Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:07-11-2015
Uruchomiony przez boss (administrator)  BOSS-9488F14128 (08-11-2015 13:59:28)
Uruchomiony z C:\Documents and Settings\boss\Pulpit
Załadowane profile: boss (Dostępne profile: boss)
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) Język: Polski
Internet Explorer Wersja 8 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
(Spotify Ltd) C:\Documents and Settings\boss\Dane aplikacji\Spotify\SpotifyWebHelper.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(StarWind Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [NeroFilterCheck] => C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6111312 2015-11-06] (AVAST Software)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20145368 2013-10-04] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2591888 2015-11-02] ()
HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\System32\logon.scr [778113 2008-05-02] (nufsoft.com)
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\System32\logon.scr [778113 2008-05-02] (nufsoft.com)
HKU\S-1-5-21-1409082233-308236825-1801674531-1003\...\Run: [AlcoholAutomount] => C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
HKU\S-1-5-21-1409082233-308236825-1801674531-1003\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-1409082233-308236825-1801674531-1003\...\Run: [Spotify Web Helper] => C:\Documents and Settings\boss\Dane aplikacji\Spotify\SpotifyWebHelper.exe [2030912 2015-10-21] (Spotify Ltd)
HKU\S-1-5-18\...\RunOnce: [nltide_2] => regsvr32 /s /n /i:U shell32
HKU\S-1-5-18\...\RunOnce: [nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\logon.scr [778113 2008-05-02] (nufsoft.com)
ShellExecuteHooks:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  Brak pliku [ ]
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-08-13] (AVAST Software)
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\AdFender.lnk [2014-06-06]
ShortcutTarget: AdFender.lnk -> C:\Program Files\AdFender\AdFender.exe (AdFender, Inc.)
BootExecute: autocheck autochk * sdnclean.exe
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 217.113.224.134 217.113.224.35
Tcpip\..\Interfaces\{8DA95846-329C-40FB-BA65-CC80A18AB135}: [DhcpNameServer] 217.113.224.134 217.113.224.35

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\S-1-5-21-1409082233-308236825-1801674531-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1409082233-308236825-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1409082233-308236825-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.google.pl/
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1409082233-308236825-1801674531-1003 -> DefaultScope {26CCE0F3-23D3-4A54-8826-6E56493520C2} URL = hxxp://szukaj.onet.pl/query.html?qt={searchTerms}
SearchScopes: HKU\S-1-5-21-1409082233-308236825-1801674531-1003 -> {0F7412C2-EFB3-42F2-BC7E-47C1026A5B69} URL = hxxp://megaslownik.pl/slownik.php?phrase={searchTerms}&lang=de
SearchScopes: HKU\S-1-5-21-1409082233-308236825-1801674531-1003 -> {26CCE0F3-23D3-4A54-8826-6E56493520C2} URL = hxxp://szukaj.onet.pl/query.html?qt={searchTerms}
SearchScopes: HKU\S-1-5-21-1409082233-308236825-1801674531-1003 -> {434CB1D3-8529-4CA4-838A-14BD7ABFA2E7} URL = hxxp://megaslownik.pl/slownik.php?phrase={searchTerms}&lang=en
SearchScopes: HKU\S-1-5-21-1409082233-308236825-1801674531-1003 -> {526911F6-4964-4A38-85DC-647147801261} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1409082233-308236825-1801674531-1003 -> {6613BDC0-0D8F-4864-B25C-4758F988229C} URL = hxxp://www.allegro.pl/search.php?sg=0&string={searchTerms}
SearchScopes: HKU\S-1-5-21-1409082233-308236825-1801674531-1003 -> {96D516FF-116C-4048-B416-8FBA103E3116} URL = hxxp://pl.wikipedia.org/w/index.php?title=Specjalna:Szukaj&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1409082233-308236825-1801674531-1003 -> {BC864C46-4C32-4BFB-9AB6-7B24F482ADD2} URL = hxxp://www.nasza-klasa.pl/szukaj/profile?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll [2015-11-01] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-13] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-11-01] (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF ProfilePath: C:\Documents and Settings\boss\Dane aplikacji\Mozilla\Firefox\Profiles\13g3ahcf.default
FF NewTab: about:blank
FF SelectedSearchEngine: piesearch
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-18] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-11-01] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-11-01] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll [2010-02-15] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll [2010-02-15] (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-18] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-18] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-08-13] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-07-13] [Brak podpisu cyfrowego]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR HomePage: Default -> hxxps://www.google.pl/
CHR StartupUrls: Default -> "hxxps://www.google.pl/"
CHR DefaultSearchKeyword: Default -> q
CHR Profile: C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-10-24]
CHR Extension: (Dokumenty Google) - C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-24]
CHR Extension: (Dysk Google) - C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-24]
CHR Extension: (YouTube) - C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-24]
CHR Extension: (Google Search) - C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Arkusze Google) - C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-10-24]
CHR Extension: (Dokumenty Google offline) - C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-10-24]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-24]
CHR Extension: (Quick Menu) - C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\oggihoncmelambjaefiboekididcaffe [2015-10-31]
CHR Extension: (Gmail) - C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-24]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-08-13]
CHR HKLM\...\Chrome\Extension: [oggihoncmelambjaefiboekididcaffe] - C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\oggihoncmelambjaefiboekididcaffe.crx [2015-10-29]
StartMenuInternet: chrome.exe - Chrome.exe

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-08-13] (AVAST Software)
S2 AxAutoMntSrv; C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
S2 KMService; C:\WINDOWS\system32\srvany.exe [8192 2014-06-06] () [Brak podpisu cyfrowego]
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [Brak podpisu cyfrowego]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24016 2015-08-13] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [76000 2015-08-13] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-08-13] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49776 2015-08-13] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [794952 2015-11-06] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [435464 2015-11-06] (AVAST Software)
R3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [161472 2015-08-13] (AVAST Software)
S3 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-08-13] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [208664 2015-08-13] (AVAST Software)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
R3 NVHDA; C:\WINDOWS\System32\drivers\nvhda32.sys [138040 2015-11-03] (NVIDIA Corporation)
R3 rtl8139; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [20992 2008-04-13] (Realtek Semiconductor Corporation)
R0 Si3112; C:\WINDOWS\system32\Drivers\Si3112.sys [62208 2008-05-02] (Silicon Image, Inc.) [Brak podpisu cyfrowego]
R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [320120 2014-06-07] (Duplex Secure Ltd.)
R3 yukonwxp; C:\WINDOWS\System32\DRIVERS\yk51x86.sys [250496 2006-11-22] (Marvell)
U3 a4k1ml0b; C:\WINDOWS\system32\Drivers\a4k1ml0b.sys [0 ] (Microsoft Corporation) <==== UWAGA (zerobajtowy plik/folder)
S3 catchme; \??\C:\DOCUME~1\boss\USTAWI~1\Temp\catchme.sys [X]
S3 EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys [X]
S4 IntelIde; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Trzy miesiące - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-08 13:59 - 2015-11-08 13:59 - 00018959 _____ C:\Documents and Settings\boss\Pulpit\FRST.txt
2015-11-08 13:57 - 2015-11-08 13:59 - 00000000 ____D C:\FRST
2015-11-08 13:57 - 2015-11-08 13:57 - 01702400 _____ (Farbar) C:\Documents and Settings\boss\Pulpit\FRST.exe
2015-11-08 12:21 - 2015-11-08 12:21 - 00090112 _____ C:\WINDOWS\Minidump\Mini110815-04.dmp
2015-11-08 12:16 - 2015-11-08 12:16 - 00106496 _____ C:\WINDOWS\Minidump\Mini110815-03.dmp
2015-11-08 12:13 - 2015-11-08 12:13 - 00090112 _____ C:\WINDOWS\Minidump\Mini110815-02.dmp
2015-11-08 12:10 - 2015-11-08 12:10 - 00106496 _____ C:\WINDOWS\Minidump\Mini110815-01.dmp
2015-11-07 19:04 - 2015-11-08 13:59 - 00000000 ____D C:\Documents and Settings\boss\Ustawienia lokalne\temp
2015-11-07 19:04 - 2015-11-07 19:04 - 00021335 _____ C:\ComboFix.txt
2015-11-07 19:04 - 2015-11-07 19:04 - 00000000 ____D C:\Documents and Settings\NetworkService\Ustawienia lokalne\temp
2015-11-07 18:53 - 2015-11-07 18:53 - 00090112 _____ C:\WINDOWS\Minidump\Mini110715-03.dmp
2015-11-07 18:40 - 2015-11-07 18:40 - 00090112 _____ C:\WINDOWS\Minidump\Mini110715-02.dmp
2015-11-07 18:34 - 2015-11-07 18:34 - 00106496 _____ C:\WINDOWS\Minidump\Mini110715-01.dmp
2015-11-06 18:16 - 2015-11-06 18:17 - 05637844 ____R (Swearware) C:\Documents and Settings\boss\Pulpit\1.exe
2015-11-06 17:47 - 2015-11-06 17:47 - 00106496 _____ C:\WINDOWS\Minidump\Mini110615-01.dmp
2015-11-05 13:02 - 2015-11-05 13:12 - 00111974 _____ C:\WINDOWS\setupapi.log
2015-11-05 13:02 - 2015-11-05 13:02 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-11-05 13:02 - 2015-11-05 13:02 - 00000000 _____ C:\WINDOWS\setupact.log
2015-11-05 13:02 - 2015-11-02 17:40 - 37874176 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-11-05 13:02 - 2015-11-02 17:40 - 01053304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco3235887.dll
2015-11-05 13:02 - 2015-11-02 17:40 - 00916600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco3235887.dll
2015-11-05 13:02 - 2015-11-02 17:40 - 00025884 _____ C:\WINDOWS\system32\nvinfo.pb
2015-11-02 19:18 - 2015-11-02 19:18 - 00106496 _____ C:\WINDOWS\Minidump\Mini110215-03.dmp
2015-11-02 18:54 - 2015-11-02 18:54 - 00106496 _____ C:\WINDOWS\Minidump\Mini110215-02.dmp
2015-11-02 18:27 - 2015-11-02 18:27 - 00106496 _____ C:\WINDOWS\Minidump\Mini110215-01.dmp
2015-11-01 17:51 - 2015-11-01 17:51 - 00000000 ____D C:\WINDOWS\Sun
2015-11-01 17:50 - 2015-11-01 17:50 - 00000000 ____D C:\Program Files\Common Files\Java
2015-11-01 17:50 - 2015-11-01 17:50 - 00000000 ____D C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Sun
2015-11-01 17:50 - 2015-11-01 17:50 - 00000000 ____D C:\Documents and Settings\boss\Dane aplikacji\Sun
2015-11-01 17:50 - 2015-11-01 17:50 - 00000000 ____D C:\Documents and Settings\boss\.oracle_jre_usage
2015-11-01 17:50 - 2015-11-01 17:49 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-11-01 17:49 - 2015-11-01 17:50 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Oracle
2015-11-01 17:49 - 2015-11-01 17:49 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-11-01 17:49 - 2015-11-01 17:49 - 00000000 ____D C:\Program Files\Java
2015-11-01 17:49 - 2015-11-01 17:49 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Java
2015-11-01 17:48 - 2015-11-01 17:48 - 00000000 ____D C:\Documents and Settings\boss\Dane aplikacji\Oracle
2015-10-31 23:17 - 2015-10-31 23:24 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\system32\subinacl.exe
2015-10-31 23:17 - 2015-10-31 23:17 - 00000000 ____D C:\Program Files\Adware Removal Tool by TSA
2015-10-31 14:07 - 2015-11-01 00:22 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2015-10-31 14:03 - 2015-10-31 14:03 - 00106496 _____ C:\WINDOWS\Minidump\Mini103115-01.dmp
2015-10-26 10:51 - 2015-10-26 10:51 - 00106496 _____ C:\WINDOWS\Minidump\Mini102615-01.dmp
2015-10-24 17:02 - 2015-10-31 23:23 - 00001819 _____ C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2015-10-24 17:02 - 2015-10-24 17:02 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome
2015-10-24 16:53 - 2015-10-24 17:25 - 00000552 _____ C:\Documents and Settings\boss\Pulpit\Skrót do memtest.exe.lnk
2015-10-24 16:52 - 2015-10-24 16:52 - 00000000 ____D C:\Documents and Settings\boss\Pulpit\MemTest
2015-10-24 16:51 - 2015-10-31 14:07 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2015-10-24 16:30 - 2015-10-24 16:30 - 00065536 _____ C:\WINDOWS\Minidump\Mini102415-01.dmp
2015-10-23 17:51 - 2015-10-23 17:51 - 00106496 _____ C:\WINDOWS\Minidump\Mini102315-03.dmp
2015-10-23 17:31 - 2015-10-23 17:31 - 00106496 _____ C:\WINDOWS\Minidump\Mini102315-02.dmp
2015-10-23 17:26 - 2015-10-23 17:26 - 00106496 _____ C:\WINDOWS\Minidump\Mini102315-01.dmp
2015-10-21 10:46 - 2015-10-21 10:46 - 00106496 _____ C:\WINDOWS\Minidump\Mini102115-02.dmp
2015-10-21 10:41 - 2015-10-21 10:41 - 00106496 _____ C:\WINDOWS\Minidump\Mini102115-01.dmp
2015-10-20 16:33 - 2015-10-20 16:33 - 00106496 _____ C:\WINDOWS\Minidump\Mini102015-01.dmp
2015-10-20 16:08 - 2015-10-20 16:08 - 00929872 _____ (Google Inc.) C:\Documents and Settings\boss\Moje dokumenty\ChromeSetup.exe
2015-10-14 18:32 - 2015-10-18 14:32 - 03996360 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2015-10-07 14:17 - 2015-10-07 14:17 - 00001030 _____ C:\Documents and Settings\All Users\Pulpit\GeForce Experience.lnk
2015-10-07 14:11 - 2015-10-03 04:50 - 00916600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco3235850.dll
2015-10-07 14:11 - 2015-10-03 04:49 - 01053488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco3235850.dll
2015-10-07 13:57 - 2015-10-21 19:14 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-10-06 11:14 - 2015-10-06 11:14 - 00000000 ____D C:\Documents and Settings\boss\Moje dokumenty\Alcohol 120%
2015-10-05 10:23 - 2015-10-05 10:24 - 00000000 ____D C:\Documents and Settings\boss\Pulpit\ccsetup510
2015-09-01 16:55 - 2015-09-01 16:55 - 00000000 ____D C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\openvr
2015-08-22 12:45 - 2015-08-22 12:45 - 00000000 ____D C:\FS2Log
2015-08-15 11:16 - 2015-10-31 23:30 - 00000000 ____D C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Opera Software
2015-08-15 11:16 - 2015-10-31 23:30 - 00000000 ____D C:\Documents and Settings\boss\Dane aplikacji\Opera Software
2015-08-15 11:15 - 2015-10-31 23:30 - 00000000 ____D C:\Program Files\Opera
2015-08-14 15:29 - 2015-09-01 15:35 - 00449780 _____ C:\snapshot_blob.bin
2015-08-14 15:29 - 2015-09-01 15:35 - 00410937 _____ C:\natives_blob.bin
2015-08-13 11:44 - 2015-08-13 11:44 - 00001689 _____ C:\Documents and Settings\All Users\Pulpit\Avast Free Antivirus.lnk
2015-08-13 11:44 - 2015-08-13 11:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallWdf01009$
2015-08-13 11:44 - 2015-08-13 11:44 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\AVAST Software
2015-08-13 11:44 - 2008-11-07 17:55 - 00016928 ____N (Microsoft Corporation) C:\WINDOWS\system32\spmsgXP_2k3.dll
2015-08-13 11:43 - 2015-08-13 11:43 - 00313472 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-08-13 11:43 - 2015-08-13 11:43 - 00161472 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStmXP.sys
2015-08-13 11:43 - 2015-08-13 11:43 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-08-12 23:25 - 2015-08-12 23:25 - 00000000 _RSHD C:\cmdcons
2015-08-12 23:25 - 2014-07-27 11:08 - 00000223 _____ C:\Boot.bak
2015-08-12 23:25 - 2004-08-03 22:00 - 00262400 __RSH C:\cmldr
2015-08-12 22:44 - 2015-08-12 20:51 - 00000027 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20150812-234411.backup
2015-08-12 22:09 - 2015-08-12 22:09 - 00000000 ____D C:\Program Files\Common Files\AV
2015-08-12 22:08 - 2015-08-12 22:08 - 00000000 ____D C:\Documents and Settings\LocalService\Menu Start\Programy
2015-08-12 22:08 - 2015-08-12 22:08 - 00000000 ____D C:\Documents and Settings\LocalService\Menu Start
2015-08-12 21:28 - 2015-11-08 12:22 - 00000644 _____ C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job
2015-08-12 21:28 - 2015-11-01 00:30 - 00000446 _____ C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job
2015-08-12 21:28 - 2015-11-01 00:10 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2015-08-12 21:28 - 2015-08-12 23:33 - 00065536 _____ C:\WINDOWS\system32\config\SpybotSD.evt
2015-08-12 21:28 - 2015-08-12 21:28 - 00001842 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Spybot-S&D Start Center.lnk
2015-08-12 21:28 - 2015-08-12 21:28 - 00001836 _____ C:\Documents and Settings\All Users\Pulpit\Spybot-S&D Start Center.lnk
2015-08-12 21:28 - 2015-08-12 21:28 - 00000616 _____ C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2015-08-12 21:28 - 2015-08-12 21:28 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Spybot - Search & Destroy 2
2015-08-12 21:28 - 2013-09-20 09:49 - 00018968 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean.exe
2015-08-12 20:59 - 2015-11-08 13:02 - 00170200 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-08-12 20:59 - 2015-10-21 10:53 - 00000777 _____ C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
2015-08-12 20:59 - 2015-10-21 10:53 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2015-08-12 20:59 - 2015-10-21 10:53 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes Anti-Malware
2015-08-12 20:59 - 2015-10-05 08:50 - 00121560 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-08-12 20:59 - 2015-10-05 08:50 - 00023256 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-08-12 20:56 - 2015-08-12 20:56 - 00000000 ____D C:\WINDOWS\system32\xircom
2015-08-12 20:56 - 2015-08-12 20:56 - 00000000 ____D C:\Program Files\xerox
2015-08-12 20:56 - 2015-08-12 20:56 - 00000000 ____D C:\Program Files\microsoft frontpage
2015-08-12 20:43 - 2015-11-07 19:04 - 00000000 ____D C:\Qoobox
2015-08-12 20:43 - 2015-08-12 20:43 - 00000000 ___RD C:\Documents and Settings\boss\Menu Start\Programy\Narzędzia administracyjne
2015-08-12 20:43 - 2011-06-26 07:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2015-08-12 20:43 - 2010-11-07 18:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2015-08-12 20:43 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2015-08-12 20:43 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2015-08-12 20:43 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2015-08-12 20:43 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2015-08-12 20:43 - 2000-08-31 01:00 - 00098816 _____ C:\WINDOWS\sed.exe
2015-08-12 20:43 - 2000-08-31 01:00 - 00080412 _____ C:\WINDOWS\grep.exe
2015-08-12 20:43 - 2000-08-31 01:00 - 00068096 _____ C:\WINDOWS\zip.exe
2015-08-12 20:42 - 2015-08-12 20:52 - 00000000 ____D C:\WINDOWS\erdnt

==================== Trzy miesiące - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-08 13:59 - 2014-06-05 15:25 - 00000000 ____D C:\Documents and Settings\boss\Pulpit
2015-11-08 13:45 - 2014-06-05 15:48 - 00001036 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-08 13:32 - 2014-06-05 16:52 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-11-08 12:45 - 2014-06-06 11:17 - 00012410 _____ C:\WINDOWS\system32\nvAppTimestamps
2015-11-08 12:43 - 2014-06-06 11:27 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-11-08 12:26 - 2015-08-09 10:27 - 00000000 ____D C:\Documents and Settings\boss\Pulpit\bluescreenview
2015-11-08 12:23 - 2014-06-05 17:11 - 01576464 _____ C:\WINDOWS\system32\nvdrsdb0.bin
2015-11-08 12:23 - 2014-06-05 17:11 - 00000001 _____ C:\WINDOWS\system32\nvdrssel.bin
2015-11-08 12:23 - 2014-06-05 15:21 - 01371735 _____ C:\WINDOWS\WindowsUpdate.log
2015-11-08 12:22 - 2014-06-22 11:41 - 00000159 _____ C:\WINDOWS\wiadebug.log
2015-11-08 12:22 - 2014-06-22 11:41 - 00000050 _____ C:\WINDOWS\wiaservc.log
2015-11-08 12:22 - 2014-06-05 15:48 - 00001032 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-08 12:21 - 2014-07-17 20:35 - 00000000 ____D C:\WINDOWS\Minidump
2015-11-08 12:21 - 2014-06-05 15:24 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-11-08 12:14 - 2014-06-05 17:11 - 01576464 _____ C:\WINDOWS\system32\nvdrsdb1.bin
2015-11-08 12:13 - 2014-06-05 15:24 - 00032540 _____ C:\WINDOWS\SchedLgU.Txt
2015-11-08 11:59 - 2014-06-05 15:23 - 00000000 __SHD C:\Documents and Settings\NetworkService
2015-11-07 23:17 - 2014-06-05 15:25 - 00000188 ___SH C:\Documents and Settings\boss\ntuser.ini
2015-11-07 22:40 - 2014-06-06 15:21 - 00000000 ____D C:\Documents and Settings\boss\Dane aplikacji\Spotify
2015-11-07 20:30 - 2014-06-06 15:21 - 00000000 ____D C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Spotify
2015-11-07 19:04 - 2014-06-05 15:25 - 00000000 ___HD C:\Documents and Settings\boss\Ustawienia lokalne
2015-11-07 19:04 - 2014-06-05 15:23 - 00000000 ___HD C:\Documents and Settings\NetworkService\Ustawienia lokalne
2015-11-07 19:02 - 2001-07-21 23:15 - 00000227 _____ C:\WINDOWS\system.ini
2015-11-07 18:57 - 2014-06-05 15:25 - 00000000 __RHD C:\Documents and Settings\boss\Dane aplikacji
2015-11-07 18:43 - 2014-06-05 16:56 - 00106496 _____ C:\WINDOWS\DUMP8dd8.tmp
2015-11-06 17:36 - 2014-06-06 11:27 - 00794952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2015-11-06 17:36 - 2014-06-06 11:27 - 00435464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2015-11-06 17:36 - 2001-07-21 23:17 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2015-11-05 15:38 - 2014-06-06 15:14 - 00000000 ____D C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Last.fm
2015-11-05 15:21 - 2015-05-12 22:25 - 00001001 _____ C:\Documents and Settings\boss\Pulpit\Nowy Dokument tekstowy.txt
2015-11-05 13:13 - 2014-08-02 13:23 - 00618862 _____ C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-1409082233-308236825-1801674531-1003-0.dat
2015-11-05 13:13 - 2014-08-02 13:23 - 00207282 _____ C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
2015-11-05 13:11 - 2014-06-05 17:04 - 00000000 ____D C:\WINDOWS\system32\ReinstallBackups
2015-11-05 13:03 - 2014-06-05 17:08 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-11-03 00:30 - 2014-06-05 17:08 - 00926520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco3220103.dll
2015-11-03 00:30 - 2014-06-05 17:08 - 00138040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda32.sys
2015-11-03 00:30 - 2014-06-05 17:08 - 00035984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap32.dll
2015-11-02 18:23 - 2014-07-06 18:28 - 00000000 ____D C:\Documents and Settings\boss\Dane aplikacji\GG
2015-11-02 17:40 - 2014-06-05 17:11 - 00073728 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-11-02 17:40 - 2014-06-05 17:08 - 17289216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglnt.dll
2015-11-02 17:40 - 2014-06-05 17:08 - 13381632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-11-02 17:40 - 2014-06-05 17:08 - 11890688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-11-02 17:40 - 2014-06-05 17:08 - 11241112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nv4_mini.sys
2015-11-02 17:40 - 2014-06-05 17:08 - 03499264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv4_disp.dll
2015-11-02 17:40 - 2014-06-05 17:08 - 03067904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi.dll
2015-11-02 17:40 - 2014-06-05 17:08 - 02398896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-11-02 17:40 - 2014-06-05 17:08 - 01663308 _____ C:\WINDOWS\system32\nvdata.data
2015-11-02 14:29 - 2014-06-05 17:11 - 00335872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrshe.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00335872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsar.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00286720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsfr.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00282624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsit.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00282624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrses.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00282624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsel.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00278528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsde.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00274432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrspt.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00274432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsnl.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00274432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsja.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00274432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsesm.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00270336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsru.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00270336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsptb.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00266240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsko.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00262144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrshu.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00258048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrstr.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00258048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrssl.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00258048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrssk.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00258048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrspl.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00253952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsth.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00253952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrssv.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00253952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsno.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00253952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsda.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00249856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrsfi.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00249856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrseng.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00249856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrscs.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00229376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrszhc.dll
2015-11-02 14:29 - 2014-06-05 17:11 - 00126976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvrszht.dll
2015-11-02 14:27 - 2014-06-05 17:11 - 15208056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-11-02 14:27 - 2014-06-05 17:11 - 00375088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-11-02 14:27 - 2014-06-05 17:11 - 00144504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
2015-11-02 14:27 - 2014-06-05 17:11 - 00142968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcolor.exe
2015-11-02 14:27 - 2014-06-05 17:11 - 00054272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwddi.dll
2015-11-01 20:34 - 2014-06-05 15:25 - 00000000 ____D C:\Documents and Settings\boss
2015-11-01 17:50 - 2014-06-05 15:25 - 00000000 ___HD C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji
2015-11-01 17:49 - 2014-06-05 17:05 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy
2015-11-01 17:49 - 2014-06-05 17:03 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji
2015-11-01 17:48 - 2014-07-31 12:09 - 00000000 ____D C:\Documents and Settings\boss\Moje dokumenty\Pobrane
2015-11-01 00:10 - 2014-06-05 16:13 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2015-10-31 23:30 - 2014-06-05 17:05 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit
2015-10-31 23:23 - 2014-06-05 15:54 - 00000730 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk
2015-10-31 23:23 - 2014-06-05 15:54 - 00000724 _____ C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
2015-10-28 08:46 - 2014-06-05 17:11 - 06027430 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-10-25 17:51 - 2014-06-05 17:05 - 01260628 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-25 17:51 - 2001-10-26 17:15 - 00557816 _____ C:\WINDOWS\system32\perfh015.dat
2015-10-25 17:51 - 2001-10-26 17:15 - 00105412 _____ C:\WINDOWS\system32\perfc015.dat
2015-10-24 17:02 - 2014-06-05 15:48 - 00000000 ____D C:\Program Files\Google
2015-10-24 17:02 - 2014-06-05 15:48 - 00000000 ____D C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\Google
2015-10-22 14:18 - 2014-06-05 15:54 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-10-22 14:18 - 2014-06-05 15:47 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-10-21 19:27 - 2014-06-05 16:11 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Silverlight
2015-10-20 16:08 - 2014-06-05 15:25 - 00000000 ___RD C:\Documents and Settings\boss\Moje dokumenty
2015-10-18 14:32 - 2014-06-05 16:52 - 00780488 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-10-18 14:32 - 2014-06-05 16:52 - 00142536 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-10-14 15:38 - 2014-06-06 11:57 - 00065536 _____ C:\WINDOWS\system32\config\OAlerts.evt
2015-10-14 14:47 - 2014-08-31 10:48 - 00026624 ___SH C:\Documents and Settings\boss\Pulpit\Thumbs.db

==================== Pliki w katalogu głównym wybranych folderów =======

2014-06-07 18:08 - 2015-05-03 13:50 - 0007680 _____ () C:\Documents and Settings\boss\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

==================== Koniec  FRST.txt ============================