Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:27-09-2015 01
Uruchomiony przez Czytnia1 (administrator)  CZYTNIA (29-09-2015 09:27:28)
Uruchomiony z C:\Users\Czytnia1\Desktop
Załadowane profile: Czytnia1 (Dostępne profile: Czytnia1)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka nie została wykryta!)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe
(© 2015 Microsoft Corporation) C:\Users\Czytnia1\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Vimicro) C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Lenovo) C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2741544 2011-04-08] (Synaptics Incorporated)
HKLM\...\Run: [Lenovo EE Boot Optimizer] => C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2011-10-17] (Lenovo)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9753024 2011-10-17] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5908928 2011-10-17] (Lenovo(beijing) Limited)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1691112 2015-03-12] (Bitdefender)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-02-18] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-03-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [332BigDog] => C:\Program Files (x86)\USB Camera2\VM332_STI.EXE [536576 2010-01-19] (Vimicro)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2011-01-29] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [228448 2011-01-29] (CyberLink Corp.)
HKLM-x32\...\Run: [VeriFaceManager] => C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2011-10-17] (Lenovo)
HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\Run: [Mobile Partner] => C:\Program Files (x86)\PLAY Web partner\PLAY Web partner
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\Run: [BingSvc] => C:\Users\Czytnia1\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\Run: [Agent Portfela Bitdefender] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790880 2015-01-15] (Bitdefender)
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\MountPoints2: {07139c22-6670-11e5-8074-9439e593b48e} - D:\AutoRun.exe
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\MountPoints2: {1b7bb976-138f-11e5-9543-9439e593b48e} - E:\AutoRun.exe
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\MountPoints2: {1b7bb97b-138f-11e5-9543-9439e593b48e} - E:\AutoRun.exe
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\MountPoints2: {380e9d14-1b66-11e5-8c30-9439e593b48e} - D:\AutoRun.exe
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\MountPoints2: {3b7969e8-1c20-11e5-9462-9439e593b48e} - D:\AutoRun.exe
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\MountPoints2: {4c89737d-13ef-11e5-b2d0-9439e593b48e} - D:\AutoRun.exe
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\MountPoints2: {4c897a6b-13ef-11e5-b2d0-9439e593b48e} - D:\AutoRun.exe
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\MountPoints2: {4c897a6e-13ef-11e5-b2d0-9439e593b48e} - D:\AutoRun.exe
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\MountPoints2: {c288bd60-62b5-11e5-956c-9439e593b48e} - D:\AutoRun.exe
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\MountPoints2: {d0720344-1583-11e5-99f4-9439e593b48e} - D:\AutoRun.exe
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\MountPoints2: {ebaef765-4a44-11e5-a024-9439e593b48e} - D:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\MountPoints2: {ebaef76e-4a44-11e5-a024-9439e593b48e} - D:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\...\MountPoints2: {f204aacc-141c-11e5-a6bc-9439e593b48e} - D:\AutoRun.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Brak pliku
ShellIconOverlayIdentifiers: [VeriFace Enc] -> {771C7324-DA80-49D3-8017-753B0AF60951} => C:\windows\system32\IcnOvrly.dll [2011-10-17] ()
ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2011-10-17]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{06ACAB80-71AB-4DCA-9557-8454F2280B01}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{F9599A94-D0F3-4585-8F6A-B415C99E6A2E}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-4151507218-3838123134-1542459132-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-4151507218-3838123134-1542459132-1000 -> OldSearch URL = hxxp://www.bing.com/search?FORM=SK2MDF&PC=SK2M&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-4151507218-3838123134-1542459132-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Portfel Bitdefender -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2015-01-28] (Bitdefender)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Portfel Bitdefender -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2015-01-28] (Bitdefender)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Toolbar: HKLM - Portfel Bitdefender - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2015-01-28] (Bitdefender)
Toolbar: HKLM-x32 - Portfel Bitdefender - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2015-01-28] (Bitdefender)
Toolbar: HKU\S-1-5-21-4151507218-3838123134-1542459132-1000 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Brak pliku
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Czytnia1\AppData\Roaming\Mozilla\Firefox\Profiles\14wqnwkq.default
FF NewTab: hxxp://searchinterneat-a.akamaihd.net/t?eq=U0EeFFhaR1oWHAcWcAgLUF9GDFETJQoVVQlJGBhBdA8LTAwURwZHc19dVgwQQhNBNARaB0tXUUEeGGlxR1dMa0BNJ1VdL1wF
FF SearchEngineOrder.3: Bing 
FF Homepage: hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggRdQkJUggXFhhHcFwLTA1BGQwOIg0OUhRERFMQJApeBA5EQFYFIk0FA18DB0VXfWFoKB8fHH9WLl5UBHcUVQ==
FF Keyword.URL: hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQsNUQhCEFMUbV0IBApcFQUbeRRaVQ9CDABGJgpcUl8UFgBCIx9aFQQTR0cFME0FB18EURNNfXNND14dRHtGNA==&q={searchTerms}
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll [Brak pliku]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Czytnia1\AppData\Roaming\Mozilla\Firefox\Profiles\14wqnwkq.default\searchplugins\bing-.xml [2015-06-25]
FF Extension: Bing Search - C:\Users\Czytnia1\AppData\Roaming\Mozilla\Firefox\Profiles\14wqnwkq.default\Extensions\bingsearch.full@microsoft.com [2015-06-25]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-07-24]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext
FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2015-09-24]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor => nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff [2015-09-24]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=pl-pl
CHR RestoreOnStartup: Default -> "hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggRdQkJUggXFhhHcFwLTA1BGQwOIg0OUhRERFMQJApeBA5EQFYFIk0FA1oDB0VXfV5bFElXTwhpNVdfDVw/REE="
CHR StartupUrls: Default -> "hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggRdQkJUggXFhhHcFwLTA1BGQwOIg0OUhRERFMQJApeBA5EQFYFIk0FA1oDB0VXfV5bFElXTwhpNVdfDVw/REE="
CHR DefaultSearchURL: Default -> hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQsNUQhCEFMUbV0IBApcFQUbeRRaVQ9CDABGJgpcUl8UFgBCIx9aFQQTQkcFME0FBloEURNNfXNND14dRHtGNA==&q={searchTerms}
CHR DefaultSearchKeyword: Default -> searchinterneat-a.akamaihd.net
CHR DefaultNewTabURL: Default -> hxxp://searchinterneat-a.akamaihd.net/t?eq=U0EeFFhaR1oWHAcWcAgLUF9GDFETJQoVVQlJGBhBdA8LTAwURwZHc19dVgwQQhNBNARaAktXUUEeJ1pNER8fHH9WLl5UBHcUVQ==
CHR Profile: C:\Users\Czytnia1\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Bitdefender Wallet) - C:\Users\Czytnia1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabcmochhfpldjekobfaaggijgohadih [2015-09-29]
CHR Extension: (Bing) - C:\Users\Czytnia1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2015-06-25]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Czytnia1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-16]
CHR HKU\S-1-5-21-4151507218-3838123134-1542459132-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2014-12-09] (Bitdefender)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [953632 2010-12-14] (Broadcom Corporation.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S4 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [67320 2014-10-27] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1547936 2015-03-16] (Bitdefender)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1306464 2015-01-14] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [262544 2015-01-23] (BitDefender)
S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [677104 2015-01-14] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2014-12-15] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107080 2012-10-29] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\windows\system32\drivers\bdsandbox.sys [82824 2015-01-09] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2012-04-17] (BitDefender)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [160544 2015-02-24] (BitDefender LLC)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-09-29] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [452040 2014-10-15] (BitDefender S.R.L.)
U3 BcmSqlStartupSvc; Brak ImagePath
U2 CLKMSVC10_3A60B698; Brak ImagePath
U2 CLKMSVC10_C3B3B687; Brak ImagePath
U2 DriverService; Brak ImagePath
U2 iATAgentService; Brak ImagePath
U2 idealife Update Service; Brak ImagePath
U3 IGRS; Brak ImagePath
U2 IviRegMgr; Brak ImagePath
U2 nvUpdatusService; Brak ImagePath
U2 Oasis2Service; Brak ImagePath
U2 PCCarerService; Brak ImagePath
U2 ReadyComm.DirectRouter; Brak ImagePath
U2 RichVideo; Brak ImagePath
U2 RtLedService; Brak ImagePath
U2 SeaPort; Brak ImagePath
U2 SoftwareService; Brak ImagePath
U3 SQLWriter; Brak ImagePath
U2 Stereo Service; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-09-29 09:27 - 2015-09-29 09:27 - 00023673 _____ C:\Users\Czytnia1\Desktop\FRST.txt
2015-09-29 09:25 - 2015-09-29 09:27 - 00000000 ____D C:\FRST
2015-09-29 09:22 - 2015-09-29 09:22 - 00380416 _____ C:\Users\Czytnia1\Desktop\gmr.exe
2015-09-29 09:21 - 2015-09-29 09:21 - 02192384 _____ (Farbar) C:\Users\Czytnia1\Desktop\FRST64.exe
2015-09-29 09:12 - 2015-09-29 09:12 - 02192384 _____ (Farbar) C:\Users\Czytnia1\Downloads\FRST64.exe
2015-09-29 08:28 - 2015-09-24 14:59 - 173143088 _____ C:\Users\Czytnia1\Desktop\r5yx3fsn.exe
2015-09-29 08:20 - 2011-12-16 09:38 - 00422400 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbwwan.sys
2015-09-29 08:20 - 2011-12-02 14:23 - 00223744 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_juwwanecm.sys
2015-09-29 08:20 - 2011-09-09 11:51 - 00098304 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jucdcacm.sys
2015-09-29 08:20 - 2011-09-09 11:51 - 00087040 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jubusenum.sys
2015-09-29 08:20 - 2011-09-09 11:51 - 00072192 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_jucdcecm.sys
2015-09-29 08:20 - 2011-09-09 11:51 - 00028672 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_juextctrl.sys
2015-09-29 08:20 - 2011-08-16 17:17 - 00223232 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbmdm.sys
2015-09-29 08:20 - 2010-10-08 16:59 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\windows\system32\Drivers\ewdcsc.sys
2015-09-29 08:20 - 2010-09-26 18:09 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_hwupgrade.sys
2015-09-29 08:20 - 2010-08-06 07:43 - 01001472 _____ (DiBcom SA) C:\windows\system32\Drivers\mod7700.sys
2015-09-29 08:20 - 2010-07-27 09:52 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_hwusbdev.sys
2015-09-29 08:20 - 2010-03-20 12:06 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ew_usbenumfilter.sys
2015-09-24 21:44 - 2015-07-30 15:13 - 00124624 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-09-24 21:44 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-09-24 21:27 - 2015-09-24 21:27 - 00000000 ____D C:\Users\Czytnia1\Doctor Web
2015-09-24 20:15 - 2015-09-24 20:15 - 00074000 _____ (BitDefender SRL) C:\windows\system32\bdsandboxuiskin32.dll
2015-09-24 20:15 - 2015-09-24 20:15 - 00003518 _____ C:\windows\System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8
2015-09-24 20:15 - 2015-09-24 20:15 - 00000000 ____D C:\Program Files\Common Files\AV
2015-09-24 20:04 - 2015-09-24 20:04 - 00000000 ____D C:\ProgramData\Dumps
2015-09-24 15:24 - 2015-09-24 15:24 - 00919533 _____ C:\ProgramData\1443099442.bdinstall.bin
2015-09-24 15:21 - 2015-09-24 15:21 - 00002126 _____ C:\Users\Public\Desktop\Bitdefender Total Security 2015.lnk
2015-09-24 15:21 - 2015-09-24 15:21 - 00000684 ____H C:\bdr-cf01
2015-09-24 15:21 - 2015-09-24 15:21 - 00000385 _____ C:\windows\system32\user_gensett.xml
2015-09-24 15:21 - 2015-09-24 15:21 - 00000385 _____ C:\Users\Czytnia1\AppData\Roaminguser_gensett.xml
2015-09-24 15:21 - 2015-09-24 15:21 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2015-09-24 15:21 - 2015-09-24 15:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2015
2015-09-24 15:21 - 2015-09-24 15:21 - 00000000 ____D C:\ProgramData\BDLogging
2015-09-24 15:20 - 2015-01-23 16:30 - 00262544 _____ (BitDefender) C:\windows\system32\Drivers\avchv.sys
2015-09-24 15:20 - 2015-01-14 13:13 - 00677104 _____ (BitDefender) C:\windows\system32\Drivers\avckf.sys
2015-09-24 15:20 - 2015-01-14 13:07 - 01306464 _____ (BitDefender) C:\windows\system32\Drivers\avc3.sys
2015-09-24 15:20 - 2015-01-09 11:59 - 00082824 _____ (BitDefender SRL) C:\windows\system32\Drivers\bdsandbox.sys
2015-09-24 15:20 - 2015-01-09 11:44 - 00074000 _____ (BitDefender SRL) C:\windows\SysWOW64\bdsandboxuiskin32.dll
2015-09-24 15:20 - 2014-12-15 18:04 - 00093600 _____ (BitDefender LLC) C:\windows\system32\Drivers\BdfNdisf6.sys
2015-09-24 15:20 - 2012-04-17 14:34 - 00076944 _____ (BitDefender) C:\windows\system32\Drivers\bdvedisk.sys
2015-09-24 15:20 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\windows\capicom.dll
2015-09-24 15:01 - 2015-09-24 15:26 - 00000000 ____D C:\Users\Czytnia1\AppData\Roaming\Bitdefender
2015-09-24 15:01 - 2015-09-24 15:21 - 00253404 ____H C:\bdr-ld01
2015-09-24 15:01 - 2015-09-24 15:21 - 00009216 ____H C:\bdr-ld01.mbr
2015-09-24 15:01 - 2014-07-04 17:49 - 49563064 ____H C:\bdr-im01.gz
2015-09-24 15:01 - 2013-08-13 13:38 - 03271472 ____H C:\bdr-bz01
2015-09-24 14:58 - 2015-09-24 15:21 - 00000000 ____D C:\ProgramData\Bitdefender
2015-09-24 14:58 - 2015-09-24 15:01 - 00000000 ____D C:\Program Files\Bitdefender
2015-09-24 14:58 - 2015-02-24 17:52 - 00160544 _____ (BitDefender LLC) C:\windows\system32\Drivers\gzflt.sys
2015-09-24 14:58 - 2015-01-09 11:44 - 00084848 _____ (BitDefender SRL) C:\windows\system32\BDSandBoxUISkin.dll
2015-09-24 14:58 - 2015-01-09 11:44 - 00033360 _____ (BitDefender SRL) C:\windows\system32\BDSandBoxUH.dll
2015-09-24 14:58 - 2014-10-15 17:14 - 00452040 _____ (BitDefender S.R.L.) C:\windows\system32\Drivers\trufos.sys
2015-09-24 14:57 - 2015-09-24 14:57 - 00000000 ____D C:\Users\Czytnia1\AppData\Roaming\QuickScan
2015-09-24 14:56 - 2015-09-24 14:58 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2015-09-24 14:19 - 2015-07-28 22:05 - 01116672 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-09-24 14:19 - 2015-07-28 22:05 - 00774656 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-09-24 14:19 - 2015-07-28 22:05 - 00743424 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-09-24 14:19 - 2015-07-28 22:05 - 00437760 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-09-24 14:19 - 2015-07-28 22:05 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-09-24 14:19 - 2015-07-28 21:55 - 01148416 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-09-24 14:18 - 2015-09-29 09:21 - 00113880 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-09-24 14:18 - 2015-09-24 14:33 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-09-24 14:18 - 2015-09-24 14:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-09-24 14:18 - 2015-07-28 22:09 - 00017344 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2015-09-24 14:18 - 2015-07-28 22:05 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2015-09-24 14:18 - 2015-07-21 02:39 - 00389840 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-09-24 14:18 - 2015-07-21 02:12 - 00342736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-09-24 14:18 - 2015-07-16 23:14 - 25192448 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-09-24 14:18 - 2015-07-16 22:54 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-09-24 14:18 - 2015-07-16 22:54 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-09-24 14:18 - 2015-07-16 22:37 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-09-24 14:18 - 2015-07-16 22:36 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-09-24 14:18 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-09-24 14:18 - 2015-07-16 22:36 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-09-24 14:18 - 2015-07-16 22:35 - 02885632 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-09-24 14:18 - 2015-07-16 22:35 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-09-24 14:18 - 2015-07-16 22:27 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-09-24 14:18 - 2015-07-16 22:26 - 05923328 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-09-24 14:18 - 2015-07-16 22:26 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-09-24 14:18 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-09-24 14:18 - 2015-07-16 22:21 - 00816640 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-09-24 14:18 - 2015-07-16 22:21 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-09-24 14:18 - 2015-07-16 22:21 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-09-24 14:18 - 2015-07-16 22:21 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-09-24 14:18 - 2015-07-16 22:20 - 19870208 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-09-24 14:18 - 2015-07-16 22:12 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-09-24 14:18 - 2015-07-16 22:08 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-09-24 14:18 - 2015-07-16 22:06 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-09-24 14:18 - 2015-07-16 22:00 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-09-24 14:18 - 2015-07-16 21:55 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-09-24 14:18 - 2015-07-16 21:54 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-09-24 14:18 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-09-24 14:18 - 2015-07-16 21:51 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-09-24 14:18 - 2015-07-16 21:51 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-09-24 14:18 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-09-24 14:18 - 2015-07-16 21:50 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-09-24 14:18 - 2015-07-16 21:49 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-09-24 14:18 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-09-24 14:18 - 2015-07-16 21:43 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-09-24 14:18 - 2015-07-16 21:43 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-09-24 14:18 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-09-24 14:18 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-09-24 14:18 - 2015-07-16 21:39 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-09-24 14:18 - 2015-07-16 21:38 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-09-24 14:18 - 2015-07-16 21:36 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-09-24 14:18 - 2015-07-16 21:35 - 00720384 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-09-24 14:18 - 2015-07-16 21:34 - 14451200 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-09-24 14:18 - 2015-07-16 21:33 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-09-24 14:18 - 2015-07-16 21:32 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-09-24 14:18 - 2015-07-16 21:29 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-09-24 14:18 - 2015-07-16 21:24 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-09-24 14:18 - 2015-07-16 21:20 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-09-24 14:18 - 2015-07-16 21:19 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-09-24 14:18 - 2015-07-16 21:17 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-09-24 14:18 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-09-24 14:18 - 2015-07-16 21:12 - 02427904 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-09-24 14:18 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-09-24 14:18 - 2015-07-16 21:06 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-09-24 14:18 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-09-24 14:18 - 2015-07-16 21:05 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-09-24 14:18 - 2015-07-16 21:01 - 01545728 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-09-24 14:18 - 2015-07-16 20:49 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-09-24 14:18 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-09-24 14:18 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-09-24 14:18 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-09-24 14:18 - 2015-07-15 20:15 - 05568960 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-09-24 14:18 - 2015-07-15 20:15 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-09-24 14:18 - 2015-07-15 20:15 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-09-24 14:18 - 2015-07-15 20:15 - 00094656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mountmgr.sys
2015-09-24 14:18 - 2015-07-15 20:12 - 01730496 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-09-24 14:18 - 2015-07-15 20:11 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-09-24 14:18 - 2015-07-15 20:11 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-09-24 14:18 - 2015-07-15 20:11 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2015-09-24 14:18 - 2015-07-15 20:11 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-09-24 14:18 - 2015-07-15 20:11 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 01743360 _____ (Microsoft Corporation) C:\windows\system32\sysmain.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 01216512 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00729088 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-09-24 14:18 - 2015-07-15 20:10 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-09-24 14:18 - 2015-07-15 20:10 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-09-24 14:18 - 2015-07-15 20:10 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-09-24 14:18 - 2015-07-15 20:10 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\msmmsp.dll
2015-09-24 14:18 - 2015-07-15 20:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-09-24 14:18 - 2015-07-15 20:09 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-09-24 14:18 - 2015-07-15 20:05 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-09-24 14:18 - 2015-07-15 20:05 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:59 - 03989952 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-09-24 14:18 - 2015-07-15 19:59 - 03934656 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-09-24 14:18 - 2015-07-15 19:56 - 01311768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-09-24 14:18 - 2015-07-15 19:55 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-09-24 14:18 - 2015-07-15 19:55 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-09-24 14:18 - 2015-07-15 19:55 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-09-24 14:18 - 2015-07-15 19:55 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-09-24 14:18 - 2015-07-15 19:55 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-09-24 14:18 - 2015-07-15 19:54 - 00552960 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-09-24 14:18 - 2015-07-15 19:54 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-09-24 14:18 - 2015-07-15 19:54 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-09-24 14:18 - 2015-07-15 19:54 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll
2015-09-24 14:18 - 2015-07-15 19:54 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-09-24 14:18 - 2015-07-15 19:54 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-09-24 14:18 - 2015-07-15 19:54 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-09-24 14:18 - 2015-07-15 19:53 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-09-24 14:18 - 2015-07-15 19:53 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-09-24 14:18 - 2015-07-15 19:53 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-09-24 14:18 - 2015-07-15 19:53 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-09-24 14:18 - 2015-07-15 19:53 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-09-24 14:18 - 2015-07-15 19:53 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-09-24 14:18 - 2015-07-15 19:49 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-09-24 14:18 - 2015-07-15 19:48 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 18:46 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2015-09-24 14:18 - 2015-07-15 18:46 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-09-24 14:18 - 2015-07-15 18:46 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-09-24 14:18 - 2015-07-15 18:37 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-09-24 14:18 - 2015-07-15 18:37 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-09-24 14:18 - 2015-07-15 18:34 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 18:34 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 18:34 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-24 14:18 - 2015-07-15 18:34 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-24 14:17 - 2015-09-24 14:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-09-24 14:17 - 2015-09-24 14:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-24 14:17 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2015-09-24 14:17 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-09-24 14:17 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2015-09-24 14:11 - 2015-09-24 14:11 - 00000000 ____D C:\Program Files (x86)\GUM65D9.tmp
2015-09-02 03:56 - 2015-07-15 05:19 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\basesrv.dll
2015-09-02 03:56 - 2015-07-10 19:51 - 03722752 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2015-09-02 03:56 - 2015-07-10 19:51 - 00158720 _____ (Microsoft Corporation) C:\windows\system32\aaclient.dll
2015-09-02 03:56 - 2015-07-10 19:51 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2015-09-02 03:56 - 2015-07-10 19:34 - 03221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2015-09-02 03:56 - 2015-07-10 19:34 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2015-09-02 03:56 - 2015-07-10 19:33 - 00131584 _____ (Microsoft Corporation) C:\windows\SysWOW64\aaclient.dll
2015-09-01 21:51 - 2015-07-30 20:06 - 02565120 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2015-09-01 21:51 - 2015-07-30 20:06 - 01648128 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2015-09-01 21:51 - 2015-07-30 20:06 - 01180160 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2015-09-01 21:51 - 2015-07-30 20:06 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2015-09-01 21:51 - 2015-07-30 20:06 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2015-09-01 21:51 - 2015-07-30 20:06 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2015-09-01 21:51 - 2015-07-30 20:06 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2015-09-01 21:51 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2015-09-01 21:51 - 2015-07-30 19:57 - 01251328 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2015-09-01 21:51 - 2015-07-30 19:57 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2015-09-01 21:51 - 2015-07-30 19:57 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2015-09-01 21:51 - 2015-07-30 19:57 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2015-09-01 21:51 - 2015-07-30 19:55 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2015-09-01 21:51 - 2015-07-30 18:56 - 03208192 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-09-01 21:51 - 2015-07-30 18:52 - 00372736 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2015-09-01 21:51 - 2015-07-30 18:49 - 00299520 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2015-09-01 21:51 - 2015-07-20 20:12 - 03154944 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-09-01 21:51 - 2015-07-20 20:12 - 02606080 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-09-01 21:51 - 2015-07-20 20:12 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-09-01 21:51 - 2015-07-20 20:12 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-09-01 21:51 - 2015-07-20 20:12 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-09-01 21:51 - 2015-07-20 20:12 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-09-01 21:51 - 2015-07-20 20:12 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-09-01 21:51 - 2015-07-20 20:12 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-09-01 21:51 - 2015-07-20 20:12 - 00037376 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-09-01 21:51 - 2015-07-20 20:12 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-09-01 21:51 - 2015-07-20 20:12 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-09-01 21:51 - 2015-07-20 19:56 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-09-01 21:51 - 2015-07-20 19:56 - 00173056 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-09-01 21:51 - 2015-07-20 19:56 - 00093184 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-09-01 21:51 - 2015-07-20 19:56 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-09-01 21:51 - 2015-07-20 19:56 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-09-01 21:51 - 2015-07-15 05:19 - 02004992 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2015-09-01 21:51 - 2015-07-15 05:19 - 01887232 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-09-01 21:51 - 2015-07-15 05:14 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2015-09-01 21:51 - 2015-07-15 05:13 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2015-09-01 21:51 - 2015-07-15 04:55 - 01390592 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll
2015-09-01 21:51 - 2015-07-15 04:55 - 01241088 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2015-09-01 21:51 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6r.dll
2015-09-01 21:51 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2015-09-01 21:51 - 2015-07-10 19:51 - 14177280 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-09-01 21:51 - 2015-07-10 19:34 - 12875776 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2015-09-01 21:51 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\windows\system32\notepad.exe
2015-09-01 21:51 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\windows\notepad.exe
2015-09-01 21:51 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\windows\SysWOW64\notepad.exe
2015-09-01 21:51 - 2015-07-01 22:49 - 00260096 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2015-09-01 21:51 - 2015-07-01 22:48 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2015-09-01 21:51 - 2015-07-01 22:30 - 00206848 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2015-09-01 21:51 - 2015-07-01 22:30 - 00082432 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll
2015-09-01 21:38 - 2015-09-01 21:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-09-29 09:15 - 2011-10-17 00:30 - 00001048 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-29 08:58 - 2015-05-23 23:28 - 00000000 ____D C:\Users\Czytnia1\AppData\Local\Google
2015-09-29 08:38 - 2011-10-16 23:51 - 01526836 _____ C:\windows\WindowsUpdate.log
2015-09-29 08:31 - 2011-10-16 15:35 - 00698356 _____ C:\windows\system32\perfh015.dat
2015-09-29 08:31 - 2011-10-16 15:35 - 00135176 _____ C:\windows\system32\perfc015.dat
2015-09-29 08:31 - 2009-07-14 07:13 - 01551272 _____ C:\windows\system32\PerfStringBackup.INI
2015-09-29 08:27 - 2009-07-14 06:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-29 08:27 - 2009-07-14 06:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-29 08:22 - 2009-07-14 06:51 - 00102715 _____ C:\windows\setupact.log
2015-09-29 08:21 - 2011-10-17 00:47 - 01345763 _____ C:\windows\system32\fastboot.set
2015-09-29 08:20 - 2015-05-23 22:45 - 00000000 ____D C:\Users\Czytnia1
2015-09-29 08:20 - 2011-10-17 00:38 - 00087743 _____ C:\FaceProv.log
2015-09-29 08:20 - 2011-10-17 00:38 - 00000000 ____D C:\ProgramData\VeriFace
2015-09-29 08:20 - 2011-10-17 00:30 - 00001044 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-29 08:06 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-09-29 08:03 - 2015-06-16 13:40 - 00000000 ___SD C:\windows\system32\CompatTel
2015-09-29 08:03 - 2015-06-16 13:40 - 00000000 ____D C:\windows\system32\appraiser
2015-09-29 08:03 - 2010-11-21 05:47 - 00564496 _____ C:\windows\PFRO.log
2015-09-24 21:44 - 2015-06-16 11:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-09-24 21:44 - 2015-06-16 11:04 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-09-24 21:44 - 2015-06-16 11:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-09-24 21:41 - 2015-06-25 20:37 - 00000000 ____D C:\Users\Czytnia1\AppData\Roaming\Skype
2015-09-24 21:06 - 2015-07-24 11:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-09-24 20:18 - 2015-06-16 08:20 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-09-24 20:10 - 2011-10-17 00:30 - 00004044 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-24 20:10 - 2011-10-17 00:30 - 00003792 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-24 15:01 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-09-24 14:52 - 2015-06-15 23:21 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-09-24 14:33 - 2015-06-25 20:37 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2015-09-24 14:33 - 2015-06-18 08:50 - 00001224 _____ C:\Users\Czytnia1\Desktop\Paint.lnk
2015-09-24 14:33 - 2015-06-15 23:37 - 00002349 _____ C:\Users\Czytnia1\Desktop\Microsoft Word Starter 2010.lnk
2015-09-24 14:33 - 2015-06-15 23:37 - 00002349 _____ C:\Users\Czytnia1\Desktop\Microsoft Excel Starter 2010.lnk
2015-09-24 14:33 - 2015-06-15 23:21 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2015-09-24 14:33 - 2015-06-15 22:51 - 00001158 _____ C:\Users\Public\Desktop\PLAY Web partner.lnk
2015-09-24 14:33 - 2015-06-15 21:17 - 00001213 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2015-09-24 14:33 - 2015-06-15 21:17 - 00001201 _____ C:\Users\Public\Desktop\POCZTA.lnk
2015-09-24 14:33 - 2015-05-23 22:45 - 00001425 _____ C:\Users\Czytnia1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-09-24 14:33 - 2015-05-23 22:45 - 00001122 _____ C:\Users\Czytnia1\Desktop\Cyberlink Power2Go.lnk
2015-09-24 14:33 - 2011-10-17 00:44 - 00002486 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2015-09-24 14:33 - 2011-10-17 00:44 - 00001458 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-09-24 14:33 - 2011-10-17 00:44 - 00001374 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
2015-09-24 14:33 - 2011-10-17 00:44 - 00001305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
2015-09-24 14:33 - 2011-10-17 00:37 - 00001230 _____ C:\Users\Public\Desktop\CyberLink YouCam.lnk
2015-09-24 14:33 - 2011-10-17 00:35 - 00002072 _____ C:\Users\Public\Desktop\Podręcznik użytkownika.lnk
2015-09-24 14:33 - 2011-10-17 00:30 - 00002435 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk
2015-09-24 14:33 - 2011-10-16 23:52 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-09-24 14:33 - 2011-10-16 23:52 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-09-24 14:33 - 2009-07-14 07:01 - 00001218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2015-09-24 14:33 - 2009-07-14 06:57 - 00001523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-09-24 14:33 - 2009-07-14 06:57 - 00001352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2015-09-24 14:33 - 2009-07-14 06:57 - 00001304 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2015-09-24 14:33 - 2009-07-14 06:57 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2015-09-24 14:33 - 2009-07-14 06:54 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2015-09-24 14:33 - 2009-07-14 06:49 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2015-09-24 14:33 - 2009-07-14 05:20 - 00000000 ____D C:\windows\Globalization
2015-09-24 14:23 - 2015-06-15 21:02 - 00000000 ____D C:\ProgramData\AVAST Software
2015-09-24 14:15 - 2009-07-14 06:45 - 00271080 _____ C:\windows\system32\FNTCACHE.DAT
2015-09-02 03:56 - 2015-06-25 20:37 - 00000000 ____D C:\windows\system32\MRT
2015-09-01 21:54 - 2015-06-25 20:37 - 132483416 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-09-01 21:54 - 2015-06-15 20:53 - 00000000 ____D C:\Users\Czytnia1\AppData\Roaming\SoftGrid Client
2015-09-01 21:38 - 2015-06-25 20:37 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-09-01 21:38 - 2015-06-25 20:37 - 00000000 ____D C:\ProgramData\Skype

==================== Pliki w katalogu głównym wybranych folderów =======

2015-09-24 15:24 - 2015-09-24 15:24 - 0919533 _____ () C:\ProgramData\1443099442.bdinstall.bin

Niektóre pliki w TEMP:
====================
C:\Users\Czytnia1\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\Czytnia1\AppData\Local\Temp\BSvcUpdater.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\windows\explorer.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\windows\system32\services.exe => Plik podpisany cyfrowo
C:\windows\system32\User32.dll => Plik podpisany cyfrowo
C:\windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-07-21 13:16

==================== Koniec  FRST.txt ============================