Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:12-12-2015 Uruchomiony przez sylwia (administrator) SYLWIA-KOMPUTER (12-12-2015 13:35:42) Uruchomiony z C:\Users\sylwia\Downloads Załadowane profile: sylwia (Dostępne profile: sylwia) Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\Program Files (x86)\Connectify\ConnectifyService.exe (Connectify) C:\Program Files (x86)\Connectify\Connectifyd.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe (SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe (SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Intel Corporation) C:\Windows\System32\igfxext.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Connectify) C:\Program Files (x86)\Connectify\Connectify.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe () C:\Program Files (x86)\USB-Modem-Stick\USB-Modem-Stick.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10144288 2010-04-07] (Realtek Semiconductor) HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [2703752 2010-03-25] (ELAN Microelectronics Corp.) HKLM-x32\...\Run: [UCam_Menu] => C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-12] (AVAST Software) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-3135873756-1747778033-1847798441-1000\...\Run: [Connectify] => C:\Program Files (x86)\Connectify\Connectify.exe [3985768 2012-08-09] (Connectify) HKU\S-1-5-21-3135873756-1747778033-1847798441-1000\...\MountPoints2: {3ae32a0f-6837-11e5-8d10-e811321fa5cf} - F:\win\AutoRun.exe HKU\S-1-5-21-3135873756-1747778033-1847798441-1000\...\MountPoints2: {cd60b5f2-70e6-11e5-86f9-e811321fa5cf} - G:\Startme.exe HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2015-10-04] (Microsoft Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-12-12] (AVAST Software) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\..\Interfaces\{4C9AF980-713C-45A5-A7D5-B02C3E723B4B}: [NameServer] 89.108.202.20 89.108.195.20 Tcpip\..\Interfaces\{6B17FD6E-1934-4950-A791-B0F0476D347C}: [DhcpNameServer] 192.168.0.1 Internet Explorer: ================== SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-12-12] (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-26] (Microsoft Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-12-12] (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-09-22] (Microsoft Corporation) Chrome: ======= CHR Profile: C:\Users\sylwia\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Prezentacje Google) - C:\Users\sylwia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-22] CHR Extension: (Dokumenty Google) - C:\Users\sylwia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-22] CHR Extension: (Dysk Google) - C:\Users\sylwia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-22] CHR Extension: (Połączenia przez Skype) - C:\Users\sylwia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2015-12-11] CHR Extension: (YouTube) - C:\Users\sylwia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-22] CHR Extension: (Google Search) - C:\Users\sylwia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-22] CHR Extension: (Arkusze Google) - C:\Users\sylwia\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-22] CHR Extension: (Dokumenty Google offline) - C:\Users\sylwia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-23] CHR Extension: (AdBlock) - C:\Users\sylwia\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-12-07] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\sylwia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-22] CHR Extension: (Gmail) - C:\Users\sylwia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-22] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-12-12] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-12] (AVAST Software) R2 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [65536 2012-08-09] () [Brak podpisu cyfrowego] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-12-12] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-12-12] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-12-12] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-12-12] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1055560 2015-12-12] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [450504 2015-12-12] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2015-12-12] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-12-12] (AVAST Software) R1 cnnctfy2; C:\Windows\System32\DRIVERS\cnnctfy2.sys [31344 2015-11-23] (Connectify) S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R3 mtkmbim; C:\Windows\System32\DRIVERS\mtkmbim7_x64.sys [209920 2012-12-14] (MBB) R3 wdf_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [82944 2012-12-13] (MBB) R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] () ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-12 13:35 - 2015-12-12 13:35 - 00000000 ____D C:\Users\sylwia\Downloads\FRST-OlderVersion 2015-12-12 13:25 - 2015-12-12 13:29 - 00013138 _____ C:\Users\sylwia\Downloads\Fixlog.txt 2015-12-12 11:19 - 2015-12-12 11:19 - 00035492 _____ C:\Users\sylwia\Downloads\Shortcut.txt 2015-12-12 11:10 - 2015-12-12 11:12 - 00030740 _____ C:\Users\sylwia\Downloads\Addition.txt 2015-12-12 11:08 - 2015-12-12 11:08 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk 2015-12-12 11:08 - 2015-12-12 11:08 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-12-12 11:08 - 2015-12-12 11:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-12-12 11:07 - 2015-12-12 13:36 - 00010166 _____ C:\Users\sylwia\Downloads\FRST.txt 2015-12-12 11:07 - 2015-12-12 13:35 - 00000000 ____D C:\FRST 2015-12-12 11:06 - 2015-12-12 13:35 - 02369536 _____ (Farbar) C:\Users\sylwia\Downloads\FRST64.exe 2015-12-12 11:00 - 2015-12-02 13:18 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2015-12-12 10:48 - 2015-12-12 10:48 - 00001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2015-12-12 10:48 - 2015-12-12 10:48 - 00000000 ____D C:\Users\sylwia\AppData\Roaming\AVAST Software 2015-12-12 10:48 - 2015-12-12 10:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2015-12-12 10:47 - 2015-12-12 10:47 - 01055560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2015-12-12 10:47 - 2015-12-12 10:47 - 00450504 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2015-12-12 10:47 - 2015-12-12 10:47 - 00386096 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2015-12-12 10:47 - 2015-12-12 10:47 - 00273784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2015-12-12 10:47 - 2015-12-12 10:47 - 00155304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2015-12-12 10:47 - 2015-12-12 10:47 - 00097648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2015-12-12 10:47 - 2015-12-12 10:47 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2015-12-12 10:47 - 2015-12-12 10:47 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2015-12-12 10:47 - 2015-12-12 10:47 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr 2015-12-12 10:47 - 2015-12-12 10:47 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys 2015-12-12 10:47 - 2015-12-12 10:47 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2015-12-12 10:47 - 2015-12-12 10:47 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software 2015-12-12 10:47 - 2015-12-12 10:47 - 00000000 ____D C:\Program Files\Common Files\AV 2015-12-12 10:46 - 2015-12-12 10:46 - 00000000 ____D C:\ProgramData\AVAST Software 2015-12-12 10:46 - 2015-12-12 10:46 - 00000000 ____D C:\Program Files\AVAST Software 2015-12-12 10:43 - 2015-12-12 10:46 - 161199376 _____ (AVAST Software) C:\Users\sylwia\Downloads\avast_free_antivirus_setup.exe 2015-12-12 10:25 - 2015-12-12 10:25 - 01738240 _____ C:\Users\sylwia\Downloads\adwcleaner_5.024.exe 2015-12-11 14:07 - 2015-12-11 14:07 - 00000000 ____D C:\Users\sylwia\Downloads\[FileTracker.pl]Igrzyska śmierci Kosogłos. Część 2[wilu75] 2015-12-11 14:06 - 2015-12-11 14:06 - 00057598 _____ C:\Users\sylwia\Downloads\[Devil-Torrent.pl] Igrzyska smierci- Kosoglos. Czesc 2 - The Hunger Games- Mockingjay Part 2 2015 [HD-TS] [XviD-KLiO] [Napisy PL].torrent 2015-12-10 23:02 - 2015-12-10 23:04 - 08341516 _____ C:\Users\sylwia\Downloads\Uso_de_la_gram_225_tica_espa_241_ola_Intermedio_Claves.pdf 2015-12-09 21:44 - 2015-12-09 21:45 - 24277634 _____ C:\Users\sylwia\Downloads\arrive_michel_bescherelle_la_conjugaison_pour_tous.pdf 2015-12-09 21:41 - 2015-12-09 21:41 - 00000000 ____D C:\Users\sylwia\Downloads\The Rough Guide French Phrasebook 2015-12-09 21:40 - 2015-12-09 21:41 - 35465780 _____ C:\Users\sylwia\Downloads\bescherelle_la_grammaire_pour_tous.pdf 2015-12-09 21:39 - 2015-12-09 21:39 - 03033119 _____ C:\Users\sylwia\Downloads\Bescherelle La Grammaire pour tous.rar 2015-12-09 21:39 - 2015-12-09 21:39 - 00000000 ____D C:\Users\sylwia\Downloads\Bescherelle La Grammaire pour tous 2015-12-09 21:35 - 2015-12-09 21:36 - 37491493 _____ C:\Users\sylwia\Downloads\The Rough Guide French Phrasebook.rar 2015-12-09 21:34 - 2015-12-09 21:34 - 00000000 ____D C:\Users\sylwia\Downloads\Grammaire en Dialogues niveau intermédiaire 2015-12-09 21:33 - 2015-12-09 21:33 - 00000000 ____D C:\Users\sylwia\Downloads\abry_d_chalaron_m_l_la_grammaire_des_premiers_temps_volume_2 2015-12-09 21:30 - 2015-12-09 21:33 - 27245227 _____ C:\Users\sylwia\Downloads\Grammaire en Dialogues niveau intermédiaire.rar 2015-12-09 21:17 - 2015-12-09 21:33 - 180220020 _____ C:\Users\sylwia\Downloads\abry_d_chalaron_m_l_la_grammaire_des_premiers_temps_volume_2.rar 2015-12-09 21:07 - 2015-12-09 21:07 - 01498820 _____ C:\Users\sylwia\Downloads\elnady_a.pdf 2015-12-09 12:27 - 2015-11-11 22:12 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-12-09 12:27 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-12-09 12:27 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-12-09 12:27 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-12-09 12:27 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-12-09 12:27 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-12-09 12:27 - 2015-11-11 16:12 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-12-09 12:27 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-12-09 12:27 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-12-09 12:27 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-12-09 12:27 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-12-09 12:27 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-12-09 12:27 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-12-09 12:27 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-12-09 12:27 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-12-09 12:27 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-12-09 12:27 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-12-09 12:27 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-12-09 12:27 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-12-09 12:27 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-12-09 12:27 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-12-09 12:27 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-12-09 12:27 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-12-09 12:27 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-12-09 12:27 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2015-12-09 12:27 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-12-09 12:27 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-12-09 12:27 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-12-09 12:27 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-12-09 12:27 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-12-09 12:27 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-12-09 12:27 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-12-09 12:27 - 2015-11-08 23:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-12-09 12:27 - 2015-11-08 23:32 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-12-09 12:27 - 2015-11-08 23:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-12-09 12:27 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-12-09 12:27 - 2015-11-08 23:15 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-12-09 12:27 - 2015-11-08 23:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-12-09 12:27 - 2015-11-08 23:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-12-09 12:27 - 2015-11-08 23:06 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-12-09 12:27 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-12-09 12:27 - 2015-11-08 23:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-12-09 12:27 - 2015-11-08 23:01 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-12-09 12:27 - 2015-11-08 23:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-12-09 12:27 - 2015-11-08 23:01 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-12-09 12:27 - 2015-11-08 22:52 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-12-09 12:27 - 2015-11-08 22:48 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-12-09 12:27 - 2015-11-08 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-12-09 12:27 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-12-09 12:27 - 2015-11-08 22:29 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-12-09 12:27 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-12-09 12:27 - 2015-11-08 22:15 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-12-09 12:27 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-12-09 12:27 - 2015-11-08 22:14 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-12-09 12:27 - 2015-11-08 22:14 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-12-09 12:27 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-12-09 12:27 - 2015-11-08 21:41 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-12-09 12:27 - 2015-11-08 21:30 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-12-09 12:26 - 2015-11-11 17:21 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-12-09 12:26 - 2015-11-08 23:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-12-09 12:26 - 2015-11-08 23:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-12-09 12:26 - 2015-11-08 23:04 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-12-09 12:26 - 2015-11-08 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-12-09 12:26 - 2015-11-08 21:53 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-12-09 12:24 - 2015-11-03 20:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2015-12-09 12:24 - 2015-11-03 20:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll 2015-12-09 12:24 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2015-12-09 12:24 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll 2015-12-09 12:21 - 2015-11-20 19:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-12-09 12:21 - 2015-11-20 19:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-12-09 12:21 - 2015-11-20 19:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-12-09 12:21 - 2015-11-20 19:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-12-09 12:21 - 2015-11-20 19:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-12-09 12:21 - 2015-11-20 19:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-12-09 12:21 - 2015-11-20 19:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-12-09 12:21 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-12-09 12:21 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-12-09 12:21 - 2015-11-20 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-12-09 12:21 - 2015-11-20 19:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-12-09 12:21 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-12-09 12:21 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-12-09 12:21 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-12-09 12:21 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-12-09 12:21 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-12-09 12:21 - 2015-11-11 19:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll 2015-12-09 12:21 - 2015-11-11 19:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll 2015-12-09 12:21 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll 2015-12-09 12:21 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll 2015-12-09 12:21 - 2015-11-10 19:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-12-09 12:21 - 2015-11-10 19:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2015-12-09 12:21 - 2015-11-10 19:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2015-12-09 12:21 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2015-12-09 12:21 - 2015-11-10 19:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2015-12-09 12:21 - 2015-11-10 18:47 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-12-09 12:21 - 2015-11-05 20:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll 2015-12-09 12:21 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll 2015-12-09 12:21 - 2015-11-05 10:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2015-12-07 18:45 - 2015-11-15 14:24 - 233947351 _____ C:\Users\sylwia\Desktop\vl8c7c431de33dd62b8ee1a4cac88f3c2155e74e534aeef46bc10c74037a223731.mp4 2015-12-07 18:43 - 2015-12-05 22:24 - 782522012 _____ C:\Users\sylwia\Desktop\snajper.mp4 2015-12-07 18:42 - 2015-12-05 22:33 - 451814518 _____ C:\Users\sylwia\Desktop\projekt lazarus.mp4 2015-12-07 18:42 - 2015-12-05 21:28 - 36267336 _____ C:\Users\sylwia\Desktop\chlopak z sasiedztwa.mp4 2015-12-07 18:40 - 2015-12-05 22:22 - 653500499 _____ C:\Users\sylwia\Desktop\chappie.mp4 2015-12-07 16:35 - 2015-12-07 16:35 - 00000000 ____D C:\Users\sylwia\Downloads\Leon 2015-12-07 16:18 - 2015-12-07 16:18 - 00000000 ____D C:\Users\sylwia\Downloads\IA 2015-12-07 14:48 - 2015-12-11 14:07 - 00000000 ____D C:\Users\sylwia\AppData\LocalLow\uTorrent 2015-12-07 14:23 - 2015-12-07 15:23 - 714354939 _____ C:\Users\sylwia\Downloads\IA.rar 2015-12-07 14:23 - 2015-12-07 15:19 - 682631193 _____ C:\Users\sylwia\Downloads\Leon.rar 2015-12-07 14:00 - 2015-12-07 14:00 - 00000000 ____D C:\Users\sylwia\Downloads\How I Met Your Mother_1x01_HDTV.FQM.fr 2015-12-07 13:59 - 2015-12-07 13:59 - 00014096 _____ C:\Users\sylwia\Downloads\How I Met Your Mother_1x01_HDTV.FQM.fr.zip 2015-12-07 13:56 - 2015-12-07 13:56 - 183997904 _____ C:\Users\sylwia\Downloads\The.Middle.S01E24.HDTV.XviD-P0W4.avi 2015-12-07 13:55 - 2015-12-07 13:56 - 183576998 _____ C:\Users\sylwia\Downloads\The.Middle.S01E16.HDTV.XviD-LOL.avi 2015-12-07 13:52 - 2015-12-07 13:52 - 01774432 _____ (BitTorrent Inc.) C:\Users\sylwia\Downloads\uTorrent.exe 2015-12-07 13:50 - 2015-12-07 13:50 - 00477971 _____ C:\Users\sylwia\Downloads\TMID-S01.rar 2015-12-07 13:50 - 2015-12-07 13:50 - 00000000 ____D C:\Users\sylwia\Downloads\TMID-S01 2015-12-04 10:44 - 2015-12-04 10:44 - 01254032 _____ C:\Users\sylwia\Downloads\rozklad-jazdy-2015.pdf 2015-11-23 23:53 - 2015-11-23 23:53 - 00000000 ____D C:\Users\sylwia\AppData\Local\SkinSoft 2015-11-23 23:49 - 2015-11-23 23:49 - 00031344 _____ (Connectify) C:\Windows\system32\Drivers\cnnctfy2.sys 2015-11-23 23:49 - 2015-11-23 23:49 - 00000000 ____D C:\Users\sylwia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Connectify Hotspot 2015-11-23 23:48 - 2015-11-24 00:01 - 00000000 ____D C:\Program Files (x86)\Connectify 2015-11-23 23:48 - 2015-11-23 23:51 - 00000000 ____D C:\ProgramData\Connectify 2015-11-23 23:48 - 2015-11-23 23:48 - 04020520 _____ C:\Users\sylwia\Downloads\ConnectifyHotspotInstaller.exe 2015-11-23 22:46 - 2015-11-23 22:46 - 01219351 _____ C:\Users\sylwia\Desktop\Diderot-Jacques.pdf 2015-11-22 23:14 - 2015-11-24 12:00 - 00000000 ____D C:\Users\sylwia\Desktop\Originals 2015-11-22 23:13 - 2015-11-24 11:59 - 00033792 ____H C:\Users\sylwia\Desktop\photothumb.db 2015-11-22 23:10 - 2015-11-22 23:14 - 00000000 ____D C:\Users\sylwia\AppData\Roaming\PhotoScape 2015-11-22 23:10 - 2015-11-22 23:10 - 00001035 _____ C:\Users\sylwia\Desktop\PhotoScape.lnk 2015-11-22 23:10 - 2015-11-22 23:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape 2015-11-22 23:10 - 2015-11-22 23:10 - 00000000 ____D C:\Program Files (x86)\PhotoScape 2015-11-22 23:07 - 2015-11-22 23:07 - 21360800 _____ (Mooii) C:\Users\sylwia\Downloads\PhotoScape_V3.7.exe 2015-11-20 17:09 - 2015-11-20 17:09 - 00000000 ____D C:\Users\sylwia\AppData\Local\Chris_Pietschmann_(http__ 2015-11-20 17:08 - 2015-11-20 17:09 - 10248952 _____ (Connectify) C:\Users\sylwia\Downloads\Connectify2015Installer.exe 2015-11-20 16:51 - 2015-11-20 17:02 - 00000523 _____ C:\Windows\system32\Drivers\etc\hosts.ics 2015-11-20 16:49 - 2015-11-21 13:12 - 00000000 ____D C:\Program Files (x86)\Virtual Router 2015-11-20 16:47 - 2015-11-20 16:46 - 01373696 _____ C:\Users\sylwia\Downloads\VirtualRouterInstaller(dobreprogramy.pl).msi 2015-11-16 14:00 - 2015-11-16 14:05 - 00000000 ____D C:\Users\sylwia\AppData\Roaming\NapiProjekt 2015-11-16 14:00 - 2015-11-16 14:00 - 00001044 _____ C:\Users\sylwia\Desktop\NapiProjekt.lnk 2015-11-16 14:00 - 2015-11-16 14:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NapiProjekt 2015-11-16 14:00 - 2015-11-16 14:00 - 00000000 ____D C:\Program Files (x86)\NapiProjekt 2015-11-16 13:57 - 2015-11-16 13:57 - 00000000 ____D C:\Users\sylwia\Downloads\setup 2015-11-16 13:53 - 2015-11-16 13:54 - 09391243 _____ C:\Users\sylwia\Downloads\setup.zip 2015-11-16 13:46 - 2015-11-16 14:04 - 742388852 _____ C:\Users\sylwia\Desktop\6x06.mp4 ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-12 13:31 - 2015-10-01 13:41 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-12-12 13:30 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-12-12 13:25 - 2015-10-01 13:43 - 00002204 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-12-12 13:25 - 2015-10-01 13:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-12-12 13:25 - 2015-10-01 13:08 - 00001168 _____ C:\Users\sylwia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-12-12 13:23 - 2010-11-08 03:29 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2015-12-12 13:22 - 2015-10-01 13:00 - 00000000 ____D C:\Users\sylwia\AppData\Local\Adobe 2015-12-12 13:22 - 2015-10-01 13:00 - 00000000 ____D C:\ProgramData\Adobe 2015-12-12 12:52 - 2015-10-01 13:41 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-12-12 11:11 - 2009-07-14 04:20 - 00000000 ____D C:\Windows 2015-12-12 11:09 - 2015-10-13 09:11 - 00000000 ____D C:\Users\sylwia\AppData\Roaming\Skype 2015-12-12 11:08 - 2015-10-15 09:59 - 00000000 ____D C:\Users\sylwia\AppData\Local\Skype 2015-12-12 11:08 - 2015-10-01 13:00 - 00000000 ____D C:\ProgramData\Skype 2015-12-12 10:39 - 2009-07-14 05:45 - 00013936 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-12-12 10:39 - 2009-07-14 05:45 - 00013936 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-12-12 10:38 - 2015-10-15 09:20 - 00000000 ____D C:\Users\sylwia\AppData\Local\SkypePlugin 2015-12-12 10:29 - 2015-10-05 08:42 - 00000027 _____ C:\Windows\SysWOW64\MPFServiceFailureCount.txt 2015-12-12 10:02 - 2015-10-06 22:01 - 00000000 ____D C:\Users\sylwia\AppData\Roaming\vlc 2015-12-11 17:05 - 2010-11-08 21:02 - 01670212 _____ C:\Windows\system32\perfh015.dat 2015-12-11 17:05 - 2010-11-08 21:02 - 00471982 _____ C:\Windows\system32\perfc015.dat 2015-12-11 17:05 - 2009-07-14 06:13 - 00004568 _____ C:\Windows\system32\PerfStringBackup.INI 2015-12-09 20:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2015-12-09 16:46 - 2009-07-14 05:45 - 00414656 _____ C:\Windows\system32\FNTCACHE.DAT 2015-12-09 16:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf 2015-12-08 20:25 - 2009-07-14 06:08 - 00032566 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-12-06 22:47 - 2015-10-01 13:41 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-12-06 22:47 - 2015-10-01 13:41 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-11-29 18:50 - 2015-10-15 10:04 - 00000000 ____D C:\Users\sylwia\Documents\Youcam 2015-11-21 13:14 - 2015-10-20 11:54 - 00000000 ____D C:\Program Files\Rossmann 2015-11-12 11:10 - 2010-11-08 20:49 - 00000000 ____D C:\Program Files\Windows Journal ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-10-01 13:01 - 2010-01-16 06:18 - 0131368 _____ () C:\ProgramData\FullRemove.exe ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-12-10 13:15 ==================== Koniec FRST.txt ============================