Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:09-12-2015
Uruchomiony przez Kinga (administrator)  SREBERKO (11-12-2015 16:26:40)
Uruchomiony z C:\Users\Kinga\Downloads
Załadowane profile: Kinga (Dostępne profile: Kinga)
Platform: Windows 10 Home (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Enigma Software Group USA, LLC.) C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Taiwan Shui Mu Chih Ching Technology Limited) C:\Program Files (x86)\Picexa\picexasvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Baidu, Inc.) C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.118812.0\BHipsSvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Baidu, Inc.) C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.118812.0\BAVSvc.exe
(tsvr.com) C:\Users\Kinga\AppData\Roaming\TSv\TSvr.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.9.662.8718\AdAwareService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(DTools LIMITED) C:\ProgramData\2WMiniPro2\WMiniPro.exe
(TFuns LIMITED) C:\ProgramData\4WdM4\WdMan.exe
(Baidu, Inc.) C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.118812.0\bavhm.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Enigma Software Group USA, LLC.) C:\Program Files (x86)\Enigma Software Group\SpyHunter\SpyHunter4.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Baidu, Inc.) C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.118812.0\BavTray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-07-17] (Synaptics Incorporated)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.9.662.8718\AdAwareTray.exe [9574112 2015-11-19] ()
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-07] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491632 2012-09-10] (CyberLink Corp.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Baidu Antivirus] => C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.118812.0\BavTray.exe [1997296 2015-05-15] (Baidu, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2015-04-10] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-996966027-1595442658-2413617871-1001\...\Run: [Power2GoExpress8] => C:\Program Files (x86)\CyberLink\Power2Go8\Power2GoExpress8.exe [1707632 2012-09-10] (CyberLink Corp.)
HKU\S-1-5-21-996966027-1595442658-2413617871-1001\...\MountPoints2: {346bc93b-495d-11e5-bed8-6c3be5f73402} - "F:\AutoRun.exe" 
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.118812.0\BavShx64.dll [2015-05-15] (Baidu, Inc.)
Startup: C:\Users\Kinga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk [2015-05-10]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sh4native Sh4Removal
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{e238255c-b881-45a9-8d2e-468c12ef4148}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
Tcpip\..\Interfaces\{fcd299fb-c219-4532-966d-1397ec567965}: [DhcpNameServer] 192.168.8.1 192.168.8.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-996966027-1595442658-2413617871-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-996966027-1595442658-2413617871-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.uk.msn.com/HPALL13/178
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.omniboxes.com/web/?type=ds&ts=1449036378&z=ecaadc7de49bc924f8fd26fg3z5zdt0e7c5q1c7beg&from=ient07021&uid=HitachiXHTS545050A7E380_TE85113Q29B1MR29B1MRX&q={searchTerms}
SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.omniboxes.com/web/?type=ds&ts=1449036378&z=ecaadc7de49bc924f8fd26fg3z5zdt0e7c5q1c7beg&from=ient07021&uid=HitachiXHTS545050A7E380_TE85113Q29B1MR29B1MRX&q={searchTerms}
SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKLM -> {CDE4CC88-16DD-4431-BECB-16E31CB56D88} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKLM-x32 -> {CDE4CC88-16DD-4431-BECB-16E31CB56D88} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-996966027-1595442658-2413617871-1001 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKU\S-1-5-21-996966027-1595442658-2413617871-1001 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKU\S-1-5-21-996966027-1595442658-2413617871-1001 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKU\S-1-5-21-996966027-1595442658-2413617871-1001 -> {CDE4CC88-16DD-4431-BECB-16E31CB56D88} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-06-18] (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-06-18] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2015-06-06] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2015-06-06] (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

Edge: 
======
Edge HomeButtonPage: HKU\S-1-5-21-996966027-1595442658-2413617871-1001 -> hxxp://www.delta-homes.com/?type=hp&ts=1442818244&z=f5b4d317fe221ba9ab66741g3z8z9o5bbg3b2odwcg&from=ient07021&uid=HitachiXHTS545050A7E380_TE85113Q29B1MR29B1MRX

FireFox:
========
FF ProfilePath: C:\Users\Kinga\AppData\Roaming\Mozilla\Firefox\Profiles\n2h260ui.default-1449845194345
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-09] ()
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-06-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-06-18] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll [2013-09-05] (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.79.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-06-06] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.79.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2015-06-06] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.)
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08]
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Kinga\AppData\Roaming\Mozilla\Firefox\Profiles\nra5u0rv.default\extensions\faststartff@gmail.com => nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Kinga\AppData\Roaming\Mozilla\Firefox\Profiles\157sckfb.default-1428305416254\extensions\default_newtabff@gmail.com => nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\Kinga\AppData\Roaming\Mozilla\Firefox\Profiles\157sckfb.default-1428305416254\extensions\defsearchp@gmail.com => nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Kinga\AppData\Roaming\Mozilla\Firefox\Profiles\157sckfb.default-1428305416254\extensions\deskCutv2@gmail.com => nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [yahooprotected@gmail.com] - C:\Users\Kinga\AppData\Roaming\Mozilla\Firefox\Profiles\157sckfb.default-1428305416254\extensions\yahooprotected@gmail.com => nie znaleziono

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 BavSvc; C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.118812.0\BavSvc.exe [2572928 2015-05-15] (Baidu, Inc.)
S3 BdSandboxSrv; C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.118812.0\BdSandboxSrv64.exe [264736 2015-01-08] (Baidu, Inc.)
R2 BHipsSvc; C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.118812.0\BHipsSvc.exe [531232 2015-05-15] (Baidu, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [25800 2015-09-28] (Hewlett-Packard Company)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-14] (Realsil Microelectronics Inc.) [Brak podpisu cyfrowego]
R2 IhPul; C:\Users\Kinga\AppData\Roaming\TSv\TSvr.exe [580752 2015-12-08] (tsvr.com)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.9.662.8718\AdAwareService.exe [712432 2015-11-19] ()
R2 PicexaService; C:\Program Files (x86)\Picexa\PicexaSvc.exe [731784 2015-12-09] (Taiwan Shui Mu Chih Ching Technology Limited)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-06-24] (Realtek Semiconductor)
R2 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [770432 2014-01-09] (Enigma Software Group USA, LLC.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-07-17] (Synaptics Incorporated)
R2 WdMan; C:\ProgramData\4WdM4\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Brak podpisu cyfrowego]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WdsManPro; C:\ProgramData\2WMiniPro2\WMiniPro.exe [302592 2015-11-30] (DTools LIMITED) [Brak podpisu cyfrowego]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2013-04-18] (Google Inc)
S3 AndNetDiag; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [29184 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [36352 2013-06-28] (LG Electronics Inc.)
R3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1369288 2015-07-29] (BitDefender)
R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [271272 2015-07-29] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [747120 2015-07-29] (BitDefender)
S3 BdApiUtil; C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.118812.0\BdApiUtil64.sys [116936 2015-05-15] (Baidu, Inc.)
S3 bdark64; C:\WINDOWS\system32\drivers\bdark64.sys [78792 2015-04-20] ()
S3 BdCameraProtect; C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.118812.0\BdCameraProtect64.sys [25032 2015-05-15] (Baidu, Inc.)
R1 BdfNdisf; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfndisf6.sys [97816 2015-01-06] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys [107080 2015-01-06] (BitDefender LLC)
S3 BdSandbox; C:\Windows\System32\drivers\BdSandbox.sys [232440 2015-01-08] (Baidu, Inc.)
R1 Bfilter; C:\Windows\System32\drivers\Bfilter.sys [62920 2015-05-15] (Baidu, Inc.)
R1 Bfmon; C:\Windows\System32\drivers\Bfmon.sys [38344 2015-05-15] (Baidu, Inc.)
R1 Bnbase; C:\Windows\System32\drivers\bnbasex64.sys [62792 2015-05-15] (Baidu, Inc.)
R1 Bndef; C:\Windows\System32\drivers\bndef64.sys [485672 2015-05-15] (Baidu, Inc.)
R3 BNmon; C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.118812.0\Bnmon64.sys [82376 2015-05-15] (Baidu, Inc.)
R1 Bprotect; C:\Windows\System32\drivers\Bprotect.sys [169416 2015-05-15] (Baidu, Inc.)
S3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [165376 2015-07-10] (Microsoft Corporation)
S3 BthHFAud; C:\Windows\system32\DRIVERS\BthHfAud.sys [36864 2015-07-10] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 esgiguard; C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [14872 2014-01-07] ()
S3 EsgScanner; C:\Windows\SysWOW64\DRIVERS\EsgScanner.sys [19984 2012-06-22] ()
R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\3.0.98.0\gzflt.sys [155912 2015-01-22] (BitDefender LLC)
R3 netr28x; C:\Windows\system32\DRIVERS\netr28x.sys [2554528 2015-06-12] (MediaTek Inc.)
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [310528 2015-06-05] (Realtek Semiconductor Corp.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1219200 2015-06-03] (Ralink Technology, Corp.)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-29] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-07-17] (Synaptics Incorporated)
S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [452040 2015-01-22] (BitDefender S.R.L.)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 usbbus; C:\Windows\System32\drivers\lgx64bus.sys [17920 2013-04-24] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\system32\DRIVERS\lgx64diag.sys [28160 2013-04-24] (LG Electronics Inc.)
S3 USBModem; C:\Windows\system32\DRIVERS\lgx64modem.sys [34816 2013-04-24] (LG Electronics Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-11 16:25 - 2015-12-11 16:25 - 00050723 _____ C:\Users\Kinga\Downloads\Addition.txt
2015-12-11 16:24 - 2015-12-11 16:26 - 00022383 _____ C:\Users\Kinga\Downloads\FRST.txt
2015-12-11 16:08 - 2015-12-11 16:26 - 00000000 ____D C:\FRST
2015-12-11 16:08 - 2015-12-11 16:08 - 02369024 _____ (Farbar) C:\Users\Kinga\Downloads\FRST64.exe
2015-12-11 15:52 - 2015-12-11 15:52 - 00016148 _____ C:\WINDOWS\system32\SREBERKO_Kinga_HistoryPrediction.bin
2015-12-11 15:22 - 2015-12-11 15:22 - 00003360 _____ C:\WINDOWS\System32\Tasks\SpyHunter4Startup
2015-12-11 10:09 - 2015-12-11 16:22 - 00000000 ____D C:\Program Files (x86)\Picexa
2015-12-11 10:09 - 2015-12-11 10:09 - 00001858 _____ C:\Users\Public\Desktop\Picexa.lnk
2015-12-11 10:09 - 2015-12-11 10:09 - 00000000 ____D C:\Users\Kinga\AppData\Roaming\Picexa Viewer
2015-12-11 10:09 - 2015-12-11 10:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picexa
2015-12-11 10:08 - 2015-12-11 10:09 - 00000000 ____D C:\ProgramData\4WdM4
2015-12-09 18:20 - 2015-12-09 19:12 - 00000000 ____D C:\Users\Kinga\Downloads\The.Flash.2014.S02E01.HDTV.x264-LOL[ettv]
2015-12-09 17:07 - 2015-12-01 08:01 - 02115936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-09 17:07 - 2015-12-01 07:03 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\gpuenergydrv.sys
2015-12-09 17:07 - 2015-12-01 06:54 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2015-12-09 17:07 - 2015-12-01 06:51 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-12-09 17:07 - 2015-12-01 05:59 - 05455360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2015-12-09 17:07 - 2015-11-25 06:42 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-12-09 17:07 - 2015-11-25 06:42 - 00168288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe
2015-12-09 17:07 - 2015-11-25 06:41 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-09 17:07 - 2015-11-25 06:40 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-12-09 17:07 - 2015-11-25 06:33 - 03622272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-09 17:07 - 2015-11-25 06:32 - 00113184 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2015-12-09 17:07 - 2015-11-25 06:27 - 01366680 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-09 17:07 - 2015-11-25 06:12 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-12-09 17:07 - 2015-11-25 06:11 - 01532984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-09 17:07 - 2015-11-25 06:09 - 01310880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-09 17:07 - 2015-11-25 06:01 - 02879024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-09 17:07 - 2015-11-25 05:59 - 00092992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2015-12-09 17:07 - 2015-11-25 05:49 - 01569280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2015-12-09 17:07 - 2015-11-25 05:49 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2015-12-09 17:07 - 2015-11-25 05:49 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-09 17:07 - 2015-11-25 05:49 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2015-12-09 17:07 - 2015-11-25 05:48 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EthernetMediaManager.dll
2015-12-09 17:07 - 2015-11-25 05:48 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMediaManager.dll
2015-12-09 17:07 - 2015-11-25 05:44 - 21872640 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-09 17:07 - 2015-11-25 05:42 - 24592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-09 17:07 - 2015-11-25 05:37 - 02350592 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-09 17:07 - 2015-11-25 05:36 - 01710592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-09 17:07 - 2015-11-25 05:36 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2015-12-09 17:07 - 2015-11-25 05:35 - 00929792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-09 17:07 - 2015-11-25 05:35 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2015-12-09 17:07 - 2015-11-25 05:34 - 12504576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-09 17:07 - 2015-11-25 05:31 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll
2015-12-09 17:07 - 2015-11-25 05:30 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2015-12-09 17:07 - 2015-11-25 05:30 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-09 17:07 - 2015-11-25 05:30 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2015-12-09 17:07 - 2015-11-25 05:29 - 01649152 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-09 17:07 - 2015-11-25 05:29 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll
2015-12-09 17:07 - 2015-11-25 05:28 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-09 17:07 - 2015-11-25 05:28 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-09 17:07 - 2015-11-25 05:27 - 02180608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-12-09 17:07 - 2015-11-25 05:26 - 00849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2015-12-09 17:07 - 2015-11-25 05:26 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-09 17:07 - 2015-11-25 05:25 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-12-09 17:07 - 2015-11-25 05:25 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2015-12-09 17:07 - 2015-11-25 05:23 - 19323392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-09 17:07 - 2015-11-25 05:23 - 03588096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-09 17:07 - 2015-11-25 05:23 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-12-09 17:07 - 2015-11-25 05:22 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-09 17:07 - 2015-11-25 05:22 - 01383424 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-09 17:07 - 2015-11-25 05:22 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2015-12-09 17:07 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeoqw.dll
2015-12-09 17:07 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZST.DLL
2015-12-09 17:07 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZEL.DLL
2015-12-09 17:07 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZE.DLL
2015-12-09 17:07 - 2015-11-25 05:19 - 01795584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-12-09 17:07 - 2015-11-25 05:19 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2015-12-09 17:07 - 2015-11-25 05:18 - 01233920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2015-12-09 17:07 - 2015-11-25 05:17 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-09 17:07 - 2015-11-25 05:16 - 01442816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-09 17:07 - 2015-11-25 05:16 - 00786432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2015-12-09 17:07 - 2015-11-25 05:13 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-09 17:07 - 2015-11-25 05:11 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll
2015-12-09 17:07 - 2015-11-25 05:10 - 18801664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-09 17:07 - 2015-11-25 05:10 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-09 17:07 - 2015-11-25 05:10 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-09 17:07 - 2015-11-25 05:10 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-09 17:07 - 2015-11-25 05:08 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2015-12-09 17:07 - 2015-11-25 05:07 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2015-12-09 17:07 - 2015-11-25 05:05 - 11263488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-09 17:07 - 2015-11-25 05:04 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-09 17:07 - 2015-11-25 05:04 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll
2015-12-09 17:07 - 2015-11-25 05:04 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-12-09 17:07 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeoqw.dll
2015-12-09 17:07 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZST.DLL
2015-12-09 17:07 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZEL.DLL
2015-12-09 17:07 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZE.DLL
2015-12-09 17:07 - 2015-11-25 03:52 - 00775312 _____ C:\WINDOWS\SysWOW64\locale.nls
2015-12-09 17:07 - 2015-11-25 03:52 - 00775312 _____ C:\WINDOWS\system32\locale.nls
2015-12-09 17:06 - 2015-12-01 06:49 - 04792320 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-12-09 17:06 - 2015-12-01 06:02 - 03580416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-12-05 07:03 - 2015-12-05 07:03 - 00000000 ____D C:\Users\Kinga\Desktop\Kruger.Maria-Karolcia
2015-12-03 10:00 - 2015-12-03 19:03 - 00000000 ____D C:\Users\Kinga\Downloads\Kruger.Maria-Karolcia
2015-12-03 01:32 - 2015-12-11 15:22 - 00406496 _____ C:\spyhunter.fix
2015-12-03 01:32 - 2010-05-13 17:34 - 00014232 _____ C:\WINDOWS\SysWOW64\sh4native.exe
2015-12-02 23:32 - 2015-12-02 23:32 - 00002357 _____ C:\Users\Kinga\Desktop\SpyHunter.lnk
2015-12-02 23:32 - 2015-12-02 23:32 - 00000000 ____D C:\Users\Kinga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2015-12-02 23:32 - 2015-12-02 23:32 - 00000000 ____D C:\sh4ldr
2015-12-02 23:32 - 2015-12-02 23:32 - 00000000 ____D C:\Program Files (x86)\Enigma Software Group
2015-12-02 23:31 - 2015-12-02 23:32 - 00000000 ____D C:\WINDOWS\AF54923662584AC6A0435B5B89C6EB61.TMP
2015-12-02 23:31 - 2015-12-02 23:31 - 00000000 ____D C:\Users\Kinga\Downloads\SpyHunter 4.17.6.4336
2015-12-02 23:28 - 2015-12-02 23:29 - 44862875 _____ C:\Users\Kinga\Downloads\SpyHunter 4.17.6.4336.rar
2015-12-02 22:09 - 2015-12-02 23:14 - 170459772 _____ C:\Users\Kinga\Downloads\Kruger.Maria-Karolcia.rar
2015-12-02 20:19 - 2015-12-02 20:19 - 02723840 _____ C:\Users\Kinga\Downloads\flażolet w szkole.pdf
2015-12-02 12:46 - 2015-12-02 12:46 - 00000000 ____D C:\Users\Kinga\Downloads\Łowca 4.20.9.4533 Eng Patch 32 Bit
2015-12-02 12:45 - 2015-12-02 12:45 - 03600772 _____ C:\Users\Kinga\Downloads\Łowca 4.20.9.4533 Eng Patch 32 Bit.7z
2015-12-02 11:19 - 2015-12-02 11:19 - 00000000 _____ C:\autoexec.bat
2015-12-02 11:17 - 2015-12-02 11:17 - 03237248 _____ (Enigma Software Group USA, LLC.) C:\Users\Kinga\Downloads\SpyHunter-Installer.exe
2015-12-02 07:59 - 2015-12-02 07:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2015-12-02 07:39 - 2015-12-02 07:39 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2015-12-02 07:22 - 2015-12-02 07:22 - 02012464 _____ C:\Users\Kinga\Downloads\Adaware_Installer(1).exe
2015-12-02 07:18 - 2015-12-02 07:20 - 00000000 ____D C:\Program Files (x86)\WinZipper
2015-12-02 07:18 - 2015-12-02 07:18 - 00000000 ____D C:\Users\Kinga\AppData\Roaming\WinZipper
2015-12-02 07:07 - 2015-12-02 07:08 - 00000000 ____D C:\ProgramData\2WMiniPro2
2015-12-01 12:01 - 2015-12-01 12:09 - 00000773 _____ C:\Users\Kinga\Desktop\Nowy dokument tekstowy.txt
2015-11-30 21:35 - 2015-11-30 23:30 - 1467929408 _____ C:\Users\Kinga\Downloads\Spectre.2015.PLSUBBED.TS.XViD-MORS.avi
2015-11-29 22:37 - 2015-11-29 22:37 - 00000000 ____D C:\Users\Kinga\Downloads\[TEAM-XPG ]Tomb raider of rise Trainer TU-2
2015-11-29 09:14 - 2015-11-29 14:38 - 00000008 _____ C:\Users\Kinga\Downloads\Spectre.2015.PL.SUBBED.TS.XViD-MORS.avi
2015-11-29 09:13 - 2015-11-29 22:38 - 734478336 _____ C:\Users\Kinga\Downloads\Hotel.Transylvania.2.2015.PLDUB.MD.HDRip.XviD-KiT.avi
2015-11-26 19:17 - 2015-11-26 20:20 - 366962688 _____ C:\Users\Kinga\Downloads\Supergirl S01E03 [SUBBPL.IaM].avi
2015-11-26 19:16 - 2015-11-26 19:56 - 366919680 _____ C:\Users\Kinga\Downloads\Supergirl S01E02 [SUBBPL.IaM].avi
2015-11-26 19:10 - 2015-11-26 19:36 - 396339200 _____ C:\Users\Kinga\Downloads\Supergirl.S01E01.PLSUBBED.HDTV.XviD-Rafal77.avi
2015-11-25 19:50 - 2015-11-25 20:31 - 733661184 _____ C:\Users\Kinga\Downloads\Strange.Magic.2015.PL.WEB-DL.XviD-KiT.avi
2015-11-24 17:40 - 2015-11-24 17:40 - 00030609 _____ C:\Users\Kinga\Downloads\Marvels JJ S01E03 [PL-KiT].avi
2015-11-24 15:35 - 2015-11-24 15:35 - 00152293 _____ C:\Users\Kinga\Downloads\[TEAM-XPG ]Tomb raider of rise Trainer TU-2.rar
2015-11-21 22:17 - 2015-11-21 23:05 - 419334144 _____ C:\Users\Kinga\Downloads\Marvels JJ S01E04 [PL-KiT].avi
2015-11-21 22:16 - 2015-11-21 22:44 - 471552000 _____ C:\Users\Kinga\Downloads\Marvels.Jessica.Jones.S01E02.PL.WEBRip.XviD-KiT.avi
2015-11-21 18:58 - 2015-11-21 18:58 - 00000000 ____D C:\Users\Kinga\Downloads\Marvels.Jessica.Jones.S01E05.WEBRip.XviD-FUM[ettv]
2015-11-21 18:57 - 2015-11-24 17:41 - 00000000 ____D C:\Users\Kinga\Downloads\Marvels.Jessica.Jones.S01E03.WEBRip.XviD-FUM[ettv]
2015-11-21 18:57 - 2015-11-21 18:57 - 00000000 ____D C:\Users\Kinga\Downloads\Marvels.Jessica.Jones.S01E04.WEBRip.XviD-FUM[ettv]
2015-11-21 18:56 - 2015-11-21 22:11 - 00000000 ____D C:\Users\Kinga\Downloads\Marvels.Jessica.Jones.S01E02.WEBRip.XviD-FUM[ettv]
2015-11-21 18:56 - 2015-11-21 22:10 - 00000000 ____D C:\Users\Kinga\Downloads\Marvels.Jessica.Jones.S01E01.WEBRip.XviD-FUM[ettv]
2015-11-15 22:39 - 2015-11-15 22:40 - 67047987 _____ (Mirosław Sztramski) C:\Users\Kinga\Downloads\SpikitSetup1.9.4.0.exe
2015-11-14 17:41 - 2015-11-14 17:44 - 00000000 ____D C:\Users\Kinga\Downloads\zdjcia
2015-11-14 13:22 - 2015-11-15 07:52 - 00000000 ____D C:\Users\Kinga\Downloads\Sleeping Dogs XBOX360-SWAG
2015-11-14 13:20 - 2015-11-15 07:52 - 00000000 ____D C:\Users\Kinga\Downloads\Rise.of.the.Tomb.Raider.XBOX360-iMARS
2015-11-13 12:35 - 2015-11-14 13:19 - 00000000 ____D C:\Users\Kinga\Downloads\The Prodigy - Discography (1991-2009)
2015-11-11 12:53 - 2015-11-11 12:53 - 00000000 ____D C:\Users\Kinga\Downloads\Counter-Strike 1.6 CS.GO Romania 2015
2015-11-11 07:34 - 2015-11-11 08:08 - 00000000 ____D C:\Users\Kinga\Downloads\MINECRAFT STORY MODE - EPSIDODE 2 (XBLA) www.soparaxbox360.com
2015-11-11 07:34 - 2015-11-11 08:06 - 00000000 ____D C:\Users\Kinga\Downloads\Minecraft Story Mode - Episode One - (XBOX360-RGH) www.soparaxbox360.com

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-11 16:26 - 2015-04-24 15:16 - 00000000 ____D C:\Users\Kinga\Desktop\AKINGA
2015-12-11 16:25 - 2015-07-10 10:05 - 00000000 ____D C:\Windows
2015-12-11 16:25 - 2014-12-07 23:40 - 00004210 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{785506E1-AAC1-4C87-8002-1B24FE57CFF1}
2015-12-11 15:52 - 2015-08-06 11:49 - 00000000 ____D C:\Users\Kinga
2015-12-11 15:52 - 2014-09-03 20:32 - 00000374 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2015-12-11 15:51 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-11 15:32 - 2013-09-19 14:00 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-11 15:27 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-11 15:24 - 2015-07-10 10:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-11 15:19 - 2015-07-10 12:04 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-11 15:18 - 2013-09-07 18:26 - 00000000 ____D C:\Users\Kinga\AppData\Local\Packages
2015-12-11 14:09 - 2015-02-17 10:35 - 00000000 ____D C:\Users\Kinga\AppData\Roaming\Skype
2015-12-11 13:55 - 2015-04-13 19:53 - 00000000 ____D C:\Users\Kinga\AppData\Roaming\.minecraft
2015-12-11 10:08 - 2015-11-10 19:19 - 00000074 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-12-11 10:08 - 2015-09-21 07:51 - 00000000 ____D C:\Users\Kinga\AppData\Roaming\TSv
2015-12-11 10:07 - 2013-09-07 18:41 - 00000000 ____D C:\Users\Kinga\AppData\Local\ElevatedDiagnostics
2015-12-11 10:06 - 2014-10-25 07:10 - 00001600 _____ C:\Users\Kinga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-11 10:06 - 2013-09-07 18:44 - 00001493 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-10 17:21 - 2015-07-10 12:02 - 00000000 ____D C:\WINDOWS\INF
2015-12-10 17:20 - 2015-07-10 13:20 - 00354680 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-10 17:13 - 2015-08-06 11:48 - 02040676 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-10 17:13 - 2015-07-10 17:30 - 00886056 _____ C:\WINDOWS\system32\perfh015.dat
2015-12-10 17:13 - 2015-07-10 17:30 - 00191998 _____ C:\WINDOWS\system32\perfc015.dat
2015-12-10 17:05 - 2015-02-03 17:41 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-10 17:05 - 2015-02-03 17:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-09 21:17 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-09 19:08 - 2015-02-24 22:48 - 00000000 ____D C:\Users\Kinga\AppData\Roaming\uTorrent
2015-12-09 17:39 - 2015-02-03 17:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-09 17:39 - 2014-01-28 09:25 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-09 17:37 - 2015-07-10 11:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-09 17:36 - 2013-09-10 08:50 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-09 17:30 - 2013-09-10 08:50 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-05 07:40 - 2015-08-25 09:48 - 00000000 ____D C:\Users\Kinga\Downloads\Annie
2015-12-05 06:49 - 2015-07-05 07:12 - 00000000 ____D C:\Users\Kinga\Desktop\Kinga niedotykać
2015-12-02 19:14 - 2015-03-21 09:25 - 00092336 _____ C:\Users\Kinga\AppData\Local\GDIPFONTCACHEV1.DAT
2015-12-02 19:02 - 2015-08-06 12:38 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-02 18:56 - 2015-10-30 20:56 - 00000000 ___HD C:\$WINDOWS.~BT
2015-12-02 18:40 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-02 11:10 - 2015-09-21 07:51 - 00000000 ____D C:\Program Files (x86)\SFK
2015-12-01 01:32 - 2015-10-02 13:56 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-12-01 01:32 - 2015-10-02 13:56 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-28 20:35 - 2014-11-16 12:35 - 00003242 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForKinga
2015-11-28 20:35 - 2014-11-16 12:35 - 00000350 _____ C:\WINDOWS\Tasks\HPCeeScheduleForKinga.job
2015-11-15 15:55 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\rescache
2015-11-12 16:32 - 2013-09-19 14:00 - 00003916 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-11-11 15:40 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-11-11 12:03 - 2015-11-10 19:19 - 00000000 ____D C:\ProgramData\UWMiniProU

==================== Pliki w katalogu głównym wybranych folderów =======

2014-10-20 17:04 - 2015-06-29 08:00 - 0008192 _____ () C:\Users\Kinga\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-11-10 19:19 - 2015-12-11 10:08 - 0000074 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


Niektóre pliki w TEMP:
====================
C:\Users\Kinga\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Kinga\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Kinga\AppData\Local\Temp\proxy_vole1564137865534399027.dll
C:\Users\Kinga\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Kinga\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Kinga\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Kinga\AppData\Local\Temp\UninstallHPSA.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-12-02 11:07

==================== Koniec  FRST.txt ============================