Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:18-10-2015
Uruchomiony przez Lenovo T500 (administrator)  LENOVOT500 (18-10-2015 15:01:57)
Uruchomiony z C:\Users\Lenovo T500\Downloads
Załadowane profile: Lenovo T500 (Dostępne profile: Lenovo T500)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: "C:\Program Files\Maxthon\Bin\Maxthon.exe" "%1")
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

() C:\Windows\System32\DTS.exe
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(AuthenTec, Inc.) C:\Windows\System32\AtService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX86\officeclicktorun.exe
(Devguru Co., Ltd.) C:\Windows\System32\dgdersvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ZOOM\TpScrex.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
(Hewlett-Packard Company) C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Microsoft) C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Lenovo Group Limited) C:\Program Files\ThinkPad\Utilities\SCHTASK.EXE
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Avanquest Software ) C:\Program Files\Digital Line Detect\DLG.exe
() C:\Program Files\FastStone Capture 5.3\FSCapture.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTStackServer.exe
(Lenovo.) C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE
(Maxthon International ltd.) C:\Program Files\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files\Maxthon\Bin\Maxthon.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Helios Software Solutions) C:\Program Files\TextPad 4\TextPad.exe
(Maxthon International ltd.) C:\Program Files\Maxthon\Bin\Maxthon.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2009-11-19] ()
HKLM\...\Run: [] => [X]
HKLM\...\Run: [picon] => C:\Program Files\Common Files\Intel\Privacy Icon\PIconStartup.exe [111640 2010-02-04] ()
HKLM\...\Run: [PWMTRV] => rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWMTR32V.DLL,PwrMgrBkGndMonitor
HKLM\...\Run: [FingerPrintSoftware] => C:\Program Files\Lenovo Fingerprint Software\fpapp.exe [1582920 2011-05-31] (AuthenTec)
HKLM\...\Run: [FingerPrintSoftwareSplashScreen] => C:\Program Files\Lenovo Fingerprint Software\SplashScreen.exe [102400 2011-05-31] (AuthenTec, Inc.)
HKLM\...\Run: [ATUpdatePBA.ltp] => C:\Windows\system32\ATUpdatePBA.exe [227144 2011-05-31] (AuthenTec, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2379504 2013-04-24] (Synaptics Incorporated)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [782008 2015-09-07] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [351968 2014-09-08] ()
HKLM\...\Run: [NPSStartup] => [X]
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-09-10] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1422404932-1377612141-3171194682-1000\...\Policies\Explorer: [DisallowCpl] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2014-10-27]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk [2014-10-27]
ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files\Digital Line Detect\DLG.exe (Avanquest Software )
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-06-22]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.285\SSScheduler.exe (Brak pliku)
Startup: C:\Users\Lenovo T500\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FastStone Capture.lnk [2014-11-08]
ShortcutTarget: FastStone Capture.lnk -> C:\Program Files\FastStone Capture 5.3\FSCapture.exe ()

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62
Tcpip\..\Interfaces\{7A0A2EE9-F3E6-4F3F-9B9D-03DD11530A1E}: [DhcpNameServer] 62.179.1.63 62.179.1.62
Tcpip\..\Interfaces\{89E6A045-D7B6-42B8-A9FE-106CAE870CEC}: [DhcpNameServer] 62.179.1.63 62.179.1.62

Internet Explorer:
==================
HKU\S-1-5-21-1422404932-1377612141-3171194682-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.pl/
HKU\S-1-5-21-1422404932-1377612141-3171194682-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
SearchScopes: HKU\S-1-5-21-1422404932-1377612141-3171194682-1000 -> DefaultScope {CBED207E-4E4C-4848-AAF0-439CB82CF40A} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1422404932-1377612141-3171194682-1000 -> {8FC1DCAA-D927-43E1-8E7F-3D537F272B7E} URL = hxxp://pl.wikipedia.org/w/index.php?title=Specjalna:Szukaj&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1422404932-1377612141-3171194682-1000 -> {CBED207E-4E4C-4848-AAF0-439CB82CF40A} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22] (Hewlett-Packard Co.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-06-22] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2014-10-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-22] (Oracle Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22] (Hewlett-Packard Co.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2014-11-08] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Lenovo T500\AppData\Roaming\Mozilla\Firefox\Profiles\v9u3iiix.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-28] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-22] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-11-08] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF Extension: Avira Browser Safety - C:\Users\Lenovo T500\AppData\Roaming\Mozilla\Firefox\Profiles\v9u3iiix.default\Extensions\abs@avira.com [2015-09-28] [Brak podpisu cyfrowego]
FF Extension: ListenOnRepeat Youtube Video Repeater - C:\Users\Lenovo T500\AppData\Roaming\Mozilla\Firefox\Profiles\v9u3iiix.default\Extensions\ListenOnRepeat-Youtube-Video-Repeater@listenonrepeat.com.xpi [2015-07-02]
FF Extension: Adblock Plus - C:\Users\Lenovo T500\AppData\Roaming\Mozilla\Firefox\Profiles\v9u3iiix.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-11-12]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-11-06] [Brak podpisu cyfrowego]
FF HKLM\...\Thunderbird\Extensions: [{857610fe-b36c-47f2-b4fa-6b7affe0cf5a}] - C:\Program Files\Mobile Master\ext\1
FF Extension: Mobile Master Add-In - C:\Program Files\Mobile Master\ext\1 [2015-01-22] [Brak podpisu cyfrowego]
FF HKU\S-1-5-21-1422404932-1377612141-3171194682-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome: 
=======
CHR DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> duckduckgo.com
CHR DefaultSuggestURL: Default -> hxxps://ac.duckduckgo.com/ac/?q={searchTerms}&type=list
CHR Profile: C:\Users\Lenovo T500\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Lenovo T500\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-01]
CHR Extension: (Dokumenty Google) - C:\Users\Lenovo T500\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-01]
CHR Extension: (Dysk Google) - C:\Users\Lenovo T500\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-01]
CHR Extension: (YouTube) - C:\Users\Lenovo T500\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-01]
CHR Extension: (Adblock Plus) - C:\Users\Lenovo T500\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-11-02]
CHR Extension: (Google Search) - C:\Users\Lenovo T500\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-01]
CHR Extension: (Arkusze Google) - C:\Users\Lenovo T500\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-01]
CHR Extension: (Avira Browser Safety) - C:\Users\Lenovo T500\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-11-02]
CHR Extension: (Dokumenty Google offline) - C:\Users\Lenovo T500\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-28]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Lenovo T500\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-01]
CHR Extension: (Gmail) - C:\Users\Lenovo T500\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-01]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Extension: (Adblock Plus) - C:\Users\Lenovo T500\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2014-11-02]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 ADMonitor; C:\Windows\system32\ADMonitor.exe [106496 2011-05-31] () [Brak podpisu cyfrowego]
S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-08-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [461672 2015-09-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [461672 2015-09-07] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-09-07] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [240872 2015-09-10] (Avira Operations GmbH & Co. KG)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [1674928 2014-10-29] (Microsoft Corporation)
R2 dgdersvc; C:\Windows\system32\dgdersvc.exe [95568 2010-10-25] (Devguru Co., Ltd.)
R2 dtsvc; C:\Windows\system32\DTS.exe [98304 2011-05-31] () [Brak podpisu cyfrowego]
R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [217088 2010-10-25] (Teruten) [Brak podpisu cyfrowego]
R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [89352 2014-09-15] (Hewlett-Packard Company)
S2 LENOVO.MICMUTE; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [101736 2011-07-12] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [127336 2011-07-12] (Lenovo Group Limited)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2009-05-14] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 NovaPdfServer; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [35616 2014-11-21] (Microsoft)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2009-05-14] (Hewlett-Packard) [Brak podpisu cyfrowego]
S3 PwmEWSvc; C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE [175168 2011-12-01] (Lenovo Group Limited)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.)
R2 TPHKLOAD; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [131432 2011-07-12] (Lenovo Group Limited)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108448 2015-08-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136728 2015-08-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2015-05-25] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [37896 2015-03-05] (Avira Operations GmbH & Co. KG)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2010-06-14] () [Brak podpisu cyfrowego]
R3 lnvobus; C:\Windows\System32\DRIVERS\lnvobus.sys [282880 2008-12-16] (MCCI Corporation)
R3 lnvocard; C:\Windows\System32\DRIVERS\lnvocard.sys [356480 2008-12-16] (MCCI Corporation)
R3 lnvogps; C:\Windows\System32\DRIVERS\lnvogps.sys [77864 2008-10-23] (Ericsson AB)
R3 lnvomdfl; C:\Windows\System32\DRIVERS\lnvomdfl.sys [15104 2008-12-16] (MCCI Corporation)
R3 lnvomdfl2; C:\Windows\System32\DRIVERS\lnvomdfl2.sys [15104 2008-12-16] (MCCI Corporation)
R3 lnvomdm; C:\Windows\System32\DRIVERS\lnvomdm.sys [365056 2008-12-16] (MCCI Corporation)
R3 lnvomdm2; C:\Windows\System32\DRIVERS\lnvomdm2.sys [408960 2008-12-16] (MCCI Corporation)
R3 lnvond5; C:\Windows\System32\DRIVERS\lnvond5.sys [25984 2008-12-16] (MCCI Corporation)
R3 lnvounic; C:\Windows\System32\DRIVERS\lnvounic.sys [375424 2008-12-16] (MCCI Corporation)
R3 Sony_EricssonWWSC; C:\Windows\System32\DRIVERS\lnvoscard.sys [24232 2008-07-08] (Sony Ericsson)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [31848 2015-06-09] (Avira Operations GmbH & Co. KG)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2014-05-07] (Samsung Electronics) [Brak podpisu cyfrowego]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-10-18 15:01 - 2015-10-18 15:03 - 00018344 _____ C:\Users\Lenovo T500\Downloads\FRST.txt
2015-10-18 15:00 - 2015-10-18 15:02 - 00000000 ____D C:\FRST
2015-10-18 14:58 - 2015-10-18 14:58 - 00066846 _____ C:\Users\Lenovo T500\Desktop\Autoruns.txt
2015-10-18 14:51 - 2015-10-18 14:51 - 00000000 ____D C:\Users\Lenovo T500\Downloads\Autoruns
2015-10-18 14:43 - 2015-10-18 14:50 - 00000000 ____D C:\Users\Lenovo T500\Downloads\shexview
2015-10-18 14:37 - 2015-10-18 14:37 - 00066867 _____ C:\Users\Lenovo T500\Downloads\shexview.zip
2015-10-18 14:33 - 2015-10-18 14:33 - 00593693 _____ C:\Users\Lenovo T500\Downloads\Autoruns.zip
2015-10-18 14:25 - 2015-10-18 14:19 - 03330664 _____ C:\Users\Lenovo T500\Desktop\Raport_wydajnosci_201510181420.html
2015-10-18 13:21 - 2015-10-18 13:21 - 01700864 _____ (Farbar) C:\Users\Lenovo T500\Downloads\FRST.exe
2015-10-18 13:20 - 2015-10-18 14:58 - 00002529 _____ C:\Users\Lenovo T500\Desktop\opis.txt
2015-10-11 21:49 - 2015-10-11 21:49 - 04083624 _____ C:\Users\Lenovo T500\Downloads\Korsarz 9 października 2015.zip
2015-10-11 15:09 - 2015-10-11 15:09 - 00003530 _____ C:\Users\Lenovo T500\Downloads\1444568947859.csv
2015-09-28 22:24 - 2015-09-28 22:24 - 01190104 _____ (Adobe Systems Incorporated) C:\Users\Lenovo T500\Downloads\flashplayer19_ha_install.exe
2015-09-28 22:10 - 2015-09-28 22:10 - 00000000 ____D C:\Users\Lenovo T500\AppData\Local\CEF
2015-09-28 21:10 - 2015-09-28 21:10 - 00156268 _____ C:\Users\Lenovo T500\Downloads\listyuczniw.zip
2015-09-28 20:54 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-09-28 20:12 - 2015-09-28 20:12 - 00000000 ____D C:\Program Files\GUM7AE9.tmp
2015-09-28 19:57 - 2015-10-15 15:16 - 00000000 ____D C:\Program Files\GCR1EC2.tmp
2015-09-28 19:57 - 2015-09-28 19:57 - 00000000 ____D C:\Program Files\GUM1FBB.tmp

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-10-18 13:26 - 2009-07-14 06:34 - 00028912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-18 13:26 - 2009-07-14 06:34 - 00028912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-18 13:20 - 2014-10-27 18:38 - 01507816 _____ C:\Windows\WindowsUpdate.log
2015-10-15 16:15 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-15 16:15 - 2009-07-14 06:39 - 00058677 _____ C:\Windows\setupact.log
2015-10-15 16:08 - 2014-11-01 20:05 - 00000000 ____D C:\Windows\system32\MRT
2015-10-15 15:40 - 2014-11-01 20:05 - 141105520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-10-15 15:26 - 2015-01-14 07:34 - 00000000 ____D C:\Users\Lenovo T500\Documents\efile-backup
2015-10-15 15:26 - 2014-11-01 19:09 - 00000000 ____D C:\ProgramData\Skype
2015-10-15 15:16 - 2014-11-19 14:37 - 00000000 ____D C:\Users\Lenovo T500\AppData\Roaming\Skype
2015-10-15 10:48 - 2015-09-07 21:27 - 00001092 _____ C:\Users\Public\Desktop\Avira Launcher.lnk
2015-10-15 10:48 - 2014-11-02 12:48 - 00000000 ____D C:\ProgramData\Package Cache
2015-10-15 10:48 - 2014-11-02 12:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-10-15 10:42 - 2014-11-08 11:31 - 00000000 ____D C:\Users\Lenovo T500\Documents\RR
2015-10-11 20:05 - 2014-11-08 11:31 - 00000000 ____D C:\Users\Lenovo T500\Documents\PRV
2015-10-11 05:55 - 2014-11-12 17:38 - 00000000 ____D C:\Users\Lenovo T500\.squirrel-sql
2015-10-04 16:24 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2015-10-02 09:47 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-09-28 22:25 - 2014-11-16 14:02 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-09-28 22:25 - 2014-11-16 14:02 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-09-28 22:25 - 2014-11-06 17:23 - 00000000 ____D C:\Users\Lenovo T500\AppData\Local\Adobe
2015-09-28 22:23 - 2014-11-01 19:07 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-09-28 21:29 - 2011-04-12 07:08 - 00756100 _____ C:\Windows\system32\perfh015.dat
2015-09-28 21:29 - 2011-04-12 07:08 - 00161440 _____ C:\Windows\system32\perfc015.dat
2015-09-28 21:29 - 2010-11-20 23:01 - 01703484 _____ C:\Windows\system32\PerfStringBackup.INI
2015-09-28 21:22 - 2009-07-14 06:33 - 00441872 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-28 21:20 - 2014-12-14 00:21 - 00000000 ____D C:\Windows\system32\appraiser
2015-09-28 21:20 - 2014-11-01 21:54 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-09-28 21:20 - 2011-04-12 07:17 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-28 21:20 - 2011-04-12 07:08 - 00000000 ____D C:\Windows\system32\Drivers\pl-PL
2015-09-28 21:20 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\pl-PL
2015-09-28 19:47 - 2015-09-16 17:15 - 00000346 _____ C:\Users\Lenovo T500\Documents\zebranie RR 20150916.txt
2015-09-28 19:19 - 2014-11-01 19:03 - 00000000 ____D C:\Users\Lenovo T500\AppData\Local\Google

==================== Pliki w katalogu głównym wybranych folderów =======

2015-08-01 07:52 - 2015-08-01 07:52 - 5443584 _____ (F.J. Wechselberger) C:\Program Files\MyPhoneExplorer portable.exe
2014-11-20 14:21 - 2007-06-28 11:18 - 0454656 _____ (Simon Tatham) C:\Program Files\putty.exe
2015-04-29 00:27 - 2015-04-29 00:27 - 0003345 _____ () C:\Users\Lenovo T500\AppData\Local\recently-used.xbel
2014-11-06 17:13 - 2014-11-06 17:20 - 0000847 _____ () C:\ProgramData\hpzinstall.log

Pliki do przeniesienia lub usunięcia:
====================
C:\Users\Lenovo T500\ping_test.bat


Niektóre pliki w TEMP:
====================
C:\Users\Lenovo T500\AppData\Local\Temp\avgnt.exe
C:\Users\Lenovo T500\AppData\Local\Temp\ChromeSetup.exe
C:\Users\Lenovo T500\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-10-15 10:27

==================== Koniec  FRST.txt ============================