Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:12-10-2015 Uruchomiony przez Grzesiek (administrator) HAPEKGRZECHA (13-10-2015 14:42:53) Uruchomiony z C:\Users\Grzesiek\Downloads Załadowane profile: Grzesiek (Dostępne profile: Grzesiek) Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe () C:\ProgramData\DatacardService\HWDeviceService64.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe () C:\Program Files (x86)\PLAY ONLINE\AssistantServices.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Windows\System32\alg.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe (Spotify Ltd) C:\Users\Grzesiek\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Trend Media Corporation Limited) C:\flagh\FlashGet 3\FlashGet3.exe (Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776 2015-07-20] (AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\Run: [Spotify Web Helper] => C:\Users\Grzesiek\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2015-02-15] (Spotify Ltd) HKU\S-1-5-21-1994262508-4124847217-438547347-1001\...\Run: [FlashGet 3] => C:\flagh\FlashGet 3\FlashGet3.exe [3377256 2013-04-18] (Trend Media Corporation Limited) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-07-20] (AVAST Software) ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.) ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.) ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.) ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{16E8B17C-6BEE-4243-A797-F535FC169058}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{3D90262E-7D9A-4CAD-BA03-7A3632A499F5}: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{BB7A4471-AD22-4036-AD56-058D7691193E}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://pl.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://pl.wikipedia.org/wiki/Special:Search?search={searchTerms} BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-07-20] (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-27] (Oracle Corporation) BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-01-19] (Atheros Commnucations) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-20] (AVAST Software) BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files (x86)\Free Download Manager\iefdm2.dll [2013-01-11] (FreeDownloadManager.ORG) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-27] (Oracle Corporation) FireFox: ======== FF ProfilePath: C:\Users\Grzesiek\AppData\Roaming\Mozilla\Firefox\Profiles\zslidywc.default-1444731487635 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-22] () FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-22] () FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-27] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-27] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-08-10] (Nero AG) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\4\NP_wtapp.dll [2014-05-10] () FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-08-31] Chrome: ======= CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\PepperFlash\pepflashplayer.dll () CHR Profile: C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Profile 1 CHR Extension: (Prezentacje Google) - C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-10-13] CHR Extension: (Dokumenty Google) - C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-13] CHR Extension: (Dysk Google) - C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-13] CHR Extension: (YouTube) - C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-13] CHR Extension: (Google Search) - C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-13] CHR Extension: (Arkusze Google) - C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-10-13] CHR Extension: (Dokumenty Google offline) - C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-10-13] CHR Extension: (Avast Online Security) - C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-10-13] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-13] CHR Extension: (Gmail) - C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-13] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-20] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [106144 2012-01-19] (Atheros Commnucations) [Brak podpisu cyfrowego] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-07-20] (AVAST Software) S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent) R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-08] (Intel Corporation) R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1134584 2012-02-19] (PDF Complete Inc) S4 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2012-09-17] () R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2012-12-20] () R2 UI Assistant Service; C:\Program Files (x86)\PLAY ONLINE\AssistantServices.exe [260976 2011-05-31] () R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2012-01-19] (Atheros) [Brak podpisu cyfrowego] ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2014-03-28] (Google Inc) S3 AndnetBus; C:\Windows\System32\DRIVERS\lgandnetbus64.sys [19456 2014-05-08] (LG Electronics Inc.) S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2014-03-28] (LG Electronics Inc.) S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2014-03-28] (LG Electronics Inc.) S3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2012-05-17] (AnvSoft Inc.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-07-20] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-07-20] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-07-20] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-07-20] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048856 2015-07-20] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-07-20] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150160 2015-07-20] (AVAST Software) S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [44640 2014-07-01] (The OpenVPN Project) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-07-20] (AVAST Software) R3 BthMtpEnum; C:\Windows\System32\DRIVERS\BthMtpEnum.sys [64512 2009-07-14] (Microsoft Corporation) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) S3 ewusbmbb; C:\Windows\System32\DRIVERS\ewusbwwan.sys [439808 2012-09-17] (Huawei Technologies Co., Ltd.) [Brak podpisu cyfrowego] S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [36128 2012-01-19] (Atheros) S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC) S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC) S3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.) R3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [21264 2012-02-24] (Synaptics Incorporated) S3 sscdserd; C:\Windows\System32\DRIVERS\sscdserd.sys [141384 2012-06-27] (MCCI Corporation) S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [203104 2012-07-31] (DEVGURU Co., LTD.(www.devguru.co.kr)) S3 usbUDisc; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [17280 2012-04-13] (Scott) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-10-13 14:42 - 2015-10-13 14:43 - 00017707 _____ C:\Users\Grzesiek\Downloads\FRST.txt 2015-10-13 12:26 - 2015-10-13 12:26 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\Opera Software 2015-10-13 12:22 - 2015-10-13 13:03 - 00002314 _____ C:\Users\Grzesiek\Desktop\Google Chrome.lnk 2015-10-13 12:18 - 2015-10-13 12:18 - 00000000 ____D C:\Users\Grzesiek\Desktop\Stare dane programu Firefox 2015-10-13 12:18 - 2015-10-13 12:18 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\Macromedia 2015-10-13 12:14 - 2015-10-13 12:15 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\Mozilla 2015-10-13 11:54 - 2015-10-13 11:54 - 00111336 _____ C:\Users\Grzesiek\AppData\Local\GDIPFONTCACHEV1.DAT 2015-10-13 11:29 - 2015-10-13 11:29 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\VirtualStore 2015-10-13 11:13 - 2015-10-13 11:13 - 00001641 _____ C:\Users\Grzesiek\Desktop\instrukjca.txt 2015-10-13 11:13 - 2015-10-13 11:13 - 00000000 ____D C:\Users\Grzesiek\Downloads\FRST-OlderVersion 2015-10-13 09:57 - 2015-10-13 11:14 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\Google 2015-10-12 21:19 - 2015-10-12 21:19 - 00000000 ____D C:\Users\Grzesiek\AppData\Local\GWX 2015-10-12 21:17 - 2015-10-12 21:17 - 00001289 _____ C:\Users\Grzesiek\Desktop\DSCF4175.JPG — skrót.lnk 2015-10-12 21:17 - 2015-10-12 21:17 - 00000859 _____ C:\Users\Grzesiek\Desktop\automapa stara — skrót.lnk 2015-10-12 20:50 - 2015-10-12 21:27 - 00000002 _____ C:\Users\Grzesiek\Desktop\Nowy dokument tekstowy.txt 2015-10-12 20:50 - 2015-10-12 20:50 - 00442416 _____ C:\Users\Grzesiek\Desktop\GMER.txt 2015-10-12 17:02 - 2015-10-13 14:43 - 00000000 ____D C:\FRST 2015-10-12 16:59 - 2015-10-13 11:13 - 02196480 _____ (Farbar) C:\Users\Grzesiek\Downloads\FRST64.exe 2015-10-12 16:56 - 2015-10-12 16:56 - 00380416 _____ C:\Users\Grzesiek\Downloads\7bmxbtnq.exe 2015-10-07 11:23 - 2015-10-07 11:24 - 00000000 ____D C:\Users\Grzesiek\Desktop\atomapa nowa 2015-10-07 11:19 - 2015-10-07 11:19 - 00000000 ____D C:\Users\Grzesiek\Desktop\automapa stara 2015-10-07 11:13 - 2015-10-07 11:15 - 323953527 _____ C:\Users\Grzesiek\Downloads\AutoMapa PL 6.18 1506 FINAŁ Gotowiec WinCE.rar 2015-10-07 10:53 - 2015-10-07 10:54 - 00002419 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk 2015-10-04 23:31 - 2015-10-04 23:32 - 01670656 _____ C:\Users\Grzesiek\Downloads\AdwCleaner.exe 2015-10-04 23:19 - 2015-10-05 00:02 - 2147483648 _____ C:\Users\Grzesiek\Downloads\Furious.Seven.2015.PL.EXTENDED.720p.BluRay.x264.AC3-K12.part1.rar 2015-10-04 23:19 - 2015-10-05 00:00 - 2147483648 _____ C:\Users\Grzesiek\Downloads\Furious.Seven.2015.PL.EXTENDED.720p.BluRay.x264.AC3-K12.part2.rar 2015-10-04 23:19 - 2015-10-04 23:59 - 1909757649 _____ C:\Users\Grzesiek\Downloads\Furious.Seven.2015.PL.EXTENDED.720p.BluRay.x264.AC3-K12.part3.rar 2015-10-04 22:33 - 2015-10-04 22:33 - 00000769 _____ C:\Users\Grzesiek\Desktop\FlashGet3.lnk 2015-10-04 22:33 - 2015-10-04 22:33 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FlashGet3.7 2015-10-04 22:33 - 2015-10-04 22:33 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\FlashgetSetup 2015-10-04 22:33 - 2015-10-04 22:33 - 00000000 ____D C:\flagh 2015-10-04 10:07 - 2015-10-04 10:50 - 00000000 ____D C:\Users\Grzesiek\Downloads\Scooby-Doo i Brygada Detektywów 30 - Sieć Splatacza Snów 2015-10-04 10:07 - 2015-10-04 10:46 - 00000000 ____D C:\Users\Grzesiek\Downloads\Scooby-Doo i Brygada Detektywów 32 - Sztuka Ciemności 2015-10-04 10:07 - 2015-10-04 10:46 - 00000000 ____D C:\Users\Grzesiek\Downloads\Scooby-Doo i Brygada Detektywów 29 - Płaczący Klaun część 2 - Łzy Zagłady 2015-10-04 10:07 - 2015-10-04 10:39 - 00000000 ____D C:\Users\Grzesiek\Downloads\Scooby-Doo i Brygada Detektywów 31 - Hodag przestrachu 2015-10-03 22:40 - 2015-10-03 22:40 - 00168124 _____ C:\Users\Grzesiek\Desktop\upo 2015.rar 2015-10-03 22:12 - 2015-10-04 22:33 - 00000000 ____D C:\Users\Grzesiek\Downloads\Jurassic World 2015 PL 720p BluRay x264 DTS-KiT 2015-09-30 18:24 - 2015-09-30 18:24 - 01837056 _____ C:\Users\Grzesiek\Desktop\Gleby w Polsce.ppt 2015-09-30 18:20 - 2015-09-30 18:20 - 02125824 _____ C:\Users\Grzesiek\Downloads\fizyczne.ppt 2015-09-30 18:15 - 2015-09-30 18:15 - 05099520 _____ C:\Users\Grzesiek\Downloads\chemiczne.ppt 2015-09-30 16:38 - 2015-09-30 18:24 - 00882803 _____ C:\Users\Grzesiek\Desktop\Gleby w Polsce.pptx 2015-09-30 14:25 - 2015-09-30 14:25 - 00221338 _____ C:\Users\Grzesiek\Downloads\DRP-Full.torrent 2015-09-30 14:18 - 2015-10-01 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-09-30 14:15 - 2015-10-02 09:26 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-09-30 14:15 - 2015-10-02 09:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2015-09-29 12:08 - 2015-10-13 11:18 - 00000008 __RSH C:\ProgramData\ntuser.pol 2015-09-28 17:21 - 2015-09-28 23:14 - 00000000 ____D C:\Users\Grzesiek\Downloads\Piecdziesiat Twarzy Greya 2015 PL UNRATED 720p BluRay DTS x264-LLO 2015-09-20 23:32 - 2015-09-21 06:04 - 00000000 ____D C:\Users\Grzesiek\Downloads\Ultron 2015 PLDUB 720p BluRay x264-JUST4 2015-09-19 01:47 - 2015-09-19 01:47 - 00000000 ___HD C:\$Windows.~BT 2015-09-19 01:24 - 2015-09-19 01:24 - 00000000 ____D C:\results 2015-09-19 01:16 - 2015-09-19 01:16 - 00720440 _____ C:\Users\Grzesiek\Desktop\fb b.exe 2015-09-19 01:02 - 2015-09-19 01:02 - 01757564 _____ C:\Users\Grzesiek\Downloads\E L James - Ciemniejsza strona Greya(1).epub 2015-09-19 00:39 - 2015-09-19 01:08 - 00000000 ____D C:\Users\Grzesiek\Documents\Biblioteka calibre 2015-09-19 00:38 - 2014-11-17 13:34 - 00383982 _____ C:\Users\Grzesiek\Desktop\E. L. James - Ciemniejsza strona Greya.EPUB 2015-09-19 00:37 - 2015-09-19 00:37 - 03345802 _____ C:\Users\Grzesiek\Downloads\E. L. James - Ciemniejsza strona Greya.rar 2015-09-18 19:58 - 2015-09-18 19:58 - 00000051 _____ C:\Windows\SysWOW64\lgAxconfig.ini 2015-09-18 17:56 - 2015-09-18 17:56 - 00758732 _____ C:\Users\Grzesiek\Desktop\tel.mx 2015-09-18 17:50 - 2015-09-18 17:51 - 00000000 ____D C:\Users\Grzesiek\Desktop\wywołać 2015-09-18 17:44 - 2015-09-18 17:44 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_lgandnetadb_01005.Wdf 2015-09-18 17:41 - 2015-09-18 17:42 - 00000000 ____D C:\Users\Grzesiek\Desktop\LG Flash Tool 2014 2015-09-18 17:41 - 2014-05-08 18:52 - 00019456 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandnetbus64.sys 2015-09-18 17:41 - 2014-03-28 15:41 - 00031744 _____ (Google Inc) C:\Windows\system32\Drivers\lgandnetadb.sys 2015-09-18 17:41 - 2014-03-28 15:25 - 00036352 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandnetmodem64.sys 2015-09-18 17:41 - 2014-03-28 15:25 - 00029184 _____ (LG Electronics Inc.) C:\Windows\system32\Drivers\lgandnetdiag64.sys 2015-09-18 17:41 - 2011-07-18 06:03 - 01919968 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01005.dll 2015-09-17 16:33 - 2015-09-18 19:58 - 00000000 ____D C:\LGMobileUpgrade 2015-09-17 16:17 - 2015-09-18 19:58 - 00000000 ____D C:\ProgramData\LGMOBILEAX 2015-09-17 16:15 - 2015-09-17 16:15 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\LG PC Suite.Lnk 2015-09-17 15:51 - 2015-09-17 15:52 - 05443202 _____ (Igor Pavlov) C:\Users\Grzesiek\Downloads\LG One Click Root.exe 2015-09-17 15:48 - 2015-09-17 15:49 - 11445968 _____ (LG Electronics) C:\Users\Grzesiek\Downloads\Sterowniki.exe 2015-09-17 15:48 - 2015-09-17 15:49 - 03279688 _____ C:\Users\Grzesiek\Downloads\LG Flash Tool 2014.zip 2015-09-13 03:35 - 2015-09-13 03:35 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\Skype 2015-09-13 03:03 - 2015-09-13 03:03 - 00000000 ____D C:\program1 2015-09-13 02:58 - 2015-09-13 02:58 - 00684657 _____ C:\Users\Grzesiek\Downloads\InstAviScreenC(dobreprogramy.pl).zip 2015-09-13 01:08 - 2015-09-13 01:09 - 62498298 _____ C:\Users\Grzesiek\Documents\clip0001.avi 2015-09-13 01:06 - 2015-09-13 01:07 - 02778464 _____ C:\Users\Grzesiek\Downloads\HC2Setup.exe 2015-09-13 00:44 - 2015-09-13 00:44 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf 2015-09-13 00:08 - 2015-09-13 00:08 - 00003068 _____ C:\Windows\System32\Tasks\{A10308A3-C433-45D5-A393-36BFBEF091BE} 2015-09-13 00:08 - 2015-09-13 00:08 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-09-13 00:08 - 2015-09-13 00:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-10-13 14:40 - 2013-07-28 16:45 - 00000439 _____ C:\Windows\system32\Drivers\etc\hosts.ics 2015-10-13 14:40 - 2012-03-19 16:25 - 00000000 ____D C:\ProgramData\PDFC 2015-10-13 14:39 - 2014-10-10 11:56 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-10-13 14:39 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-10-13 14:39 - 2009-07-14 06:51 - 00220289 _____ C:\Windows\setupact.log 2015-10-13 14:35 - 2012-08-30 18:09 - 01548755 _____ C:\Windows\WindowsUpdate.log 2015-10-13 14:01 - 2014-10-10 11:56 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-10-13 14:00 - 2013-08-24 16:15 - 03950080 ___SH C:\Users\Grzesiek\Desktop\Thumbs.db 2015-10-13 13:38 - 2012-03-19 16:10 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-10-13 12:19 - 2009-07-14 06:45 - 00031472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-10-13 12:19 - 2009-07-14 06:45 - 00031472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-10-13 12:10 - 2010-11-21 05:47 - 00919518 _____ C:\Windows\PFRO.log 2015-10-13 12:04 - 2015-02-24 16:05 - 00001008 _____ C:\Windows\wininit.ini 2015-10-13 12:04 - 2012-03-19 16:25 - 00000000 ____D C:\Windows\SysWOW64\Adobe 2015-10-13 12:04 - 2012-03-19 16:10 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2015-10-13 12:03 - 2013-02-04 10:47 - 00000000 ____D C:\ProgramData\Adobe 2015-10-13 11:15 - 2013-01-11 01:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PESEdit.com 2011 Patch 2015-10-13 11:15 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-10-13 11:15 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy 2015-10-13 11:15 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy 2015-10-12 17:21 - 2012-09-01 07:39 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\BITS 2015-10-11 21:39 - 2015-08-17 22:24 - 00000344 _____ C:\Windows\Tasks\HPCeeScheduleForGrzesiek.job 2015-10-11 19:50 - 2009-07-14 04:34 - 00000580 _____ C:\Windows\win.ini 2015-10-11 19:49 - 2012-03-20 00:26 - 14356996 _____ C:\Windows\system32\perfh015.dat 2015-10-11 19:49 - 2012-03-20 00:26 - 05152764 _____ C:\Windows\system32\perfc015.dat 2015-10-11 19:49 - 2009-07-14 07:13 - 00006770 _____ C:\Windows\system32\PerfStringBackup.INI 2015-10-09 19:27 - 2015-08-17 22:24 - 00003204 _____ C:\Windows\System32\Tasks\HPCeeScheduleForGrzesiek 2015-10-09 19:27 - 2012-08-31 20:37 - 00000166 _____ C:\Windows\SysWOW64\DOErrors.log 2015-10-09 04:53 - 2015-04-05 10:02 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2015-10-09 04:53 - 2015-04-05 10:02 - 00000000 ___SD C:\Windows\system32\GWX 2015-10-07 10:54 - 2014-07-13 17:46 - 00000000 ____D C:\Windows\WindowsMobile 2015-10-04 23:04 - 2013-01-23 20:16 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\Free Download Manager 2015-10-04 22:55 - 2015-02-10 11:24 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\FlashGet 2015-09-30 16:44 - 2014-11-11 11:08 - 00003874 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1415696899 2015-09-30 16:44 - 2014-11-11 11:08 - 00000000 ____D C:\Program Files (x86)\Opera 2015-09-27 22:20 - 2012-08-31 06:56 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2015-09-22 10:47 - 2015-07-03 19:20 - 00000000 ____D C:\Users\Grzesiek\Desktop\Nowy folder (9) 2015-09-22 10:41 - 2012-03-19 16:10 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-09-22 10:41 - 2012-03-19 16:10 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-09-22 10:41 - 2012-03-19 16:10 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-09-22 10:08 - 2014-01-06 10:44 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\vlc 2015-09-19 01:47 - 2007-01-02 03:25 - 00000000 ____D C:\Windows\Panther 2015-09-18 17:42 - 2015-04-18 08:55 - 00000000 ____D C:\Program Files (x86)\LG Electronics 2015-09-18 17:41 - 2012-03-19 16:35 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2015-09-17 16:15 - 2015-04-18 09:01 - 00001066 _____ C:\Users\Public\Desktop\LG PC Suite.Lnk 2015-09-17 16:15 - 2015-04-18 08:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG PC Suite 2015-09-15 22:56 - 2013-08-23 18:16 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-09-15 22:56 - 2013-08-23 18:16 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-09-13 03:32 - 2015-01-26 11:45 - 00000000 ____D C:\Users\Grzesiek\Desktop\Dane z pendrive i tabletu 2015-09-13 00:44 - 2013-08-07 01:06 - 00000000 ____D C:\Users\Grzesiek\AppData\Roaming\MyPhoneExplorer 2015-09-13 00:08 - 2012-03-19 16:26 - 00000000 ____D C:\ProgramData\Skype ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-09-28 19:52 ==================== Koniec FRST.txt ============================