Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:09-12-2015
Uruchomiony przez Dawid (administrator)  DAWID-PC (11-12-2015 14:57:56)
Uruchomiony z C:\Users\Dawid\Desktop
Załadowane profile: Dawid (Dostępne profile: Dawid)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 7 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\Program Files\PLAY ONLINE\PLAY ONLINE.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
() C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
(TFuns LIMITED) C:\ProgramData\MWdMM\WdMan.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-04-25] (Microsoft Corporation)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-10-04] (AVAST Software)
HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-04-25] (Microsoft Corporation)
HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\...\MountPoints2: F - F:\AutoRun.exe
HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\...\MountPoints2: G - G:\AutoRun.exe
HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\...\MountPoints2: {0a7e9905-762d-11e4-854f-001e8cfb7c68} - F:\AutoRun.exe
HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\...\MountPoints2: {23ea0825-87e0-11e5-9ee2-001e8cfb7c68} - F:\AutoRun.exe
HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\...\MountPoints2: {23ea0831-87e0-11e5-9ee2-001e8cfb7c68} - F:\AutoRun.exe
HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\...\MountPoints2: {4bdaf95f-9c70-11e2-9c1d-001e8cfb7c68} - F:\AutoRun.exe
HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\...\MountPoints2: {4bdaf97e-9c70-11e2-9c1d-001e8cfb7c68} - G:\AutoRun.exe
HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\...\MountPoints2: {9b0a22f8-9dc9-11e5-ab00-001e8cfb7c68} - F:\AutoRun.exe
HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\...\MountPoints2: {b525c2d9-93f5-11e3-94d5-001e8cfb7c68} - F:\AutoRun.exe
HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\...\MountPoints2: {b525c2dc-93f5-11e3-94d5-001e8cfb7c68} - F:\AutoRun.exe
HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\...\MountPoints2: {b525c306-93f5-11e3-94d5-001e8cfb7c68} - F:\AutoRun.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2014-10-02] (AVAST Software)
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\..\Interfaces\{360B7A57-1F85-47C2-91A4-B939853EDA65}: [DhcpNameServer] 95.160.170.92 88.156.222.92 82.139.8.40
Tcpip\..\Interfaces\{6FD507A6-4766-49BF-BD0F-A0B928329E4A}: [NameServer] 89.108.195.21 89.108.202.21

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449835993&z=ef957d71bf25c1f1c9117b0gdzezatabcc6w8t4t5z&from=ient07021&uid=FUJITSUXMHY2120BH_K427T7B2EKUKT7B2EKUKX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449835993&z=ef957d71bf25c1f1c9117b0gdzezatabcc6w8t4t5z&from=ient07021&uid=FUJITSUXMHY2120BH_K427T7B2EKUKT7B2EKUKX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449835993&z=ef957d71bf25c1f1c9117b0gdzezatabcc6w8t4t5z&from=ient07021&uid=FUJITSUXMHY2120BH_K427T7B2EKUKT7B2EKUKX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449835993&z=ef957d71bf25c1f1c9117b0gdzezatabcc6w8t4t5z&from=ient07021&uid=FUJITSUXMHY2120BH_K427T7B2EKUKT7B2EKUKX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449835993&z=ef957d71bf25c1f1c9117b0gdzezatabcc6w8t4t5z&from=ient07021&uid=FUJITSUXMHY2120BH_K427T7B2EKUKT7B2EKUKX
HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449835993&z=ef957d71bf25c1f1c9117b0gdzezatabcc6w8t4t5z&from=ient07021&uid=FUJITSUXMHY2120BH_K427T7B2EKUKT7B2EKUKX
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKU\S-1-5-21-2704335260-1478619686-1143808583-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449835993&z=ef957d71bf25c1f1c9117b0gdzezatabcc6w8t4t5z&from=ient07021&uid=FUJITSUXMHY2120BH_K427T7B2EKUKT7B2EKUKX&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2704335260-1478619686-1143808583-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449835993&z=ef957d71bf25c1f1c9117b0gdzezatabcc6w8t4t5z&from=ient07021&uid=FUJITSUXMHY2120BH_K427T7B2EKUKT7B2EKUKX&q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-10-02] (AVAST Software)
BHO: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files\Free Download Manager\iefdm2.dll [2015-08-07] (FreeDownloadManager.ORG)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.yoursites123.com/?type=sc&ts=1449835993&z=ef957d71bf25c1f1c9117b0gdzezatabcc6w8t4t5z&from=ient07021&uid=FUJITSUXMHY2120BH_K427T7B2EKUKT7B2EKUKX

FireFox:
========
FF ProfilePath: C:\Users\Dawid\AppData\Roaming\Mozilla\Firefox\Profiles\e4mbjqov.default-1414515110749
FF NewTab: about:newtab
FF DefaultSearchEngine: Google (avast)
FF DefaultSearchUrl: hxxps://www.google.com/search?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Homepage: about:home
FF Keyword.URL: hxxps://www.google.com/search?trackid=sp-006
FF NetworkProxy: "backup.ftp", "115.124.68.245"
FF NetworkProxy: "backup.ftp_port", 80
FF NetworkProxy: "backup.socks", "115.124.68.245"
FF NetworkProxy: "backup.socks_port", 80
FF NetworkProxy: "backup.ssl", "115.124.68.245"
FF NetworkProxy: "backup.ssl_port", 80
FF NetworkProxy: "ftp", "61.8.76.194"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "61.8.76.194"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "61.8.76.194"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "61.8.76.194"
FF NetworkProxy: "ssl_port", 3128
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()
FF SearchPlugin: C:\Users\Dawid\AppData\Roaming\Mozilla\Firefox\Profiles\e4mbjqov.default-1414515110749\searchplugins\google-avast.xml [2015-12-11]
FF SearchPlugin: C:\Users\Dawid\AppData\Roaming\Mozilla\Firefox\Profiles\e4mbjqov.default-1414515110749\searchplugins\yoursites123.xml [2015-12-11]
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-10-02] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKU\S-1-5-21-2704335260-1478619686-1143808583-1000\...\Firefox\Extensions: [fdm_ffext@freedownloadmanager.org] - C:\Program Files\Free Download Manager\Firefox\Extension
FF Extension: Free Download Manager extension - C:\Program Files\Free Download Manager\Firefox\Extension [2015-09-28]
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1449835993&z=ef957d71bf25c1f1c9117b0gdzezatabcc6w8t4t5z&from=ient07021&uid=FUJITSUXMHY2120BH_K427T7B2EKUKT7B2EKUKX

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-10-02]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-10-02] (AVAST Software)
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [276048 2013-10-28] ()
S2 PLAY ONLINE. RunOuc; C:\Program Files\PLAY ONLINE\UpdateDog\ouc.exe [651856 2013-10-26] ()
R2 WdMan; C:\ProgramData\MWdMM\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-04-25] (Microsoft Corporation)
S2 Update SourceApp; "C:\Program Files\SourceApp\updateSourceApp.exe" [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-10-02] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-10-02] (AVAST Software)
R1 AswRdr; C:\Windows\system32\drivers\aswRdr.sys [55112 2014-10-02] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-10-02] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-11-21] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-10-04] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57800 2014-10-02] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [192352 2014-10-02] ()
R3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [101248 2013-03-04] (Huawei Technologies Co., Ltd.)
R3 huawei_cdcecm; C:\Windows\System32\DRIVERS\ew_jucdcecm.sys [70528 2013-03-04] (Huawei Technologies Co., Ltd.)
R3 huawei_ext_ctrl; C:\Windows\System32\DRIVERS\ew_juextctrl.sys [27776 2013-03-04] (Huawei Technologies Co., Ltd.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2007-07-31] (ATK0100)
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [249600 2013-01-23] (Huawei Technologies Co., Ltd.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-11 14:56 - 2015-12-11 14:57 - 00039300 _____ C:\Users\Dawid\Desktop\Addition.txt
2015-12-11 14:54 - 2015-12-11 14:57 - 00013345 _____ C:\Users\Dawid\Desktop\FRST.txt
2015-12-11 14:52 - 2015-12-11 14:57 - 00000000 ____D C:\FRST
2015-12-11 14:51 - 2015-12-11 14:51 - 01720320 _____ (Farbar) C:\Users\Dawid\Desktop\FRST.exe
2015-12-11 14:49 - 2015-12-11 14:51 - 01720320 _____ (Farbar) C:\Users\Dawid\Downloads\FRST.exe.part
2015-12-11 14:19 - 2015-12-11 14:19 - 01738240 _____ C:\Users\Dawid\Desktop\adwcleaner_5.024.exe
2015-12-11 13:15 - 2015-12-11 13:16 - 00000000 ____D C:\ProgramData\MWdMM
2015-12-11 10:54 - 2015-12-11 10:55 - 00000092 _____ C:\Users\Dawid\Desktop\Camtasia Studio 8 - Key.txt
2015-12-07 17:32 - 2015-12-07 17:32 - 00000000 ____D C:\Users\Dawid\Desktop\Technologia Obróbki Skrawaniem
2015-12-04 15:34 - 2015-12-04 15:34 - 00000000 ____D C:\Users\Dawid\AppData\Roaming\SOLIDWORKS
2015-11-14 18:10 - 2015-11-14 18:10 - 00000979 _____ C:\Users\Dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenFM.lnk
2015-11-14 18:10 - 2015-11-14 18:10 - 00000971 _____ C:\Users\Dawid\Desktop\OpenFM.lnk
2015-11-14 18:09 - 2015-11-14 18:12 - 00000000 ____D C:\Users\Dawid\AppData\Local\OpenFM
2015-11-14 18:07 - 2015-11-14 18:08 - 20128936 _____ (GG Network S.A.) C:\Users\Dawid\Downloads\openfm_setup.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-11 14:54 - 2013-04-03 16:35 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-11 14:53 - 2006-11-02 12:18 - 00000000 ____D C:\Windows
2015-12-11 14:28 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-11 14:28 - 2006-11-02 13:47 - 00004192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-11 14:28 - 2006-11-02 13:47 - 00004192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-11 14:27 - 2006-11-02 14:01 - 00032594 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-12-11 14:26 - 2015-09-24 16:05 - 00000000 ____D C:\AdwCleaner
2015-12-11 13:14 - 2015-10-09 13:38 - 00000000 ____D C:\Users\Dawid\AppData\Local\CrashDumps
2015-12-11 13:14 - 2013-04-04 15:31 - 00001116 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-11 13:14 - 2013-04-03 16:15 - 00001259 _____ C:\Users\Dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-11 13:13 - 2013-04-04 15:31 - 00001128 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-10 21:55 - 2015-09-29 18:20 - 00000000 ____D C:\Users\Dawid\Documents\Camtasia Studio
2015-12-09 18:54 - 2013-04-03 16:35 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-12-09 18:54 - 2013-04-03 16:35 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-12-08 18:45 - 2008-04-25 09:49 - 01606800 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-08 18:45 - 2006-12-05 06:22 - 00711708 _____ C:\Windows\system32\perfh015.dat
2015-12-08 18:45 - 2006-12-05 06:22 - 00149662 _____ C:\Windows\system32\perfc015.dat
2015-12-08 18:45 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\inf
2015-12-06 14:41 - 2014-12-24 13:46 - 00000000 ____D C:\Users\Dawid\Desktop\mp3
2015-11-23 21:32 - 2015-08-25 15:09 - 00000000 ____D C:\Users\Dawid\Desktop\Stoppie session
2015-11-19 20:10 - 2014-10-12 18:30 - 00000000 ____D C:\Users\Dawid\Desktop\Romet Komar
2015-11-19 20:06 - 2013-06-06 18:47 - 00000000 ___SD C:\Users\Dawid\GG dysk
2015-11-19 20:02 - 2015-09-30 12:15 - 00000000 ____D C:\Users\Dawid\Desktop\Książki, zadania
2015-11-15 00:22 - 2013-12-14 15:54 - 00011564 _____ C:\Windows\Tasks\hpwebreg_CN19N1N28D05QV.job
2015-11-14 18:12 - 2013-04-05 15:38 - 00000000 ____D C:\Users\Dawid\AppData\Roaming\OpenFM
2015-11-11 10:10 - 2015-11-10 21:22 - 00000000 ____D C:\ProgramData\DatacardService

==================== Pliki w katalogu głównym wybranych folderów =======

2014-10-03 12:04 - 2014-10-03 12:05 - 50063360 _____ () C:\Program Files\GUT2E41.tmp
2013-04-03 16:14 - 2013-04-05 14:00 - 0000680 _____ () C:\Users\Dawid\AppData\Local\d3d9caps.dat
2013-04-14 14:25 - 2013-04-14 14:25 - 0004608 _____ () C:\Users\Dawid\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Niektóre pliki w TEMP:
====================
C:\Users\Dawid\AppData\Local\Temp\DataCard_Setup.exe
C:\Users\Dawid\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Dawid\AppData\Local\Temp\eq32.exe
C:\Users\Dawid\AppData\Local\Temp\gg10.upgr.exe
C:\Users\Dawid\AppData\Local\Temp\ggdrive-menu.exe
C:\Users\Dawid\AppData\Local\Temp\ggdrive-overlay.exe
C:\Users\Dawid\AppData\Local\Temp\ggsetup24762277.exe
C:\Users\Dawid\AppData\Local\Temp\GoogleUpdateSetup_1.3.21.169.exe
C:\Users\Dawid\AppData\Local\Temp\ICReinstall_FormatFactory-13295-dp.exe
C:\Users\Dawid\AppData\Local\Temp\ICReinstall_Freemake-Video-Converter(20113)-dp.exe
C:\Users\Dawid\AppData\Local\Temp\installstats.exe
C:\Users\Dawid\AppData\Local\Temp\MSN2A0.exe
C:\Users\Dawid\AppData\Local\Temp\ResetDevice.exe
C:\Users\Dawid\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Dawid\AppData\Local\Temp\smt_mystartsearch.exe
C:\Users\Dawid\AppData\Local\Temp\sqlite3.dll
C:\Users\Dawid\AppData\Local\Temp\TUUUninstallHelper.exe
C:\Users\Dawid\AppData\Local\Temp\uninst1.exe
C:\Users\Dawid\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-12-11 14:35

==================== Koniec  FRST.txt ============================