Farbar Recovery Scan Tool (x64) Wersja:17-10-2015
Uruchomiony przez Rafal (2015-10-17 16:00:43)
Uruchomiony z C:\Users\Rafal\Desktop\FRST
Tryb startu: Normal

================== Search Files: "agent.exe;avguard.exe;convert.exe;download.exe;file.exe;hkcr.exe;htpatch.exe;iexplore.exe;jucheck.exe;jusched.exe;klwtblfs.exe;" =============

C:\Windows\agent.exe
[2009-07-14 01:56][2009-07-14 01:56] 1044324 __RAH () 3EEDBF6BAE3ADFD82BA92C56E86E4931 [Brak podpisu cyfrowego]

C:\Windows\jucheck.exe
[2009-07-14 01:56][2009-07-14 01:56] 1044324 __RAH () 3EEDBF6BAE3ADFD82BA92C56E86E4931 [Brak podpisu cyfrowego]

C:\Windows\winsxs\x86_microsoft-windows-convert_31bf3856ad364e35_6.1.7600.16385_none_9caba0df09a5c970\convert.exe
[2009-07-14 01:15][2009-07-14 03:14] 0017408 ____A (Microsoft Corporation) FA5C490197C97EC58CF751F8CE6439D3 [Plik podpisany cyfrowo]

C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16684_none_176b6a0fb4f83a73\iexplore.exe
[2015-10-16 16:13][2015-10-16 16:13] 0744448 ____A (Microsoft Corporation) 6DEC220DD29CA10F46A19AFD37C50978 [Plik podpisany cyfrowo]

C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_19ba3f8a72d988f3\iexplore.exe
[2009-07-14 01:43][2009-07-14 03:17] 0673048 ____A (Microsoft Corporation) 2C32E3E596CFE660353753EABEFB0540 [Plik podpisany cyfrowo]

C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16684_none_0d16bfbd80977878\iexplore.exe
[2015-10-16 16:13][2015-10-16 16:13] 0750080 ____A (Microsoft Corporation) 9ABB144D45DDAD9C9FAFBB697EDAB846 [Plik podpisany cyfrowo]

C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_0f6595383e78c6f8\iexplore.exe
[2009-07-14 01:58][2009-07-14 03:43] 0696600 ____A (Microsoft Corporation) F2B0D41E1D08D0B2006DF5AA2E74C81E [Plik podpisany cyfrowo]

C:\Windows\winsxs\amd64_microsoft-windows-convert_31bf3856ad364e35_6.1.7600.16385_none_f8ca3c62c2033aa6\convert.exe
[2009-07-14 01:25][2009-07-14 03:39] 0020480 ____A (Microsoft Corporation) 89508FA6ACF97EA4B40DCDE0EC74D6BF [Plik podpisany cyfrowo]

C:\Windows\SysWOW64\convert.exe
[2009-07-14 01:15][2009-07-14 03:14] 0017408 ____A (Microsoft Corporation) FA5C490197C97EC58CF751F8CE6439D3 [Plik podpisany cyfrowo]

C:\Windows\System32\convert.exe
[2009-07-14 01:25][2009-07-14 03:39] 0020480 ____A (Microsoft Corporation) 89508FA6ACF97EA4B40DCDE0EC74D6BF [Plik podpisany cyfrowo]

C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\iexplore.exe
[2015-09-18 19:22][2015-06-18 08:39] 0893752 ____A (MalwareBytes) 0692C8163852AB5674E2EB3B36131EF3 [Plik podpisany cyfrowo]

C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\hkcr.exe
[2015-10-16 18:22][2015-10-16 18:22] 1044324 __RAH () 3EEDBF6BAE3ADFD82BA92C56E86E4931 [Brak podpisu cyfrowego]

C:\Program Files (x86)\Java\jre1.8.0_60\bin\client\jucheck.exe
[2015-10-16 18:21][2015-10-16 18:21] 1044324 __RAH () 3EEDBF6BAE3ADFD82BA92C56E86E4931 [Brak podpisu cyfrowego]

C:\Program Files (x86)\Internet Explorer\iexplore.exe
[2015-10-16 16:13][2015-10-16 16:13] 0744448 ____A (Microsoft Corporation) 6DEC220DD29CA10F46A19AFD37C50978 [Plik podpisany cyfrowo]

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\hkcr.exe
[2012-01-25 15:32][2012-01-25 15:32] 1044324 __RAH () 3EEDBF6BAE3ADFD82BA92C56E86E4931 [Brak podpisu cyfrowego]

C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\avguard.exe
[2015-08-26 10:52][2015-08-26 10:52] 1044324 __RAH () 3EEDBF6BAE3ADFD82BA92C56E86E4931 [Brak podpisu cyfrowego]

C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\jucheck.exe
[2015-08-26 10:52][2015-08-26 10:52] 1044324 __RAH () 3EEDBF6BAE3ADFD82BA92C56E86E4931 [Brak podpisu cyfrowego]

C:\Program Files (x86)\Application Verifier\download.exe
[2015-10-16 20:47][2015-10-16 20:47] 1044324 __RAH () 3EEDBF6BAE3ADFD82BA92C56E86E4931 [Brak podpisu cyfrowego]

C:\Program Files (x86)\AMD AVT\bin\jucheck.exe
[2015-10-16 18:14][2015-10-16 18:14] 1044324 __RAH () 3EEDBF6BAE3ADFD82BA92C56E86E4931 [Brak podpisu cyfrowego]

C:\Program Files (x86)\AMD APP\download.exe
[2015-10-16 20:47][2015-10-16 20:47] 1044324 __RAH () 3EEDBF6BAE3ADFD82BA92C56E86E4931 [Brak podpisu cyfrowego]

C:\Program Files (x86)\AMD APP\jucheck.exe
[2015-10-16 18:17][2015-10-16 18:17] 1044324 __RAH () 3EEDBF6BAE3ADFD82BA92C56E86E4931 [Brak podpisu cyfrowego]

C:\Program Files (x86)\AMD APP\bin\download.exe
[2015-10-16 18:16][2015-10-16 18:16] 1044324 __RAH () 3EEDBF6BAE3ADFD82BA92C56E86E4931 [Brak podpisu cyfrowego]

C:\Program Files\Internet Explorer\iexplore.exe
[2015-10-16 16:13][2015-10-16 16:13] 0750080 ____A (Microsoft Corporation) 9ABB144D45DDAD9C9FAFBB697EDAB846 [Plik podpisany cyfrowo]

====== Koniec  Szukaj ======