Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:05-11-2015
Uruchomiony przez Compaq (administrator)  COMPAQ-PC (07-11-2015 08:39:05)
Uruchomiony z C:\Users\Compaq\Desktop\Dezynfekcja
Załadowane profile: Compaq (Dostępne profile: Compaq)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\fdhost.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\System32\WerFault.exe
(Google Inc.) C:\Users\Compaq\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Compaq\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [212992 2012-02-16] (Alps Electric Co., Ltd.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5078504 2013-03-21] (ESET)
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {44015b52-12fd-11e3-8b68-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {44015b6c-12fd-11e3-8b68-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {538d81f5-5c6b-11e1-8c8a-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {538d8201-5c6b-11e1-8c8a-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {538d820f-5c6b-11e1-8c8a-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {538d8210-5c6b-11e1-8c8a-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {538d8216-5c6b-11e1-8c8a-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {538d8224-5c6b-11e1-8c8a-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {9517228c-96df-11e1-acae-806e6f6e6963} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {bc075553-b3df-11e2-89a8-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {bc07555a-b3df-11e2-89a8-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {bc9b494d-5cb3-11e1-a3f4-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {bc9b494e-5cb3-11e1-a3f4-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {bc9b4956-5cb3-11e1-a3f4-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {bc9b4968-5cb3-11e1-a3f4-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {d31951fd-5c67-11e1-987a-001b38391fbb} - F:\AutoRun.exe
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\...\MountPoints2: {f975478c-5d68-11e1-9acb-806e6f6e6963} - F:\AutoRun.exe
ShellIconOverlayIdentifiers: [Uchwyt nakładania ikony podpisu cyfrowego] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2007-02-12] (Autodesk, Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{53683A4D-BF39-4983-865E-A01C562C7D67}: [DhcpNameServer] 192.168.192.2 192.168.184.2
Tcpip\..\Interfaces\{DC1FEAA3-4113-46FE-A26C-02837F416F42}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-2247296619-1886198515-484620822-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=170
BHO: plushd8.1 -> {11111111-1111-1111-1111-110511111108} -> C:\Program Files\plushd8.1\plushd8.1-bho.dll => Brak pliku
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-10-06] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-10-06] (Oracle Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_67-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0067-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_67-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_67-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Compaq\AppData\Roaming\Mozilla\Firefox\Profiles\s996bb52.default
FF Homepage: hxxp://www.gazeta.pl/0,0.html?p=170
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-17] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [2012-02-02] (Adobe Systems, Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-10-06] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-10-06] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-10-06] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/VirtualEarth3D,version=4.0 -> C:\Program Files\Virtual Earth 3D\ [] ()
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2247296619-1886198515-484620822-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Compaq\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-20] (Google Inc.)
FF Plugin HKU\S-1-5-21-2247296619-1886198515-484620822-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Compaq\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-20] (Google Inc.)
FF Plugin HKU\S-1-5-21-2247296619-1886198515-484620822-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Compaq\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Extension: Iplex to ALLPlayer - C:\Users\Compaq\AppData\Roaming\Mozilla\Firefox\Profiles\s996bb52.default\Extensions\IplextoALL@ALLPlayer.org.xpi [2012-02-22] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-11-02] [Brak podpisu cyfrowego]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2013-09-24] [Brak podpisu cyfrowego]

Chrome: 
=======
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Compaq\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.824\_platform_specific\win_x86\widevinecdmadapter.dll (Google Inc.)
CHR Plugin: (Shockwave Flash) - C:\Users\Compaq\AppData\Local\Google\Chrome\Application\46.0.2490.80\PepperFlash\pepflashplayer.dll ()
CHR Profile: C:\Users\Compaq\AppData\Local\Google\Chrome\User Data\Profile 6
CHR Extension: (Prezentacje Google) - C:\Users\Compaq\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-10-31]
CHR Extension: (Dokumenty Google) - C:\Users\Compaq\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-31]
CHR Extension: (Dysk Google) - C:\Users\Compaq\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-31]
CHR Extension: (YouTube) - C:\Users\Compaq\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-31]
CHR Extension: (Google Search) - C:\Users\Compaq\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-31]
CHR Extension: (Arkusze Google) - C:\Users\Compaq\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-10-31]
CHR Extension: (Dokumenty Google offline) - C:\Users\Compaq\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-10-31]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Compaq\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-31]
CHR Extension: (Gmail) - C:\Users\Compaq\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-31]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1341664 2013-03-21] (ESET)
R2 FirebirdGuardianDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2012-11-01] (Firebird Project) [Brak podpisu cyfrowego]
R3 FirebirdServerDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe [3784704 2012-11-01] (Firebird Project) [Brak podpisu cyfrowego]
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1044816 2012-10-16] (Flexera Software, Inc.)
R2 hasplms; C:\Windows\system32\hasplms.exe [3750400 2009-12-16] (SafeNet Inc.)
R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [335872 2003-03-19] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [42884448 2010-04-03] (Microsoft Corporation)
R3 MSSQLFDLauncher$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\fdlauncher.exe [28512 2010-04-03] (Microsoft Corporation)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [367456 2010-04-03] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)
S3 Workflow Manager Spatial Notification Service; C:\Program Files\WMX\Desktop10.1\Bin\WMXSpatialNotificationService.exe [17408 2012-04-24] (ESRI) [Brak podpisu cyfrowego]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 aksfridge; C:\Windows\system32\drivers\aksfridge.sys [358400 2010-04-13] (SafeNet Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [171680 2013-02-14] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [122240 2013-01-10] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [105760 2013-01-10] (ESET)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [588800 2009-12-09] (SafeNet Inc.)
S4 RsFx0150; C:\Windows\System32\DRIVERS\RsFx0150.sys [240608 2010-04-03] (Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-05 22:22 - 2015-11-05 22:22 - 00000018 _____ C:\Users\Compaq\Desktop\nip.txt
2015-11-01 20:36 - 2015-11-01 20:36 - 00000000 ____D C:\Users\Compaq\AppData\Local\PackageAware
2015-11-01 19:29 - 2015-11-01 19:29 - 00000000 ____D C:\Users\Compaq\AppData\Roaming\hpqLog
2015-11-01 14:56 - 2015-11-01 21:11 - 00007093 _____ C:\Users\Compaq\sanct.log
2015-11-01 14:56 - 2015-11-01 21:11 - 00000406 _____ C:\Users\Compaq\ia_oasis.log
2015-11-01 14:56 - 2015-11-01 21:10 - 00005343 _____ C:\Users\Compaq\regwizard.log
2015-11-01 14:56 - 2015-11-01 21:10 - 00000000 ___HD C:\ProgramData\{09FECC13-2950-4AE6-BB23-05C206979F18}
2015-11-01 14:56 - 2015-11-01 21:10 - 00000000 ____D C:\Users\Compaq\AppData\Roaming\Embarcadero
2015-11-01 14:56 - 2015-11-01 14:56 - 00000000 ____D C:\ProgramData\Embarcadero
2015-11-01 11:12 - 2015-11-07 08:03 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-11-01 11:12 - 2015-11-07 07:37 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-11-01 11:10 - 2015-11-07 07:36 - 00094936 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-11-01 10:45 - 2015-11-01 10:45 - 00000000 ____D C:\Users\Compaq\AppData\Local\ESET
2015-11-01 09:08 - 2015-11-01 10:45 - 00000000 ___HD C:\Users\Compaq\.htrufv-uh
2015-11-01 09:08 - 2015-11-01 10:45 - 00000000 ____D C:\Users\Compaq\.borland
2015-11-01 08:41 - 2015-11-01 08:41 - 00000000 ____D C:\Program Files\Borland
2015-11-01 08:24 - 2015-11-01 08:24 - 00000094 _____ C:\Users\Compaq\AppData\Local\fusioncache.dat
2015-10-31 15:47 - 2015-11-07 08:39 - 00000000 ____D C:\Users\Compaq\Desktop\Dezynfekcja
2015-10-31 14:21 - 2015-11-07 07:31 - 00000000 ____D C:\AdwCleaner
2015-10-31 12:35 - 2015-10-31 12:36 - 00000000 ____D C:\ProgramData\JWMiniProJ
2015-10-31 12:35 - 2015-10-31 12:35 - 00000098 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-10-31 12:33 - 2015-10-31 12:33 - 105537579 _____ C:\Users\Compaq\Downloads\Borland C++ Builder 6 Personal [1].exe
2015-10-31 12:33 - 2015-10-31 12:33 - 00000000 ____D C:\Users\Compaq\AppData\Roaming\sparta111
2015-10-31 12:33 - 2015-10-31 12:33 - 00000000 ____D C:\Program Files\360
2015-10-31 12:32 - 2015-10-31 13:16 - 00000000 ____D C:\Users\Compaq\AppData\Local\Sparta
2015-10-31 07:30 - 2015-10-31 07:31 - 00043234 _____ C:\Users\Compaq\Downloads\Addition.txt
2015-10-31 07:27 - 2015-10-31 07:31 - 00035514 _____ C:\Users\Compaq\Downloads\FRST.txt
2015-10-31 07:26 - 2015-11-07 08:39 - 00000000 ____D C:\FRST
2015-10-31 07:24 - 2015-10-31 07:25 - 01701888 _____ (Farbar) C:\Users\Compaq\Downloads\FRST.exe
2015-10-22 08:08 - 2015-10-22 08:09 - 00000000 ____D C:\Users\Compaq\.weasis
2015-10-19 13:54 - 2015-10-19 13:54 - 00007880 _____ C:\Users\Compaq\Downloads\CERTIFICATE
2015-10-18 12:21 - 2015-10-18 16:00 - 00000000 ____D C:\Users\Compaq\Desktop\Praktyki RzM
2015-10-18 10:51 - 2015-10-18 10:51 - 00000000 _____ C:\Users\Compaq\AppData\Local\{C9C72F75-E1D5-4583-83EC-48D884231316}
2015-10-15 22:24 - 2015-10-15 22:24 - 00000000 ____D C:\Users\Compaq\AppData\Local\Opera Software
2015-10-15 22:23 - 2015-10-15 22:26 - 00000000 ____D C:\Users\Compaq\.ebookreader
2015-10-15 22:23 - 2015-10-15 22:23 - 00000918 _____ C:\Users\Public\Desktop\Icecream Ebook Reader.lnk
2015-10-15 22:23 - 2015-10-15 22:23 - 00000000 ____D C:\Users\Compaq\AppData\Roaming\Opera Software
2015-10-15 22:23 - 2015-10-15 22:23 - 00000000 ____D C:\Users\Compaq\AppData\Local\Icecream
2015-10-15 22:23 - 2015-10-15 22:23 - 00000000 ____D C:\Users\Compaq\AppData\Local\CrashRpt
2015-10-15 22:23 - 2015-10-15 22:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Icecream Ebook Reader
2015-10-15 22:23 - 2015-10-15 22:23 - 00000000 ____D C:\Program Files\Icecream Ebook Reader
2015-10-15 22:08 - 2015-10-31 13:13 - 00000799 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-10-15 22:08 - 2015-10-31 13:13 - 00000787 _____ C:\Users\Public\Desktop\Opera.lnk
2015-10-15 22:04 - 2015-11-05 10:39 - 00000000 ____D C:\Program Files\Opera
2015-10-15 22:04 - 2015-10-15 22:04 - 00000000 ____D C:\Users\Compaq\AppData\Roaming\Shortcut
2015-10-14 20:22 - 2015-07-18 14:14 - 00901264 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00015200 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00011104 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 20:22 - 2015-07-18 14:14 - 00011104 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 20:17 - 2015-09-28 18:17 - 01206192 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-10-14 20:17 - 2015-09-26 17:09 - 03606464 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-10-14 20:17 - 2015-09-26 17:09 - 03554240 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-14 20:09 - 2015-07-29 01:46 - 11588096 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-13 19:03 - 2015-09-11 08:22 - 01814016 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-13 19:03 - 2015-09-11 08:21 - 12388352 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-13 19:03 - 2015-09-11 08:19 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-10-13 19:03 - 2015-09-11 08:17 - 09751552 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-13 19:03 - 2015-09-11 08:16 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-13 19:03 - 2015-09-11 08:16 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-10-13 19:03 - 2015-09-11 08:15 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-10-13 19:03 - 2015-09-11 08:15 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-13 19:03 - 2015-09-11 08:14 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-10-13 19:03 - 2015-09-11 08:14 - 01804288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-13 19:03 - 2015-09-11 08:14 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-13 19:03 - 2015-09-11 08:14 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-10-13 19:03 - 2015-09-11 08:14 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-10-13 19:03 - 2015-09-11 08:14 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-10-13 19:03 - 2015-09-11 08:14 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-10-13 19:03 - 2015-09-11 08:14 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-10-13 19:03 - 2015-09-11 08:14 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-10-13 19:03 - 2015-09-11 08:14 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-10-13 19:03 - 2015-09-11 08:14 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-10-13 19:03 - 2015-09-11 08:14 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-10-13 19:03 - 2015-09-11 08:14 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-10-13 19:03 - 2015-09-11 08:14 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-10-13 11:55 - 2015-10-13 11:55 - 00000000 ____D C:\Users\Compaq\.idlerc
2015-10-13 11:16 - 2015-10-13 11:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 2.7
2015-10-13 11:10 - 2015-10-13 11:11 - 18423808 _____ C:\Users\Compaq\Downloads\python-2.7.10.msi

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-07 08:40 - 2012-02-16 13:45 - 00001062 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2247296619-1886198515-484620822-1000UA.job
2015-11-07 08:28 - 2013-10-09 14:30 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-07 08:28 - 2008-01-21 02:35 - 01888474 _____ C:\Windows\WindowsUpdate.log
2015-11-07 08:10 - 2014-11-27 17:40 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-11-07 08:06 - 2013-10-09 14:30 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-07 08:06 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-07 08:06 - 2006-11-02 13:47 - 00004160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-07 08:06 - 2006-11-02 13:47 - 00004160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-07 07:27 - 2006-11-02 14:01 - 00032546 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-11-07 06:50 - 2015-07-16 20:35 - 00001062 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2247296619-1886198515-484620822-1000UA1d0bffe8d75658c.job
2015-11-05 21:50 - 2012-02-16 13:45 - 00001010 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2247296619-1886198515-484620822-1000Core.job
2015-11-04 13:14 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Microsoft.NET
2015-11-02 04:25 - 2012-02-16 13:46 - 00000000 ____D C:\Program Files\Adobe
2015-11-01 20:21 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Registration
2015-11-01 19:30 - 2012-02-16 15:48 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2015-11-01 19:27 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\pl-PL
2015-11-01 19:22 - 2012-02-16 13:46 - 00000000 ____D C:\Program Files\Java
2015-11-01 17:44 - 2012-02-25 17:27 - 00000000 ____D C:\Program Files\Microsoft.NET
2015-11-01 17:44 - 2012-02-25 17:25 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-11-01 17:44 - 2006-11-02 12:18 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-11-01 16:35 - 2012-03-24 20:38 - 00000000 ____D C:\Windows\Minidump
2015-11-01 16:05 - 2012-04-12 09:09 - 00000000 ____D C:\Program Files\Common Files\Borland Shared
2015-11-01 14:56 - 2012-02-16 11:49 - 00000000 ____D C:\Users\Compaq
2015-11-01 11:05 - 2006-11-02 12:18 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-11-01 08:29 - 2008-01-21 07:24 - 01840050 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-01 08:29 - 2008-01-21 07:24 - 00793800 _____ C:\Windows\system32\perfh015.dat
2015-11-01 08:29 - 2008-01-21 07:24 - 00183284 _____ C:\Windows\system32\perfc015.dat
2015-10-31 13:13 - 2013-10-09 14:40 - 00001813 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bing Maps 3D.lnk
2015-10-31 13:13 - 2012-02-16 11:49 - 00000957 _____ C:\Users\Compaq\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-10-31 12:43 - 2008-01-21 03:47 - 00215112 _____ C:\Windows\PFRO.log
2015-10-22 08:07 - 2012-02-16 11:49 - 00000000 ____D C:\Users\Compaq\AppData\Local\VirtualStore
2015-10-17 10:10 - 2014-11-27 17:40 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-10-17 10:10 - 2012-02-16 13:38 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-10-17 08:54 - 2012-02-16 13:53 - 00002425 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-10-15 21:12 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2015-10-14 21:10 - 2015-05-10 12:27 - 00000000 ____D C:\Windows\system32\MRT
2015-10-14 20:37 - 2006-11-02 11:24 - 141105520 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2015-10-13 21:09 - 2015-10-06 21:09 - 00000000 ____D C:\Users\Compaq\Desktop\Praca
2015-10-13 11:16 - 2012-10-16 12:00 - 00000000 ____D C:\Python27
2015-10-12 16:04 - 2006-11-02 13:52 - 00114372 _____ C:\Windows\setupact.log

==================== Pliki w katalogu głównym wybranych folderów =======

2015-09-08 18:22 - 2015-09-08 18:22 - 6420480 _____ () C:\Program Files\GUT31C.tmp
2013-08-28 20:45 - 2014-11-23 08:45 - 0000093 _____ () C:\Users\Compaq\AppData\Roaming\WB.CFG
2014-01-02 17:46 - 2014-01-02 17:46 - 0000005 _____ () C:\Users\Compaq\AppData\Roaming\WBPU-Q5-TTL.DAT
2013-06-15 00:15 - 2014-01-28 10:47 - 0000005 _____ () C:\Users\Compaq\AppData\Roaming\WBPU-TTL.DAT
2012-02-16 16:48 - 2012-02-16 16:48 - 0000000 _____ () C:\Users\Compaq\AppData\Local\AtStart.txt
2012-02-16 11:49 - 2014-11-19 20:27 - 0001356 _____ () C:\Users\Compaq\AppData\Local\d3d9caps.dat
2012-02-20 18:26 - 2015-06-21 20:39 - 0030208 _____ () C:\Users\Compaq\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-02-16 16:48 - 2012-02-16 16:48 - 0000000 _____ () C:\Users\Compaq\AppData\Local\DSwitch.txt
2015-11-01 08:24 - 2015-11-01 08:24 - 0000094 _____ () C:\Users\Compaq\AppData\Local\fusioncache.dat
2012-02-16 16:48 - 2012-02-16 16:48 - 0000000 _____ () C:\Users\Compaq\AppData\Local\QSwitch.txt
2014-03-22 16:57 - 2014-03-22 16:57 - 0025096 _____ () C:\Users\Compaq\AppData\Local\recently-used.xbel
2015-10-18 10:51 - 2015-10-18 10:51 - 0000000 _____ () C:\Users\Compaq\AppData\Local\{C9C72F75-E1D5-4583-83EC-48D884231316}
2013-10-04 15:16 - 2013-10-04 15:16 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-10-31 12:35 - 2015-10-31 12:35 - 0000098 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-11-07 08:35

==================== Koniec  FRST.txt ============================