Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:23-09-2015
Uruchomiony przez samsung (administrator)  SAMSUNG-PC (26-09-2015 22:23:43)
Uruchomiony z C:\Users\samsung\Desktop
Załadowane profile: samsung (Dostępne profile: samsung)
Platform: Microsoft® Windows Vista™ Home Basic  Service Pack 2 (X86) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(SAMSUNG Electronics co., LTD.) C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
(CrypKey (Canada) Ltd.) C:\Windows\System32\Crypserv.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdSync.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_19_0_0_185.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_19_0_0_185.exe
() C:\Program Files\Samsung\Samsung Update Plus\SLUTrayNotifier.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [Windows Mobile-based device management] => C:\Windows\WindowsMobile\wmdSync.exe [215552 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKU\S-1-5-21-4013461272-253353711-3654097772-1003\...\Run: [LightScribe Control Panel] => C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
HKU\S-1-5-21-4013461272-253353711-3654097772-1003\...\MountPoints2: {1e09a8f8-dcfe-11e3-a84b-00137798d668} - F:\LG_PC_Programs.exe
HKU\S-1-5-21-4013461272-253353711-3654097772-1003\...\MountPoints2: {7e9bd5fc-48e4-11e0-9a53-00137798d668} - G:\Autorun.exe
HKU\S-1-5-21-4013461272-253353711-3654097772-1003\...\MountPoints2: {8c2963dc-1e31-11e3-a6d8-00137798d668} - G:\LGAutoRun.exe
HKU\S-1-5-21-4013461272-253353711-3654097772-1003\...\MountPoints2: {9818c5fa-051f-11e0-beb9-00137798d668} - F:\autorun.exe
HKU\S-1-5-21-4013461272-253353711-3654097772-1003\...\MountPoints2: {ba67ec27-69bf-11e4-858b-00137798d668} - F:\LGAutoRun.exe
HKU\S-1-5-21-4013461272-253353711-3654097772-1003\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Aurora.scr [1370624 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files\Garmin\Express Tray\tray.exe [1010008 2015-04-08] (Garmin Ltd. or its subsidiaries)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63
Tcpip\..\Interfaces\{4381697F-A5FA-46A8-A6E7-B0FFEFF08004}: [NameServer] 194.204.152.34,217.98.63.164
Tcpip\..\Interfaces\{4381697F-A5FA-46A8-A6E7-B0FFEFF08004}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{A1A2AB03-9A27-44EB-87AA-7A22AB47E15B}: [DhcpNameServer] 62.179.1.62 62.179.1.63

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=130870803919850000&GUID=14270F0C-7D3E-4A8C-8EFD-8B70046F188A
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-4013461272-253353711-3654097772-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp:\\www.samsungcomputer.com
HKU\S-1-5-21-4013461272-253353711-3654097772-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp:\\www.samsungcomputer.com
HKU\S-1-5-21-4013461272-253353711-3654097772-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://pl.msn.com/?pc=UP97&ocid=UP97DHP
SearchScopes: HKU\S-1-5-21-4013461272-253353711-3654097772-1003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-4013461272-253353711-3654097772-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22] (Hewlett-Packard Co.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22] (Hewlett-Packard Co.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_60-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0060-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_60-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_60-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-10-02] (Skype Technologies S.A.)

FireFox:
========
FF ProfilePath: C:\Users\samsung\AppData\Roaming\Mozilla\Firefox\Profiles\il2uge12.default-1443297451463
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-22] ()
FF Plugin: @java.com/DTPlugin,version=10.4.1 -> C:\Windows\system32\npDeployJava1.dll [2012-04-04] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre1.8.0_60\bin\new_plugin\npjp2.dll [Brak pliku]
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-19] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @photodex.com/PhotodexPresenter -> C:\Program Files\Photodex Presenter\npPxPlay.dll [2011-09-20] ( )
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-4013461272-253353711-3654097772-1003: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\samsung\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-09-18]
FF HKLM\...\Firefox\Extensions: [4f87499f15fba@4f87499f15fbc.info] - C:\Users\samsung\AppData\Roaming\Mozilla\Firefox\Profiles\slocixry.default\extensions\4f87499f15fba@4f87499f15fbc.info
FF HKLM\...\Firefox\Extensions: [5107f287f355d@5107f287f3594.com] - C:\Users\samsung\AppData\Roaming\Mozilla\Firefox\Profiles\slocixry.default\extensions\5107f287f355d@5107f287f3594.com
FF HKU\S-1-5-21-4013461272-253353711-3654097772-1003\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF ExtraCheck: C:\Program Files\mozilla firefox\browser\defaults\preferences\prefs.js [2015-09-23]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-07-05]
StartMenuInternet: Google Chrome - C:\Users\samsung\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 Crypkey License; C:\Windows\system32\crypserv.exe [69632 2006-03-01] (CrypKey (Canada) Ltd.) [Brak podpisu cyfrowego]
R2 EvtEng; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [819200 2008-07-10] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Garmin Device Interaction Service; C:\Program Files\Garmin\Device Interaction Service\GarminService.exe [708616 2015-04-08] (Garmin Ltd. or its subsidiaries)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)
S2 MSSQL$GABINET; C:\Program Files\Microsoft SQL Server\MSSQL10_50.GABINET\MSSQL\Binn\sqlservr.exe [42884448 2010-04-03] (Microsoft Corporation)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2009-05-14] (Hewlett-Packard) [Brak podpisu cyfrowego]
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2009-05-14] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 RegSrvc; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [466944 2008-07-10] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S4 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2006-12-19] ()
S2 Samsung Update Plus; C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe [77480 2008-05-13] () [Brak podpisu cyfrowego]
S4 ScsiAccess; C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe [186760 2011-09-20] ()
S4 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [25856 2013-04-18] (Google Inc)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag.sys [23168 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem.sys [27776 2013-06-28] (LG Electronics Inc.)
S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis.sys [70656 2013-04-23] (LG Electronics Inc.)
R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2007-05-23] (SAMSUNG ELECTRONICS CO., LTD.)
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [34432 2012-10-11] (ManyCam LLC)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv.sys [30488 2014-12-15] (Visicom Media Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
R1 NetworkX; C:\Windows\system32\ckldrv.sys [31846 2006-01-10] () [Brak podpisu cyfrowego]
R1 RsFx0150; C:\Windows\System32\DRIVERS\RsFx0150.sys [240608 2010-04-03] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [329384 2015-09-23] (Duplex Secure Ltd.)
R3 VMC326; C:\Windows\System32\Drivers\VMC326.sys [238464 2008-09-03] (Vimicro Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
U3 agzhdqdc; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-09-26 21:57 - 2015-09-26 21:57 - 00000000 ____D C:\Users\samsung\Desktop\Stare dane programu Firefox
2015-09-26 21:37 - 2015-09-26 21:37 - 00000000 ____D C:\MATS
2015-09-26 21:31 - 2015-09-26 21:31 - 00347816 _____ (Microsoft Corporation) C:\Users\samsung\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.Run.exe
2015-09-26 18:13 - 2015-09-26 18:13 - 00000000 ____D C:\Users\samsung\Desktop\skany_logi
2015-09-26 10:01 - 2015-09-19 19:05 - 00191584 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-09-26 10:01 - 2015-09-19 19:05 - 00191584 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-09-26 09:59 - 2015-09-19 19:05 - 00274016 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-09-26 09:59 - 2012-04-04 18:47 - 00772504 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2015-09-26 09:59 - 2012-04-04 18:47 - 00687504 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2015-09-26 09:46 - 2015-09-19 19:05 - 00097888 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-09-23 22:04 - 2015-09-23 22:04 - 00380416 _____ C:\Users\samsung\Downloads\upzu7788.exe
2015-09-23 21:22 - 2015-09-26 22:23 - 00014917 _____ C:\Users\samsung\Desktop\FRST.txt
2015-09-23 21:20 - 2015-09-23 21:20 - 00532136 _____ (Duplex Secure Ltd) C:\Users\samsung\Downloads\SPTDinst-v187-x86.exe
2015-09-23 21:11 - 2015-09-23 21:11 - 00064959 _____ C:\Users\samsung\Downloads\Shortcut.txt
2015-09-23 21:09 - 2015-09-26 18:14 - 00062403 _____ C:\Users\samsung\Desktop\Addition.txt
2015-09-23 21:06 - 2015-09-26 18:13 - 00032844 _____ C:\Users\samsung\Downloads\FRST.txt
2015-09-23 20:19 - 2015-09-26 21:49 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-09-23 20:11 - 2015-09-23 20:11 - 01662976 _____ C:\Users\samsung\Downloads\AdwCleaner5.exe
2015-09-23 20:09 - 2015-09-23 21:04 - 01695744 _____ (Farbar) C:\Users\samsung\Desktop\FRST.exe
2015-09-21 13:15 - 2015-09-21 13:16 - 00000000 ____D C:\Users\samsung\AppData\Local\Garmin_Ltd._or_its_subsid
2015-09-20 14:57 - 2015-09-20 15:00 - 00000000 ____D C:\Users\samsung\Desktop\Nowy folder
2015-09-19 19:58 - 2015-09-26 17:16 - 00008704 _____ C:\Users\samsung\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-09-19 19:29 - 2015-09-19 19:41 - 00000000 ____D C:\Program Files\Feed Notifier
2015-09-19 19:08 - 2015-09-19 19:09 - 00000000 ____D C:\Users\samsung\AppData\Local\Adobe
2015-09-19 19:06 - 2015-09-19 19:06 - 00000000 ____D C:\Users\samsung\AppData\Roaming\Sun
2015-09-19 19:06 - 2015-09-19 19:06 - 00000000 ____D C:\Users\samsung\.oracle_jre_usage
2015-09-19 19:06 - 2015-09-19 19:06 - 00000000 ____D C:\Program Files\Common Files\Java
2015-09-19 19:04 - 2015-09-19 19:04 - 00584288 _____ (Oracle Corporation) C:\Users\samsung\Downloads\jre-8u60-windows-i586-iftw.exe
2015-09-19 18:59 - 2015-09-19 18:59 - 00000752 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-09-19 18:59 - 2015-09-19 18:59 - 00000740 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-09-19 09:58 - 2015-09-19 09:58 - 00000859 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-09-19 08:21 - 2015-09-19 08:21 - 00000000 ____D C:\Users\samsung\AppData\Local\Macromedia
2015-09-19 08:20 - 2015-09-19 08:20 - 00000000 ____D C:\Users\samsung\AppData\Local\Mozilla
2015-09-19 08:15 - 2015-09-19 08:15 - 00156432 _____ C:\Users\samsung\AppData\Local\GDIPFONTCACHEV1.DAT
2015-09-18 23:10 - 2015-09-18 23:10 - 00000000 ____D C:\Program Files\Opera
2015-09-18 23:06 - 2015-09-18 23:06 - 00000292 _____ C:\task.vbs
2015-09-18 22:24 - 2015-09-19 08:35 - 00000909 _____ C:\Users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-09-18 22:21 - 2015-09-19 18:59 - 00000000 ____D C:\Users\samsung\AppData\Local\VirtualStore
2015-09-13 22:03 - 2015-08-17 19:18 - 01814016 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-09-13 22:03 - 2015-08-17 19:17 - 12388352 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-09-13 22:03 - 2015-08-17 19:14 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-09-13 22:03 - 2015-08-17 19:13 - 09751040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-09-13 22:03 - 2015-08-17 19:12 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-09-13 22:03 - 2015-08-17 19:12 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-09-13 22:03 - 2015-08-17 19:11 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-09-13 22:03 - 2015-08-17 19:11 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-09-13 22:03 - 2015-08-17 19:10 - 01804288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-09-13 22:03 - 2015-08-17 19:10 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-09-13 22:03 - 2015-08-17 19:10 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-09-13 22:03 - 2015-08-17 19:10 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-09-13 22:03 - 2015-08-17 19:10 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-09-13 22:03 - 2015-08-17 19:10 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-09-13 22:03 - 2015-08-17 19:10 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-09-13 22:03 - 2015-08-17 19:10 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-09-13 22:03 - 2015-08-17 19:10 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-09-13 22:03 - 2015-08-17 19:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-09-13 22:03 - 2015-08-17 19:10 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-09-13 22:03 - 2015-08-17 19:10 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-09-13 22:03 - 2015-08-17 19:10 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-09-13 22:03 - 2015-08-17 19:09 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-09-13 22:01 - 2015-09-13 22:02 - 00000000 ____D C:\Users\samsung\Desktop\kraków_12.09.2015
2015-09-13 22:00 - 2015-09-13 22:19 - 00000000 ____D C:\Users\samsung\Desktop\babia_13.09.2015
2015-09-11 08:26 - 2015-08-13 16:15 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2015-09-11 08:26 - 2015-08-13 16:15 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2015-09-11 08:25 - 2015-09-02 23:26 - 01402368 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-09-11 08:25 - 2015-09-02 23:26 - 01253376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-09-10 20:43 - 2015-09-13 22:14 - 00000000 ____D C:\Users\samsung\Desktop\murowaniec_czarny staw_10.09.2015
2015-09-09 22:23 - 2015-09-02 23:26 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-09 22:23 - 2015-09-02 21:55 - 02067456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-09 22:23 - 2015-09-02 21:54 - 00297472 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-09 22:23 - 2015-07-10 16:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-09-09 22:22 - 2015-08-05 17:59 - 00602112 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-08 14:26 - 2015-09-08 14:28 - 00000000 ____D C:\Users\samsung\Desktop\foto_silesia
2015-09-06 22:15 - 2015-09-08 08:53 - 00000000 ____D C:\Users\samsung\Desktop\karkonosze_2015
2015-08-28 19:00 - 2015-09-26 21:42 - 00000000 ____D C:\Program Files\Mozilla Firefox

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-09-26 22:23 - 2013-10-20 23:06 - 00000000 ____D C:\FRST
2015-09-26 22:15 - 2008-10-28 03:35 - 01743571 _____ C:\Windows\WindowsUpdate.log
2015-09-26 22:13 - 2013-01-19 18:39 - 00710614 _____ C:\Windows\error.log
2015-09-26 22:13 - 2006-11-02 12:23 - 00000397 _____ C:\Windows\win.ini
2015-09-26 22:11 - 2006-11-02 14:58 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-26 22:11 - 2006-11-02 14:45 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-26 22:11 - 2006-11-02 14:45 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-26 22:10 - 2013-01-19 18:39 - 00012639 _____ C:\Windows\errord.log
2015-09-26 22:09 - 2008-10-28 03:36 - 00000012 _____ C:\Windows\bthservsdp.dat
2015-09-26 22:09 - 2006-11-02 14:58 - 00032512 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-09-26 22:05 - 2015-04-29 21:13 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-26 21:42 - 2006-11-02 13:18 - 00000000 ___RD C:\Users\Public
2015-09-26 21:42 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\GroupPolicy
2015-09-26 20:49 - 2012-04-22 22:02 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4013461272-253353711-3654097772-1003UA.job
2015-09-26 13:12 - 2008-01-21 05:02 - 00233144 _____ C:\Windows\PFRO.log
2015-09-26 10:22 - 2012-12-02 15:58 - 00000000 ____D C:\Program Files\NapiProjekt
2015-09-26 10:20 - 2012-03-13 20:22 - 00000000 ____D C:\Program Files\GRETECH
2015-09-26 10:08 - 2011-02-05 12:45 - 00000000 ____D C:\Program Files\OpenOffice.org 3
2015-09-26 10:01 - 2010-11-11 00:30 - 00000000 ____D C:\Program Files\Java
2015-09-26 09:46 - 2013-10-16 20:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-09-24 22:54 - 2008-10-27 09:18 - 00761640 _____ C:\Windows\system32\perfh015.dat
2015-09-24 22:54 - 2008-10-27 09:18 - 00169294 _____ C:\Windows\system32\perfc015.dat
2015-09-24 22:54 - 2006-11-02 12:33 - 01747332 _____ C:\Windows\system32\PerfStringBackup.INI
2015-09-23 21:48 - 2010-09-09 18:07 - 00329384 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2015-09-23 20:24 - 2010-03-25 12:23 - 00000904 _____ C:\Users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-09-23 20:15 - 2013-10-18 22:33 - 00000000 ____D C:\AdwCleaner
2015-09-22 17:05 - 2013-10-16 22:03 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-09-22 17:05 - 2012-02-09 17:43 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-09-21 21:14 - 2015-01-25 22:08 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-09-19 19:06 - 2013-10-16 20:19 - 00000000 ____D C:\ProgramData\Oracle
2015-09-19 19:06 - 2010-03-25 12:21 - 00000000 ____D C:\Users\samsung
2015-09-19 18:43 - 2010-03-25 12:21 - 00000000 ____D C:\Users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2015-09-19 09:58 - 2015-01-25 22:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-09-19 09:58 - 2015-01-25 22:07 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2015-09-18 22:29 - 2012-04-22 21:46 - 00000000 ____D C:\Windows\pss
2015-09-18 22:23 - 2010-03-25 12:23 - 00000875 _____ C:\Users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2015-09-18 22:22 - 2006-11-02 14:44 - 00491760 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-18 21:58 - 2010-08-31 18:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox
2015-09-18 21:45 - 2012-04-22 22:02 - 00001014 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4013461272-253353711-3654097772-1003Core.job
2015-09-14 19:56 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2015-09-14 07:47 - 2013-08-16 08:33 - 00000000 ____D C:\Windows\system32\MRT
2015-09-11 11:56 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2015-09-11 08:25 - 2008-10-27 12:15 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-09-10 03:59 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\pl-PL
2015-09-07 17:48 - 2013-10-16 20:01 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

==================== Pliki w katalogu głównym wybranych folderów =======

2014-09-16 16:02 - 2014-09-16 16:02 - 0000033 _____ () C:\Users\samsung\AppData\Roaming\mbam.context.scan
2013-06-16 13:09 - 2013-06-16 21:51 - 0000004 _____ () C:\Users\samsung\AppData\Roaming\skype.ini
2015-09-19 19:58 - 2015-09-26 17:16 - 0008704 _____ () C:\Users\samsung\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-12-02 00:35 - 2013-08-02 22:37 - 0003652 _____ () C:\ProgramData\hpzinstall.log

Pliki do przeniesienia lub usunięcia:
====================
C:\Users\samsung\AppData\Roaming\skype.ini


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-09-26 22:17

==================== Koniec  FRST.txt ============================