Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:09-12-2015
Uruchomiony przez Jacek (administrator)  JACEK-PC (11-12-2015 09:02:02)
Uruchomiony z C:\Users\Jacek\Downloads
Załadowane profile: Jacek (Dostępne profile: Jacek)
Platform: Microsoft Windows 7 Ultimate  (X86) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgcsrvx.exe
() C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_4c73f4a9a59a84bb\stacsv.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_4c73f4a9a59a84bb\AEstSrv.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgwdsvcx.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
() C:\Program Files\Mobogenie\MgAssist.exe
() C:\Program Files\Core Temp\Core Temp.exe
() C:\Program Files\Mobogenie\DaemonProcess.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgemcx.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Dell Inc.) C:\Windows\System32\WLTRAY.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgui.exe
() C:\Program Files\AVG Web TuneUp\vprot.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(AVG Secure Search) C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\40.1.8\ToolbarUpdater.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
() C:\Windows\System32\WLTRYSVC.EXE
(Dell Inc.) C:\Windows\System32\BCMWLTRY.EXE
() C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\40.1.8\loggingserver.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(AVG Secure Search) C:\Program Files\AVG Web TuneUp\avgcefrend.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe
(Microsoft Corporation) C:\Program Files\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files\Windows Live\Contacts\wlcomm.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1422632 2008-11-30] (Synaptics, Inc.)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Windows\system32\WLTRAY.exe [3810304 2008-12-21] (Dell Inc.)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\Av\avgui.exe [3855272 2015-11-20] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [vProt] => C:\Program Files\AVG Web TuneUp\vprot.exe [3177360 2015-10-26] ()
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguix.exe [1136552 2015-11-12] (AVG Technologies CZ, s.r.o.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jacek\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jacek\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jacek\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{557507D3-806A-44DE-9752-CE969227E15F}: [DhcpNameServer] 8.8.8.8 8.8.4.4

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449688294&z=111d1fc6f9d5dc8f2e4f334g1z7z9t8q8b2bdoftec&from=ient07021&uid=TOSHIBAXMK2555GSX_796HTR8LTXX796HTR8LT
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449688294&z=111d1fc6f9d5dc8f2e4f334g1z7z9t8q8b2bdoftec&from=ient07021&uid=TOSHIBAXMK2555GSX_796HTR8LTXX796HTR8LT&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449688294&z=111d1fc6f9d5dc8f2e4f334g1z7z9t8q8b2bdoftec&from=ient07021&uid=TOSHIBAXMK2555GSX_796HTR8LTXX796HTR8LT
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449688294&z=111d1fc6f9d5dc8f2e4f334g1z7z9t8q8b2bdoftec&from=ient07021&uid=TOSHIBAXMK2555GSX_796HTR8LTXX796HTR8LT&q={searchTerms}
HKU\S-1-5-21-1679813524-3586070068-693276116-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449688294&z=111d1fc6f9d5dc8f2e4f334g1z7z9t8q8b2bdoftec&from=ient07021&uid=TOSHIBAXMK2555GSX_796HTR8LTXX796HTR8LT
HKU\S-1-5-21-1679813524-3586070068-693276116-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449688294&z=111d1fc6f9d5dc8f2e4f334g1z7z9t8q8b2bdoftec&from=ient07021&uid=TOSHIBAXMK2555GSX_796HTR8LTXX796HTR8LT&q={searchTerms}
HKU\S-1-5-21-1679813524-3586070068-693276116-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKU\S-1-5-21-1679813524-3586070068-693276116-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449688294&z=111d1fc6f9d5dc8f2e4f334g1z7z9t8q8b2bdoftec&from=ient07021&uid=TOSHIBAXMK2555GSX_796HTR8LTXX796HTR8LT&q={searchTerms}
HKU\S-1-5-21-1679813524-3586070068-693276116-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449688294&z=111d1fc6f9d5dc8f2e4f334g1z7z9t8q8b2bdoftec&from=ient07021&uid=TOSHIBAXMK2555GSX_796HTR8LTXX796HTR8LT
URLSearchHook: HKLM - SFT_eng7 Toolbar - {08d6b0b4-c132-470d-a8e2-aa2e9c3851c9} - C:\Program Files\SFT_eng7\prxtbSFT_.dll (Conduit Ltd.)
URLSearchHook: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 - SFT_eng7 Toolbar - {08d6b0b4-c132-470d-a8e2-aa2e9c3851c9} - C:\Program Files\SFT_eng7\prxtbSFT_.dll (Conduit Ltd.)
URLSearchHook: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 - (Brak nazwy) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} -  Brak pliku
URLSearchHook: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 - (Brak nazwy) - {A3BC75A2-1F87-4686-AA43-5347D756017C} -  Brak pliku
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449688294&z=111d1fc6f9d5dc8f2e4f334g1z7z9t8q8b2bdoftec&from=ient07021&uid=TOSHIBAXMK2555GSX_796HTR8LTXX796HTR8LT&q={searchTerms}
SearchScopes: HKLM -> {25401C80-818F-475F-930F-EF6C67D6B85A} URL = hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1QzutDtDtByDyDyC0Dzz0FyBtBtB0ByD0EyBtN0D0Tzu0CtAyCyDtN1L2XzutBtFtBtFtCtFyEtDyB&cr=1468562263
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449688294&z=111d1fc6f9d5dc8f2e4f334g1z7z9t8q8b2bdoftec&from=ient07021&uid=TOSHIBAXMK2555GSX_796HTR8LTXX796HTR8LT&q={searchTerms}
SearchScopes: HKLM -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://startsear.ch/?aff=1&src=sp&cf=297f0119-2c0a-11e1-936d-002556d8f722&q={searchTerms}
SearchScopes: HKLM -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031607
SearchScopes: HKLM -> {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
SearchScopes: HKU\.DEFAULT -> DefaultScope {25401C80-818F-475F-930F-EF6C67D6B85A} URL = 
SearchScopes: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={32D31ADC-EB9C-432F-A818-240BDF04D9F5}&mid=6e593e25bc0d47cdb00ed16b5f181377-44027868006105378dec04b70e9dda9e7db8b395&lang=en&ds=AVG&coid=avgtbavg&cmpid=1015tb&pr=pr&d=2015-09-27 13:43:08&v=4.1.8.599&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 -> {25401C80-818F-475F-930F-EF6C67D6B85A} URL = hxxp://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7WZPC_plPL344
SearchScopes: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 -> {2890AD95-0209-92E4-03E0-69C5D783E039} URL = hxxp://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7WZPC_pl
SearchScopes: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7WZPC_pl
SearchScopes: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={32D31ADC-EB9C-432F-A818-240BDF04D9F5}&mid=6e593e25bc0d47cdb00ed16b5f181377-44027868006105378dec04b70e9dda9e7db8b395&lang=en&ds=AVG&coid=avgtbavg&cmpid=1015tb&pr=pr&d=2015-09-27 13:43:08&v=4.1.8.599&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 -> {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
BHO: SFT_eng7 Toolbar -> {08d6b0b4-c132-470d-a8e2-aa2e9c3851c9} -> C:\Program Files\SFT_eng7\prxtbSFT_.dll [2011-03-28] (Conduit Ltd.)
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18] (Adobe Systems Incorporated)
BHO: Conduit Engine  -> {30F9B915-B755-4826-820B-08FBA6BD249D} -> C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-03-28] (Conduit Ltd.)
BHO: Brak nazwy -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> Brak pliku
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2013-01-15] (Sun Microsystems, Inc.)
BHO: IE5BarLauncherBHO Class -> {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} -> C:\Program Files\vShare.tv plugin\BarLcher.dll [2011-09-22] (VShare Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.1.8.599\AVG Web TuneUp.dll [2015-10-26] (AVG)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-20] (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2013-01-15] (Sun Microsystems, Inc.)
BHO: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll [2011-02-09] (ALLCinema Ltd.)
Toolbar: HKLM - SFT_eng7 Toolbar - {08d6b0b4-c132-470d-a8e2-aa2e9c3851c9} - C:\Program Files\SFT_eng7\prxtbSFT_.dll [2011-03-28] (Conduit Ltd.)
Toolbar: HKLM - Conduit Engine  - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-03-28] (Conduit Ltd.)
Toolbar: HKLM - VShareToolBar - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll [2011-09-22] (VShare Inc.)
Toolbar: HKLM - Brak nazwy - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} -  Brak pliku
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-20] (Google Inc.)
Toolbar: HKU\.DEFAULT -> SFT_eng7 Toolbar - {08D6B0B4-C132-470D-A8E2-AA2E9C3851C9} - C:\Program Files\SFT_eng7\prxtbSFT_.dll [2011-03-28] (Conduit Ltd.)
Toolbar: HKU\.DEFAULT -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-20] (Google Inc.)
Toolbar: HKU\.DEFAULT -> VShareToolBar - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll [2011-09-22] (VShare Inc.)
Toolbar: HKU\.DEFAULT -> Brak nazwy - {8532A8B7-C06A-41BB-936A-8CE73E4711ED} -  Brak pliku
Toolbar: HKU\.DEFAULT -> Brak nazwy - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} -  Brak pliku
Toolbar: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 -> SFT_eng7 Toolbar - {08D6B0B4-C132-470D-A8E2-AA2E9C3851C9} - C:\Program Files\SFT_eng7\prxtbSFT_.dll [2011-03-28] (Conduit Ltd.)
Toolbar: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-09-20] (Google Inc.)
Toolbar: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 -> Conduit Engine  - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-03-28] (Conduit Ltd.)
Toolbar: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 -> Brak nazwy - {8532A8B7-C06A-41BB-936A-8CE73E4711ED} -  Brak pliku
Toolbar: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 -> Brak nazwy - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} -  Brak pliku
Toolbar: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 -> Brak nazwy - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  Brak pliku
Toolbar: HKU\S-1-5-21-1679813524-3586070068-693276116-1000 -> VShareToolBar - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll [2011-09-22] (VShare Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL [2001-01-22] (Microsoft Corporation)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  Brak pliku
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2008-01-13] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.yoursearching.com/?type=sc&ts=1448651802&z=96cf6dc7e5bfc168f2c6839g0z9z5b5qbw8gbm1t1t&from=cor&uid=TOSHIBAXMK2555GSX_796HTR8LTXX796HTR8LT

FireFox:
========
FF ProfilePath: C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\ssj8qhqw.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: yoursites123
FF SelectedSearchEngine: yoursites123
FF Homepage: hxxps://www.google.pl/?gfe_rd=cr&ei=IGmYVOKMLYmGUILGgQg
about:preferences
FF Keyword.URL: hxxp://trovi.com/ResultsExt.aspx?ctid=CT3031607&SearchSource=2&CUI=UN00436144637543711&UM=8&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [2012-02-21] (Adobe Systems, Inc.)
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\40.1.8\\npsitesafety.dll [Brak pliku]
FF Plugin: @ganymede/MARBLES,version=1.0 -> C:\Program Files\Ganymede\Plugins\MARBLES\NPMARBLES.dll [2011-07-15] (Ganymede Technologies)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=1.6.0_39 -> C:\Windows\system32\npdeployJava1.dll [2013-01-15] (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2013-01-15] (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.448 -> C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll [2009-10-09] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll [2009-10-09] (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2012-12-18] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-02-27] (Adobe Systems)
FF Plugin HKU\S-1-5-21-1679813524-3586070068-693276116-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Jacek\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [Brak pliku]
FF Plugin HKU\S-1-5-21-1679813524-3586070068-693276116-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Jacek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2009-11-30] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdjvu.dll [2009-07-31] (LizardTech)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPMARBLES.dll [2011-07-15] (Ganymede Technologies)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2012-12-18] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2009-10-09] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpjplug.dll [2009-10-09] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll [2011-10-03] (vShare.tv )
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np_gp.dll [2009-09-23] (NOS Microsystems Ltd.)
FF SearchPlugin: C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\ssj8qhqw.default\searchplugins\sfteng7-customized-web-search.xml [2015-11-27]
FF SearchPlugin: C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\ssj8qhqw.default\searchplugins\webssearches.xml [2015-12-09]
FF SearchPlugin: C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\ssj8qhqw.default\searchplugins\yoursites123.xml [2015-12-10]
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\avg-secure-search.xml [2015-09-13]
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2015-10-26]
FF Extension: Iplex to ALLPlayer - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\ssj8qhqw.default\extensions\IplextoALL@ALLPlayer.org.xpi [2011-09-09] [Brak podpisu cyfrowego]
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-12-22] [Brak podpisu cyfrowego]
FF Extension: YahooToolsProtected  - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\ssj8qhqw.default\extensions\yahooprotected@gmail.com [2015-11-27] [Brak podpisu cyfrowego]
FF Extension: gry  - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\ssj8qhqw.default\extensions\{8532a8b7-c06a-41bb-936a-8ce73e4711ed} [2015-07-16] [Brak podpisu cyfrowego]
FF Extension: SFT_eng7  - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\ssj8qhqw.default\extensions\{08d6b0b4-c132-470d-a8e2-aa2e9c3851c9} [2015-07-16] [Brak podpisu cyfrowego]
FF Extension: Default NewTab - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\ssj8qhqw.default\extensions\default_newtabff@gmail.com [2015-12-09] [Brak podpisu cyfrowego]
FF Extension: AVG Web TuneUp - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\ssj8qhqw.default\Extensions\avg@toolbar [2015-10-26] [Brak podpisu cyfrowego]
FF Extension: Adblock Plus - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\ssj8qhqw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-11-26]
FF Extension: Skype extension for Firefox - C:\Program Files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED} [2014-12-22] [Brak podpisu cyfrowego]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-12-22] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF HKLM\...\Firefox\Extensions: [{3112ca9c-de6d-4884-a869-9855de68056c}] - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c}
FF Extension: Google Toolbar for Firefox - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2014-12-22] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\ssj8qhqw.default\extensions\deskCutv2@gmail.com => nie znaleziono
FF HKLM\...\Firefox\Extensions: [yahooprotected@gmail.com] - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\ssj8qhqw.default\extensions\yahooprotected@gmail.com
FF HKLM\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\ssj8qhqw.default\extensions\default_newtabff@gmail.com
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1449688294&z=111d1fc6f9d5dc8f2e4f334g1z7z9t8q8b2bdoftec&from=ient07021&uid=TOSHIBAXMK2555GSX_796HTR8LTXX796HTR8LT

Chrome: 
=======
CHR HomePage: Default -> hxxps://www.google.pl/webhp?hl=pl&tab=iw&gws_rd=ssl
CHR StartupUrls: Default -> "hxxps://www.google.pl/webhp?hl=pl&tab=iw&gws_rd=ssl","hxxps://www.google.pl/webhp?hl=pl&tab=iw&gws_rd=ssl"
CHR Profile: C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-27]
CHR Extension: (Dysk Google) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-27]
CHR Extension: (YouTube) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-27]
CHR Extension: (Google Search) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-27]
CHR Extension: (Dokumenty Google offline) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-27]
CHR Extension: (AdBlock) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-12-05]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-27]
CHR Extension: (Gmail) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-27]
CHR HKLM\...\Chrome\Extension: [kpionmjnkbpcdpcflammlgllecmejgjj] - C:\Program Files\vShare.tv plugin\vshareplg.crx [2011-08-31]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AVG Security Toolbar Service; C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe [1025352 2011-07-26] ()
S3 AvgAMPS; C:\Program Files\AVG\Av\avgamps.exe [615584 2015-11-20] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\Av\avgidsagent.exe [3857272 2015-11-20] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [862632 2015-11-12] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\Av\avgwdsvcx.exe [579776 2015-11-20] (AVG Technologies CZ, s.r.o.)
R2 MgAssistService; C:\Program Files\Mobogenie\MgAssist.exe [63168 2014-01-31] () [Brak podpisu cyfrowego]
S2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [784256 2015-12-10] (Enigma Software Group USA, LLC.)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_4c73f4a9a59a84bb\STacSV.exe [254042 2009-03-19] (IDT, Inc.)
R2 vToolbarUpdater40.1.8; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\40.1.8\ToolbarUpdater.exe [1875856 2015-10-04] (AVG Secure Search)
R2 WDBackup; C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2013-08-14] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe [270704 2013-07-10] (Western Digital Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)
R2 wltrysvc; C:\Windows\System32\bcmwltry.exe [2809856 2008-12-21] (Dell Inc.) [Brak podpisu cyfrowego]
R2 WtuSystemSupport; C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe [1205136 2015-10-26] ()

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [149936 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [255920 2015-11-06] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [231344 2015-08-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [31664 2015-11-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [229296 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [308656 2015-08-14] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [193968 2015-11-06] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [36784 2015-08-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [231856 2015-10-08] (AVG Technologies CZ, s.r.o.)
R3 BCM42RLY; C:\Windows\System32\drivers\BCM42RLY.sys [18424 2008-12-21] (Broadcom Corporation)
R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [16432 2015-12-10] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [19984 2015-12-10] ()
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [Brak podpisu cyfrowego]
R3 OA008Ufd; C:\Windows\System32\DRIVERS\OA008Ufd.sys [133472 2009-02-09] (Creative Technology Ltd.)
R3 OA008Vid; C:\Windows\System32\DRIVERS\OA008Vid.sys [271616 2009-02-09] (Creative Technology Ltd.)
S3 pnetmdm; C:\Windows\System32\DRIVERS\pnetmdm.sys [9472 2006-09-28] (June Fabrics Technology) [Brak podpisu cyfrowego]
R3 ALSysIO; \??\C:\Users\Jacek\AppData\Local\Temp\ALSysIO.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-11 08:58 - 2015-12-11 08:58 - 00080212 _____ C:\Users\Jacek\Downloads\Shortcut.txt
2015-12-11 08:56 - 2015-12-11 09:02 - 00000000 ____D C:\FRST
2015-12-11 08:55 - 2015-12-11 08:55 - 01720320 _____ (Farbar) C:\Users\Jacek\Downloads\FRST.exe
2015-12-11 08:25 - 2015-12-11 08:26 - 00017920 ___SH C:\Users\Jacek\Thumbs.db
2015-12-10 14:47 - 2015-12-10 14:47 - 00001202 _____ C:\Users\Jacek\Desktop\SpyHunter.lnk
2015-12-10 14:47 - 2015-12-10 14:47 - 00000000 ____D C:\Users\Jacek\AppData\Roaming\Enigma Software Group
2015-12-10 14:46 - 2015-12-10 14:46 - 00000000 ____D C:\sh4ldr
2015-12-10 14:43 - 2015-12-10 14:43 - 00019984 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2015-12-10 14:42 - 2015-12-10 14:42 - 00000000 ____D C:\Program Files\Enigma Software Group
2015-12-10 14:41 - 2015-12-10 14:41 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\Jacek\Downloads\SpyHunter-Installer.exe
2015-12-10 14:30 - 2015-12-11 08:34 - 00000000 ____D C:\AdwCleaner
2015-12-10 14:29 - 2015-12-10 14:29 - 01738240 _____ C:\Users\Jacek\Downloads\adwcleaner_5.024.exe
2015-12-10 14:22 - 2015-12-10 14:22 - 00044301 _____ C:\Users\Jacek\Downloads\Addition (1).txt
2015-12-10 14:22 - 2015-12-10 14:22 - 00042965 _____ C:\Users\Jacek\Downloads\FRST (3).txt
2015-12-10 08:54 - 2015-12-10 08:54 - 00025600 ___SH C:\Users\Jacek\Desktop\Thumbs.db
2015-12-10 08:22 - 2015-12-10 08:22 - 02452480 _____ C:\Users\Jacek\Downloads\CENNIK HURTOWY CONCORD 2010.xls
2015-12-10 07:52 - 2015-12-10 07:52 - 00044301 _____ C:\Users\Jacek\Downloads\Addition.txt
2015-12-10 07:52 - 2015-12-10 07:52 - 00042706 _____ C:\Users\Jacek\Downloads\FRST (2).txt
2015-12-10 07:51 - 2015-12-11 09:02 - 00030833 _____ C:\Users\Jacek\Downloads\FRST.txt
2015-12-10 07:51 - 2015-12-10 07:52 - 00042965 _____ C:\Users\Jacek\Downloads\FRST (1).txt
2015-12-01 09:06 - 2015-12-01 09:06 - 00097413 _____ C:\Users\Jacek\Downloads\WarsSawaCup2015-Warszawa-wyniki (1).pdf
2015-12-01 09:05 - 2015-12-01 09:05 - 00097413 _____ C:\Users\Jacek\Downloads\WarsSawaCup2015-Warszawa-wyniki.pdf
2015-11-29 19:30 - 2015-11-29 19:31 - 28404652 _____ C:\Users\Jacek\Downloads\VIDEO0049.mp4
2015-11-29 15:12 - 2015-11-29 15:26 - 226257334 _____ C:\Users\Jacek\Desktop\Mój film.mp4
2015-11-27 20:17 - 2015-12-09 20:11 - 00000000 ____D C:\ProgramData\1WMiniPro1
2015-11-27 20:17 - 2015-11-27 21:21 - 00000000 ____D C:\Users\Jacek\AppData\Roaming\yoursearching
2015-11-27 20:17 - 2015-11-27 20:17 - 00000098 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-11-27 20:17 - 2015-11-27 20:17 - 00000000 ____D C:\Users\Public\Documents\PearlMountain
2015-11-27 20:17 - 2015-11-27 20:17 - 00000000 ____D C:\Users\Jacek\AppData\Roaming\PearlMountain
2015-11-27 20:17 - 2015-11-27 20:17 - 00000000 ____D C:\ProgramData\PearlMountain
2015-11-27 20:17 - 2015-11-27 20:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CollageIt
2015-11-27 20:17 - 2015-11-27 20:17 - 00000000 ____D C:\Program Files\CollageIt
2015-11-27 20:16 - 2015-11-27 20:16 - 08795496 _____ (PearlMountain Technology Co., Ltd ) C:\Users\Jacek\Downloads\CollageIt.exe
2015-11-27 20:15 - 2015-11-27 20:15 - 00962128 _____ (Installer Soft Program ) C:\Users\Jacek\Downloads\CollageIt-33982-dp.exe
2015-11-20 08:05 - 2015-11-20 08:05 - 00031664 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsshimx.sys
2015-11-12 19:42 - 2015-11-12 19:42 - 00000000 ____D C:\Users\Jacek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-11-11 18:23 - 2015-11-11 18:23 - 00000218 _____ C:\Users\Jacek\AppData\Local\recently-used.xbel
2015-11-11 18:06 - 2015-11-11 18:23 - 00000000 ____D C:\Users\Jacek\AppData\Local\gtk-2.0
2015-11-11 17:57 - 2015-11-11 17:57 - 00000000 ____D C:\Users\Jacek\.thumbnails
2015-11-11 17:52 - 2015-11-27 20:33 - 00000000 ____D C:\Users\Jacek\.gimp-2.8
2015-11-11 17:52 - 2015-11-11 17:52 - 00000000 ____D C:\Users\Jacek\AppData\Local\gegl-0.2
2015-11-11 17:52 - 2015-11-11 17:52 - 00000000 ____D C:\Users\Jacek\AppData\Local\fontconfig
2015-11-11 17:51 - 2015-11-11 17:51 - 00001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2015-11-11 17:49 - 2015-11-11 17:51 - 00000000 ____D C:\Program Files\GIMP 2
2015-11-11 17:47 - 2015-11-11 17:47 - 91931728 _____ (The GIMP Team ) C:\Users\Jacek\Downloads\gimp-2.8.14-setup-1.exe
2015-11-11 17:43 - 2015-11-11 17:43 - 00958448 _____ (Prog soft ) C:\Users\Jacek\Downloads\GIMP-13219-dp.exe
2015-11-11 17:40 - 2015-11-11 17:40 - 00001213 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-11-11 17:40 - 2015-11-11 17:40 - 00000000 ____D C:\Windows\pl
2015-11-11 17:39 - 2015-11-11 17:39 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-11-11 17:39 - 2015-11-11 17:39 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2015-11-11 17:38 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2015-11-11 17:38 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2015-11-11 17:38 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2015-11-11 17:38 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2015-11-11 17:36 - 2010-08-11 05:44 - 02983424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2015-11-11 17:36 - 2010-08-11 05:35 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2015-11-11 17:34 - 2015-11-11 17:34 - 01245896 _____ (Microsoft Corporation) C:\Users\Jacek\Downloads\wlsetup-web.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-11 08:56 - 2009-07-14 03:37 - 00000000 ____D C:\Windows
2015-12-11 08:50 - 2009-09-28 18:37 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-11 08:48 - 2015-06-16 20:41 - 00001162 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1679813524-3586070068-693276116-1000UA.job
2015-12-11 08:25 - 2014-12-22 16:13 - 00000000 ____D C:\Users\Jacek
2015-12-11 08:22 - 2012-03-29 17:07 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-10 21:57 - 2009-09-24 19:57 - 00000000 _____ C:\Users\Jacek\AppData\LocalLow\prvlcl.dat
2015-12-10 21:25 - 2011-05-30 20:04 - 00000000 ____D C:\ProgramData\MFAData
2015-12-10 17:04 - 2009-09-28 18:37 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-10 14:06 - 2014-12-22 16:10 - 00013232 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-10 14:06 - 2014-12-22 16:10 - 00013232 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-10 13:59 - 2015-02-26 08:28 - 00008192 _____ C:\Windows\system32\WDPABKP.dat
2015-12-10 13:59 - 2013-12-03 22:38 - 00000644 _____ C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2015-12-10 13:58 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-10 11:48 - 2015-06-16 20:41 - 00001110 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1679813524-3586070068-693276116-1000Core.job
2015-12-10 08:42 - 2009-11-03 18:33 - 00000000 ____D C:\Windows\pss
2015-12-10 07:59 - 2013-12-03 22:37 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2015-12-10 07:58 - 2015-07-11 12:03 - 00000000 ____D C:\Program Files\Common Files\AV
2015-12-10 07:44 - 2010-10-28 19:08 - 00002405 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-09 21:42 - 2014-03-09 11:10 - 00000000 ___RD C:\Users\Jacek\Dropbox
2015-12-09 21:42 - 2014-03-09 11:08 - 00000000 ____D C:\Users\Jacek\AppData\Roaming\Dropbox
2015-12-09 20:12 - 2015-10-31 10:51 - 00000868 _____ C:\Users\Public\Desktop\AVG Protection.lnk
2015-12-09 20:12 - 2015-03-07 22:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-12-09 20:11 - 2014-12-22 17:27 - 00001731 _____ C:\Users\Jacek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-09 20:11 - 2014-12-07 19:42 - 00001168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-09 20:11 - 2014-12-07 19:42 - 00001156 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-09 20:11 - 2009-08-04 15:37 - 00001931 _____ C:\Users\Public\Desktop\Internet Explorer.lnk
2015-12-09 09:23 - 2013-12-03 22:38 - 00000616 _____ C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2015-12-09 09:22 - 2012-03-29 17:06 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-12-09 09:22 - 2011-09-05 19:45 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-12-02 20:05 - 2014-12-22 17:29 - 01668226 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-02 20:05 - 2009-07-14 09:07 - 00739932 _____ C:\Windows\system32\perfh015.dat
2015-12-02 20:05 - 2009-07-14 09:07 - 00155474 _____ C:\Windows\system32\perfc015.dat
2015-12-02 20:05 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2015-12-01 13:56 - 2011-11-04 15:12 - 00000000 ____D C:\Users\Jacek\Desktop\nagrywanie płyt
2015-12-01 13:56 - 2011-11-04 15:10 - 00000000 ____D C:\Users\Jacek\Desktop\foto i video
2015-12-01 13:49 - 2015-05-21 17:44 - 00000000 ____D C:\Users\Jacek\Desktop\orkiesrta
2015-12-01 08:25 - 2013-12-03 22:38 - 00000446 _____ C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2015-11-29 17:59 - 2015-07-29 10:22 - 00000000 ____D C:\Users\Jacek\Desktop\PROJEKT
2015-11-29 15:14 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2015-11-27 20:23 - 2014-11-10 21:07 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-11-27 17:03 - 2010-06-01 12:46 - 00000000 ____D C:\ProgramData\TEMP
2015-11-27 16:26 - 2015-01-01 11:13 - 00000000 ____D C:\Users\Jacek\AppData\Local\Windows Live
2015-11-18 18:46 - 2015-10-28 16:48 - 00000000 ____D C:\Users\Jacek\AppData\Roaming\HpUpdate
2015-11-13 23:31 - 2015-01-01 11:47 - 00000000 ___RD C:\Users\Jacek\Documents\Scanned Documents
2015-11-13 23:21 - 2014-05-11 20:32 - 00000000 ____D C:\Users\Jacek\Documents\FormatFactory

==================== Pliki w katalogu głównym wybranych folderów =======

2013-06-26 20:20 - 2014-06-23 18:29 - 0003728 _____ () C:\Program Files\Mozilla Firefoxavg-secure-search.xml
2009-09-17 20:49 - 2015-06-08 12:24 - 1374581 _____ () C:\Users\Jacek\AppData\Roaming\UserTile.png
2009-09-20 21:05 - 2015-01-19 17:45 - 0013898 _____ () C:\Users\Jacek\AppData\Roaming\wklnhst.dat
2014-12-27 14:01 - 2014-12-27 14:01 - 0003584 _____ () C:\Users\Jacek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-11-11 18:23 - 2015-11-11 18:23 - 0000218 _____ () C:\Users\Jacek\AppData\Local\recently-used.xbel
2015-01-07 10:00 - 2015-01-12 20:49 - 0007667 _____ () C:\Users\Jacek\AppData\Local\resmon.resmoncfg
2015-10-28 16:47 - 2015-10-28 16:47 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-11-27 20:17 - 2015-11-27 20:17 - 0000098 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


Niektóre pliki w TEMP:
====================
C:\Users\Jacek\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpma5jxc.dll


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-12-10 09:57

==================== Koniec  FRST.txt ============================