Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:09-12-2015
Uruchomiony przez Waldek (administrator)  WALDEK-KOMPUTER (10-12-2015 20:44:36)
Uruchomiony z C:\Users\Waldek\Desktop\Nowy folder (2)
Załadowane profile: Waldek (Dostępne profile: Waldek)
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\nis.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\nis.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe
(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(BitTorrent, Inc.) C:\Program Files (x86)\uTorrent\uTorrent.exe
() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\32.0.1948.89\opera.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7199448 2013-09-05] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [ProfilerU] => C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2013-04-16] (Saitek)
HKLM\...\Run: [SaiMfd] => C:\Program Files\SmartTechnology\Software\SaiMfd.exe [158208 2013-04-16] (Saitek)
HKLM-x32\...\Run: [Sound Blaster Cinema] => C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2013-08-16] (Creative Technology Ltd)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [Super-Charger] => C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [490480 2013-09-09] (MSI)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-516307512-3792544153-365543194-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3011152 2015-11-10] (Valve Corporation)
HKU\S-1-5-21-516307512-3792544153-365543194-1000\...\Run: [uTorrent] => C:\Program Files (x86)\uTorrent\uTorrent.exe [969104 2015-11-27] (BitTorrent, Inc.)
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2015-09-26]
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{4E08CC97-912D-458B-8705-9A14C325532F}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{419E29AA-9CC6-465B-8C96-131ECC17A593}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-26] (Google Inc.)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\IPS\IPSBHO.DLL => Brak pliku
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-26] (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-26] (Google Inc.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-26] (Google Inc.)
Toolbar: HKU\S-1-5-21-516307512-3792544153-365543194-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-09-26] (Google Inc.)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.2.15\coFFAddon
FF Extension: Norton Identity Safe - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.2.15\coFFAddon [2015-11-30] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.2.15\coFFAddon

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://google/"
CHR Profile: C:\Users\Waldek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Waldek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-10]
CHR Extension: (Dokumenty Google) - C:\Users\Waldek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-10]
CHR Extension: (Dysk Google) - C:\Users\Waldek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-10]
CHR Extension: (YouTube) - C:\Users\Waldek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-10]
CHR Extension: (Norton Security Toolbar) - C:\Users\Waldek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2015-11-25]
CHR Extension: (Google Search) - C:\Users\Waldek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-10]
CHR Extension: (Arkusze Google) - C:\Users\Waldek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-10]
CHR Extension: (Dokumenty Google offline) - C:\Users\Waldek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-10]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Waldek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-18]
CHR Extension: (Gmail) - C:\Users\Waldek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-10]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\Exts\Chrome.crx [2015-11-30]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\Exts\Chrome.crx [2015-11-30]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Session Restore: -> [funkcja włączona]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [161776 2013-09-09] (MSI)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\22.5.5.15\NIS.exe [282016 2015-11-20] (Symantec Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2099208 2015-10-26] (Electronic Arts)
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [343040 2013-08-08] (Qualcomm Atheros) [Brak podpisu cyfrowego]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49048 2012-07-18] (Asmedia Technology)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [67888 2013-02-13] (Qualcomm Atheros, Inc.)
R3 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.2.15\Definitions\BASHDefs\20151207.001\BHDrvx64.sys [1665608 2015-10-08] (Symantec Corporation)
R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1605050.00F\ccSetx64.sys [173808 2015-07-11] (Symantec Corporation)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-11-18] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [157520 2015-11-18] (Symantec Corporation)
R3 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.2.15\Definitions\IPSDefs\20151208.001\IDSvia64.sys [767224 2015-12-04] (Symantec Corporation)
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.2.15\Definitions\VirusDefs\20151210.002\ENG64.SYS [138488 2015-10-27] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.2.15\Definitions\VirusDefs\20151210.002\EX64.SYS [2148080 2015-10-27] (Symantec Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 SaiK0CD0; C:\Windows\System32\DRIVERS\SaiK0CD0.sys [180544 2012-09-20] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [23968 2014-09-15] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [51488 2014-09-15] (Saitek)
R3 SaiU0CD0; C:\Windows\System32\DRIVERS\SaiU0CD0.sys [47168 2012-09-20] (Saitek)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1605050.00F\SRTSP64.SYS [928496 2015-11-12] (Symantec Corporation)
R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1605050.00F\SRTSPX64.SYS [50936 2015-07-11] (Symantec Corporation)
R3 SymEFASI; C:\Windows\system32\drivers\NISx64\1605050.00F\SYMEFASI64.SYS [1621232 2015-11-12] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [111344 2015-10-03] (Symantec Corporation)
R3 SymIRON; C:\Windows\system32\drivers\NISx64\1605050.00F\Ironx64.SYS [297720 2015-07-11] (Symantec Corporation)
R3 SymNetS; C:\Windows\System32\Drivers\NISx64\1605050.00F\SYMNETS.SYS [577768 2015-11-12] (Symantec Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-10 18:34 - 2015-12-10 18:34 - 00347816 _____ (Microsoft Corporation) C:\Users\Waldek\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.Run.exe
2015-12-10 18:34 - 2015-12-10 18:34 - 00347440 _____ (Microsoft Corporation) C:\Users\Waldek\Downloads\MicrosoftFixit-portable.exe
2015-12-10 17:53 - 2015-12-10 17:53 - 00026622 _____ C:\Users\Waldek\Downloads\FRST.txt
2015-12-10 17:41 - 2015-12-10 17:41 - 02369024 _____ (Farbar) C:\Users\Waldek\Downloads\FRST64.exe
2015-12-10 17:39 - 2015-12-10 20:44 - 00000000 ____D C:\FRST
2015-12-10 17:38 - 2015-12-10 20:42 - 00000000 ____D C:\Users\Waldek\Desktop\Nowy folder (2)
2015-12-02 09:41 - 2015-12-02 09:41 - 00209396 _____ C:\Windows\ntbtlog.txt
2015-12-01 14:20 - 2015-12-01 14:20 - 01805824 _____ C:\Users\Waldek\Downloads\smart_region_jako_strategia_lokalnego_rozwoju_ekonomicznego_p.semczuk_gdansk.pps
2015-11-30 20:42 - 2015-11-30 20:42 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security
2015-11-30 20:41 - 2015-11-30 20:41 - 00003234 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2015-11-30 20:02 - 2015-11-30 20:02 - 00000000 ____D C:\Users\Waldek\Downloads\enbseries_gta5_v0275
2015-11-30 19:58 - 2015-11-30 20:00 - 02188730 _____ C:\Users\Waldek\Downloads\enbseries_gta5_v0275.zip
2015-11-30 19:57 - 2015-11-30 19:57 - 00000000 ____D C:\Users\Waldek\Downloads\The Pinnacle of V - World Enhancement Project V1.8.1
2015-11-30 19:52 - 2015-11-30 19:52 - 00185766 _____ C:\Users\Waldek\Downloads\01.12.2015 (1).pdf
2015-11-30 19:51 - 2015-11-30 19:51 - 00185766 _____ C:\Users\Waldek\Downloads\01.12.2015.pdf
2015-11-30 19:34 - 2015-11-30 19:51 - 989503587 _____ C:\Users\Waldek\Downloads\The Pinnacle of V - World Enhancement Project V1.8.1.zip
2015-11-27 20:56 - 2015-11-27 20:56 - 00177104 _____ C:\Users\Waldek\Downloads\30.11.2015.pdf
2015-11-27 11:43 - 2015-11-27 20:20 - 00000000 ____D C:\Users\Waldek\Downloads\Call.of.Duty.Black.Ops.III-RELOADED
2015-11-27 11:38 - 2015-11-27 11:41 - 00000000 ____D C:\Users\Waldek\AppData\Roaming\SpinTires
2015-11-27 11:30 - 2015-11-27 11:36 - 00000000 ____D C:\Users\Waldek\Downloads\SpinTires (09-03-15)(2015)(2-click run)
2015-11-27 11:30 - 2015-11-27 11:30 - 00000949 _____ C:\ProgramData\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-11-27 11:30 - 2015-11-27 11:30 - 00000943 _____ C:\Users\Public\Desktop\µTorrent.lnk
2015-11-27 11:30 - 2015-11-27 11:30 - 00000000 ____D C:\Program Files (x86)\uTorrent
2015-11-27 11:29 - 2015-12-10 20:42 - 00000000 ____D C:\Users\Waldek\AppData\Roaming\uTorrent
2015-11-27 11:29 - 2015-11-27 11:29 - 00969104 _____ (BitTorrent, Inc.) C:\Users\Waldek\Downloads\uTorrent (3).exe
2015-11-27 11:25 - 2015-11-27 11:25 - 00031130 _____ C:\Users\Waldek\Downloads\[kat.cr]spintires.09.03.15.2015.2.click.run.torrent
2015-11-25 17:10 - 2015-11-25 17:10 - 00194463 _____ C:\Users\Waldek\Downloads\26.11.2015.pdf
2015-11-25 12:03 - 2015-11-25 12:03 - 01789488 _____ C:\Users\Waldek\Downloads\wrar530 (2).exe
2015-11-25 09:28 - 2015-11-25 09:28 - 01789488 _____ C:\Users\Waldek\Downloads\wrar530 (1).exe
2015-11-24 19:01 - 2015-11-24 19:01 - 01104142 _____ C:\Users\Waldek\Downloads\Trening_mode_wows.rar
2015-11-24 19:01 - 2015-11-24 19:01 - 00000000 ____D C:\Users\Waldek\Downloads\Trening_mode_wows
2015-11-24 18:49 - 2015-11-24 18:49 - 00000000 ____D C:\Users\Waldek\Downloads\treningmod
2015-11-24 18:49 - 2015-11-24 18:49 - 00000000 ____D C:\Users\Waldek\AppData\Roaming\WinRAR
2015-11-24 18:48 - 2015-11-24 18:48 - 02780551 _____ C:\Users\Waldek\Downloads\treningmod.rar
2015-11-24 18:48 - 2015-11-24 18:48 - 01789488 _____ C:\Users\Waldek\Downloads\wrar530.exe
2015-11-24 18:48 - 2015-11-24 18:48 - 00000000 ____D C:\Users\Waldek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-11-24 18:48 - 2015-11-24 18:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-11-24 18:48 - 2015-11-24 18:48 - 00000000 ____D C:\Program Files (x86)\WinRAR
2015-11-24 16:15 - 2015-11-24 16:15 - 00195803 _____ C:\Users\Waldek\Downloads\25.11.2015.pdf
2015-11-22 16:31 - 2015-11-22 16:31 - 00177694 _____ C:\Users\Waldek\Downloads\23.11.2015.pdf
2015-11-13 21:29 - 2015-11-13 21:29 - 00005350 _____ C:\Users\Waldek\AppData\Local\recently-used.xbel
2015-11-11 19:28 - 2015-11-11 19:28 - 00176875 _____ C:\Users\Waldek\Downloads\12.11.2015.pdf
2015-11-10 15:36 - 2015-11-10 15:36 - 07837712 _____ (Mad catz ) C:\Users\Waldek\Downloads\Range_MMO7_SD7_0_20_0_64Bit_Drivers.exe
2015-11-10 15:36 - 2015-11-10 15:36 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SaiK0CD0_01009.Wdf
2015-11-10 15:35 - 2015-11-10 15:35 - 02992376 _____ (Mad catz ) C:\Users\Waldek\Downloads\MMO_TE_Mouse_7_0_35_0_x64_Drivers (1).exe
2015-11-10 15:28 - 2015-11-10 15:28 - 00000000 ____D C:\Users\Waldek\AppData\Local\SmartTechnology
2015-11-10 15:27 - 2015-11-11 11:58 - 00000000 ____D C:\Users\Public\Documents\SmartTechnology Profiles
2015-11-10 15:27 - 2015-11-10 15:27 - 00000000 ____D C:\ProgramData\SmartTechnology
2015-11-10 15:27 - 2015-11-10 15:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Technology
2015-11-10 15:27 - 2015-11-10 15:27 - 00000000 ____D C:\Program Files\SmartTechnology
2015-11-10 15:18 - 2015-11-10 15:20 - 129201056 _____ (Mad catz ) C:\Users\Waldek\Downloads\Smart Technology 7_0_27_13 64Bit.exe
2015-11-10 15:16 - 2015-11-10 15:16 - 02992376 _____ (Mad catz ) C:\Users\Waldek\Downloads\MMO_TE_Mouse_7_0_35_0_x64_Drivers.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-10 20:42 - 2015-09-26 10:15 - 00000000 ____D C:\Program Files (x86)\Steam
2015-12-10 20:42 - 2015-09-26 10:09 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-10 20:42 - 2015-09-26 09:49 - 00002200 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-10 20:42 - 2015-09-26 09:49 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-10 20:42 - 2015-09-26 09:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-10 20:42 - 2015-09-26 09:38 - 00001194 _____ C:\Users\Waldek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-10 20:42 - 2015-09-26 09:38 - 00001164 _____ C:\Users\Waldek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-12-10 20:42 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-10 20:42 - 2009-07-14 05:45 - 00016656 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-10 20:42 - 2009-07-14 05:45 - 00016656 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-10 18:08 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2015-12-10 17:46 - 2011-04-12 14:21 - 00737242 _____ C:\Windows\system32\perfh015.dat
2015-12-10 17:46 - 2011-04-12 14:21 - 00153930 _____ C:\Windows\system32\perfc015.dat
2015-12-10 17:46 - 2009-07-14 06:13 - 01661232 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-10 17:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-12-10 17:42 - 2015-09-29 14:58 - 00000000 ____D C:\Windows\System32\Tasks\Remediation
2015-12-10 17:39 - 2015-10-10 17:49 - 00000994 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-12-10 17:39 - 2015-10-10 17:49 - 00000982 _____ C:\Users\Public\Desktop\Opera.lnk
2015-12-10 10:49 - 2015-10-10 17:46 - 00000000 ____D C:\ProgramData\6WdsManPro6
2015-12-09 20:01 - 2015-09-26 12:25 - 00000000 ____D C:\Users\Waldek\AppData\LocalLow\Heroes and Generals
2015-12-09 19:59 - 2015-09-26 09:38 - 00000000 ____D C:\Users\Waldek
2015-12-09 18:37 - 2015-10-11 15:54 - 00000000 ____D C:\Users\Waldek\AppData\Roaming\TS3Client
2015-12-02 16:57 - 2015-09-26 09:49 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-02 16:57 - 2015-09-26 09:49 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-02 16:57 - 2015-09-26 09:49 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-30 20:41 - 2015-10-04 08:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2015-11-30 20:41 - 2015-09-26 09:51 - 00002407 _____ C:\Users\Public\Desktop\Norton Internet Security.LNK
2015-11-30 20:41 - 2015-09-26 09:51 - 00000000 ____D C:\Windows\system32\Drivers\NISx64
2015-11-25 16:16 - 2009-07-14 06:08 - 00032520 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-11-24 18:55 - 2015-10-15 19:47 - 00000000 ____D C:\Users\Waldek\AppData\Local\CrashDumps
2015-11-20 15:27 - 2015-09-26 10:29 - 00000000 ____D C:\Users\Waldek\Desktop\Nowy folder
2015-11-16 17:38 - 2015-09-26 18:44 - 00000000 ____D C:\Users\Waldek\AppData\Local\Adobe
2015-11-13 21:30 - 2015-10-10 17:50 - 00000000 ____D C:\Users\Waldek\.gimp-2.8

==================== Pliki w katalogu głównym wybranych folderów =======

2015-11-13 21:29 - 2015-11-13 21:29 - 0005350 _____ () C:\Users\Waldek\AppData\Local\recently-used.xbel

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-12-10 11:23

==================== Koniec  FRST.txt ============================