Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:07-11-2015
Uruchomiony przez dom (administrator)  DOM-KOMPUTER (10-11-2015 16:57:45)
Uruchomiony z C:\Users\dom\Downloads
Załadowane profile: dom (Dostępne profile: dom)
Platform: Windows 7 Ultimate (X64) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Windows\SysWOW64\ASGT.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(DTools LIMITED) C:\ProgramData\aWMiniProa\WMiniPro.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.25\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.25\opera.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.25\opera.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-21] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-12-20] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-05-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-10-01] (Raptr, Inc)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3779496 2015-10-19] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-842412909-2400916400-2872321181-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [48138880 2015-10-14] (Skype Technologies S.A.)
HKU\S-1-5-21-842412909-2400916400-2872321181-1000\...\MountPoints2: {94aac812-4080-11e5-9d7b-806e6f6e6963} - F:\CheckID.exe

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 37.8.214.2 31.11.202.254
Tcpip\..\Interfaces\{DADA3662-0A19-4B9E-8024-4A7081CBDD10}: [DhcpNameServer] 37.8.214.2 31.11.202.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
SearchScopes: HKU\S-1-5-21-842412909-2400916400-2872321181-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1447103206&z=b26153ea73a040a16a9a720gaz3z7m3gfe2oetde1c&from=cor&uid=ST1000DM003-1ER162_W4Y2QD7JXXXXW4Y2QD7J

FireFox:
========
FF ProfilePath: C:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\7ron4s7c.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: istartsurf
FF SelectedSearchEngine: istartsurf
FF Homepage: about:home
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF SearchPlugin: C:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\7ron4s7c.default\searchplugins\istartsurf.xml [2015-11-10]
FF Extension: Default SearchProtected  - C:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\7ron4s7c.default\Extensions\defsearchp@gmail.com [2015-11-09] [Brak podpisu cyfrowego]
FF Extension: deskCut - C:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\7ron4s7c.default\Extensions\deskCutv2@gmail.com [2015-11-09] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\7ron4s7c.default\extensions\defsearchp@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\7ron4s7c.default\extensions\deskCutv2@gmail.com

Opera: 
=======
StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe hxxp://www.istartsurf.com/?type=sc&ts=1447103206&z=b26153ea73a040a16a9a720gaz3z7m3gfe2oetde1c&from=cor&uid=ST1000DM003-1ER162_W4Y2QD7JXXXXW4Y2QD7J

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [Brak podpisu cyfrowego]
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3642280 2015-10-19] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [335656 2015-10-19] (AVG Technologies CZ, s.r.o.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 WdsManPro; C:\ProgramData\aWMiniProa\WMiniPro.exe [301704 2015-11-09] (DTools LIMITED)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162784 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [315312 2015-10-19] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [297904 2015-08-19] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [259040 2015-06-16] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378336 2015-05-07] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [250800 2015-08-04] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40928 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [300464 2015-08-04] (AVG Technologies CZ, s.r.o.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-21] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-10 16:57 - 2015-11-10 16:58 - 00011768 _____ C:\Users\dom\Downloads\FRST.txt
2015-11-10 16:51 - 2015-11-10 16:57 - 00000000 ____D C:\FRST
2015-11-10 16:51 - 2015-11-10 16:51 - 02198528 _____ (Farbar) C:\Users\dom\Downloads\FRST64.exe
2015-11-10 16:50 - 2015-11-10 16:50 - 01702400 _____ (Farbar) C:\Users\dom\Downloads\FRST.exe
2015-11-10 16:50 - 2015-11-10 16:50 - 00380416 _____ C:\Users\dom\Downloads\9uo0ls8e.exe
2015-11-10 10:33 - 2015-11-10 16:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-11-09 22:07 - 2015-11-09 22:08 - 00000000 ____D C:\Users\dom\AppData\Roaming\Media Player Classic
2015-11-09 22:07 - 2015-11-09 22:08 - 00000000 ____D C:\ProgramData\aWMiniProa
2015-11-09 22:07 - 2015-11-09 22:07 - 00000098 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-11-09 22:07 - 2015-11-09 22:07 - 00000000 ____D C:\Users\dom\REACHit
2015-11-09 22:07 - 2015-11-09 22:07 - 00000000 ____D C:\Users\dom\AppData\Roaming\istartsurf
2015-11-09 22:07 - 2015-11-09 22:07 - 00000000 ____D C:\Users\dom\AppData\Local\Lenovo
2015-11-09 22:06 - 2015-11-09 22:06 - 01563749 _____ C:\Users\dom\Downloads\MPC_XPVist_6.4.9.1_(12.06.08)_PL(dobreprogramy.pl).zip
2015-11-09 22:06 - 2015-11-09 22:06 - 00001820 _____ C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\REACHit Drive.lnk
2015-11-09 22:06 - 2015-11-09 22:06 - 00000000 ____D C:\Windows\System32\Tasks\Lenovo
2015-11-09 22:06 - 2015-11-09 22:06 - 00000000 ____D C:\Users\dom\AppData\Local\Downloaded Installations
2015-11-09 22:06 - 2015-11-09 22:06 - 00000000 ____D C:\Program Files (x86)\Lenovo
2015-11-09 22:05 - 2015-11-09 22:05 - 00958216 _____ (Internet software ) C:\Users\dom\Downloads\Media-Player-Classic-12273-dp.exe
2015-11-09 21:46 - 2015-11-09 21:46 - 00004441 _____ C:\Users\dom\AppData\Local\recently-used.xbel
2015-11-09 20:54 - 2015-11-09 20:54 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2015-11-09 20:09 - 2015-11-09 23:18 - 00011264 _____ C:\Users\dom\Documents\clasps.xls
2015-11-09 12:35 - 2015-11-09 12:46 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-11-09 12:35 - 2015-11-09 12:42 - 00001096 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-11-09 12:35 - 2015-11-09 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-11-09 12:35 - 2015-11-09 12:35 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-11-09 12:35 - 2015-11-09 12:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-11-09 12:35 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-11-09 12:35 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-11-09 12:35 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-11-09 12:34 - 2015-11-09 12:34 - 22908888 _____ (Malwarebytes ) C:\Users\dom\Downloads\mbam-setup-2.2.0.1024.exe
2015-10-19 12:32 - 2015-10-19 12:32 - 00315312 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-10 16:55 - 2009-07-14 05:45 - 00013392 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-10 16:55 - 2009-07-14 05:45 - 00013392 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-10 16:52 - 2015-08-11 22:39 - 00000000 ____D C:\Program Files (x86)\Opera
2015-11-10 16:51 - 2015-08-11 19:32 - 01515851 _____ C:\Windows\WindowsUpdate.log
2015-11-10 16:48 - 2015-08-11 22:40 - 00000000 ____D C:\Users\dom\AppData\Roaming\Skype
2015-11-10 16:48 - 2015-08-11 19:51 - 00000000 ____D C:\Users\dom\AppData\Roaming\Raptr
2015-11-10 16:47 - 2015-08-12 07:06 - 00087896 _____ C:\Windows\PFRO.log
2015-11-10 16:47 - 2015-08-11 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-10 16:47 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-10 16:47 - 2009-07-14 05:51 - 00031022 _____ C:\Windows\setupact.log
2015-11-10 14:28 - 2015-08-12 07:27 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-11-10 10:31 - 2015-08-11 22:44 - 00002470 _____ C:\Windows\IE11_main.log
2015-11-10 10:16 - 2015-08-12 07:25 - 00000000 ____D C:\ProgramData\MFAData
2015-11-09 22:07 - 2015-08-11 19:32 - 00000000 ____D C:\Users\dom
2015-11-09 22:06 - 2015-08-11 22:40 - 00001417 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-11-09 22:06 - 2015-08-11 22:40 - 00001405 _____ C:\Users\Public\Desktop\Opera.lnk
2015-11-09 22:06 - 2015-08-11 19:52 - 00000000 ____D C:\Windows\Downloaded Installations
2015-11-09 22:06 - 2015-08-11 19:50 - 00001453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-11-09 22:06 - 2015-08-11 19:50 - 00001441 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-11-09 21:47 - 2015-08-13 21:47 - 00000000 ____D C:\Users\dom\.gimp-2.8
2015-11-09 21:46 - 2015-08-13 22:05 - 00000000 ____D C:\Users\dom\AppData\Local\gtk-2.0
2015-11-09 20:55 - 2009-07-14 18:55 - 00740732 _____ C:\Windows\system32\perfh015.dat
2015-11-09 20:55 - 2009-07-14 18:55 - 00155804 _____ C:\Windows\system32\perfc015.dat
2015-11-09 20:55 - 2009-07-14 06:13 - 01671648 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-09 12:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Vss
2015-11-09 12:42 - 2015-08-14 22:47 - 00001136 _____ C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
2015-11-09 12:42 - 2015-08-13 22:40 - 00000992 _____ C:\Users\Public\Desktop\IrfanView.lnk
2015-11-09 12:42 - 2015-08-13 21:44 - 00000926 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2015-11-09 12:42 - 2015-08-12 07:28 - 00000989 _____ C:\Users\Public\Desktop\AVG 2015.lnk
2015-11-09 12:42 - 2015-08-12 00:31 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-11-09 12:42 - 2015-08-12 00:31 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-11-09 12:42 - 2015-08-11 22:40 - 00002693 _____ C:\Users\Public\Desktop\Skype.lnk
2015-11-09 12:42 - 2015-08-11 19:33 - 00001451 _____ C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-11-09 12:42 - 2015-08-11 19:33 - 00001417 _____ C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-11-09 12:42 - 2009-07-14 06:01 - 00001218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2015-11-09 12:42 - 2009-07-14 05:57 - 00001511 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-11-09 12:42 - 2009-07-14 05:57 - 00001292 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2015-11-09 12:42 - 2009-07-14 05:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2015-11-09 12:42 - 2009-07-14 05:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2015-11-09 12:42 - 2009-07-14 05:49 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2015-11-08 23:07 - 2015-08-11 22:40 - 00000000 ____D C:\ProgramData\Skype
2015-11-07 15:37 - 2015-08-12 07:27 - 00000992 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-11-04 09:34 - 2015-08-11 19:51 - 00000000 ____D C:\Program Files (x86)\Raptr
2015-10-23 09:24 - 2015-08-12 07:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-10-17 10:28 - 2015-08-12 07:27 - 00003990 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-10-17 10:28 - 2015-08-12 07:27 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-10-17 10:28 - 2015-08-11 23:26 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-17 10:28 - 2015-08-11 23:26 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-13 14:08 - 2009-07-14 06:08 - 00032592 _____ C:\Windows\Tasks\SCHEDLGU.TXT

==================== Pliki w katalogu głównym wybranych folderów =======

2015-11-09 21:46 - 2015-11-09 21:46 - 0004441 _____ () C:\Users\dom\AppData\Local\recently-used.xbel
2015-08-11 19:40 - 2015-08-11 19:40 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-11-09 22:07 - 2015-11-09 22:07 - 0000098 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


Niektóre pliki w TEMP:
====================
C:\Users\dom\AppData\Local\Temp\raptrpatch.exe
C:\Users\dom\AppData\Local\Temp\raptr_stub.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-10-31 17:23

==================== Koniec  FRST.txt ============================