Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:09-12-2015
Uruchomiony przez Martyna (administrator)  HFLADY (12-12-2015 01:11:27)
Uruchomiony z C:\Users\Martyna\Desktop
Załadowane profile: Martyna (Dostępne profile: Martyna)
Platform: Windows 8.1 Connected (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Spotify Ltd) C:\Users\Martyna\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672664 2014-06-30] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguix.exe [1136552 2015-11-12] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [3855272 2015-12-09] (AVG Technologies CZ, s.r.o.)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-04-29] (Atheros Communications)
HKU\S-1-5-21-2990691196-1889282507-3086637898-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8551848 2015-10-19] (Piriform Ltd)
HKU\S-1-5-21-2990691196-1889282507-3086637898-1001\...\Run: [Spotify Web Helper] => C:\Users\Martyna\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2345584 2015-12-01] (Spotify Ltd)
HKU\S-1-5-21-2990691196-1889282507-3086637898-1001\...\Run: [Spotify] => C:\Users\Martyna\AppData\Roaming\Spotify\Spotify.exe [8270448 2015-12-01] (Spotify Ltd)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-11-03] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-11-03] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-11-03] (Microsoft Corporation)
Startup: C:\Users\Martyna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wysyłanie do programu OneNote.lnk [2015-12-04]
ShortcutTarget: Wysyłanie do programu OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.137.1
Tcpip\..\Interfaces\{27448B41-734E-417E-B466-FB492A4BE286}: [DhcpNameServer] 192.19.128.24
Tcpip\..\Interfaces\{4BC71087-841E-400F-9444-D2BF291E0563}: [NameServer] 194.204.159.1 194.204.152.34
Tcpip\..\Interfaces\{6EFAAE92-17BC-4981-BBAD-CE5AB26CE643}: [NameServer] 194.204.159.1 194.204.152.34
Tcpip\..\Interfaces\{ACDAF245-33C9-4079-9EF7-C14B6FA19AB5}: [DhcpNameServer] 192.168.137.1

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-11-03] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-11-03] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2015-11-03] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2015-11-03] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-11-03] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL [2015-11-03] (Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-11-03] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-03] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL [2015-11-03] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-12] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-12] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-11-18] (Adobe Systems Inc.)

Chrome: 
=======
CHR Profile: C:\Users\Martyna\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Martyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-12]
CHR Extension: (Dysk Google) - C:\Users\Martyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-12]
CHR Extension: (YouTube) - C:\Users\Martyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-12]
CHR Extension: (Google Search) - C:\Users\Martyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-12]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Martyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-12]
CHR Extension: (Gmail) - C:\Users\Martyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-12]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-04-29] (Windows (R) Win 7 DDK provider) [Brak podpisu cyfrowego]
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [615584 2015-12-09] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3857272 2015-12-09] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1046952 2015-11-12] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [579776 2015-12-09] (AVG Technologies CZ, s.r.o.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2780856 2015-10-07] (Microsoft Corporation)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2014-01-15] ()
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315376 2014-06-08] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-02] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-02] (Intel(R) Corporation)
S4 Orange Connection. RunOuc; C:\Program Files (x86)\Orange Connection\UpdateDog\ouc.exe [651856 2013-10-26] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3893248 2014-04-03] (Qualcomm Atheros Communications, Inc.)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [23152 2015-09-09] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [184240 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [313776 2015-11-06] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [298416 2015-08-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [398256 2015-08-14] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [256432 2015-11-06] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-08-10] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [306608 2015-10-08] (AVG Technologies CZ, s.r.o.)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-04-29] (Qualcomm Atheros)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 GPIO; C:\Windows\System32\drivers\iaiogpioe.sys [31232 2014-06-09] (Intel Corporation)
S3 hwusb_cdcacm; C:\Windows\system32\DRIVERS\ew_cdcacm.sys [125952 2014-07-25] (Huawei Technologies Co., Ltd.)
S3 hwusb_wwanecm; C:\Windows\system32\DRIVERS\ew_wwanecm.sys [380672 2014-09-30] (Huawei Technologies Co., Ltd.)
R3 iaioi2c; C:\Windows\System32\drivers\iaioi2ce.sys [69632 2014-06-09] (Intel Corporation)
S3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-18] (Acer Incorporated)
S3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-18] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [502488 2014-05-08] (Realsil Semiconductor Corporation)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42736 2014-07-10] (Synaptics Incorporated)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [35856 2014-03-24] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [257880 2014-03-24] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-12 01:11 - 2015-12-12 01:11 - 00013683 _____ C:\Users\Martyna\Desktop\FRST.txt
2015-12-12 01:10 - 2015-12-12 01:10 - 00004036 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-12 01:10 - 2015-12-12 01:10 - 00003800 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-12 01:10 - 2015-12-12 01:10 - 00002249 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-12 01:10 - 2015-12-12 01:10 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-12 01:10 - 2015-12-12 01:10 - 00001060 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-12 01:10 - 2015-12-12 01:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-12 01:09 - 2015-12-12 01:10 - 00000000 ____D C:\Users\Martyna\AppData\Local\Google
2015-12-12 01:09 - 2015-12-12 01:10 - 00000000 ____D C:\Program Files (x86)\Google
2015-12-12 01:09 - 2015-12-12 01:09 - 00000000 ____D C:\Users\Martyna\AppData\Local\Deployment
2015-12-12 01:09 - 2015-12-12 01:09 - 00000000 ____D C:\Users\Martyna\AppData\Local\Apps\2.0
2015-12-12 00:35 - 2015-12-12 00:35 - 00000000 ____D C:\MATS
2015-12-12 00:33 - 2015-12-12 00:33 - 00000000 ____D C:\Users\Martyna\AppData\Local\ElevatedDiagnostics
2015-12-12 00:19 - 2015-12-12 01:11 - 00000000 ____D C:\FRST
2015-12-12 00:04 - 2015-12-12 00:04 - 02369024 _____ (Farbar) C:\Users\Martyna\Desktop\FRST64.exe
2015-12-11 23:48 - 2015-12-11 23:48 - 00038901 _____ C:\Users\Martyna\Desktop\bookmarks_11.12.2015.html
2015-12-01 17:47 - 2015-12-01 17:47 - 00000000 ____D C:\Users\Martyna\AppData\LocalLow\Adobe
2015-12-01 17:44 - 2015-12-01 22:28 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-12-01 17:44 - 2015-12-01 22:28 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-12-01 17:44 - 2015-12-01 17:44 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-12-01 17:43 - 2015-12-01 17:48 - 00000000 ____D C:\ProgramData\Adobe
2015-12-01 17:43 - 2015-12-01 17:47 - 00000000 ____D C:\Users\Martyna\AppData\Local\Adobe
2015-12-01 15:48 - 2015-12-01 15:48 - 00000000 ____D C:\Users\Martyna\Documents\Bluetooth Folder
2015-12-01 15:48 - 2015-12-01 15:48 - 00000000 ____D C:\Users\Martyna\AppData\Local\BMExplorer
2015-11-22 22:48 - 2015-12-11 23:49 - 00000000 ___RD C:\Users\Martyna\Desktop\Programy

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-12 00:50 - 2015-11-03 17:02 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2990691196-1889282507-3086637898-1001
2015-12-12 00:45 - 2015-02-14 19:13 - 00807160 _____ C:\Windows\system32\perfh015.dat
2015-12-12 00:45 - 2015-02-14 19:13 - 00163478 _____ C:\Windows\system32\perfc015.dat
2015-12-12 00:45 - 2014-03-18 10:47 - 01825074 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-12 00:45 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2015-12-12 00:44 - 2013-08-22 14:36 - 00000000 ____D C:\Windows
2015-12-12 00:41 - 2015-11-03 17:00 - 00000000 ____D C:\Users\Martyna\OneDrive
2015-12-12 00:38 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-12 00:37 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-12-12 00:36 - 2015-11-03 16:56 - 00001184 _____ C:\Users\Martyna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-11 23:42 - 2015-11-03 17:51 - 00000000 ____D C:\Users\Martyna\AppData\Roaming\PhotoScape
2015-12-11 23:22 - 2015-11-03 18:09 - 00000000 ____D C:\ProgramData\MFAData
2015-12-11 15:17 - 2015-11-03 22:48 - 02393088 ___SH C:\Users\Martyna\Desktop\Thumbs.db
2015-12-11 15:15 - 2015-11-03 18:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-12-11 15:09 - 2015-11-07 22:58 - 00006144 ____H C:\Users\Martyna\Desktop\photothumb.db
2015-12-11 14:42 - 2015-11-03 19:55 - 00000000 ___RD C:\Users\Martyna\Desktop\TROLOLO
2015-12-10 21:19 - 2015-11-03 16:56 - 00000000 ____D C:\Users\Martyna\AppData\Local\Packages
2015-12-10 21:18 - 2015-11-03 19:26 - 00000000 ___RD C:\Users\Martyna\Desktop\UWr
2015-12-10 08:54 - 2015-11-04 17:01 - 00000000 ____D C:\Users\Martyna\AppData\Local\Spotify
2015-12-10 08:31 - 2015-11-04 17:01 - 00000000 ____D C:\Users\Martyna\AppData\Roaming\Spotify
2015-12-09 15:51 - 2015-11-03 18:25 - 00000000 ____D C:\Users\Martyna\AppData\Local\CrashDumps
2015-12-06 17:39 - 2015-11-03 18:35 - 00000000 ____D C:\Users\Martyna\AppData\Roaming\Skype
2015-12-06 17:35 - 2015-11-03 18:34 - 00000000 ____D C:\ProgramData\Skype
2015-12-06 00:07 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2015-12-04 17:45 - 2015-11-03 17:44 - 00000000 ____D C:\Users\Martyna\AppData\Roaming\Winyl
2015-12-03 21:03 - 2013-08-22 16:36 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-03 21:03 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2015-12-01 22:27 - 2015-11-03 16:56 - 00000000 ____D C:\Users\Martyna\AppData\Roaming\Adobe
2015-11-22 01:07 - 2015-11-03 19:10 - 00000000 ____D C:\Users\Martyna\AppData\Roaming\BitTorrent
2015-11-21 19:54 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache
2015-11-18 07:46 - 2015-11-04 17:01 - 00000000 ____D C:\Users\Martyna\AppData\Local\Downloaded Installations
2015-11-16 19:21 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\NDF
2015-11-12 12:52 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2015-11-12 12:16 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2015-11-12 12:16 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\WinStore
2015-11-12 12:16 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\system32\AdvancedInstallers

==================== Pliki w katalogu głównym wybranych folderów =======

2015-02-14 19:43 - 2015-02-14 19:43 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-12-06 14:55

==================== Koniec  FRST.txt ============================