Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:12-12-2015 01
Uruchomiony przez User (administrator)  USER-KOMPUTER (12-12-2015 21:13:56)
Uruchomiony z C:\Users\User\Downloads\F
Załadowane profile: User (Dostępne profile: User)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe
(Oppoos.com) C:\Program Files\Genie Soft\Genie Cleaner\GenieCleanService.exe
(Oppoos.com) C:\Program Files\Genie Soft\Genie Wifi\GenieWifiService.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TODO: <公司名>) C:\Program Files\Blazers\Watsvc.exe
() C:\Program Files\Blazers\wac.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Vodafone) C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corporation) C:\Windows\vVX1000.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe
(Vodafone) C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Marvell Semiconductor, Inc.) C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
(Akamai Technologies, Inc.) C:\Users\User\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\User\AppData\Local\Akamai\netsession_win.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgemcx.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Spotify Ltd) C:\Users\User\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12017368 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [VX1000] => C:\Windows\vVX1000.exe [762736 2010-05-20] (Microsoft Corporation)
HKLM\...\Run: [LifeCam] => C:\Program Files\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3780008 2015-10-30] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [MobileConnect] => C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe [2403840 2009-09-11] (Vodafone)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM\...\Run: [PWRISOVM.EXE] => D:\Program Files\PowerISO\PWRISOVM.EXE [366904 2014-10-08] (Power Software Ltd)
HKLM\...\Run: [PrnStatusMX] => C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1077248 2012-07-04] (Marvell Semiconductor, Inc.)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\Run: [Google Update] => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc.)
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\Run: [DAEMON Tools Lite] => D:\Program Files\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\Run: [Akamai NetSession Interface] => C:\Users\User\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\Run: [ALLUpdate] => C:\Program Files\ALLPlayer\ALLUpdate.exe [3000704 2014-01-29] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\Run: [Sony PC Companion] => C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\Run: [ChomikBox] => E:\Program Files\ChomikBox\chomikbox.exe [6033408 2014-03-11] ( )
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\Run: [GenieFloater] => C:\Program Files\Genie Soft\Genie Cleaner\GenieFloater.exe [1850520 2015-02-06] (Oppoos.com)
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\Run: [EADM] => C:\Program Files\Origin\Origin.exe [28201096 2012-01-12] (Electronic Arts)
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\Run: [Google Photos Backup] => C:\Users\User\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [3787080 2015-10-13] (Google, Inc)
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\Run: [Steam] => d:\Program Files\Steam\steam.exe [3013200 2015-12-10] (Valve Corporation)
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\Run: [Spotify Web Helper] => C:\Users\User\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2345584 2015-12-11] (Spotify Ltd)
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\Run: [Spotify] => C:\Users\User\AppData\Roaming\Spotify\Spotify.exe [8270448 2015-12-11] (Spotify Ltd)
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\MountPoints2: G - G:\setup.exe
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\MountPoints2: {0259074e-c9e7-11e3-86f2-1c6f65b88d68} - I:\Startme.exe
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\MountPoints2: {312219ba-fc19-11e2-b4be-1c6f65b88d68} - G:\Autorun.exe
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\MountPoints2: {51b3c032-8f33-11e4-a423-1c6f65b88d68} - G:\Setup.exe
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\MountPoints2: {5803b39e-60e9-11e5-b4a1-1c6f65b88d68} - H:\Setup.exe
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\MountPoints2: {666246a3-60e4-11e4-ab27-1c6f65b88d68} - H:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\MountPoints2: {728bdb56-60c7-11e4-ae9a-1c6f65b88d68} - H:\Setup.exe
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\...\MountPoints2: {728bdb63-60c7-11e4-ae9a-1c6f65b88d68} - H:\setup_vmc_lite.exe /checkApplicationPresence
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Brak pliku

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{4B35E0C5-DF9E-4DD9-8F2B-8243BCB2837C}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449647479&z=83f87a57a534a0a952433acgdz2zft8q7z4mbzfm2b&from=ient07021&uid=ST31000524AS_6VPBLR5GXXXX6VPBLR5G
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449647479&z=83f87a57a534a0a952433acgdz2zft8q7z4mbzfm2b&from=ient07021&uid=ST31000524AS_6VPBLR5GXXXX6VPBLR5G&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449647479&z=83f87a57a534a0a952433acgdz2zft8q7z4mbzfm2b&from=ient07021&uid=ST31000524AS_6VPBLR5GXXXX6VPBLR5G
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449647479&z=83f87a57a534a0a952433acgdz2zft8q7z4mbzfm2b&from=ient07021&uid=ST31000524AS_6VPBLR5GXXXX6VPBLR5G&q={searchTerms}
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449647479&z=83f87a57a534a0a952433acgdz2zft8q7z4mbzfm2b&from=ient07021&uid=ST31000524AS_6VPBLR5GXXXX6VPBLR5G
HKU\S-1-5-21-456985443-2800898146-1698058886-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449647479&z=83f87a57a534a0a952433acgdz2zft8q7z4mbzfm2b&from=ient07021&uid=ST31000524AS_6VPBLR5GXXXX6VPBLR5G
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449647479&z=83f87a57a534a0a952433acgdz2zft8q7z4mbzfm2b&from=ient07021&uid=ST31000524AS_6VPBLR5GXXXX6VPBLR5G&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449647479&z=83f87a57a534a0a952433acgdz2zft8q7z4mbzfm2b&from=ient07021&uid=ST31000524AS_6VPBLR5GXXXX6VPBLR5G&q={searchTerms}
SearchScopes: HKU\S-1-5-21-456985443-2800898146-1698058886-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449647479&z=83f87a57a534a0a952433acgdz2zft8q7z4mbzfm2b&from=ient07021&uid=ST31000524AS_6VPBLR5GXXXX6VPBLR5G&q={searchTerms}
SearchScopes: HKU\S-1-5-21-456985443-2800898146-1698058886-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449647479&z=83f87a57a534a0a952433acgdz2zft8q7z4mbzfm2b&from=ient07021&uid=ST31000524AS_6VPBLR5GXXXX6VPBLR5G&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-01-07] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-01-07] (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\d2peo34g.default
FF SelectedSearchEngine: yoursites123
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_43.dll [2014-01-19] ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> E:\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-01-07] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-01-07] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-09-04] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-456985443-2800898146-1698058886-1000: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)
FF Plugin HKU\S-1-5-21-456985443-2800898146-1698058886-1000: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)
FF Extension: Widget context - C:\Users\User\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{140A2D0E-85CC-4ed3-9BA5-8FA35DA7FABA}.xpi [2014-01-11] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\Vodafone\Vodafone Mobile Connect\Optimization Client\addon
FF Extension: Bytemobile Optimization Client - C:\Program Files\Vodafone\Vodafone Mobile Connect\Optimization Client\addon [2014-10-31] [Brak podpisu cyfrowego]
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1449647479&z=83f87a57a534a0a952433acgdz2zft8q7z4mbzfm2b&from=ient07021&uid=ST31000524AS_6VPBLR5GXXXX6VPBLR5G

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.yoursites123.com/?type=hp&ts=1449647479&z=83f87a57a534a0a952433acgdz2zft8q7z4mbzfm2b&from=ient07021&uid=ST31000524AS_6VPBLR5GXXXX6VPBLR5G
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-30]
CHR Extension: (Dysk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-30]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-30]
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-30]
CHR Extension: (Dokumenty Google offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-30]
CHR Extension: (AdBlock) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-12-05]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-30]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-30]
StartMenuInternet: Google Chrome - C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-06-09] (Adobe Systems) [Brak podpisu cyfrowego]
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3642280 2015-10-30] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [335656 2015-10-30] (AVG Technologies CZ, s.r.o.)
R2 GenieCleanService; C:\Program Files\Genie Soft\Genie Cleaner\GenieCleanService.exe [53400 2015-02-06] (Oppoos.com)
R2 GenieWifiService; C:\Program Files\Genie Soft\Genie Wifi\GenieWifiService.exe [51352 2015-03-05] (Oppoos.com)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [17536800 2014-07-25] (NVIDIA Corporation)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155520 2015-06-10] (Avanquest Software)
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)
R2 VMCService; C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [9216 2009-09-11] (Vodafone) [Brak podpisu cyfrowego]
R2 Watsvc; C:\Program Files\Blazers\Watsvc.exe [107160 2015-04-16] (TODO: <公司名>)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S2 BEWConfigSrv; E:\Program Files\OrangeBusinessServices\Manager polaczen\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\BEWConfigSrv.exe [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 apf005; C:\Windows\system32\apf005.sys [14160 2014-03-25] ()
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [132576 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [252336 2015-10-19] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [222640 2015-08-19] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [31664 2015-07-23] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [207328 2015-06-16] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [290272 2015-05-07] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [189872 2015-08-04] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [35808 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [230832 2015-08-04] (AVG Technologies CZ, s.r.o.)
U0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [22528 2008-10-09] (Bytemobile, Inc.) [Brak podpisu cyfrowego]
S3 cxbu0wdm; C:\Windows\System32\DRIVERS\cxbu0wdm.sys [131064 2014-05-14] (HID Global Corporation)
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [26328 2014-07-02] (Sony Mobile Communications)
S3 hwusbfake; C:\Windows\System32\DRIVERS\ewusbfake.sys [102912 2009-06-29] (Huawei Technologies Co., Ltd.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19232 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-31] (NVIDIA Corporation)
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [113904 2014-10-08] (Power Software Ltd)
S3 UsbSagCom; C:\Windows\System32\DRIVERS\UsbSagCom.sys [51712 2007-06-29] (Sagem Communication)
R3 VX1000; C:\Windows\System32\DRIVERS\VX1000.sys [1961072 2010-05-20] (Microsoft Corporation)
S3 vtany; \??\C:\Windows\vtany.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-12 21:13 - 2015-12-12 21:13 - 00000000 ____D C:\Users\User\Downloads\F
2015-12-12 21:11 - 2015-12-12 21:11 - 00061069 _____ C:\Users\User\Downloads\Shortcut.txt
2015-12-12 21:09 - 2015-12-12 21:12 - 00039252 _____ C:\Users\User\Downloads\Addition.txt
2015-12-12 21:07 - 2015-12-12 21:12 - 00037673 _____ C:\Users\User\Downloads\FRST.txt
2015-12-12 21:06 - 2015-12-12 21:13 - 00000000 ____D C:\FRST
2015-12-12 20:08 - 2015-12-12 20:08 - 01738240 _____ C:\Users\User\Downloads\adwcleaner_5.024.exe
2015-12-12 16:46 - 2015-12-12 18:47 - 00000001 _____ C:\Windows\system32\pl.html
2015-12-11 23:20 - 2015-12-11 23:20 - 00196931 _____ C:\Users\User\Desktop\Analiza filmu ,, IRON MAN.pptx
2015-12-11 20:39 - 2015-12-11 21:19 - 365936640 _____ C:\Users\User\Downloads\Quantico.S01E09.PL.SUBBED.HDTV.XviD.avi
2015-12-11 17:07 - 2015-12-11 17:07 - 00234200 _____ (Spotify Ltd) C:\Users\User\Downloads\SpotifySetup (1).exe
2015-12-11 17:05 - 2015-12-12 20:14 - 00000000 ____D C:\Users\User\AppData\Local\Spotify
2015-12-11 17:04 - 2015-12-12 20:14 - 00000000 ____D C:\Users\User\AppData\Roaming\Spotify
2015-12-11 17:04 - 2015-12-11 17:04 - 00234200 _____ (Spotify Ltd) C:\Users\User\Downloads\SpotifySetup.exe
2015-12-11 17:04 - 2015-12-11 17:04 - 00001762 _____ C:\Users\User\Desktop\Spotify.lnk
2015-12-11 17:04 - 2015-12-11 17:04 - 00001748 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2015-12-11 17:02 - 2015-12-11 17:46 - 403646464 _____ C:\Users\User\Downloads\Quantico.S01E10.PLSUBBED.HDTV.avi
2015-12-09 20:00 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2015-12-09 20:00 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2015-12-09 20:00 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-12-09 20:00 - 2015-11-10 19:39 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-12-09 20:00 - 2015-11-10 19:39 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-12-09 20:00 - 2015-11-10 18:40 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-12-09 19:59 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-12-09 19:59 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-12-09 19:59 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-12-09 19:59 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-12-09 19:59 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-12-09 19:59 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-12-09 19:59 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-12-09 19:59 - 2015-11-10 01:24 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-12-09 19:59 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-12-09 19:59 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-12-09 19:59 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-12-09 19:59 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-12-09 19:59 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-12-09 19:59 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-12-09 19:59 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-12-09 19:59 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-12-09 19:59 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-12-09 19:59 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-12-09 19:59 - 2015-11-10 01:03 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-12-09 19:59 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-12-09 19:59 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-12-09 19:59 - 2015-11-10 00:57 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-12-09 19:59 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-12-09 19:59 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-12-09 19:59 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-12-09 19:59 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-12-09 19:59 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-12-09 19:59 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-12-09 19:59 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-12-09 19:59 - 2015-11-10 00:36 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-12-09 19:59 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-12-09 19:59 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-12-09 19:59 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-12-09 19:59 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-12-09 19:58 - 2015-11-05 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-12-09 19:57 - 2015-11-20 19:34 - 02956800 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-12-09 19:57 - 2015-11-20 19:34 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-12-09 19:57 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-12-09 19:57 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-12-09 19:57 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-12-09 19:57 - 2015-11-20 19:34 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-12-09 19:57 - 2015-11-20 19:34 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-12-09 19:57 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-12-09 19:57 - 2015-11-20 19:33 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-12-09 19:57 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-12-09 19:57 - 2015-11-20 19:33 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-12-09 19:57 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2015-12-09 19:56 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2015-12-09 19:56 - 2015-11-05 10:48 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2015-12-09 19:56 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-12-09 19:56 - 2015-10-09 00:17 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2015-12-09 19:56 - 2015-10-09 00:13 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2015-12-09 19:56 - 2015-10-09 00:13 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2015-12-09 19:56 - 2015-10-09 00:13 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2015-12-09 19:56 - 2015-10-08 20:13 - 00419928 _____ C:\Windows\system32\locale.nls
2015-12-06 20:14 - 2015-12-06 20:14 - 00134303 _____ C:\Users\User\Downloads\uchwala_nr_7_20142015.pdf
2015-12-06 20:07 - 2015-12-06 20:07 - 00279540 _____ C:\Users\User\Downloads\regulamin-rady-pedagogicznej-sp21.pdf
2015-12-06 20:04 - 2015-12-06 20:04 - 00074206 _____ C:\Users\User\Downloads\Page0014.pdf
2015-12-06 19:56 - 2015-12-06 19:56 - 00075411 _____ C:\Users\User\Downloads\19072015uchwala23.PDF
2015-12-06 19:56 - 2015-12-06 19:56 - 00075411 _____ C:\Users\User\Downloads\19072015uchwala23 (2).PDF
2015-12-06 19:56 - 2015-12-06 19:56 - 00075411 _____ C:\Users\User\Downloads\19072015uchwala23 (1).PDF
2015-12-06 19:53 - 2015-12-06 19:53 - 00057384 _____ C:\Users\User\Downloads\19072015uchwala18.PDF
2015-12-06 19:52 - 2015-12-06 19:52 - 00364219 _____ C:\Users\User\Downloads\23102015uchwala1.pdf
2015-12-04 18:39 - 2015-12-04 18:39 - 00045115 _____ C:\Users\User\Downloads\Potwierdzenie zamówienia (1).pdf
2015-12-04 18:36 - 2015-12-04 18:36 - 02616067 _____ C:\Users\User\Downloads\Zestawy interaktywne My Board.pdf
2015-11-30 16:46 - 2015-11-30 16:46 - 00281546 _____ C:\Users\User\Downloads\516284941115_faktura.pdf
2015-11-30 08:41 - 2015-11-30 08:42 - 02342332 _____ C:\Users\User\Downloads\Laureaci_nagrod_Prezesa_Rady_Ministrow_-_wyroznieni_w_1996_roku.pdf
2015-11-30 00:07 - 2015-11-30 00:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 3.4
2015-11-29 23:57 - 2015-11-30 00:08 - 00000000 ____D C:\Users\User\AppData\Roaming\DVDVideoSoft
2015-11-29 23:55 - 2015-11-29 23:55 - 14041624 _____ (DVDVideoSoft Ltd. ) C:\Users\User\Downloads\FreeDiscBurner.exe
2015-11-29 23:52 - 2015-11-29 23:52 - 00000085 ___SH C:\ProgramData\.zreglib
2015-11-29 23:51 - 2015-11-29 23:52 - 00000000 ____D C:\ProgramData\Elaborate Bytes
2015-11-22 15:47 - 2015-11-22 15:55 - 01022192 _____ C:\Users\User\Desktop\3.jpeg
2015-11-22 15:44 - 2015-11-22 15:44 - 00683814 _____ C:\Users\User\Desktop\2.jpeg
2015-11-22 15:36 - 2015-11-22 15:35 - 01390964 _____ C:\Users\User\Desktop\1.jpeg

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-12 21:06 - 2009-07-14 03:37 - 00000000 ____D C:\Windows
2015-12-12 20:25 - 2009-07-14 05:34 - 00023376 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-12 20:25 - 2009-07-14 05:34 - 00023376 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-12 20:22 - 2012-07-09 08:13 - 00002327 _____ C:\Users\User\Desktop\Google Chrome.lnk
2015-12-12 20:20 - 2012-07-09 08:12 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-456985443-2800898146-1698058886-1000UA.job
2015-12-12 20:19 - 2014-06-09 12:47 - 00000000 ____D C:\Users\User\AppData\Local\CrashDumps
2015-12-12 20:19 - 2013-07-13 18:39 - 00000000 ____D C:\Users\User\AppData\Roaming\Media Player Classic
2015-12-12 20:19 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2015-12-12 20:16 - 2014-07-25 11:11 - 00000000 ____D C:\Users\User\AppData\Local\ChomikBox
2015-12-12 20:15 - 2014-07-25 11:12 - 00000000 ____D C:\Users\User\.gstreamer-0.10
2015-12-12 20:13 - 2014-01-11 11:32 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-12 20:13 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-12 20:11 - 2015-08-25 20:42 - 00000000 ____D C:\AdwCleaner
2015-12-12 20:09 - 2014-03-19 10:11 - 00000000 ____D C:\ProgramData\MFAData
2015-12-12 08:03 - 2015-04-17 17:56 - 00000000 ____D C:\Users\User\AppData\Local\cmsiex
2015-12-11 22:45 - 2015-02-11 18:29 - 00000000 ____D C:\Users\User\AppData\Local\GscWare
2015-12-11 22:45 - 2015-02-10 18:51 - 00000000 ____D C:\Program Files\KMPlayer
2015-12-11 22:09 - 2012-07-06 15:09 - 00854292 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-11 22:09 - 2009-07-14 09:07 - 00059474 _____ C:\Windows\system32\perfh015.dat
2015-12-11 22:09 - 2009-07-14 09:07 - 00027758 _____ C:\Windows\system32\perfc015.dat
2015-12-10 14:27 - 2009-07-14 05:33 - 03770504 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-09 23:03 - 2014-02-08 13:26 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-09 23:03 - 2012-07-09 08:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-09 23:02 - 2012-07-09 08:57 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-09 19:17 - 2015-04-04 23:23 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-09 19:17 - 2014-03-25 08:28 - 00000000 ____D C:\Users\User\AppData\Local\Akamai
2015-12-09 19:17 - 2014-01-06 12:13 - 00000000 ____D C:\ProgramData\Origin
2015-12-09 19:17 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\servicing
2015-12-09 19:17 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\registration
2015-12-09 19:17 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-12-09 19:17 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-09 08:51 - 2014-05-23 08:53 - 00001415 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-09 08:51 - 2014-05-23 08:53 - 00001403 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-09 08:51 - 2012-07-06 15:29 - 00001719 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-06 11:20 - 2012-07-09 08:11 - 00001002 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-456985443-2800898146-1698058886-1000Core.job
2015-11-30 07:46 - 2015-04-03 12:57 - 00000000 ____D C:\Users\User\Desktop\Zdjecia buty
2015-11-30 00:09 - 2014-06-12 07:08 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-11-30 00:08 - 2015-02-14 23:46 - 00000000 ____D C:\Users\User\Documents\My Games
2015-11-30 00:06 - 2015-04-10 11:51 - 00000000 ____D C:\Users\User\AppData\Local\PokerStars.EU
2015-11-30 00:05 - 2015-08-10 12:41 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-11-25 15:59 - 2014-09-20 07:51 - 00001972 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2015-11-25 15:59 - 2014-04-22 10:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-11-25 15:58 - 2012-07-06 15:37 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2015-11-22 15:55 - 2014-07-09 09:43 - 00000000 ___RD C:\Users\User\Documents\Scanned Documents
2015-11-15 09:16 - 2015-09-19 16:44 - 00000000 ____D C:\Users\User\Desktop\Nowy folder
2015-11-15 09:00 - 2015-04-18 10:48 - 00000000 ____D C:\Users\User\Desktop\Nowy folder (3)
2015-11-12 08:02 - 2009-07-14 09:28 - 00000000 ____D C:\Program Files\Windows Journal

==================== Pliki w katalogu głównym wybranych folderów =======

2014-02-15 22:21 - 2014-02-15 22:21 - 0007605 _____ () C:\Users\User\AppData\Local\Resmon.ResmonCfg
2015-11-29 23:52 - 2015-11-29 23:52 - 0000085 ___SH () C:\ProgramData\.zreglib
2009-06-16 13:25 - 2009-06-16 13:25 - 0121512 ____R () C:\ProgramData\DeviceManager.xml.rc4
2014-01-11 12:35 - 2014-01-11 12:35 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-12-12 18:17

==================== Koniec  FRST.txt ============================