Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:25-11-2015 02
Uruchomiony przez Michał (administrator)  MI (26-11-2015 21:31:58)
Uruchomiony z C:\Documents and Settings\Michał\Pulpit\pobrane
Załadowane profile: Michał (Dostępne profile: Michał)
Platform: Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) Język: Polski
Internet Explorer Wersja 8 (Domyślna przeglądarka: IE)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Atheros) C:\WINDOWS\system32\acs.exe
(Agere Systems) C:\WINDOWS\system32\agrsmsvc.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\BBSvc.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(Skype Technologies S.A.) C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe
(Zetera Corporation) C:\Program Files\NETGEAR\NETGEAR Storage Central Manager Utility\Z-SANService.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Atheros Communications, Inc.) C:\Program Files\Atheros\ACU.exe
(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
(Power Software Ltd) C:\Program Files\PowerISO\PWRISOVM.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Redefine Sp z o.o.) C:\Program Files\ipla\ipla.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(PC Cleaners Inc.) C:\Documents and Settings\All Users\Dane aplikacji\PC Cleaner Pro\PCCleaners.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.226\SSScheduler.exe
(Google Inc.) C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(Dropbox, Inc.) C:\Documents and Settings\Michał\Dane aplikacji\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\SeaPort.EXE


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16860672 2009-02-26] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1024000 2009-02-26] (Synaptics, Inc.)
HKLM\...\Run: [Camera Assistant Software] => C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe [417792 2008-04-29] (Chicony)
HKLM\...\Run: [ACU] => C:\Program Files\Atheros\ACU.exe [450648 2008-01-26] (Atheros Communications, Inc.)
HKLM\...\Run: [Microsoft Default Manager] => "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
HKLM\...\Run: [BluetoothAuthenticationAgent] => rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
HKLM\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [336992 2012-05-31] (Power Software Ltd)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-08-08] (AVAST Software)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\qttask.exe [421888 2014-01-17] (Apple Inc.)
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\update\realsched.exe [295512 2015-08-06] (RealNetworks, Inc.)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2009-02-26] (ATI Technologies Inc.)
HKLM\...\Policies\Explorer: [NoCDBurning] 0
HKU\S-1-5-21-448539723-1123561945-1801674531-1004\...\Run: [SpeedUpMyPC] => "C:\Program Files\Uniblue\SpeedUpMyPC\launcher.exe" delay 20000 
HKU\S-1-5-21-448539723-1123561945-1801674531-1004\...\Run: [Badoo Desktop] => "C:\Documents and Settings\All Users\Dane aplikacji\Badoo\Badoo Desktop\1.5.3.949\Badoo.Desktop.exe"
HKU\S-1-5-21-448539723-1123561945-1801674531-1004\...\Run: [UpdateStar Drivers] => C:\Program Files\UpdateStar Drivers\drivers.exe
HKU\S-1-5-21-448539723-1123561945-1801674531-1004\...\Run: [Google Update] => C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [144200 2015-09-09] (Google Inc.)
HKU\S-1-5-21-448539723-1123561945-1801674531-1004\...\Run: [Dropbox Update] => C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.)
HKU\S-1-5-21-448539723-1123561945-1801674531-1004\...\Run: [IPLA!] => C:\Program Files\ipla\ipla.exe [21360736 2014-12-12] (Redefine Sp z o.o.)
HKU\S-1-5-21-448539723-1123561945-1801674531-1004\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [57987712 2015-09-28] (Skype Technologies S.A.)
HKU\S-1-5-21-448539723-1123561945-1801674531-1004\...\Run: [PC Cleaners] => C:\Documents and Settings\All Users\Dane aplikacji\PC Cleaner Pro\PCCleaners.exe [80520600 2015-11-10] (PC Cleaners Inc.)
HKU\S-1-5-18\...\Run: [Google Update] => C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [116648 2014-02-10] (Google Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Michał\Dane aplikacji\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Michał\Dane aplikacji\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Michał\Dane aplikacji\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Michał\Dane aplikacji\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Michał\Dane aplikacji\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Michał\Dane aplikacji\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Michał\Dane aplikacji\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Michał\Dane aplikacji\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2014-05-13] (AVAST Software)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2008-02-09] (Autodesk, Inc.)
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Bluetooth Monitor.lnk [2009-02-26]
ShortcutTarget: Bluetooth Monitor.lnk -> C:\Program Files\TOSHIBA\Bluetooth Monitor\BtMon2.exe (TOSHIBA CORPORATION)
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk [2015-11-11]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.226\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Documents and Settings\Michał\Menu Start\Programy\Autostart\Dropbox.lnk [2015-11-12]
ShortcutTarget: Dropbox.lnk -> C:\Documents and Settings\Michał\Dane aplikacji\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 62.13.169.92 62.13.169.93
Tcpip\..\Interfaces\{56BA4713-246A-4EED-8992-BBD7D4571238}: [NameServer] 213.158.199.1,213.158.199.5
Tcpip\..\Interfaces\{84B09500-D9E5-40DF-BF31-52AB01F22AD2}: [NameServer] 213.158.199.1,213.158.199.5
Tcpip\..\Interfaces\{A8B8ADEE-53C5-42D1-A7B1-8A8D16853EB1}: [DhcpNameServer] 62.13.169.92 62.13.169.93

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\S-1-5-21-448539723-1123561945-1801674531-1004\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://it.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-448539723-1123561945-1801674531-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://it.yahoo.com/?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-448539723-1123561945-1801674531-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://it.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-448539723-1123561945-1801674531-1004\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://it.yahoo.com/?fr=hp-avast&type=avastbcl
URLSearchHook: HKU\S-1-5-21-448539723-1123561945-1801674531-1004 - SearchHook Class - {D8278076-BC68-4484-9233-6E7F1628B56C} - "C:\Program Files\AskPartnerNetwork\Toolbar\searchhook.dll" Brak pliku
URLSearchHook: HKU\S-1-5-21-448539723-1123561945-1801674531-1004 - (Brak nazwy) - {5bcf818d-78c8-41b8-ba89-65c5fdac4fc4} - C:\Program Files\Allin1Convert_8h\bar\1.bin\8hSrcAs.dll Brak pliku
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= UWAGA
SearchScopes: HKLM -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://it.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM -> {274daec0-c4e8-4f30-9e5c-9424990769b9} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^0D^xdm269^YYA^it&ptb=56CD13EE-7FC4-4A9F-862D-751C3BEB3ABC&ind=2013111309&n=77fda40d&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKLM -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://it.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-448539723-1123561945-1801674531-1004 -> DefaultScope {90FF5F3D-091F-4F8D-9820-F7F02F1CBF6A} URL = hxxp://www.nasza-klasa.pl/szukaj/profile?q={searchTerms}
SearchScopes: HKU\S-1-5-21-448539723-1123561945-1801674531-1004 -> {274daec0-c4e8-4f30-9e5c-9424990769b9} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^0D^xdm269^YYA^it&ptb=56CD13EE-7FC4-4A9F-862D-751C3BEB3ABC&ind=2013111309&n=77fda40d&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKU\S-1-5-21-448539723-1123561945-1801674531-1004 -> {6AC0E5BB-9934-4F5C-BE58-E59AC45D9CB9} URL = hxxp://www.bing.com/search?FORM=MSSL&PC=MSSL&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-448539723-1123561945-1801674531-1004 -> {90FF5F3D-091F-4F8D-9820-F7F02F1CBF6A} URL = hxxp://www.nasza-klasa.pl/szukaj/profile?q={searchTerms}
SearchScopes: HKU\S-1-5-21-448539723-1123561945-1801674531-1004 -> {9A9A1548-85C3-4FC0-A4B0-05FF52D025FC} URL = hxxp://www.search.ask.com/web?tpid=ORJ-SPE&o=APN11406&pf=V7&p2=^BBE^OSJ000^YY^IT&gct=sb&itbv=12.24.1.51&apn_uid=B330944F-7CD1-47BA-A260-DDBF88E54521&apn_ptnrs=BBE&apn_dtid=^OSJ000^YY^IT&apn_dbr=ie_8.0.6001.18702&doi=2015-03-19&trgb=IE&q={searchTerms}&psv=&pt=tb
SearchScopes: HKU\S-1-5-21-448539723-1123561945-1801674531-1004 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://it.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-448539723-1123561945-1801674531-1004 -> {E4F316CF-5C5C-44DE-A63E-BD418A243EF2} URL = hxxp://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=1I7ADSA_pl
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22] (Hewlett-Packard Co.)
BHO: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22] (Adobe Systems Incorporated)
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2014-08-12] (RealDownloader)
BHO: Brak nazwy -> {4F524A2D-5350-4500-76A7-7A786E7484D7} -> Brak pliku
BHO: Brak nazwy -> {4F524A2D-5637-4300-76A7-7A786E7484D7} -> Brak pliku
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-03-19] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-05-13] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Brak nazwy -> {a4c2fb10-84c3-44eb-9f9e-860fa1d9a797} -> Brak pliku
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll => Brak pliku
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-06-19] (Skype Technologies S.A.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll => Brak pliku
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-19] (Oracle Corporation)
BHO: IEPluginBHO Class -> {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} -> Brak pliku
BHO: Brak nazwy -> {fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d} -> Brak pliku
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22] (Hewlett-Packard Co.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll Brak pliku
Toolbar: HKLM - Brak nazwy - {4F524A2D-5637-4300-76A7-7A786E7484D7} -  Brak pliku
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM - Brak nazwy - {4F524A2D-5350-4500-76A7-7A786E7484D7} -  Brak pliku
Toolbar: HKLM - Brak nazwy - {cd1a63ba-a08c-431b-9a34-f240aadc728d} -  Brak pliku
Toolbar: HKU\S-1-5-21-448539723-1123561945-1801674531-1004 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll Brak pliku
Toolbar: HKU\S-1-5-21-448539723-1123561945-1801674531-1004 -> Brak nazwy - {4F524A2D-5637-4300-76A7-7A786E7484D7} -  Brak pliku
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-06-19] (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\ishyzk1h.default
FF Homepage: hxxp://pt.msn.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-12] ()
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2009-06-05] (GARMIN Corp.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-19] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-19] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/VirtualEarth3D,version=4.0 -> C:\Program Files\Virtual Earth 3D\ [] ()
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.4.19 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll [2015-08-06] (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.4 -> C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2014-08-12] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.4.19 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll [2015-08-06] (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2014-08-12] (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-17] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-17] (Google Inc.)
FF Plugin HKU\.DEFAULT: @tools.google.com/Google Update;version=3 -> C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2014-02-10] (Google Inc.)
FF Plugin HKU\.DEFAULT: @tools.google.com/Google Update;version=9 -> C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2014-02-10] (Google Inc.)
FF Plugin HKU\S-1-5-21-448539723-1123561945-1801674531-1004: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll [2013-11-06] (Skype Limited)
FF Plugin HKU\S-1-5-21-448539723-1123561945-1801674531-1004: @tools.google.com/Google Update;version=3 -> C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-448539723-1123561945-1801674531-1004: @tools.google.com/Google Update;version=9 -> C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\FFToolbar.xml [2009-06-23]
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\queryservice119.xml [2009-10-21]
FF Extension: Marine Aquarium Lite - C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\ishyzk1h.default\Extensions\57ffxtbr@MarineAquarium3Free_57.com [2013-11-13] [Brak podpisu cyfrowego]
FF Extension: Microsoft .NET Framework Assistant - C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\ishyzk1h.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2009-09-03] [Brak podpisu cyfrowego]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-06-21] [Brak podpisu cyfrowego]
FF Extension: QueryService - C:\Program Files\Mozilla Firefox\extensions\{BDE3E863-8F37-4B4D-BD6B-316EA72E6793} [2009-10-21] [Brak podpisu cyfrowego]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-03-19] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-09-02] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-12-21] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-13] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [{1B12EF76-2B5E-4DA1-B587-4762D49BFE03}] - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2015-08-06] [Brak podpisu cyfrowego]
FF HKU\S-1-5-21-448539723-1123561945-1801674531-1004\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-12-21] [Brak podpisu cyfrowego]

Chrome: 
=======
CHR HomePage: Default -> hxxps://it.yahoo.com?fr=hp-avast&type=avastbcl
CHR StartupUrls: Default -> "hxxp://www.wp.pl/"
CHR NewTab: Default -> "chrome-extension://ibjblomfjdghgigadhbbeblhbidlcnbh/stubby.html"
CHR DefaultSearchURL: Default -> hxxp://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=1I7ADSA_pl
CHR DefaultSearchKeyword: Default -> google.pl_
CHR Plugin: (Chrome PDF Viewer) - C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\46.0.2490.86\pdf.dll => Brak pliku
CHR Plugin: (Google Gears 0.5.33.0) - C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\46.0.2490.86\gears.dll => Brak pliku
CHR Plugin: (Shockwave Flash) - C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\46.0.2490.86\gcswf32.dll => Brak pliku
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2003) - C:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft® DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Google\Update\1.2.183.39\npGoogleOneClick8.dll => Brak pliku
CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll => Brak pliku
CHR Plugin: (Windows Presentation Foundation) - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\WINDOWS\system32\Adobe\Director\np32dsw.dll => Brak pliku
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll => Brak pliku
CHR Profile: C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default
CHR Extension: (MapsGalaxy) - C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ibjblomfjdghgigadhbbeblhbidlcnbh [2014-10-29]
CHR Extension: (Skype Click to Call) - C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-10-16]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-28]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-06-19]
StartMenuInternet: chrome.exe - C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe
StartMenuInternet: Google Chrome - C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ACS; C:\WINDOWS\system32\acs.exe [467028 2008-01-26] (Atheros) [Brak podpisu cyfrowego]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-13] (AVAST Software)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.226\McCHSvc.exe [235696 2015-10-30] (McAfee, Inc.)
R2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2014-08-12] ()
S4 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [212480 2007-02-08] (Nokia.) [Brak podpisu cyfrowego]
R2 Skype C2C Service; C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3048136 2012-06-19] (Skype Technologies S.A.)
R2 Z-SANService; C:\Program Files\NETGEAR\NETGEAR Storage Central Manager Utility\Z-SANService.exe [376891 2007-08-08] (Zetera Corporation) [Brak podpisu cyfrowego]
S2 MapsGalaxy_39Service; C:\PROGRA~1\MAPSGA~2\bar\1.bin\39barsvc.exe [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 AR5416; C:\WINDOWS\System32\DRIVERS\athw.sys [1326528 2008-09-18] (Atheros Communications, Inc.)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-05-13] ()
R1 aswKbd; C:\WINDOWS\system32\Drivers\aswKbd.sys [20624 2012-10-30] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-05-13] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [54832 2014-05-17] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-05-13] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [777488 2014-05-17] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [411680 2014-05-17] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57672 2014-05-13] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [180632 2014-05-13] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R3 gfiutil; C:\WINDOWS\System32\drivers\gfiutil.sys [24040 2013-09-04] (ThreatTrack Security)
S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2009-08-05] (HP)
S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2009-08-05] (HP)
S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2009-08-05] (HP)
S3 massfilter_lte; C:\WINDOWS\system32\drivers\massfilter_lte.sys [15896 2011-12-14] (HandSet Incorporated)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
S3 PCAMPR5; C:\WINDOWS\system32\PCAMPR5.SYS [34688 2003-09-23] (Printing Communications Assoc., Inc. (PCAUSA)) [Brak podpisu cyfrowego]
S3 PCANDIS5; C:\WINDOWS\system32\PCANDIS5.SYS [32128 2006-03-01] (Printing Communications Assoc., Inc. (PCAUSA)) [Brak podpisu cyfrowego]
R3 RTHDMIAzAudService; C:\WINDOWS\System32\drivers\RtHDMI.sys [3688640 2009-02-26] (Realtek Semiconductor Corp.)
R1 SCDEmu; C:\WINDOWS\system32\Drivers\SCDEmu.sys [113104 2012-05-31] (Power Software Ltd)
R2 SFSZ; C:\WINDOWS\system32\drivers\sfsz.sys [345984 2007-08-14] (DataPlow, Incorporated) [Brak podpisu cyfrowego]
S3 UVCFTR; C:\WINDOWS\System32\Drivers\UVCFTR_S.SYS [18432 2007-12-17] (Chicony Electronics Co., Ltd.)
R3 WSIMD; C:\WINDOWS\System32\DRIVERS\wsimd.sys [57408 2007-12-13] (Atheros Communications, Inc.) [Brak podpisu cyfrowego]
R3 ZetBus; C:\WINDOWS\System32\DRIVERS\ZetBus.sys [15488 2007-08-08] (Zetera Corporation) [Brak podpisu cyfrowego]
S3 ZetMPD; C:\WINDOWS\System32\DRIVERS\ZetMPD.sys [5120 2007-08-08] (Zetera Corporation) [Brak podpisu cyfrowego]
S0 ZetSFD; C:\WINDOWS\System32\DRIVERS\ZetSFD.sys [12800 2007-08-08] (Zetera Corporation) [Brak podpisu cyfrowego]
S3 zgdcat; C:\WINDOWS\System32\DRIVERS\zgdcat.sys [114456 2011-12-14] (ZTE Incorporated)
S3 zgdcdiag; C:\WINDOWS\System32\DRIVERS\zgdcdiag.sys [114456 2011-12-14] (ZTE Incorporated)
S3 zgdcmdm; C:\WINDOWS\System32\DRIVERS\zgdcmdm.sys [114456 2011-12-14] (ZTE Incorporated)
S3 zgdcnet; C:\WINDOWS\System32\DRIVERS\zgdcnet.sys [144408 2011-12-14] (ZTE Incorporated)
S3 zgdcnmea; C:\WINDOWS\System32\DRIVERS\zgdcnmea.sys [114456 2011-12-14] (ZTE Incorporated)
S3 catchme; \??\C:\DOCUME~1\MICHA~1\USTAWI~1\Temp\catchme.sys [X]
S3 filtertdidriver; system32\drivers\ewfiltertdidriver.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S4 IntelIde; Brak ImagePath
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]
U3 TlntSvr; Brak ImagePath
U1 WS2IFSL; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-26 21:23 - 2015-11-26 21:29 - 00000000 ____D C:\Documents and Settings\Michał\Pulpit\pobrane
2015-11-17 21:46 - 2015-11-17 21:46 - 00226346 _____ C:\WINDOWS\ntbtlog.txt
2015-11-14 18:41 - 2015-11-14 18:41 - 00102400 _____ C:\WINDOWS\Minidump\Mini111415-01.dmp
2015-11-12 15:39 - 2015-11-12 15:39 - 00000000 ____D C:\Documents and Settings\Michał\Menu Start\Programy\Dropbox
2015-11-11 17:45 - 2015-11-11 17:45 - 00094208 _____ C:\WINDOWS\Minidump\Mini111115-01.dmp
2015-11-11 17:22 - 2015-11-11 17:22 - 00001768 _____ C:\Documents and Settings\All Users\Pulpit\McAfee Security Scan Plus.lnk
2015-11-11 17:22 - 2015-11-11 17:22 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\McAfee Security Scan Plus
2015-11-11 17:20 - 2015-11-11 17:21 - 00000000 ____D C:\Program Files\McAfee Security Scan
2015-11-10 07:08 - 2015-11-10 07:23 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\PC Cleaner Pro
2015-11-10 07:08 - 2015-11-10 07:08 - 00000874 _____ C:\Documents and Settings\All Users\Pulpit\PC Cleaner Pro.lnk
2015-11-10 07:08 - 2015-11-10 07:08 - 00000536 _____ C:\WINDOWS\Tasks\PC Cleaner Pro Update Job.job
2015-11-10 07:08 - 2015-11-10 07:08 - 00000000 ____D C:\Documents and Settings\Michał\Menu Start\Programy\PC Cleaners
2015-11-02 11:28 - 2015-11-02 11:28 - 00000383 _____ C:\ftconfig.ini

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-26 21:32 - 2011-07-28 10:00 - 00000000 ____D C:\Documents and Settings\Michał\Ustawienia lokalne\temp
2015-11-26 21:31 - 2014-03-27 23:51 - 00000000 ____D C:\FRST
2015-11-26 21:29 - 2009-02-26 16:11 - 00000000 ____D C:\WINDOWS
2015-11-26 21:24 - 2015-10-05 19:01 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\PC1Data
2015-11-26 21:23 - 2012-07-30 22:56 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-11-26 21:23 - 2009-02-26 15:47 - 00000000 ____D C:\Documents and Settings\Michał\Pulpit
2015-11-26 21:18 - 2015-06-16 10:06 - 00001240 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-448539723-1123561945-1801674531-1004UA.job
2015-11-26 21:17 - 2010-02-05 08:52 - 00000000 ____D C:\Documents and Settings\Michał\Dane aplikacji\ipla
2015-11-26 21:15 - 2015-08-06 14:35 - 00000280 _____ C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-448539723-1123561945-1801674531-1004.job
2015-11-26 21:15 - 2014-03-10 23:56 - 00000224 _____ C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job
2015-11-26 21:15 - 2009-02-26 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-11-26 16:54 - 2009-06-13 16:47 - 00524288 _____ C:\WINDOWS\system32\config\ACS.evt
2015-11-26 16:54 - 2009-02-26 15:47 - 00000188 ___SH C:\Documents and Settings\Michał\ntuser.ini
2015-11-26 16:54 - 2009-02-26 15:45 - 00032492 _____ C:\WINDOWS\SchedLgU.Txt
2015-11-26 16:38 - 2014-06-06 20:42 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-448539723-1123561945-1801674531-1004UA.job
2015-11-26 16:28 - 2009-02-26 19:35 - 00000000 ____D C:\Documents and Settings\Michał\Dane aplikacji\Skype
2015-11-26 16:26 - 2008-04-15 13:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2015-11-26 16:10 - 2014-05-09 18:30 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-11-26 12:03 - 2014-05-13 13:18 - 00000000 ___RD C:\Documents and Settings\Michał\Moje dokumenty\Dropbox
2015-11-26 12:03 - 2014-05-13 13:14 - 00000000 ____D C:\Documents and Settings\Michał\Dane aplikacji\Dropbox
2015-11-26 11:55 - 2008-04-15 13:00 - 00491314 _____ C:\WINDOWS\system32\perfh015.dat
2015-11-26 11:55 - 2008-04-15 13:00 - 00084526 _____ C:\WINDOWS\system32\perfc015.dat
2015-11-26 11:54 - 2009-02-26 16:23 - 01089416 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-17 21:29 - 2009-02-26 16:11 - 00102400 _____ C:\WINDOWS\DUMP413f.tmp
2015-11-14 18:41 - 2010-02-04 10:02 - 00000000 ____D C:\WINDOWS\Minidump
2015-11-14 18:31 - 2011-03-25 08:45 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2015-11-13 21:21 - 2011-06-05 18:24 - 00000000 ____D C:\Documents and Settings\Michał\Dane aplikacji\HPAppData
2015-11-12 15:40 - 2009-02-26 15:47 - 00000000 ___RD C:\Documents and Settings\Michał\Menu Start\Programy\Autostart
2015-11-12 15:39 - 2009-02-26 15:47 - 00000000 ___RD C:\Documents and Settings\Michał\Menu Start\Programy
2015-11-12 13:10 - 2013-01-19 16:55 - 00780488 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-11-12 13:10 - 2011-05-19 20:12 - 00142536 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-11-12 12:16 - 2009-02-26 15:47 - 00000000 ____D C:\Documents and Settings\Michał
2015-11-11 19:39 - 2011-02-27 22:03 - 00002317 _____ C:\Documents and Settings\Michał\Pulpit\Google Chrome.lnk
2015-11-11 19:17 - 2015-06-16 10:06 - 00001188 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-448539723-1123561945-1801674531-1004Core.job
2015-11-11 17:48 - 2012-11-08 19:53 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\RDRM
2015-11-11 17:22 - 2009-02-26 16:22 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
2015-11-11 17:22 - 2009-02-26 16:22 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy
2015-11-11 17:22 - 2009-02-26 16:22 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit
2015-11-10 22:52 - 2013-07-15 08:56 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-10 22:44 - 2009-02-26 18:03 - 143250520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-10 07:08 - 2009-02-26 16:22 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji
2015-11-10 07:07 - 2015-10-05 19:01 - 05049752 _____ ((c) PC Cleaners Inc) C:\Documents and Settings\All Users\Dane aplikacji\pclunst.exe
2015-11-07 08:38 - 2014-06-06 20:42 - 00001084 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-448539723-1123561945-1801674531-1004Core.job
2015-11-03 14:04 - 2009-06-19 16:47 - 00000184 _____ C:\WINDOWS\hpbafd.ini
2015-10-29 20:20 - 2009-02-26 18:59 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Skype
2015-10-27 08:21 - 2015-10-15 12:58 - 00000000 ____D C:\Program Files\Allin1Convert_8h

==================== Pliki w katalogu głównym wybranych folderów =======

2014-05-10 08:56 - 2014-05-10 08:56 - 0000005 _____ () C:\Documents and Settings\Michał\Dane aplikacji\mbam.context.scan
2009-03-16 17:33 - 2015-07-28 09:26 - 0094720 _____ () C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-10-24 13:38 - 2015-10-24 13:38 - 0000000 _____ () C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\[j0002]-[p01].bmp
2015-10-24 13:39 - 2015-10-24 13:39 - 0000000 _____ () C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\[j0002]-[p02].bmp
2015-10-24 13:40 - 2015-10-24 13:40 - 0000000 _____ () C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\[j0003]-[p01].bmp
2015-10-24 13:40 - 2015-10-24 13:40 - 0000000 _____ () C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\[j0003]-[p02].bmp
2015-10-24 13:40 - 2015-10-24 13:40 - 0000000 _____ () C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\[j0004]-[p01].bmp
2015-10-24 13:40 - 2015-10-24 13:40 - 0000000 _____ () C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\[j0004]-[p02].bmp
2015-10-24 13:41 - 2015-10-24 13:41 - 0000000 _____ () C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\[j0005]-[p01].bmp
2015-10-24 13:41 - 2015-10-24 13:41 - 0000000 _____ () C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\[j0005]-[p02].bmp
2015-10-24 13:43 - 2015-10-24 13:43 - 0000000 _____ () C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\[j0006]-[p01].bmp
2015-10-24 13:43 - 2015-10-24 13:43 - 0000000 _____ () C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\[j0006]-[p02].bmp
2015-10-24 13:45 - 2015-10-24 13:45 - 0000000 _____ () C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\[j0007]-[p01].bmp
2015-10-24 13:45 - 2015-10-24 13:45 - 0000000 _____ () C:\Documents and Settings\Michał\Ustawienia lokalne\Dane aplikacji\[j0007]-[p02].bmp

Niektóre pliki w TEMP:
====================
C:\Documents and Settings\Michał\Ustawienia lokalne\temp\APNSetup.exe
C:\Documents and Settings\Michał\Ustawienia lokalne\temp\AVG.exe
C:\Documents and Settings\Michał\Ustawienia lokalne\temp\difxapi.dll
C:\Documents and Settings\Michał\Ustawienia lokalne\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpztg4oe.dll
C:\Documents and Settings\Michał\Ustawienia lokalne\temp\hpzmsi01.exe
C:\Documents and Settings\Michał\Ustawienia lokalne\temp\hpzpnp01.exe
C:\Documents and Settings\Michał\Ustawienia lokalne\temp\hpzscr01.EXE
C:\Documents and Settings\Michał\Ustawienia lokalne\temp\ipl70F.tmp.exe
C:\Documents and Settings\Michał\Ustawienia lokalne\temp\jre-8u40-windows-au.exe
C:\Documents and Settings\Michał\Ustawienia lokalne\temp\pl_ww_Package.exe
C:\Documents and Settings\Michał\Ustawienia lokalne\temp\SkypeSetup.exe
C:\Documents and Settings\Michał\Ustawienia lokalne\temp\stubhelper.dll
C:\Documents and Settings\Michał\Ustawienia lokalne\temp\~extncp18143.exe
C:\Documents and Settings\Michał\Ustawienia lokalne\temp\~extncp9722.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

==================== Koniec  FRST.txt ============================