Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:11-10-2015 02 Uruchomiony przez Grzesiek (administrator) HAPEKGRZECHA (12-10-2015 17:22:03) Uruchomiony z C:\Users\Grzesiek\Downloads Załadowane profile: Grzesiek (Dostępne profile: Grzesiek) Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: "C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe" -- "%1") Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe () C:\Users\Grzesiek\AppData\Local\Crsoft\crsvc.exe () C:\Program Files (x86)\A8187454-1442618321-21E7-006D-B4B52F29A7E8\hnspDEA2.tmp (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe () C:\ProgramData\DatacardService\HWDeviceService64.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (tsvr.com) C:\Users\Grzesiek\AppData\Roaming\TSv\TSvr.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe () C:\Users\Grzesiek\AppData\Roaming\NetService\netservice.exe (PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe () C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (TODO: <公司名>) C:\Program Files (x86)\SFK\SSFK.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe () C:\Program Files (x86)\PLAY ONLINE\AssistantServices.exe (TODO: <公司名>) C:\Program Files (x86)\SFK\SSFK.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (DTools LIMITED) C:\ProgramData\1WdsManPro1\WdsManPro.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (WordWizard) C:\Program Files (x86)\WordWizard_1.10.0.24\Service\wwsvc.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe () C:\Program Files (x86)\A8187454-1442618321-21E7-006D-B4B52F29A7E8\knsz7EDE.tmpfs (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe () C:\Users\Grzesiek\AppData\Local\gmsd_pl_005010107\upgmsd_pl_005010107.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe (Spotify Ltd) C:\Users\Grzesiek\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (MyBrowser) C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe (MyBrowser) C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe () C:\Program Files (x86)\gmsd_pl_005010106\gmsd_pl_005010106.exe () C:\Program Files (x86)\gmsd_pl_005010107\gmsd_pl_005010107.exe () C:\Program Files (x86)\gmsd_pl_005010109\gmsd_pl_005010109.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (MyBrowser) C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe (MyBrowser) C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe (MyBrowser) C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation) HKLM-x32\...\Run: [tuto4pc_pl_5] => [X] HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776 2015-07-20] (AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation) HKLM-x32\...\Run: [gmsd_pl_005010091] => [X] HKLM-x32\...\Run: [gmsd_pl_005010099] => [X] HKLM-x32\...\Run: [gmsd_pl_005010106] => C:\Program Files (x86)\gmsd_pl_005010106\gmsd_pl_005010106.exe [3978384 2015-10-04] () HKLM-x32\...\Run: [gmsd_pl_005010107] => C:\Program Files (x86)\gmsd_pl_005010107\gmsd_pl_005010107.exe [3976336 2015-10-05] () HKLM-x32\...\Run: [gmsd_pl_005010109] => C:\Program Files (x86)\gmsd_pl_005010109\gmsd_pl_005010109.exe [3977872 2015-10-08] () HKLM-x32\...\RunOnce: [upgmsd_pl_005010107.exe] => C:\Users\Grzesiek\AppData\Local\gmsd_pl_005010107\upgmsd_pl_005010107.exe [3302544 2015-10-05] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\Run: [Spotify Web Helper] => C:\Users\Grzesiek\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2015-02-15] (Spotify Ltd) HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\Run: [FlashGet 3] => C:\flagh\FlashGet 3\FlashGet3.exe [3377256 2013-04-18] (Trend Media Corporation Limited) HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\Run: [GoogleChromeAutoLaunch_ACF11CF5586B43242B6CC8B92C5B5F1D] => C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe [636928 2015-08-29] (MyBrowser) HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: F - F:\AutoRun.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: G - G:\autorun.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: I - I:\win\CDSplash.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: {20f66241-00b3-11e2-99ae-74e543ae298d} - G:\AutoRun.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: {20f6625d-00b3-11e2-99ae-74e543ae298d} - G:\AutoRun.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: {20f66267-00b3-11e2-99ae-74e543ae298d} - F:\AutoRun.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: {20f662a4-00b3-11e2-99ae-74e543ae298d} - K:\AutoRun.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: {22e55a50-fb13-11e1-95f1-74e543ae298d} - G:\autorun.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: {34e5c2b6-d4d9-11e2-803a-32391bb7f253} - F:\AutoRun.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: {34e5c2c3-d4d9-11e2-803a-32391bb7f253} - F:\AutoRun.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: {8c4cf22e-f582-11e1-9640-74e543ae298d} - F:\AutoRun.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: {97bbe421-f3ef-11e1-9616-74e543ae298d} - F:\MicroLauncher.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: {97bbe42f-f3ef-11e1-9616-74e543ae298d} - F:\AutoRun.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: {97bbe43d-f3ef-11e1-9616-74e543ae298d} - G:\AutoRun.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: {d1978840-e0a9-11e2-9b16-806e6f6e6963} - F:\Autorun.exe HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\MountPoints2: {de54d811-522f-11e4-8f8e-74e543ae298d} - D:\Startme.exe HKU\S-1-5-18\...\Run: [KurupiraNet] => "C:\Program Files (x86)\Kurupira\WebFilter\kurupirawf.exe" ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-07-20] (AVAST Software) ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.) ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.) ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.) ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.) BootExecute: autocheck autochk * sdnclean64.exe GroupPolicy: Ograniczenia - Chrome <======= UWAGA CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{16E8B17C-6BEE-4243-A797-F535FC169058}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{3D90262E-7D9A-4CAD-BA03-7A3632A499F5}: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{BB7A4471-AD22-4036-AD56-058D7691193E}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.aqovd.com?oem=sunadplv3&uid=J2160051KGYZJC_HTS547550A9E&tm=1443521302 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.aqovd.com?oem=sunadplv3&uid=J2160051KGYZJC_HTS547550A9E&tm=1443521302 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.aqovd.com?oem=sunadplv3&uid=J2160051KGYZJC_HTS547550A9E&tm=1443521302 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.aqovd.com?oem=sunadplv3&uid=J2160051KGYZJC_HTS547550A9E&tm=1443521302 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-1994262508-4124847217-438547347-1001\Software\Microsoft\Internet Explorer\Main,Start Page = www.aqovd.com?oem=sunadplv3&uid=J2160051KGYZJC_HTS547550A9E&tm=1443521302 HKU\S-1-5-21-1994262508-4124847217-438547347-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.aqovd.com?oem=sunadplv3&uid=J2160051KGYZJC_HTS547550A9E&tm=1443521302 HKU\S-1-5-21-1994262508-4124847217-438547347-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://pl.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://pl.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKU\S-1-5-21-1994262508-4124847217-438547347-1001 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKU\S-1-5-21-1994262508-4124847217-438547347-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=HitachiXHTS547550A9E384_J2160051KGYZJCKGYZJCX&ts=1437864848&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1994262508-4124847217-438547347-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=HitachiXHTS547550A9E384_J2160051KGYZJCKGYZJCX&ts=1437864848&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1994262508-4124847217-438547347-1001 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=HitachiXHTS547550A9E384_J2160051KGYZJCKGYZJCX&ts=1437864848&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1994262508-4124847217-438547347-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKU\S-1-5-21-1994262508-4124847217-438547347-1001 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=HitachiXHTS547550A9E384_J2160051KGYZJCKGYZJCX&ts=1437864848&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1994262508-4124847217-438547347-1001 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=HitachiXHTS547550A9E384_J2160051KGYZJCKGYZJCX&ts=1437864848&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-1994262508-4124847217-438547347-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cornl&utm_campaign=install_ie&utm_content=ds&from=cornl&uid=HitachiXHTS547550A9E384_J2160051KGYZJCKGYZJCX&ts=1437864848&type=default&q={searchTerms} BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-07-20] (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated) BHO-x32: Web Amplified 1.0.0.7 -> {4f93c386-c677-4212-9bc8-47814de68c52} -> C:\Program Files (x86)\Web Amplified\WebAmplifiedbho.dll [2015-07-11] (Web Amplified) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-27] (Oracle Corporation) BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-01-19] (Atheros Commnucations) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-20] (AVAST Software) BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files (x86)\Free Download Manager\iefdm2.dll [2013-01-11] (FreeDownloadManager.ORG) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-27] (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Brak pliku Toolbar: HKU\S-1-5-21-1994262508-4124847217-438547347-1001 -> Brak nazwy - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Brak pliku Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Brak pliku Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Brak pliku FireFox: ======== FF ProfilePath: C:\Users\Grzesiek\AppData\Roaming\Mozilla\Firefox\Profiles\eh54ahxz.default FF NewTab: hxxp://www.istartsurf.com/newtab/?type=nt&ts=1444206053&z=63fb0728259f1eb64ace079g0z0c4m4b2q0z2g7g2g&from=face&uid=HitachiXHTS547550A9E384_J2160051KGYZJCKGYZJCX FF Homepage: hxxp://www.istartsurf.com/?type=hp&ts=1444206053&z=63fb0728259f1eb64ace079g0z0c4m4b2q0z2g7g2g&from=face&uid=HitachiXHTS547550A9E384_J2160051KGYZJCKGYZJCX FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-22] () FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/AuthorwarePlayer -> C:\Windows\system32\Macromed\AUTHORWA\np32asw.dll [Brak pliku] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-22] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1215155.dll [Brak pliku] FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-27] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-27] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-08-10] (Nero AG) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\4\NP_wtapp.dll [2014-05-10] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1994262508-4124847217-438547347-1001: SkypePlugin -> C:\Users\Grzesiek\AppData\Local\SkypePlugin\7.5.0.127\npGatewayNpapi.dll Brak pliku FF Plugin HKU\S-1-5-21-1994262508-4124847217-438547347-1001: SkypePlugin64 -> C:\Users\Grzesiek\AppData\Local\SkypePlugin\7.5.0.127\npGatewayNpapi-x64.dll Brak pliku FF Plugin HKU\S-1-5-21-1994262508-4124847217-438547347-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll Brak pliku FF SearchPlugin: C:\Users\Grzesiek\AppData\Roaming\Mozilla\Firefox\Profiles\eh54ahxz.default\searchplugins\istartsurf.xml [2015-09-29] FF SearchPlugin: C:\Users\Grzesiek\AppData\Roaming\Mozilla\Firefox\Profiles\eh54ahxz.default\searchplugins\mystartsearch.xml [2015-09-19] FF SearchPlugin: C:\Users\Grzesiek\AppData\Roaming\Mozilla\Firefox\Profiles\eh54ahxz.default\searchplugins\webssearches.xml [2015-07-26] FF SearchPlugin: C:\Users\Grzesiek\AppData\Roaming\Mozilla\Firefox\Profiles\eh54ahxz.default\searchplugins\yahoo-avast.xml [2014-10-10] FF Extension: Default SearchProtected - C:\Users\Grzesiek\AppData\Roaming\Mozilla\Firefox\Profiles\eh54ahxz.default\Extensions\defsearchp@gmail.com [2015-09-29] FF Extension: deskCut - C:\Users\Grzesiek\AppData\Roaming\Mozilla\Firefox\Profiles\eh54ahxz.default\Extensions\deskCutv2@gmail.com [2015-09-19] FF Extension: Web Amplified 1.0.1 - C:\Users\Grzesiek\AppData\Roaming\Mozilla\Firefox\Profiles\eh54ahxz.default\Extensions\{6939a927-ce62-4a88-a27a-fd77343fd696}.xpi [2015-10-09] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-08-31] FF HKLM-x32\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\Grzesiek\AppData\Roaming\Mozilla\Firefox\Profiles\eh54ahxz.default\extensions\defsearchp@gmail.com FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Grzesiek\AppData\Roaming\Mozilla\Firefox\Profiles\eh54ahxz.default\extensions\deskCutv2@gmail.com StartMenuInternet: FIREFOX.EXE - <$PROGRAMFILES>\Mozilla Firefox\firefox.exe FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\all-gemius.js [2013-08-19] Chrome: ======= CHR Profile: C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Brak nazwy) - C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2014-10-10] CHR Extension: (Web Amplified) - C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfjajijlankoklkjhenmkbbinfappgcf [2015-10-09] CHR Profile: C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Profile 1 CHR Extension: (Brak nazwy) - C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-20] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-04] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-20] StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.istartsurf.com/?type=sc&ts=1444206053&z=63fb0728259f1eb64ace079g0z0c4m4b2q0z2g7g2g&from=face&uid=HitachiXHTS547550A9E384_J2160051KGYZJCKGYZJCX Opera: ======= OPR Extension: (Web Amplified) - C:\Users\Grzesiek\AppData\Roaming\Opera Software\Opera Stable\Extensions\mfjajijlankoklkjhenmkbbinfappgcf [2015-10-09] StartMenuInternet: (HKLM) Opera - <$PROGRAMFILES>\Opera\Opera.exe ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [106144 2012-01-19] (Atheros Commnucations) [Brak podpisu cyfrowego] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-07-20] (AVAST Software) R2 Crashhd; C:\Users\Grzesiek\AppData\Local\Crsoft\crsvc.exe [185800 2015-09-25] () S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent) R2 gyvixodu; C:\Program Files (x86)\A8187454-1442618321-21E7-006D-B4B52F29A7E8\hnspDEA2.tmp [203776 2015-09-19] () [Brak podpisu cyfrowego] R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] () R2 IhPul; C:\Users\Grzesiek\AppData\Roaming\TSv\TSvr.exe [396944 2015-09-21] (tsvr.com) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-08] (Intel Corporation) R2 NetTcpHandler; C:\Users\Grzesiek\AppData\Roaming\NetService\netservice.exe [173088 2015-07-09] () R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1134584 2012-02-19] (PDF Complete Inc) S2 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2012-09-17] () R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2012-12-20] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) R2 SSFK; C:\Program Files (x86)\SFK\SSFK.exe [169632 2015-10-10] (TODO: <公司名>) R2 UI Assistant Service; C:\Program Files (x86)\PLAY ONLINE\AssistantServices.exe [260976 2011-05-31] () S2 Update Web Amplified; C:\Program Files (x86)\Web Amplified\updateWebAmplified.exe [461048 2015-10-11] () S2 Util Web Amplified; C:\Program Files (x86)\Web Amplified\bin\utilWebAmplified.exe [461048 2015-10-11] () R2 WdsManPro; C:\ProgramData\1WdsManPro1\WdsManPro.exe [442504 2015-10-10] (DTools LIMITED) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 wwsvc_1.10.0.24; C:\Program Files (x86)\WordWizard_1.10.0.24\Service\wwsvc.exe [301656 2015-09-02] (WordWizard) R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2012-01-19] (Atheros) [Brak podpisu cyfrowego] S2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [X] R2 zicumiji; C:\Program Files (x86)\A8187454-1442618321-21E7-006D-B4B52F29A7E8\knsz7EDE.tmpfs [X] ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2014-03-28] (Google Inc) S3 AndnetBus; C:\Windows\System32\DRIVERS\lgandnetbus64.sys [19456 2014-05-08] (LG Electronics Inc.) S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2014-03-28] (LG Electronics Inc.) S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2014-03-28] (LG Electronics Inc.) S3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2012-05-17] (AnvSoft Inc.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-07-20] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-07-20] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-07-20] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-07-20] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048856 2015-07-20] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-07-20] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150160 2015-07-20] (AVAST Software) S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [44640 2014-07-01] (The OpenVPN Project) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-07-20] (AVAST Software) R3 BthMtpEnum; C:\Windows\System32\DRIVERS\BthMtpEnum.sys [64512 2009-07-14] (Microsoft Corporation) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) S3 ewusbmbb; C:\Windows\System32\DRIVERS\ewusbwwan.sys [439808 2012-09-17] (Huawei Technologies Co., Ltd.) [Brak podpisu cyfrowego] S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [36128 2012-01-19] (Atheros) S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC) S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC) S3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.) R3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [21264 2012-02-24] (Synaptics Incorporated) S3 sscdserd; C:\Windows\System32\DRIVERS\sscdserd.sys [141384 2012-06-27] (MCCI Corporation) S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [203104 2012-07-31] (DEVGURU Co., LTD.(www.devguru.co.kr)) S3 usbUDisc; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [17280 2012-04-13] (Scott) R1 wwfd_vt_1_10_0_24; C:\Windows\System32\drivers\wwfd_vt_1_10_0_24.sys [61312 2015-09-02] (WordWizard) R1 {6939a927-ce62-4a88-a27a-fd77343fd696}Gw64; C:\Windows\System32\drivers\{6939a927-ce62-4a88-a27a-fd77343fd696}Gw64.sys [48784 2015-10-08] (StdLib) R1 {b666938f-73a7-45e6-be3c-578b46fc5b7e}Gw64; C:\Windows\System32\drivers\{b666938f-73a7-45e6-be3c-578b46fc5b7e}Gw64.sys [48784 2015-10-09] (StdLib) S3 clwvd; system32\DRIVERS\clwvd.sys [X] S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X] S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X] S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X] S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X] S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X] S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-10-12 17:22 - 2015-10-12 17:25 - 00032210 _____ C:\Users\Grzesiek\Downloads\FRST.txt 2015-10-12 17:14 - 2015-10-12 17:14 - 00619688 _____ (Duplex Secure Ltd) C:\Users\Grzesiek\Downloads\SPTDinst-v187-x64.exe 2015-10-12 17:02 - 2015-10-12 17:22 - 00000000 ____D C:\FRST 2015-10-12 16:59 - 2015-10-12 17:00 - 02195968 _____ (Farbar) C:\Users\Grzesiek\Downloads\FRST64.exe 2015-10-12 16:56 - 2015-10-12 16:56 - 00380416 _____ C:\Users\Grzesiek\Downloads\7bmxbtnq.exe 2015-10-12 16:54 - 2015-10-12 16:55 - 01699840 _____ (Farbar) C:\Users\Grzesiek\Downloads\FRST (1).exe 2015-10-12 16:41 - 2015-10-12 16:41 - 00602112 _____ (OldTimer Tools) C:\Users\Grzesiek\Downloads\OTL.exe 2015-10-11 21:42 - 2015-10-12 16:50 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\VirtualStore 2015-10-11 21:42 - 2015-10-11 21:42 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\gmsd_pl_005010106 2015-10-10 20:29 - 2015-10-10 20:29 - 01699328 _____ (Farbar) C:\Users\Grzesiek\Downloads\FRST.exe 2015-10-10 10:19 - 2015-10-10 10:20 - 00000000 ____D C:\ProgramData\1WdsManPro1 2015-10-10 10:18 - 2015-10-10 10:18 - 00004180 _____ C:\Windows\System32\Tasks\WordWizard Auto Updater 1.10.0.24 Pending Update 2015-10-10 10:18 - 2015-10-10 10:18 - 00004170 _____ C:\Windows\System32\Tasks\WordWizard Auto Updater 1.10.0.24 Core 2015-10-10 10:18 - 2015-10-10 10:18 - 00000000 ____D C:\Program Files (x86)\WordWizard_1.10.0.24 2015-10-10 09:01 - 2015-10-10 09:02 - 00000000 ____D C:\ProgramData\lWdsManProl 2015-10-10 09:01 - 2015-10-10 09:01 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\TSv 2015-10-10 00:09 - 2015-10-09 14:38 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{b666938f-73a7-45e6-be3c-578b46fc5b7e}Gw64.sys 2015-10-09 19:26 - 2015-10-09 19:27 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\Hewlett-Packard 2015-10-09 10:21 - 2015-10-08 18:50 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{6939a927-ce62-4a88-a27a-fd77343fd696}Gw64.sys 2015-10-09 10:19 - 2015-10-11 21:38 - 00000000 ____D C:\Program Files (x86)\Web Amplified 2015-10-09 10:19 - 2015-10-10 10:20 - 00000000 ____D C:\Program Files (x86)\gmsd_pl_005010109 2015-10-09 10:19 - 2015-10-09 10:19 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\gmsd_pl_005010109 2015-10-09 10:18 - 2015-10-10 09:01 - 00000000 ____D C:\ProgramData\5WdsManPro5 2015-10-09 01:42 - 2015-10-09 01:42 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\GWX 2015-10-09 01:37 - 2015-10-09 01:37 - 00111336 _____ C:\Users\Grzesiek\AppData\Local\GDIPFONTCACHEV1.DAT 2015-10-08 19:36 - 2015-10-08 19:36 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\Apple 2015-10-07 11:23 - 2015-10-07 11:24 - 00000000 ____D C:\Users\Grzesiek\Desktop\atomapa nowa 2015-10-07 11:19 - 2015-10-07 11:19 - 00000000 ____D C:\Users\Grzesiek\Desktop\automapa stara 2015-10-07 11:13 - 2015-10-07 11:15 - 323953527 _____ C:\Users\Grzesiek\Downloads\AutoMapa PL 6.18 1506 FINAŁ Gotowiec WinCE.rar 2015-10-07 10:53 - 2015-10-07 10:54 - 00002419 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk 2015-10-07 10:21 - 2015-10-10 10:19 - 00000592 _____ C:\task.vbs 2015-10-07 10:21 - 2015-10-07 10:22 - 00000000 ____D C:\ProgramData\7WdsManPro7 2015-10-07 10:18 - 2015-10-07 10:18 - 00004318 _____ C:\Windows\System32\Tasks\FF305F69-D19D-4D18-A3A7-BF797FC7CDB 2015-10-07 10:18 - 2015-10-07 10:18 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\FF305F69-D19D-4D18-A3A7-BF797FC7CDB 2015-10-06 09:55 - 2015-10-06 09:55 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\MyBrowser 2015-10-06 09:23 - 2015-10-06 09:24 - 00000000 ____D C:\ProgramData\3WdsManPro3 2015-10-06 09:23 - 2015-10-06 09:23 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\mystartsearch 2015-10-06 09:22 - 2015-10-12 17:22 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\gmsd_pl_005010107 2015-10-06 09:22 - 2015-10-07 12:48 - 00002306 _____ C:\Users\Public\Desktop\MyBrowser.lnk 2015-10-06 09:22 - 2015-10-07 10:23 - 00000000 ____D C:\Program Files (x86)\gmsd_pl_005010107 2015-10-06 09:22 - 2015-10-06 09:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyBrowser 2015-10-06 09:21 - 2015-10-06 09:21 - 00000000 ____D C:\Program Files (x86)\MyBrowser 2015-10-06 09:18 - 2015-10-06 09:18 - 00004322 _____ C:\Windows\System32\Tasks\E68C052A-B27D-42D2-8242-C43157D2EC5D 2015-10-05 09:24 - 2015-10-09 09:25 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP3.job 2015-10-05 09:24 - 2015-10-06 09:25 - 00002832 _____ C:\Windows\System32\Tasks\APSnotifierPP3 2015-10-05 09:24 - 2015-10-06 09:25 - 00002832 _____ C:\Windows\System32\Tasks\APSnotifierPP2 2015-10-05 09:24 - 2015-10-06 09:25 - 00001005 _____ C:\Users\Grzesiek\Desktop\AnyProtect.lnk 2015-10-05 09:24 - 2015-10-05 09:24 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup 2015-10-05 09:23 - 2015-10-05 09:24 - 00000000 ____D C:\Program Files (x86)\AnyProtectEx 2015-10-05 09:21 - 2015-10-05 09:21 - 00000000 ____D C:\Program Files (x86)\gmsd_pl_005010106 2015-10-05 00:09 - 2015-10-05 00:11 - 195179541 _____ C:\Users\Grzesiek\Downloads\Chappie.2015.PL.720p.BluRay.x264.AC3-K12 (1).mkv.opdownload 2015-10-04 23:31 - 2015-10-04 23:32 - 01670656 _____ C:\Users\Grzesiek\Downloads\AdwCleaner.exe 2015-10-04 23:19 - 2015-10-05 00:02 - 2147483648 _____ C:\Users\Grzesiek\Downloads\Furious.Seven.2015.PL.EXTENDED.720p.BluRay.x264.AC3-K12.part1.rar 2015-10-04 23:19 - 2015-10-05 00:00 - 2147483648 _____ C:\Users\Grzesiek\Downloads\Furious.Seven.2015.PL.EXTENDED.720p.BluRay.x264.AC3-K12.part2.rar 2015-10-04 23:19 - 2015-10-04 23:59 - 1909757649 _____ C:\Users\Grzesiek\Downloads\Furious.Seven.2015.PL.EXTENDED.720p.BluRay.x264.AC3-K12.part3.rar 2015-10-04 22:33 - 2015-10-04 22:33 - 00000769 _____ C:\Users\Grzesiek\Desktop\FlashGet3.lnk 2015-10-04 22:33 - 2015-10-04 22:33 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FlashGet3.7 2015-10-04 22:33 - 2015-10-04 22:33 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\FlashgetSetup 2015-10-04 22:33 - 2015-10-04 22:33 - 00000000 ____D C:\flagh 2015-10-04 22:28 - 2015-10-06 09:47 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP2.job 2015-10-04 22:28 - 2015-10-06 09:45 - 00000378 _____ C:\Windows\Tasks\APSnotifierPP1.job 2015-10-04 22:28 - 2015-10-06 09:25 - 00002834 _____ C:\Windows\System32\Tasks\APSnotifierPP1 2015-10-04 22:27 - 2015-10-04 22:48 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\systweak 2015-10-04 22:27 - 2015-07-02 14:14 - 00020248 _____ () C:\Windows\system32\roboot64.exe 2015-10-04 10:07 - 2015-10-04 10:50 - 00000000 ____D C:\Users\Grzesiek\Downloads\Scooby-Doo i Brygada Detektywów 30 - Sieć Splatacza Snów 2015-10-04 10:07 - 2015-10-04 10:46 - 00000000 ____D C:\Users\Grzesiek\Downloads\Scooby-Doo i Brygada Detektywów 32 - Sztuka Ciemności 2015-10-04 10:07 - 2015-10-04 10:46 - 00000000 ____D C:\Users\Grzesiek\Downloads\Scooby-Doo i Brygada Detektywów 29 - Płaczący Klaun część 2 - Łzy Zagłady 2015-10-04 10:07 - 2015-10-04 10:39 - 00000000 ____D C:\Users\Grzesiek\Downloads\Scooby-Doo i Brygada Detektywów 31 - Hodag przestrachu 2015-10-03 22:40 - 2015-10-03 22:40 - 00168124 _____ C:\Users\Grzesiek\Desktop\upo 2015.rar 2015-10-03 22:12 - 2015-10-04 22:33 - 00000000 ____D C:\Users\Grzesiek\Downloads\Jurassic World 2015 PL 720p BluRay x264 DTS-KiT 2015-09-30 18:24 - 2015-09-30 18:24 - 01837056 _____ C:\Users\Grzesiek\Desktop\Gleby w Polsce.ppt 2015-09-30 18:20 - 2015-09-30 18:20 - 02125824 _____ C:\Users\Grzesiek\Downloads\fizyczne.ppt 2015-09-30 18:15 - 2015-09-30 18:15 - 05099520 _____ C:\Users\Grzesiek\Downloads\chemiczne.ppt 2015-09-30 16:38 - 2015-09-30 18:24 - 00882803 _____ C:\Users\Grzesiek\Desktop\Gleby w Polsce.pptx 2015-09-30 14:25 - 2015-09-30 14:25 - 00221338 _____ C:\Users\Grzesiek\Downloads\DRP-Full.torrent 2015-09-30 14:18 - 2015-10-01 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-09-30 14:16 - 2015-09-30 14:16 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\Crsoft 2015-09-30 14:15 - 2015-10-02 09:26 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-09-30 14:15 - 2015-10-02 09:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2015-09-29 12:08 - 2015-09-29 12:08 - 00000266 __RSH C:\ProgramData\ntuser.pol 2015-09-29 12:08 - 2015-09-29 12:08 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\shortCutStore 2015-09-29 11:53 - 2015-10-10 10:19 - 00000000 ____D C:\Program Files (x86)\SFK 2015-09-29 11:53 - 2015-09-29 11:53 - 00000000 __SHD C:\Users\Grzesiek\AppData\Roaming\AnyProtectEx 2015-09-29 11:52 - 2015-09-29 11:54 - 00000000 ____D C:\ProgramData\XWdsManProX 2015-09-29 11:52 - 2015-09-29 11:52 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\istartsurf 2015-09-29 11:51 - 2015-10-10 10:19 - 00001861 _____ C:\Users\Grzesiek\Desktop\jogotempo.lnk 2015-09-29 11:51 - 2015-10-10 10:19 - 00000000 ____D C:\Program Files (x86)\jogotempo 2015-09-29 11:51 - 2015-09-30 14:16 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\RunDir 2015-09-29 11:51 - 2015-09-29 11:51 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\NetService 2015-09-29 11:51 - 2015-09-29 11:51 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\jogotempo 2015-09-28 17:21 - 2015-09-28 23:14 - 00000000 ____D C:\Users\Grzesiek\Downloads\Piecdziesiat Twarzy Greya 2015 PL UNRATED 720p BluRay DTS x264-LLO 2015-09-20 23:32 - 2015-09-21 06:04 - 00000000 ____D C:\Users\Grzesiek\Downloads\Ultron 2015 PLDUB 720p BluRay x264-JUST4 2015-09-19 01:47 - 2015-09-19 01:47 - 00000000 ___HD C:\$Windows.~BT 2015-09-19 01:46 - 2015-09-19 01:46 - 00000000 ____D C:\Program Files (x86)\predm 2015-09-19 01:43 - 2015-09-19 01:43 - 00001100 _____ C:\Users\Grzesiek\Desktop\Continue Live Installation.lnk 2015-09-19 01:33 - 2015-10-10 10:19 - 00000102 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat 2015-09-19 01:33 - 2015-09-19 01:34 - 00000000 ____D C:\ProgramData\gWdsManProg 2015-09-19 01:24 - 2015-09-19 01:24 - 00000000 ____D C:\results 2015-09-19 01:23 - 2015-09-19 01:23 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\SoftOrbits 2015-09-19 01:19 - 2013-01-28 19:53 - 00000851 _____ C:\Windows\system32\Drivers\etc\hp.bak 2015-09-19 01:18 - 2015-09-20 07:32 - 00000000 ____D C:\Program Files (x86)\A8187454-1442618321-21E7-006D-B4B52F29A7E8 2015-09-19 01:18 - 2015-09-19 01:48 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\VOPackage 2015-09-19 01:18 - 2015-09-19 01:18 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage 2015-09-19 01:16 - 2015-09-19 01:16 - 00720440 _____ C:\Users\Grzesiek\Desktop\fb b.exe 2015-09-19 01:02 - 2015-09-19 01:02 - 01757564 _____ C:\Users\Grzesiek\Downloads\E L James - Ciemniejsza strona Greya(1).epub 2015-09-19 00:39 - 2015-09-19 01:08 - 00000000 ____D C:\Users\Grzesiek\Documents\Biblioteka calibre 2015-09-19 00:38 - 2014-11-17 13:34 - 00383982 _____ C:\Users\Grzesiek\Desktop\E. L. James - Ciemniejsza strona Greya.EPUB 2015-09-19 00:37 - 2015-09-19 00:37 - 03345802 _____ C:\Users\Grzesiek\Downloads\E. L. James - Ciemniejsza strona Greya.rar 2015-09-18 19:58 - 2015-09-18 19:58 - 00000051 _____ C:\Windows\SysWOW64\lgAxconfig.ini 2015-09-18 17:56 - 2015-09-18 17:56 - 00758732 _____ C:\Users\Grzesiek\Desktop\tel.mx 2015-09-18 17:50 - 2015-09-18 17:51 - 00000000 ____D C:\Users\Grzesiek\Desktop\wywołać 2015-09-18 17:44 - 2015-09-18 17:44 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_lgandnetadb_01005.Wdf 2015-09-18 17:41 - 2015-09-18 17:42 - 00000000 ____D C:\Users\Grzesiek\Desktop\LG Flash Tool 2014 2015-09-18 17:41 - 2014-05-08 18:52 - 00019456 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandnetbus64.sys 2015-09-18 17:41 - 2014-03-28 15:41 - 00031744 _____ (Google Inc) C:\Windows\system32\Drivers\lgandnetadb.sys 2015-09-18 17:41 - 2014-03-28 15:25 - 00036352 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandnetmodem64.sys 2015-09-18 17:41 - 2014-03-28 15:25 - 00029184 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandnetdiag64.sys 2015-09-18 17:41 - 2011-07-18 06:03 - 01919968 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01005.dll 2015-09-17 16:33 - 2015-09-18 19:58 - 00000000 ____D C:\LGMobileUpgrade 2015-09-17 16:17 - 2015-09-18 19:58 - 00000000 ____D C:\ProgramData\LGMOBILEAX 2015-09-17 16:15 - 2015-09-17 16:15 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\LG PC Suite.Lnk 2015-09-17 15:51 - 2015-09-17 15:52 - 05443202 _____ (Igor Pavlov) C:\Users\Grzesiek\Downloads\LG One Click Root.exe 2015-09-17 15:48 - 2015-09-17 15:49 - 11445968 _____ (LG Electronics) C:\Users\Grzesiek\Downloads\Sterowniki.exe 2015-09-17 15:48 - 2015-09-17 15:49 - 03279688 _____ C:\Users\Grzesiek\Downloads\LG Flash Tool 2014.zip 2015-09-13 03:35 - 2015-09-13 03:35 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\Skype 2015-09-13 03:03 - 2015-09-13 03:03 - 00000000 ____D C:\program1 2015-09-13 02:58 - 2015-09-13 02:58 - 00684657 _____ C:\Users\Grzesiek\Downloads\InstAviScreenC(dobreprogramy.pl).zip 2015-09-13 01:08 - 2015-09-13 01:09 - 62498298 _____ C:\Users\Grzesiek\Documents\clip0001.avi 2015-09-13 01:06 - 2015-09-13 01:07 - 02778464 _____ C:\Users\Grzesiek\Downloads\HC2Setup.exe 2015-09-13 00:44 - 2015-09-13 00:44 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf 2015-09-13 00:08 - 2015-09-13 00:08 - 00003068 _____ C:\Windows\System32\Tasks\{A10308A3-C433-45D5-A393-36BFBEF091BE} 2015-09-13 00:08 - 2015-09-13 00:08 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-09-13 00:08 - 2015-09-13 00:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-10-12 17:22 - 2012-08-30 18:09 - 01459558 _____ C:\Windows\WindowsUpdate.log 2015-10-12 17:21 - 2012-09-01 07:39 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\BITS 2015-10-12 17:19 - 2013-08-24 16:15 - 03862528 ___SH C:\Users\Grzesiek\Desktop\Thumbs.db 2015-10-12 17:18 - 2012-03-19 16:25 - 00000000 ____D C:\ProgramData\PDFC 2015-10-12 17:16 - 2010-11-21 05:47 - 00913460 _____ C:\Windows\PFRO.log 2015-10-12 17:16 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-10-12 17:16 - 2009-07-14 06:51 - 00220009 _____ C:\Windows\setupact.log 2015-10-12 17:04 - 2009-07-14 06:45 - 00031472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-10-12 17:04 - 2009-07-14 06:45 - 00031472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-10-12 17:01 - 2014-10-10 11:56 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-10-12 16:38 - 2012-03-19 16:10 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-10-11 21:39 - 2015-08-17 22:24 - 00000344 _____ C:\Windows\Tasks\HPCeeScheduleForGrzesiek.job 2015-10-11 19:50 - 2009-07-14 04:34 - 00000580 _____ C:\Windows\win.ini 2015-10-11 19:49 - 2012-03-20 00:26 - 14356996 _____ C:\Windows\system32\perfh015.dat 2015-10-11 19:49 - 2012-03-20 00:26 - 05152764 _____ C:\Windows\system32\perfc015.dat 2015-10-11 19:49 - 2009-07-14 07:13 - 00006770 _____ C:\Windows\system32\PerfStringBackup.INI 2015-10-09 23:00 - 2012-08-30 20:09 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\Google 2015-10-09 19:27 - 2015-08-17 22:24 - 00003204 _____ C:\Windows\System32\Tasks\HPCeeScheduleForGrzesiek 2015-10-09 19:27 - 2012-08-31 20:37 - 00000166 _____ C:\Windows\SysWOW64\DOErrors.log 2015-10-09 04:53 - 2015-04-05 10:02 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2015-10-09 04:53 - 2015-04-05 10:02 - 00000000 ___SD C:\Windows\system32\GWX 2015-10-07 10:54 - 2014-07-13 17:46 - 00000000 ____D C:\Windows\WindowsMobile 2015-10-04 23:04 - 2013-01-23 20:16 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\Free Download Manager 2015-10-04 22:55 - 2015-02-10 11:24 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\FlashGet 2015-09-30 16:44 - 2014-11-11 11:08 - 00003874 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1415696899 2015-09-30 16:44 - 2014-11-11 11:08 - 00000000 ____D C:\Program Files (x86)\Opera 2015-09-30 14:12 - 2012-03-19 16:25 - 00000000 ____D C:\Windows\SysWOW64\Adobe 2015-09-30 14:12 - 2012-03-19 16:10 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2015-09-29 12:08 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy 2015-09-29 12:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy 2015-09-27 22:20 - 2012-08-31 06:56 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2015-09-22 10:47 - 2015-07-03 19:20 - 00000000 ____D C:\Users\Grzesiek\Desktop\Nowy folder (9) 2015-09-22 10:41 - 2012-03-19 16:10 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-09-22 10:41 - 2012-03-19 16:10 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-09-22 10:41 - 2012-03-19 16:10 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-09-22 10:08 - 2014-01-06 10:44 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\vlc 2015-09-19 01:47 - 2007-01-02 03:25 - 00000000 ____D C:\Windows\Panther 2015-09-18 23:11 - 2014-10-10 11:56 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-09-18 17:42 - 2015-04-18 08:55 - 00000000 ____D C:\Program Files (x86)\LG Electronics 2015-09-18 17:41 - 2012-03-19 16:35 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2015-09-17 16:15 - 2015-04-18 09:01 - 00001066 _____ C:\Users\Public\Desktop\LG PC Suite.Lnk 2015-09-17 16:15 - 2015-04-18 08:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG PC Suite 2015-09-15 22:56 - 2013-08-23 18:16 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-09-15 22:56 - 2013-08-23 18:16 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-09-13 03:32 - 2015-01-26 11:45 - 00000000 ____D C:\Users\Grzesiek\Desktop\Dane z pendrive i tabletu 2015-09-13 00:44 - 2013-08-07 01:06 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\MyPhoneExplorer 2015-09-13 00:08 - 2012-03-19 16:26 - 00000000 ____D C:\ProgramData\Skype ==================== Pliki w katalogu głównym wybranych folderów ======= 2014-11-15 06:11 - 2014-11-15 06:11 - 6000640 _____ () C:\Program Files (x86)\GUT1DEC.tmp 2013-02-14 09:46 - 2013-02-14 09:47 - 0011264 ___SH () C:\Users\Grzesiek\AppData\Roaming\Thumbs.db 2015-09-19 01:33 - 2015-10-10 10:19 - 0000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat Pliki do przeniesienia lub usunięcia: ==================== C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat Niektóre pliki w TEMP: ==================== C:\Users\Grzesiek\AppData\Local\Temp\8867.exe ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-09-28 19:52 ==================== Koniec FRST.txt ============================