Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:17-12-2015 Uruchomiony przez Jacek (administrator) JACEK-LAPTOP (17-12-2015 10:19:54) Uruchomiony z D:\FIX IT PC\FRST Załadowane profile: Jacek (Dostępne profile: Jacek) Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Język: Polski (Polska) Internet Explorer Wersja 8 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Taiwan Shui Mu Chih Ching Technology Limited) C:\Program Files\WinZipper\winzipersvc.exe (ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (tsvr.com) C:\Users\Jacek\AppData\Roaming\TSv\TSvr.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Lenovo(beijing) Limited) C:\Program Files\Lenovo\Energy Management\utility.exe (Lenovo (Beijing) Limited) C:\Program Files\Lenovo\Energy Management\Energy Management.exe (ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (TODO: <公司名>) C:\Program Files\SFK\SSFK.exe (TFuns LIMITED) C:\ProgramData\MWdMM\WdMan.exe (TODO: <公司名>) C:\Program Files\SFK\SSFK.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [EnergyUtility] => C:\Program Files\Lenovo\Energy Management\utility.exe [4114336 2009-07-31] (Lenovo(beijing) Limited) HKLM\...\Run: [Energy Management] => C:\Program Files\Lenovo\Energy Management\Energy Management.exe [5064520 2009-06-25] (Lenovo (Beijing) Limited) HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2145000 2010-04-07] (ESET) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 109.196.15.2 8.8.8.8 Tcpip\..\Interfaces\{859E2E9E-5CC2-4483-9681-64ACDEA019D1}: [DhcpNameServer] 109.196.15.2 8.8.8.8 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD3200BEVT-22ZCT0_WD-WXJ0A69M2350M2350&ts=1379754226 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD3200BEVT-22ZCT0_WD-WXJ0A69M2350M2350&ts=1379754226 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-3686410479-3997652338-1969191703-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD3200BEVT-22ZCT0_WD-WXJ0A69M2350M2350&ts=1379754226 HKU\S-1-5-21-3686410479-3997652338-1969191703-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=WDCXWD3200BEVT-22ZCT0_WD-WXJ0A69M2350M2350&ts=1379754226 SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1431082016&z=9348754c8f5a231f5bcda6ag8z9cegde6b9ocefgdw&from=wpm05083&uid=WDCXWD3200BEVT-22ZCT0_WD-WXJ0A69M2350M2350&q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1431082016&z=9348754c8f5a231f5bcda6ag8z9cegde6b9ocefgdw&from=wpm05083&uid=WDCXWD3200BEVT-22ZCT0_WD-WXJ0A69M2350M2350&q={searchTerms} SearchScopes: HKLM -> {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://www.v9.com/web?type=ds&ts=1425449658&from=zbd1&uid=wdcxwd3200bevt-22zct0_wd-wxj0a69m2350m2350&q={searchTerms} SearchScopes: HKU\S-1-5-21-3686410479-3997652338-1969191703-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450080957&z=1476589de430efd77f7f1e1gaz8w0e6e6bae7tcz5t&from=wpm07173&uid=WDCXWD3200BEVT-22ZCT0_WD-WXJ0A69M2350M2350&q={searchTerms} SearchScopes: HKU\S-1-5-21-3686410479-3997652338-1969191703-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3686410479-3997652338-1969191703-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3686410479-3997652338-1969191703-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3686410479-3997652338-1969191703-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450080957&z=1476589de430efd77f7f1e1gaz8w0e6e6bae7tcz5t&from=wpm07173&uid=WDCXWD3200BEVT-22ZCT0_WD-WXJ0A69M2350M2350&q={searchTerms} SearchScopes: HKU\S-1-5-21-3686410479-3997652338-1969191703-1000 -> {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} SearchScopes: HKU\S-1-5-21-3686410479-3997652338-1969191703-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms} FireFox: ======== FF ProfilePath: C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default FF NewTab: chrome://quick_start/content/index.html FF Homepage: hxxp://www.onet.pl/ FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-14] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-14] (Google Inc.) FF user.js: detected! => C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default\user.js [2015-06-02] FF SearchPlugin: C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default\searchplugins\V9.xml [2015-03-05] FF SearchPlugin: C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default\searchplugins\wyszukiwarka-filmw-w-youtube.xml [2015-01-28] FF Extension: Google Translator for Firefox - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default\extensions\translator@zoli.bod.xpi [2013-09-12] [Brak podpisu cyfrowego] FF Extension: Open GMail with toolbar button - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default\extensions\gmail@borsosfisoft.com.xpi [2015-06-02] FF Extension: Gmail panel - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default\extensions\gmail_panel@alejandrobrizuela.com.ar.xpi [2015-06-02] FF Extension: Brak nazwy - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default\Extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi [2015-06-02] [Brak podpisu cyfrowego] FF Extension: NASA Night Launch - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default\Extensions\nasanightlaunch@example.com.xpi [2015-05-14] [Brak podpisu cyfrowego] FF Extension: BlackFox V2 - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default\Extensions\zigboom@hotmail.com [2015-05-08] [Brak podpisu cyfrowego] FF Extension: FT DeepDark - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2015-05-08] [Brak podpisu cyfrowego] FF Extension: Adblock Plus - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-06-02] FF HKLM\...\Firefox\Extensions: [detgdp@gmail.com] - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default\extensions\detgdp@gmail.com => nie znaleziono FF HKLM\...\Firefox\Extensions: [quick_searchff@gmail.com] - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default\extensions\quick_searchff@gmail.com => nie znaleziono FF HKLM\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\d07u2l6r.default\extensions\sweetsearch@gmail.com => nie znaleziono FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2013-09-21] [Brak podpisu cyfrowego] Chrome: ======= CHR HomePage: Default -> hxxp://www.onet.pl/ CHR StartupUrls: Default -> "hxxp://www.yoursites123.com/?type=hp&ts=1450080957&z=1476589de430efd77f7f1e1gaz8w0e6e6bae7tcz5t&from=wpm07173&uid=WDCXWD3200BEVT-22ZCT0_WD-WXJ0A69M2350M2350" CHR Profile: C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Prezentacje Google) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-02] CHR Extension: (Dokumenty Google) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-02] CHR Extension: (Dysk Google) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-29] CHR Extension: (YouTube) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24] CHR Extension: (Adblock Plus) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-11-28] CHR Extension: (Google Search) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29] CHR Extension: (Arkusze Google) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-02] CHR Extension: (Dokumenty Google offline) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-28] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-07] CHR Extension: (Gmail) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-02] CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - \User Data\Default\Extensions\newtab.crx ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [33560 2010-04-07] (ESET) R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [810120 2010-04-07] (ESET) R2 IhPul; C:\Users\Jacek\AppData\Roaming\TSv\TSvr.exe [580752 2015-12-08] (tsvr.com) R2 SSFK; C:\Program Files\SFK\SSFK.exe [170144 2015-11-27] (TODO: <公司名>) R2 WdMan; C:\ProgramData\MWdMM\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Brak podpisu cyfrowego] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation) R2 winzipersvc; C:\Program Files\WinZipper\winzipersvc.exe [711344 2015-12-14] (Taiwan Shui Mu Chih Ching Technology Limited) <==== UWAGA ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 ACPIVPC; C:\Windows\System32\DRIVERS\AcpiVpc.sys [21520 2009-05-19] (Lenovo Corporation) R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [134024 2010-04-07] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [114984 2010-04-07] (ESET) R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [96896 2010-04-07] (ESET) S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [43368 2013-05-23] (ThreatTrack Security) S3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [24040 2013-09-04] (ThreatTrack Security) R2 sbapifs; C:\Windows\System32\DRIVERS\sbapifs.sys [70888 2013-10-01] (ThreatTrack Security, Inc.) R3 usbsmi; C:\Windows\System32\DRIVERS\SMIksdrv.sys [168704 2009-06-19] (SMI) S1 iSafeKrnlMon; \??\C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys [X] S1 SBRE; \SystemRoot\system32\drivers\SBREDrv.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-17 10:17 - 2015-12-17 10:19 - 00000000 ____D C:\FRST 2015-12-16 12:31 - 2015-12-16 12:31 - 00015109 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Części zamienne - Spare Parts (2015) [BRRip.XviD-KiT][LEKTOR PL].torrent 2015-12-16 11:44 - 2015-12-16 11:44 - 00021173 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Pakt - The Pact (2015) [S01E06] [WEBRip.XviD-KiT] [PL] (1).torrent 2015-12-16 11:43 - 2015-12-16 11:43 - 00019193 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Pakt - The Pact (2015) [S01E04] [WEBRip.XviD-KiT] [PL].torrent 2015-12-16 11:43 - 2015-12-16 11:43 - 00018834 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Pakt - The Pact (2015) [S01E03] [WEBRip.XviD-KiT] [PL].torrent 2015-12-16 11:43 - 2015-12-16 11:43 - 00016831 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Pakt - The Pact (2015) [S01E02] [WEBRip.XviD-KiT] [PL].torrent 2015-12-16 11:43 - 2015-12-16 11:43 - 00016813 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Pakt - The Pact (2015) [S01E05] [WEBRip.XviD-KiT] [PL].torrent 2015-12-16 11:42 - 2015-12-16 11:42 - 00015029 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Pakt - The Pact (2015) [S01E01] [HDTV.XviD-B89] [PL].torrent 2015-12-16 11:30 - 2015-12-16 11:30 - 00021173 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Pakt - The Pact (2015) [S01E06] [WEBRip.XviD-KiT] [PL].torrent 2015-12-15 15:03 - 2015-12-17 09:45 - 00000001 _____ C:\Windows\system32\pl.html 2015-12-15 12:42 - 2015-12-15 12:42 - 00012975 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - W stronę zła - Into the Badlands (1991) [CUSTOM.DVDRip.DivX-RETRO] [Lektor PL].torrent 2015-12-15 12:40 - 2015-12-15 12:41 - 00015070 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Samotny gringo - Close Range (2015) [480p.WEB-DL.XviD-B89] [Lektor PL].torrent 2015-12-15 12:39 - 2015-12-15 12:39 - 00019594 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Hiena - Hyena (2014) [720p.BluRay.x264-KiT] [Lektor PL].torrent 2015-12-15 12:37 - 2015-12-15 12:37 - 00013306 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Marsylski łącznik - La French (2014) [PAL] [DVD5] [Lektor i Napisy PL].torrent 2015-12-15 12:36 - 2015-12-15 12:36 - 00015091 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Mafia i pomidory - Mafia and Red Tomatoes - La nostraterra (2014) [DVDRip.XViD-MORS] [Lektor PL].torrent 2015-12-15 12:36 - 2015-12-15 12:36 - 00015085 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Wesołe kurcze święta - A Merry Friggin' Christmas (2014) [BDRip.XviD-KiT] [Lektor PL].torrent 2015-12-15 12:36 - 2015-12-15 12:36 - 00014862 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Klasa próżniacza - The Leisure Class (2015) [480p.HDTV.XviD-B89][Lektor PL].torrent 2015-12-15 11:10 - 2015-12-15 11:10 - 00014875 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - A jeśli ciernie - If There Be Thorns (2015) [WEB-DL.Xvid-MX][Lektor PL].torrent 2015-12-14 09:35 - 2015-12-14 09:36 - 00015086 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Wstrząsy 5- Więzy krwi - Tremors 5- Bloodlines (2015) [480p.BDRip.XviD-B89] [Lektor PL].torrent 2015-12-14 09:34 - 2015-12-14 09:34 - 00014884 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Kryptonim U.N.C.L.E. - The Man From U.N.C.L.E. (2015) [BDRip.XViD-MORS] [Lektor PL].torrent 2015-12-14 09:33 - 2015-12-14 09:33 - 00016431 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Eskorta The Homesman (2014) [720p.BDRip.XviD-B89] [Lektor PL].torrent 2015-12-14 09:24 - 2015-12-14 09:24 - 00014939 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Poza wszelkim podejrzeniem - La prochaine fois je viserai le coeur (2014) [BRRip.XViD-MORS ] [Lektor PL].torrent 2015-12-14 09:23 - 2015-12-14 09:23 - 00017462 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Kenau- Wojowniczka z Haarlemu - Kenau (2014) [480p.BDRip.Xvid.AC3-NOiSE] [Lektor PL].torrent 2015-12-14 09:22 - 2015-12-14 09:22 - 00015030 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Kibolski świat - Okolofutbola (2013) [480p.BRRip.XViD.AC3-J25] [Lektor PL].torrent 2015-12-14 09:22 - 2015-12-14 09:22 - 00013611 _____ C:\Users\Jacek\Downloads\BEST-TORRENTS.NET - Ant-Man (2015) [PAL] [DVD5] [Dubbing i Napisy PL].torrent 2015-12-14 09:16 - 2015-12-17 09:47 - 00000000 ____D C:\Program Files\SFK 2015-12-14 09:16 - 2015-12-14 09:17 - 00000000 ____D C:\ProgramData\MWdMM 2015-12-14 09:16 - 2015-12-14 09:16 - 00000000 ____D C:\Users\Jacek\AppData\Roaming\WinZipper 2015-12-14 09:16 - 2015-12-14 09:16 - 00000000 ____D C:\Users\Jacek\AppData\Roaming\TSv 2015-12-14 09:16 - 2015-12-14 09:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper 2015-12-14 09:15 - 2015-12-14 09:16 - 00000074 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat 2015-12-14 09:15 - 2015-12-14 09:15 - 00000000 ____D C:\ProgramData\nWdMn ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-17 10:17 - 2009-07-14 03:37 - 00000000 ____D C:\Windows 2015-12-17 10:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf 2015-12-17 09:52 - 2009-07-14 05:34 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-12-17 09:52 - 2009-07-14 05:34 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-12-17 09:49 - 2011-02-01 20:37 - 00687828 _____ C:\Windows\system32\perfh015.dat 2015-12-17 09:49 - 2011-02-01 20:37 - 00131382 _____ C:\Windows\system32\perfc015.dat 2015-12-17 09:49 - 2010-11-20 22:01 - 01523412 _____ C:\Windows\system32\PerfStringBackup.INI 2015-12-17 09:48 - 2014-12-31 10:01 - 00000000 ____D C:\Program Files\WinZipper 2015-12-17 09:45 - 2015-06-02 14:59 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-12-17 09:45 - 2013-09-21 07:53 - 00000089 _____ C:\AtmApInit.txt 2015-12-17 09:45 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-12-17 08:34 - 2015-06-02 15:01 - 00002135 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-12-17 08:34 - 2015-06-02 14:59 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-12-16 12:51 - 2013-09-21 10:04 - 00000000 ____D C:\Users\Jacek\AppData\Roaming\uTorrent 2015-12-14 09:15 - 2014-12-31 10:00 - 00000000 ____D C:\ProgramData\WindowsMangerProtect 2015-12-04 10:40 - 2013-09-21 09:17 - 00000000 ____D C:\Program Files\AutoMapa EU 2015-11-28 10:51 - 2009-07-14 05:53 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-12-14 09:15 - 2015-12-14 09:16 - 0000074 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat Pliki do przeniesienia lub usunięcia: ==================== C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat Niektóre pliki w TEMP: ==================== C:\Users\Jacek\AppData\Local\Temp\ICReinstall_pobierz_Revo_Uninstaller.exe C:\Users\Jacek\AppData\Local\Temp\KUIU.EXE ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-12-14 12:20 ==================== Koniec FRST.txt ============================