 16:20 - 000000000 ____D C:\Users\user\Desktop\RK_Quarantine
2019-09-15 22:24 - 2013-06-07 09:10 - 000002625 _____ C:\Users\user\Desktop\Microsoft Office Word 2007.lnk
2019-09-12 12:32 - 2009-01-25 01:10 - 000000000 ____D C:\Users\user\AppData\Roaming\Orbit
2019-09-06 17:19 - 2009-01-23 18:53 - 000002599 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Nowy dokument pakietu Microsoft Office.lnk
2019-09-04 17:21 - 2013-07-22 19:55 - 000000000 ____D C:\Users\user\AppData\Local\ESET
2019-09-03 07:17 - 2017-10-12 11:29 - 000088280 _____ (ESET) C:\Windows\system32\Drivers\edevmon.sys
2019-09-03 07:17 - 2013-02-14 12:21 - 000128368 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2019-09-03 07:17 - 2013-01-10 09:25 - 000148512 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2019-08-31 10:45 - 2013-08-19 05:45 - 000000219 _____ C:\Users\user\AppData\Roaming\WB.CFG

==================== Pliki w katalogu głównym wybranych folderów ================

2012-06-14 15:08 - 2012-06-14 15:08 - 000148736 _____ (Avanquest Software) C:\ProgramData\hpe1CF2.dll
2009-11-21 19:00 - 2009-11-22 13:31 - 000000004 _____ () C:\Users\user\AppData\Roaming\006mev3a12rm2gp0j7bdogpzhz2
2013-08-19 05:45 - 2019-08-31 10:45 - 000000219 _____ () C:\Users\user\AppData\Roaming\WB.CFG
2013-07-09 16:45 - 2013-07-09 16:45 - 000000005 _____ () C:\Users\user\AppData\Roaming\WBPU-TTL.DAT
2009-01-24 00:53 - 2012-09-28 23:49 - 000001356 _____ () C:\Users\user\AppData\Local\d3d9caps.dat
2009-01-24 15:45 - 2019-09-17 18:38 - 000228864 _____ () C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2009-05-08 17:38 - 2009-05-08 17:43 - 000012010 _____ () C:\Users\user\AppData\Local\slot1.mm1

==================== FLock ================

2009-01-24 00:29 C:\Windows\CSC

==================== SigCheck ===============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)


LastRegBack: 2019-09-20 20:18
==================== Koniec  FRST.txt ============================