Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:13-12-2015 Uruchomiony przez Mikołaj (administrator) MIKOŁAJ-HP (14-12-2015 13:20:46) Uruchomiony z C:\Users\Mikołaj\Downloads Załadowane profile: Mikołaj (Dostępne profile: Mikołaj) Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 9 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (HP) C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe (QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe (Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe () C:\ProgramData\MobileBrServ\mbbService.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2016\Moldflow\bin\mitsijm.exe (arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe (Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Qihu Software Co. Limited) C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Windows (R) Win 7 DDK provider) C:\Program Files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe (QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe (CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe (Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\360TsLiveUpd.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-06-02] (IDT, Inc.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2799912 2011-06-10] (Synaptics Incorporated) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-08-13] (Apple Inc.) HKLM-x32\...\Run: [FLxHCIm64] => C:\Program Files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe [47616 2011-08-11] (Windows (R) Win 7 DDK provider) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [HPQuickWebProxy] => C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe [169528 2011-10-08] (Hewlett-Packard Company) HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [HP CoolSense] => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1343904 2012-11-05] (Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [Easybits Recovery] => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-09-15] (EasyBits Software AS) HKLM-x32\...\Run: [QHSafeTray] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe [1474168 2015-11-20] (QIHU 360 SOFTWARE CO. LIMITED) HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-465711213-2349908225-1493497262-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd) HKU\S-1-5-21-465711213-2349908225-1493497262-1000\...\Run: [Akamai NetSession Interface] => "C:\Users\Mikołaj\AppData\Local\Akamai\netsession_win.exe" HKU\S-1-5-21-465711213-2349908225-1493497262-1000\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1310088 2015-01-27] (Autodesk, Inc.) HKU\S-1-5-21-465711213-2349908225-1493497262-1000\...\Policies\system: [DisableLockWorkstation] 0 HKU\S-1-5-21-465711213-2349908225-1493497262-1000\...\Policies\system: [DisableChangePassword] 0 HKU\S-1-5-21-465711213-2349908225-1493497262-1000\...\MountPoints2: {15e003a1-3f81-11e5-8b12-4ceb425e2d2d} - G:\LG_PC_Programs.exe HKU\S-1-5-21-465711213-2349908225-1493497262-1000\...\MountPoints2: {2b010697-9b5c-11e5-b543-4ceb425e2d2d} - I:\autorun.exe HKU\S-1-5-21-465711213-2349908225-1493497262-1000\...\MountPoints2: {2b01069b-9b5c-11e5-b543-4ceb425e2d2d} - J:\autorun.exe HKU\S-1-5-21-465711213-2349908225-1493497262-1000\...\MountPoints2: {3c1a19f2-8458-11e5-8b5c-4ceb425e2d2d} - H:\AutoRun.exe HKU\S-1-5-21-465711213-2349908225-1493497262-1000\...\MountPoints2: {a4990c32-91ce-11e5-88a1-4ceb425e2d2d} - H:\autorun.exe HKU\S-1-5-21-465711213-2349908225-1493497262-1000\...\MountPoints2: {a9c44bc7-3adf-11e5-8a63-4ceb425e2d2d} - G:\setup.exe HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1310088 2015-01-27] (Autodesk, Inc.) ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWow64\EZUPBH~1.DLL Brak pliku [ ] ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SketchBook Snapshot.lnk [2015-11-01] ShortcutTarget: SketchBook Snapshot.lnk -> C:\Program Files (x86)\Autodesk\Autodesk SketchBook Pro for Enterprise 2014\SketchBookSnapshot.exe (Autodesk Inc) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 213.156.98.141 213.156.98.133 150.254.173.3 Tcpip\..\Interfaces\{2CDA400D-580D-48DA-8A85-43B7D85DD92D}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{2CDA400D-580D-48DA-8A85-43B7D85DD92D}: [DhcpNameServer] 213.156.98.141 213.156.98.133 150.254.173.3 Tcpip\..\Interfaces\{98DA449F-5C62-4A25-8FCB-0DAFFB8A271E}: [DhcpNameServer] 192.168.1.1 192.168.1.1 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HPNTDF HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HPNTDF HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HPNTDF HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HPNTDF HKU\S-1-5-21-465711213-2349908225-1493497262-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HPNTDF HKU\S-1-5-21-465711213-2349908225-1493497262-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HPNTDF SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF SearchScopes: HKLM -> {355018DD-35B1-49E6-B68A-EA286502CDD6} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://pl.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox SearchScopes: HKLM-x32 -> {355018DD-35B1-49E6-B68A-EA286502CDD6} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://pl.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKU\S-1-5-21-465711213-2349908225-1493497262-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-465711213-2349908225-1493497262-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-465711213-2349908225-1493497262-1000 -> {355018DD-35B1-49E6-B68A-EA286502CDD6} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKU\S-1-5-21-465711213-2349908225-1493497262-1000 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF SearchScopes: HKU\S-1-5-21-465711213-2349908225-1493497262-1000 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://pl.wikipedia.org/wiki/Special:Search?search={searchTerms} BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation) BHO: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon64.dll [2015-11-20] (Qihu 360 Software Co., Ltd.) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation) BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation) BHO-x32: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon.dll [2015-11-20] (Qihu 360 Software Co., Ltd.) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-24] (Oracle Corporation) Toolbar: HKU\S-1-5-21-465711213-2349908225-1493497262-1000 -> Brak nazwy - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Brak pliku Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation) FireFox: ======== FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation) FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom) FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom) FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [Brak pliku] FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] () FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-24] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-24] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-05-21] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll [2012-03-29] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-08] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2011-06-06] (Adobe Systems Inc.) FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-05-21] (Microsoft Corporation) Chrome: ======= CHR HomePage: Default -> hxxp://www.google.pl/ CHR StartupUrls: Default -> "hxxp://websearch.coolsearches.info/?pid=21122&r=2015/03/31&hid=18162143848834340363&lg=EN&cc=PL&unqvl=85" CHR Profile: C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Website Logon) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\debkinhcgejcbfgjiaalomcmkedjmiaa [2015-07-14] CHR Extension: (Dokumenty Google offline) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-07] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-13] CHR HKLM-x32\...\Chrome\Extension: [debkinhcgejcbfgjiaalomcmkedjmiaa] - C:\Program Files (x86)\HP SimplePass 2012\tschrome.crx [2011-08-25] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1129864 2015-07-30] (Autodesk Inc.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd) R2 FPLService; C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe [260424 2011-08-26] (HP) R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [Brak podpisu cyfrowego] R2 Huawei E3272; C:\ProgramData\MobileBrServ\mbbservice.exe [240720 2013-12-03] () R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2413056 2011-06-29] (Realsil Microelectronics Inc.) [Brak podpisu cyfrowego] R2 mitsijm2016; C:\Program Files\Autodesk\Inventor 2016\Moldflow\bin\mitsijm.exe [968480 2014-09-30] (Autodesk, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-02-26] () R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (arvato digital services llc) R2 QHActiveDefense; C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [903288 2015-11-20] (QIHU 360 SOFTWARE CO. LIMITED) R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [188072 2015-09-23] () R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [129168 2015-11-13] (Razer Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [730304 2015-10-02] (Wacom Technology, Corp.) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-02-26] (Intel® Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R1 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [137808 2015-11-20] (360.cn) R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [77904 2015-11-20] (360.cn) R3 360AvFlt; C:\Windows\SysWOW64\DRIVERS\360AvFlt.sys [77904 2015-11-20] (360.cn) R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [319568 2015-11-20] (360.cn) R1 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [40520 2015-07-01] (360.cn) R1 360FsFlt; C:\Windows\System32\DRIVERS\360FsFlt.sys [367696 2015-11-20] (360.cn) R1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV64.sys [178768 2015-11-20] (360.cn) R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-08-04] (Disc Soft Ltd) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R3 FLxHCIh; C:\Windows\System32\DRIVERS\FLxHCIh.sys [68160 2011-08-12] (Fresco Logic) R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-09-23] (Razer, Inc.) R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.) S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-14 13:20 - 2015-12-14 13:21 - 00024431 _____ C:\Users\Mikołaj\Downloads\FRST.txt 2015-12-14 13:20 - 2015-12-14 13:20 - 02369536 _____ (Farbar) C:\Users\Mikołaj\Downloads\FRST64.exe 2015-12-14 13:20 - 2015-12-14 13:20 - 00000000 ____D C:\FRST 2015-12-14 13:19 - 2015-12-14 13:20 - 00380416 _____ C:\Users\Mikołaj\Downloads\qxlpycoz.exe 2015-12-14 13:15 - 2015-12-14 13:15 - 00007597 _____ C:\Users\Mikołaj\AppData\Local\Resmon.ResmonCfg 2015-12-14 00:07 - 2015-12-14 00:07 - 00169600 _____ C:\Users\Mikołaj\AppData\Local\GDIPFONTCACHEV1.DAT 2015-12-13 19:54 - 2015-12-13 19:54 - 00557256 _____ C:\Windows\system32\FNTCACHE.DAT 2015-12-12 23:42 - 2015-12-13 16:49 - 00000000 ____D C:\Program Files (x86)\SpeedFan 2015-12-12 23:42 - 2015-12-12 23:42 - 00001007 _____ C:\Users\Mikołaj\Desktop\SpeedFan.lnk 2015-12-12 23:42 - 2015-12-12 23:42 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo 2015-12-12 23:42 - 2015-12-12 23:42 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan 2015-12-12 23:20 - 2015-12-13 19:46 - 00593132 _____ C:\Windows\ntbtlog.txt 2015-12-12 20:46 - 2015-12-14 12:56 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS 2015-12-12 18:54 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2015-12-12 18:54 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2015-12-12 18:54 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2015-12-12 18:52 - 2015-12-12 18:52 - 00001613 _____ C:\Users\Public\Desktop\League of Legends.lnk 2015-12-12 18:52 - 2015-12-12 18:52 - 00000000 ____D C:\Riot Games 2015-12-12 18:52 - 2015-12-12 18:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2015-12-12 18:16 - 2015-12-12 18:19 - 00000553 _____ C:\Windows\system32\MyDefrag.debuglog 2015-12-12 17:53 - 2015-12-12 20:10 - 00000000 ____D C:\Program Files (x86)\System Ninja 2015-12-12 17:51 - 2015-12-12 19:45 - 00000370 _____ C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - Mikołaj).job 2015-12-12 17:51 - 2015-12-12 17:51 - 00003032 _____ C:\Windows\System32\Tasks\SlimCleaner Plus (Scheduled Scan - Mikołaj) 2015-12-12 17:50 - 2015-12-12 17:50 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers 2015-12-12 17:50 - 2015-12-12 17:50 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Downloaded Installers 2015-12-12 17:31 - 2015-12-12 18:52 - 00000000 __SHD C:\AI_RecycleBin 2015-12-10 19:43 - 2015-12-10 20:00 - 00000000 ____D C:\Users\Mikołaj\Downloads\Command.And.Conquer.Red.Alert.3-RELOADED 2015-12-10 19:33 - 2015-12-10 19:33 - 00001847 _____ C:\Users\Public\Desktop\Hotline Miami 2 - Wrong Number.lnk 2015-12-10 18:51 - 2015-12-10 18:51 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Stardock 2015-12-09 20:13 - 2015-12-09 20:13 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Ironclad Games 2015-12-09 18:17 - 2015-12-09 18:17 - 00000000 ____D C:\Westwood 2015-12-08 19:54 - 2015-12-08 19:54 - 00556910 _____ C:\Users\Mikołaj\Downloads\dtkw_zalacznik_do_ogloszenia_nr_4906684_1081909.pdf 2015-12-08 01:19 - 2015-12-08 01:19 - 59552449 _____ C:\Users\Mikołaj\Downloads\Projektowanie mebli, J.Smardzewski (1).pdf 2015-12-07 18:36 - 2015-12-12 20:27 - 00000000 ____D C:\AdwCleaner 2015-12-07 16:18 - 2015-12-07 16:18 - 00000000 ____D C:\Users\Mikołaj\Downloads\emperor_battle for dune 2015-12-07 16:17 - 2015-12-08 23:59 - 00000000 ____D C:\Users\Mikołaj\Downloads\FTL Faster Than Light 2015-12-07 02:52 - 2015-11-20 11:51 - 00077904 _____ (360.cn) C:\Windows\SysWOW64\Drivers\360AvFlt.sys 2015-12-07 01:06 - 2015-12-07 01:06 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Symantec 2015-12-06 15:38 - 2015-12-06 15:39 - 00000000 ____D C:\Games 2015-12-06 13:53 - 2015-12-06 13:53 - 00000000 ____D C:\Program Files (x86)\GUMB04B.tmp 2015-12-06 13:53 - 2015-12-06 13:53 - 00000000 ____D C:\Program Files (x86)\GCRAD8D.tmp 2015-12-06 13:51 - 2015-12-06 13:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-12-06 12:34 - 2015-12-06 15:37 - 00000000 ____D C:\Users\Mikołaj\Documents\Endless Legend 2015-12-05 23:50 - 2015-12-05 23:50 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\My Games 2015-12-05 23:49 - 2015-12-05 23:49 - 00000000 ____D C:\ProgramData\Steam 2015-12-05 23:19 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2015-12-05 23:19 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2015-12-05 23:19 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2015-12-05 23:19 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2015-12-05 23:19 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2015-12-05 23:19 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2015-12-05 23:19 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2015-12-05 23:19 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2015-12-05 23:11 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2015-12-05 23:11 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2015-12-05 23:11 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2015-12-05 23:11 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2015-12-05 23:11 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2015-12-05 23:11 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2015-12-05 23:11 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2015-12-05 23:11 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2015-12-05 23:11 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2015-12-05 23:11 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2015-12-05 23:11 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2015-12-05 23:11 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2015-12-05 23:11 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2015-12-05 23:11 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2015-12-05 22:48 - 2015-12-05 22:48 - 00000000 ____D C:\NVIDIA 2015-12-05 21:59 - 2015-12-05 21:59 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2015-12-05 21:55 - 2015-12-13 23:15 - 00000000 ____D C:\Users\Mikołaj\Downloads\3. Battlestar Galactica Season 2 2015-12-05 18:00 - 2015-12-05 18:00 - 00000000 ____D C:\Program Files (x86)\LucasArts 2015-12-01 23:44 - 2015-12-01 23:44 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Windows Live Writer 2015-12-01 23:44 - 2015-12-01 23:44 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Windows Live Writer 2015-12-01 12:23 - 2015-12-01 12:23 - 00054784 _____ C:\Users\Mikołaj\Downloads\PMM.xls 2015-12-01 12:23 - 2015-12-01 12:23 - 00054272 _____ C:\Users\Mikołaj\Downloads\TMS_GR_1.xls 2015-12-01 12:23 - 2015-12-01 12:23 - 00051200 _____ C:\Users\Mikołaj\Downloads\TMS_GR_2.xls 2015-11-30 14:15 - 2015-12-01 23:42 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Windows Live 2015-11-30 14:15 - 2015-11-30 14:15 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\{6E4059CC-1352-4FC4-8B9B-7EA70B2C3876} 2015-11-29 19:37 - 2015-11-29 19:37 - 00000000 ____D C:\Users\Mikołaj\.android 2015-11-29 18:05 - 2015-11-29 18:34 - 3291152384 _____ C:\Users\Mikołaj\Downloads\TopSolid 2015-2.iso 2015-11-28 23:07 - 2015-11-28 23:07 - 00000000 _____ C:\Windows\SOFT_REPAIR 2015-11-28 15:12 - 2015-11-28 16:38 - 3184197632 _____ C:\Users\Mikołaj\Downloads\TopSolid 2015-1-1.iso 2015-11-25 19:56 - 2015-12-10 19:37 - 00000000 ____D C:\Users\Mikołaj\Documents\My Games 2015-11-25 19:56 - 2015-11-25 19:56 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\FalloutNV 2015-11-25 19:35 - 2015-11-25 19:35 - 00486376 _____ C:\Users\Mikołaj\Downloads\Ćwiczenie nr 2.pdf 2015-11-25 19:35 - 2015-11-25 19:35 - 00325923 _____ C:\Users\Mikołaj\Downloads\Ćwiczenie nr 3.pdf 2015-11-25 19:34 - 2015-11-25 19:34 - 00340655 _____ C:\Users\Mikołaj\Downloads\Ćwiczenie nr 1.pdf 2015-11-25 19:04 - 2015-11-25 19:04 - 00000000 ____D C:\ProgramData\Missler Software 2015-11-25 19:03 - 2015-11-25 19:03 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Missler Software 2015-11-23 17:08 - 2015-12-10 19:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com 2015-11-23 17:08 - 2015-11-23 17:08 - 00001768 _____ C:\Users\Public\Desktop\Pillars of Eternity.lnk 2015-11-23 16:52 - 2015-12-10 19:32 - 00000000 ____D C:\GOG Games 2015-11-23 16:34 - 2015-11-23 16:34 - 00000000 ____D C:\Program Files (x86)\Bethesda Softworks 2015-11-21 23:42 - 2015-11-21 23:59 - 00000000 ____D C:\7a9dbd6063ecacd35b38de 2015-11-20 10:16 - 2015-11-20 10:45 - 00000000 ____D C:\Users\Mikołaj\Documents\Moje odebrane pliki 2015-11-19 00:12 - 2015-11-20 12:42 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Warframe 2015-11-17 17:35 - 2015-11-20 09:51 - 00000000 ____D C:\Users\MikoĹ‚aj 2015-11-17 17:35 - 2015-11-17 17:35 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Steam 2015-11-17 17:35 - 2015-11-17 17:35 - 00000000 ____D C:\Users\MikoĹ‚aj\AppData\Local\Steam 2015-11-17 15:15 - 2015-10-27 16:13 - 67439104 _____ C:\Users\Mikołaj\Documents\prezentacja c.ppt 2015-11-16 17:59 - 2008-03-06 11:30 - 34334758 _____ C:\Users\Mikołaj\Downloads\TopSolidWood_przykładowe zadania.pdf 2015-11-16 17:15 - 2015-12-08 20:08 - 00000000 ____D C:\Users\Mikołaj\Documents\PM - IIIrok 2015-11-16 17:15 - 2015-12-01 17:00 - 00000000 ____D C:\Users\Mikołaj\Documents\Magisterka ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-14 13:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows 2015-12-14 13:09 - 2015-07-14 23:05 - 00000000 ____D C:\Users\Mikołaj\AppData\LocalLow\360WD 2015-12-14 13:04 - 2009-07-14 05:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-12-14 13:04 - 2009-07-14 05:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-12-14 13:03 - 2011-11-16 18:16 - 00740672 _____ C:\Windows\system32\perfh015.dat 2015-12-14 13:03 - 2011-11-16 18:16 - 00156214 _____ C:\Windows\system32\perfc015.dat 2015-12-14 13:03 - 2009-07-14 06:13 - 01670518 _____ C:\Windows\system32\PerfStringBackup.INI 2015-12-14 13:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf 2015-12-14 12:56 - 2015-07-14 23:39 - 00000000 ____D C:\Users\Mikołaj\AppData\LocalLow\AuthenTec 2015-12-14 12:55 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-12-14 12:17 - 2015-07-17 01:40 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\vlc 2015-12-13 23:08 - 2015-07-23 17:56 - 00000340 _____ C:\Windows\Tasks\HPCeeScheduleForMikołaj.job 2015-12-13 23:07 - 2015-07-23 17:56 - 00003194 _____ C:\Windows\System32\Tasks\HPCeeScheduleForMikołaj 2015-12-13 19:49 - 2015-07-16 15:01 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\uTorrent 2015-12-13 19:47 - 2015-07-14 23:09 - 00000000 ____D C:\ProgramData\360Quarant 2015-12-13 19:47 - 2012-03-02 15:50 - 00000000 ____D C:\Program Files (x86)\HP SimplePass 2012 2015-12-13 16:30 - 2015-07-14 23:42 - 00003982 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{12533D89-1B38-4C03-8218-228AF40866A4} 2015-12-12 23:23 - 2015-07-23 16:24 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\ElevatedDiagnostics 2015-12-12 20:17 - 2015-07-30 10:50 - 00000000 __SHD C:\$360Section 2015-12-12 19:45 - 2015-08-04 22:13 - 00000000 ____D C:\Windows\AutoKMS 2015-12-12 18:52 - 2015-07-14 23:11 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Riot Games 2015-12-12 18:39 - 2015-07-14 23:39 - 00000000 ____D C:\Users\Mikołaj 2015-12-12 18:38 - 2012-03-02 15:41 - 00000000 ____D C:\Windows\Hewlett-Packard 2015-12-12 18:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Msdtc 2015-12-12 18:02 - 2015-08-04 21:01 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\DAEMON Tools Lite 2015-12-10 19:36 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-12-10 19:20 - 2015-08-10 18:53 - 00000000 ____D C:\ProgramData\Package Cache 2015-12-07 17:48 - 2015-07-14 22:49 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-12-07 02:52 - 2015-07-14 23:05 - 00001149 _____ C:\Users\Public\Desktop\360 Total Security.lnk 2015-12-07 02:52 - 2015-07-14 23:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center 2015-12-07 02:42 - 2015-07-14 23:05 - 00000000 _RSHD C:\360SANDBOX 2015-12-06 14:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat 2015-12-06 14:46 - 2015-07-14 23:09 - 00000000 ____D C:\Windows\Tasks\360Disabled 2015-12-06 14:46 - 2015-07-14 22:47 - 00004046 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-12-06 14:46 - 2015-07-14 22:47 - 00003794 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-12-06 13:49 - 2015-09-23 11:52 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Spotify 2015-12-05 22:55 - 2011-11-16 10:11 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2015-12-05 15:28 - 2015-07-14 23:05 - 00000000 ____D C:\ProgramData\360safe 2015-12-05 15:24 - 2015-08-10 20:39 - 00000000 ____D C:\Users\Mikołaj\Desktop\programy 2015-12-05 13:40 - 2015-07-14 23:09 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\360safe 2015-12-05 13:40 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy 2015-12-01 22:13 - 2015-10-09 18:30 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\TS3Client 2015-11-30 12:54 - 2015-10-13 21:02 - 00001252 _____ C:\Users\Public\Desktop\Razer Cortex.lnk 2015-11-23 18:33 - 2015-07-14 20:29 - 00000000 ____D C:\Users\Mikołaj\Documents\Mikołaj - dokumenty 2015-11-22 11:45 - 2015-08-04 22:08 - 01643124 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2015-11-21 23:42 - 2015-07-16 14:39 - 145617392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-11-20 11:51 - 2015-07-14 23:05 - 00367696 _____ (360.cn) C:\Windows\system32\Drivers\360fsflt.sys 2015-11-20 11:51 - 2015-07-14 23:05 - 00319568 _____ (360.cn) C:\Windows\system32\Drivers\360Box64.sys 2015-11-20 11:51 - 2015-07-14 23:04 - 00178768 _____ (360.cn) C:\Windows\system32\Drivers\BAPIDRV64.SYS 2015-11-20 11:51 - 2015-07-14 23:04 - 00137808 _____ (360.cn) C:\Windows\system32\Drivers\360AntiHacker64.sys 2015-11-20 11:51 - 2015-07-14 23:04 - 00077904 _____ (360.cn) C:\Windows\system32\Drivers\360AvFlt.sys ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-12-14 13:15 - 2015-12-14 13:15 - 0007597 _____ () C:\Users\Mikołaj\AppData\Local\Resmon.ResmonCfg ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-11-23 14:00 ==================== Koniec FRST.txt ============================