Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:15-09-2015
Uruchomiony przez user (administrator)  USER-1C7EE8E800 (16-09-2015 01:01:16)
Uruchomiony z C:\Documents and Settings\user\Moje dokumenty
Załadowane profile: user (Dostępne profile: user)
Platform: Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) Język: Polski
Internet Explorer Wersja 8 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.INSERTGT\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Nokia) C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Nokia) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
(Opera Software) C:\Program Files\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files\Opera\31.0.1889.174\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files\Opera\31.0.1889.174\opera.exe
(Opera Software) C:\Program Files\Opera\31.0.1889.174\opera.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16861184 2008-04-10] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] => C:\WINDOWS\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2005-05-11] (Hewlett-Packard Co.)
HKLM\...\Run: [Freecorder FLV Service] => "C:\Program Files\Freecorder\FLVSrvc.exe" /run
HKLM\...\Run: [MP10_EnsureFileVer] => C:\WINDOWS\inf\unregmp2.exe [208896 2008-04-14] (Microsoft Corporation)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2012-11-16] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776 2015-07-21] (AVAST Software)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2012-11-16] (ATI Technologies Inc.)
HKU\S-1-5-21-790525478-1004336348-725345543-1004\...\Run: [RGSC] => C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
HKU\S-1-5-21-790525478-1004336348-725345543-1004\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd)
HKU\S-1-5-21-790525478-1004336348-725345543-1004\...\Run: [Adobe Reader Synchronizer] => C:\Program Files\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe [746376 2014-05-08] (Adobe Systems Incorporated)
HKU\S-1-5-21-790525478-1004336348-725345543-1004\...\Run: [NokiaSuite.exe] => C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-10-02] (Nokia)
HKU\S-1-5-21-790525478-1004336348-725345543-1004\...\Run: [Google+ Auto Backup] => "C:\Program Files\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
HKU\S-1-5-21-790525478-1004336348-725345543-1004\...\Run: [ALLUpdate] => C:\Program Files\ALLPlayer\ALLUpdate.exe [3670472 2015-07-28] (ALLPlayer Group Ltd.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-07-21] (AVAST Software)
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk [2010-05-27]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Documents and Settings\user\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk [2011-07-02]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 8.8.4.4 213.241.79.37 192.168.1.248
Tcpip\..\Interfaces\{56A33ABA-E170-40AE-8CAA-289810A630A0}: [DhcpNameServer] 8.8.4.4 213.241.79.37 192.168.1.248

Internet Explorer:
==================
HKU\S-1-5-21-790525478-1004336348-725345543-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki
HKU\S-1-5-21-790525478-1004336348-725345543-1004\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKU\S-1-5-21-790525478-1004336348-725345543-1004\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki" <======= UWAGA
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-16] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-21] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-16] (Oracle Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  Brak pliku
StartMenuInternet: IEXPLORE.EXE - c:\program files\internet explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1440515166&z=29363834cae03016e843201gbz6z3e8w3g3wbefw0g&from=cor&uid=ST3500418AS_9VM5LM82XXXX9VM5LM82

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-14] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1219160.dll [2015-07-23] (Adobe Systems, Inc.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-16] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-16] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin -> C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2013-10-02] ( )
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-26]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-07-21]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-21]

Opera: 
=======
OPR Extension: (Adblock Plus) - C:\Documents and Settings\user\Dane aplikacji\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2015-09-02]
StartMenuInternet: (HKLM) Opera - C:\Program Files\Opera\Opera.exe http://www.istartsurf.com/?type=sc&ts=1440515166&z=29363834cae03016e843201gbz6z3e8w3g3wbefw0g&from=cor&uid=ST3500418AS_9VM5LM82XXXX9VM5LM82

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [593920 2009-08-13] () [Brak podpisu cyfrowego]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-07-21] (AVAST Software)
S4 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Brak podpisu cyfrowego]
R2 MSSQL$INSERTGT; C:\Program Files\Microsoft SQL Server\MSSQL10_50.INSERTGT\MSSQL\Binn\sqlservr.exe [42884448 2010-04-03] (Microsoft Corporation)
S2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [69632 2004-09-29] (HP) [Brak podpisu cyfrowego]
S2 SENS; C:\WINDOWS\system32\svchost.exe [14336 2008-04-14] (Microsoft Corporation)
S4 SQLAgent$INSERTGT; C:\Program Files\Microsoft SQL Server\MSSQL10_50.INSERTGT\MSSQL\Binn\SQLAGENT.EXE [367456 2010-04-03] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 AmdPPM; C:\WINDOWS\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24016 2015-07-21] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [76000 2015-07-21] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-07-21] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49776 2015-07-21] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [788784 2015-07-21] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [433264 2015-07-21] (AVAST Software)
R3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [161472 2015-07-21] (AVAST Software)
S3 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-07-21] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [208664 2015-07-21] (AVAST Software)
R3 AtiHDAudioService; C:\WINDOWS\System32\drivers\AtihdXP3.sys [103040 2012-05-14] (Advanced Micro Devices)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
R3 dtsoftbus01; C:\WINDOWS\System32\DRIVERS\dtsoftbus01.sys [243128 2013-10-14] (Disc Soft Ltd)
R0 giveio; C:\WINDOWS\System32\giveio.sys [5248 1996-04-03] () [Brak podpisu cyfrowego]
S3 hamachi; C:\WINDOWS\System32\DRIVERS\hamachi.sys [26176 2010-02-03] (LogMeIn, Inc.)
S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [51120 2005-03-08] (HP)
S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2005-03-08] (HP)
S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21744 2005-03-08] (HP)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [54016 2008-01-29] (NVIDIA Corporation)
R0 nvgts; C:\WINDOWS\System32\DRIVERS\nvgts.sys [132096 2008-01-25] (NVIDIA Corporation)
R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [22016 2008-01-29] (NVIDIA Corporation)
S4 RsFx0150; C:\WINDOWS\System32\DRIVERS\RsFx0150.sys [240608 2010-04-03] (Microsoft Corporation)
R0 sfdrv01a; C:\WINDOWS\System32\drivers\sfdrv01a.sys [63352 2006-07-05] (Protection Technology (StarForce))
R0 sfsync04; C:\WINDOWS\System32\drivers\sfsync04.sys [59776 2006-08-11] (Protection Technology (StarForce))
R0 speedfan; C:\WINDOWS\System32\speedfan.sys [24184 2012-12-29] (Almico Software)
R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [329384 2015-07-16] (Duplex Secure Ltd.)
S3 ss_bbus; C:\WINDOWS\System32\DRIVERS\ss_bbus.sys [98432 2010-07-28] (MCCI)
S3 ss_bmdfl; C:\WINDOWS\System32\DRIVERS\ss_bmdfl.sys [14848 2010-07-28] (MCCI Corporation)
S3 ss_bmdm; C:\WINDOWS\System32\DRIVERS\ss_bmdm.sys [123648 2010-07-28] (MCCI Corporation)
S3 ss_bserd; C:\WINDOWS\System32\DRIVERS\ss_bserd.sys [100224 2010-07-28] (MCCI Corporation)
R1 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [5632 2006-07-24] () [Brak podpisu cyfrowego]
U3 asql0k73; C:\WINDOWS\system32\Drivers\asql0k73.sys [0 ] (NVIDIA Corporation) <==== UWAGA (zerobajtowy plik/folder)
S4 IntelIde; Brak ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U3 TlntSvr; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-09-16 01:01 - 2015-09-16 01:01 - 00014631 _____ C:\Documents and Settings\user\Moje dokumenty\FRST.txt
2015-09-16 01:00 - 2015-09-16 01:01 - 00000000 ____D C:\FRST
2015-09-16 00:41 - 2015-09-16 00:41 - 01695232 _____ (Farbar) C:\Documents and Settings\user\Moje dokumenty\FRST.exe
2015-09-16 00:41 - 2015-09-16 00:41 - 00380416 _____ C:\Documents and Settings\user\Moje dokumenty\6d5hzjhb.exe
2015-09-16 00:39 - 2015-09-16 00:39 - 03932214 _____ C:\Documents and Settings\user\Pulpit\bez tytułu.bmp
2015-09-14 22:55 - 2015-09-14 22:55 - 00929872 _____ (Google Inc.) C:\Documents and Settings\user\Moje dokumenty\ChromeSetup.exe
2015-09-02 02:16 - 2015-09-12 23:45 - 00000992 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-08-31 13:51 - 2015-08-31 14:20 - 00038374 _____ C:\Documents and Settings\user\Pulpit\150825_Martyna_Stasińska.xlsx
2015-08-29 10:23 - 2015-08-31 14:01 - 00029557 _____ C:\Documents and Settings\user\Moje dokumenty\Martyna Stasińska 08.15.xlsx
2015-08-28 23:26 - 2015-08-28 23:26 - 00000547 _____ C:\Documents and Settings\user\Moje dokumenty\historia_2015-08-28_1526.csv
2015-08-25 22:12 - 2015-08-25 22:36 - 00016024 _____ C:\Documents and Settings\user\Moje dokumenty\zlecenia (1).xlsx
2015-08-25 17:13 - 2015-08-25 17:13 - 00001588 _____ C:\Documents and Settings\user\Pulpit\ALLPlayer.Radio.lnk
2015-08-25 17:13 - 2015-08-25 17:13 - 00001580 _____ C:\Documents and Settings\user\Pulpit\ALLPlayer.VOD.lnk
2015-08-25 17:13 - 2015-08-25 17:13 - 00000694 _____ C:\Documents and Settings\user\Pulpit\ALLPlayer.lnk
2015-08-25 17:13 - 2015-08-25 17:13 - 00000000 ____D C:\Program Files\ALLPlayer
2015-08-25 17:13 - 2015-08-25 17:13 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\ALLPlayer
2015-08-25 17:13 - 2015-08-25 17:13 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\ALLPlayer
2015-08-25 17:13 - 2013-04-05 21:26 - 02106368 _____ C:\WINDOWS\system32\ac3filter.ax
2015-08-25 17:13 - 2013-04-05 21:26 - 00276992 _____ (IntelleSoft) C:\WINDOWS\system32\BugTrap.dll
2015-08-25 17:13 - 2011-06-02 02:10 - 00644608 _____ C:\WINDOWS\system32\xvidcore.dll
2015-08-25 17:13 - 2007-10-07 15:36 - 00258048 _____ C:\WINDOWS\system32\libFLAC.dll
2015-08-25 17:11 - 2015-08-25 17:11 - 43549840 _____ (ALLPlayer ) C:\Documents and Settings\user\Moje dokumenty\ALLPlayerPL.exe
2015-08-25 17:06 - 2015-09-05 12:22 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\update
2015-08-25 17:06 - 2015-08-25 17:26 - 00000000 ____D C:\Documents and Settings\user\Dane aplikacji\istartsurf
2015-08-25 17:06 - 2015-08-25 17:06 - 00000196 _____ C:\Documents and Settings\All Users\Dane aplikacji\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-09-16 01:01 - 2010-05-12 04:29 - 00000000 ___RD C:\Documents and Settings\user\Moje dokumenty
2015-09-16 01:01 - 2010-05-12 04:29 - 00000000 ____D C:\Documents and Settings\user\Ustawienia lokalne\Temp
2015-09-16 00:53 - 2015-08-14 01:18 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-09-16 00:44 - 2015-06-05 18:32 - 00000000 ____D C:\Documents and Settings\user\Pulpit\std
2015-09-16 00:39 - 2010-05-12 04:29 - 00000000 ____D C:\Documents and Settings\user\Pulpit
2015-09-15 23:20 - 2014-12-26 19:45 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-09-15 22:10 - 2010-05-20 20:58 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Skype
2015-09-15 22:10 - 2010-05-12 06:13 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit
2015-09-15 22:10 - 2010-05-12 06:13 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy
2015-09-15 22:10 - 2010-05-12 04:19 - 01336497 _____ C:\WINDOWS\WindowsUpdate.log
2015-09-15 22:09 - 2010-05-20 20:58 - 00000000 ____D C:\Documents and Settings\user\Dane aplikacji\Skype
2015-09-15 16:52 - 2014-06-03 11:34 - 00000444 _____ C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1373054265.job
2015-09-15 12:58 - 2010-05-12 06:13 - 00552780 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-15 12:58 - 2004-08-04 14:00 - 00000336 _____ C:\WINDOWS\system32\perfh015.dat
2015-09-15 12:58 - 2004-08-04 14:00 - 00000118 _____ C:\WINDOWS\system32\perfc015.dat
2015-09-15 12:56 - 2010-05-12 04:17 - 00400585 _____ C:\WINDOWS\wmsetup.log
2015-09-15 12:54 - 2010-05-12 06:15 - 00000159 _____ C:\WINDOWS\wiadebug.log
2015-09-15 12:54 - 2010-05-12 06:15 - 00000050 _____ C:\WINDOWS\wiaservc.log
2015-09-15 12:54 - 2010-05-12 04:25 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-09-15 02:00 - 2010-11-19 17:17 - 00524288 _____ C:\WINDOWS\system32\config\ACEEvent.evt
2015-09-15 02:00 - 2010-05-12 04:29 - 00000188 ___SH C:\Documents and Settings\user\ntuser.ini
2015-09-15 02:00 - 2010-05-12 04:25 - 00032508 _____ C:\WINDOWS\SchedLgU.Txt
2015-09-14 22:40 - 2010-09-04 15:59 - 00000000 ____D C:\Documents and Settings\user\Pulpit\DCIM
2015-09-13 17:15 - 2004-08-04 14:00 - 00002278 _____ C:\WINDOWS\system32\wpa.dbl
2015-09-12 23:49 - 2010-05-12 06:12 - 00820176 _____ C:\WINDOWS\setupapi.log
2015-09-09 16:11 - 2015-06-20 22:30 - 00000000 ____D C:\Documents and Settings\user\Pulpit\egz matma
2015-09-06 18:35 - 2010-05-12 06:12 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji
2015-09-03 12:24 - 2011-03-01 20:49 - 00000000 ____D C:\WINDOWS\system32\LogFiles
2015-09-02 02:16 - 2015-08-14 01:18 - 00778440 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-09-02 02:16 - 2015-08-14 01:18 - 00142536 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-09-02 02:15 - 2010-05-13 17:11 - 00000000 ____D C:\WINDOWS\system32\Adobe
2015-09-02 02:10 - 2010-05-12 20:35 - 00000000 ____D C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Adobe
2015-08-31 16:52 - 2011-07-03 21:20 - 00000000 ____D C:\Program Files\Opera
2015-08-30 21:19 - 2010-05-12 06:12 - 00256239 _____ C:\WINDOWS\setupact.log
2015-08-28 16:43 - 2010-11-11 12:00 - 00001324 _____ C:\WINDOWS\system32\d3d9caps.dat
2015-08-26 17:42 - 2015-07-29 16:18 - 00000000 ____D C:\Documents and Settings\user\Pulpit\20141
2015-08-25 22:12 - 2015-07-21 15:19 - 00015488 _____ C:\Documents and Settings\user\Pulpit\zlecenia.xlsx
2015-08-25 17:26 - 2014-07-11 14:29 - 00001492 _____ C:\Documents and Settings\user\Pulpit\Opera.lnk
2015-08-25 17:26 - 2011-09-22 22:15 - 00001498 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Opera.lnk
2015-08-25 17:06 - 2010-05-12 04:29 - 00000000 __RHD C:\Documents and Settings\user\Dane aplikacji
2015-08-25 12:48 - 2014-09-18 19:28 - 00000000 ____D C:\Program Files\SpeedFan
2015-08-18 18:41 - 2015-07-12 20:00 - 00000000 ____D C:\Documents and Settings\user\Pulpit\muza
2015-08-18 18:40 - 2015-08-12 00:35 - 00000000 ____D C:\Documents and Settings\user\Pulpit\Nowy folder

==================== Pliki w katalogu głównym wybranych folderów =======

2012-06-22 18:24 - 2012-06-27 15:09 - 0139152 _____ () C:\Documents and Settings\user\Dane aplikacji\PnkBstrK.sys
2010-06-20 12:47 - 2015-07-06 01:02 - 0053760 _____ () C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-10-28 19:20 - 2011-10-28 19:20 - 0000129 _____ () C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
2011-11-03 18:04 - 2011-11-03 18:04 - 0017408 _____ () C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\WebpageIcons.db

Niektóre pliki w TEMP:
====================
C:\Documents and Settings\user\Ustawienia lokalne\Temp\ICReinstall_ALLPlayer-13217-dp.exe
C:\Documents and Settings\user\Ustawienia lokalne\Temp\NEventMessages.dll
C:\Documents and Settings\user\Ustawienia lokalne\Temp\NOSEventMessages.dll
C:\Documents and Settings\user\Ustawienia lokalne\Temp\sfamcc00001.dll


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\winlogon.exe
[2004-08-04 14:00] - [2010-06-11 16:56] - 0510464 ____A (Microsoft Corporation) 66ECFE388AD1BD281DD3391B756670CF

C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

==================== Koniec  FRST.txt ============================