Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:17-12-2015 Uruchomiony przez Ola (administrator) FAJO (18-12-2015 13:31:22) Uruchomiony z C:\Users\Ola\Downloads Załadowane profile: Ola & postgres (Dostępne profile: Ola & Ola_2 & Zuzia & Fruzia & postgres) Platform: Windows 7 Home Premium (X64) Język: Polski (Polska) Internet Explorer Wersja 8 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBDeviceInfoProvider.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (PostgreSQL Global Development Group) C:\postgreSQL\bin\pg_ctl.exe (ALPS) C:\Program Files\Apoint\Apvfb.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe (Softros Systems, Inc.) C:\Program Files\Softros Systems\Process Blocker\Process Blocker.exe (PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe (PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe (PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe (PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe (PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe (Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe (Microsoft Corporation) C:\Windows\System32\taskmgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Microsoft Corporation) C:\Windows\System32\alg.exe () C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe (Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\BatteryModule.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9636896 2009-12-16] (Realtek Semiconductor) HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [208384 2009-11-04] (Alps Electric Co., Ltd.) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10396440 2014-04-15] (Logitech Inc.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.) HKLM\...\Winlogon: [Userinit] C:\Windows\SysWOW64\userinit.exe, Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\VESWinlogon-x32: VESWinlogon.dll [X] HKU\S-1-5-21-4089810689-250214727-3830045157-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8551848 2015-10-19] (Piriform Ltd) HKU\S-1-5-21-4089810689-250214727-3830045157-1001\...\Run: [spdetector3] => C:\Program Files (x86)\Spyware Process Detector\spd324.exe [439296 2015-09-10] (System SoftLab) HKU\S-1-5-21-4089810689-250214727-3830045157-1001\...\Policies\system: [LogonHoursAction] 2 HKU\S-1-5-21-4089810689-250214727-3830045157-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKU\S-1-5-21-4089810689-250214727-3830045157-1001\...\MountPoints2: I - I:\AutoRun.exe HKU\S-1-5-21-4089810689-250214727-3830045157-1001\...\MountPoints2: {2ac1f3b4-6a23-11e3-b9d2-f07bcbe8d2be} - I:\AutoRun.exe HKU\S-1-5-21-4089810689-250214727-3830045157-1001\...\MountPoints2: {e5259bbd-501c-11e3-bccb-f07bcbe8d2be} - I:\AutoRun.exe HKU\S-1-5-18\...\RunOnce: [panda] => reg.exe delete "HKCU\Software\AppDataLow\Software\panda" /f HKU\S-1-5-18\...\RunOnce: [panda_XP] => reg.exe delete "HKCU\Software\panda" /f HKLM\...\AppCertDlls: [ProcessBlocker] -> C:\Program Files\Softros Systems\Process Blocker\HelperLib.dll [114176 2015-07-23] (Softros Systems, inc.) HKLM\...\AppCertDlls: [ProcessBlocker86] -> C:\Program Files\Softros Systems\Process Blocker\HelperLib86.dll [95744 2015-07-23] (Softros Systems, inc.) ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google) ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => Brak pliku ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ola\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) Startup: C:\Users\Fruzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2011-09-13] ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () Startup: C:\Users\Ola_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2010-10-24] ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () Startup: C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2010-10-24] ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () GroupPolicyUsers\S-1-5-21-4089810689-250214727-3830045157-1004\User: Ograniczenia <======= UWAGA GroupPolicyUsers\S-1-5-21-4089810689-250214727-3830045157-1003\User: Ograniczenia <======= UWAGA GroupPolicyScripts-x32: Ograniczenia <======= UWAGA CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62 Tcpip\..\Interfaces\{DF077166-042A-4352-8A54-A88BBA91D769}: [DhcpNameServer] 62.179.1.63 62.179.1.62 Internet Explorer: ================== HKU\S-1-5-21-4089810689-250214727-3830045157-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SL5M&ocid=SL5MDHP&osmkt=pl-pl HKU\S-1-5-21-4089810689-250214727-3830045157-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=SVEC&bmod=EU01 HKU\S-1-5-21-4089810689-250214727-3830045157-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://pandasecurity.mystart.com/?pr=vmn&id=pandasecuritytb&v=4_2&utm_campaign=664&idate=2015-02-09&ent=hp_664&u=7EC5ACA3FD3E2201500B2054D85612D0 SearchScopes: HKU\S-1-5-21-4089810689-250214727-3830045157-1001 -> DefaultScope {19347526-9125-483B-B4DF-80D0B84E59FC} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SVEC_plPL402PL402 SearchScopes: HKU\S-1-5-21-4089810689-250214727-3830045157-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=SL5MDF&PC=SL5M&q={searchTerms}&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-4089810689-250214727-3830045157-1001 -> {19347526-9125-483B-B4DF-80D0B84E59FC} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SVEC_plPL402PL402 SearchScopes: HKU\S-1-5-21-4089810689-250214727-3830045157-1001 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://pandasecurity.mystart.com/results.php?pr=vmn&gen=ms&id=pandasecuritytb&v=4_2&idate=2015-02-09&ent=ch_664&q={searchTerms} SearchScopes: HKU\S-1-5-21-4089810689-250214727-3830045157-1001 -> {BACF507D-0C5C-4070-8EB6-5DCA684A917F} URL = hxxp://uk.shopping.com/?linkin_id=8056359 SearchScopes: HKU\S-1-5-21-4089810689-250214727-3830045157-1001 -> {C8F6BC9D-FFDD-426C-9D54-24F488A0831D} URL = hxxp://www.zinio.com/search/index.jsp?s={searchTerms}&rf=sonyie8search SearchScopes: HKU\S-1-5-21-4089810689-250214727-3830045157-1001 -> {CBFD9F58-B2D0-4043-8EF8-43F3A8B0B6C0} URL = hxxp://rover.ebay.com/rover/1/710-42480-16445-5/4?satitle={searchTerms} BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll [2015-10-29] (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-29] (Oracle Corporation) BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll [2013-04-08] (pdfforge GmbH) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-29] (Oracle Corporation) BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-09-22] (Microsoft Corporation) BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: QUICKfind BHO Object -> {C08DF07A-3E49-4E25-9AB0-D3882835F153} -> C:\Program Files (x86)\IDM\QUICKfind\PlugIns\IEHelp.dll [2007-02-16] (IDM) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-29] (Oracle Corporation) Toolbar: HKLM - Brak nazwy - {32099AAC-C132-4136-9E9A-4E364A424E17} - Brak pliku Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll [2013-04-08] (pdfforge GmbH) Toolbar: HKU\S-1-5-21-4089810689-250214727-3830045157-1001 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Brak pliku Toolbar: HKU\S-1-5-21-4089810689-250214727-3830045157-1001 -> Brak nazwy - {32099AAC-C132-4136-9E9A-4E364A424E17} - Brak pliku Toolbar: HKU\S-1-5-21-4089810689-250214727-3830045157-1001 -> Brak nazwy - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Brak pliku Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2013-03-02] (Microsoft Corporation) Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2013-03-02] (Microsoft Corporation) Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2013-03-02] (Microsoft Corporation) Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2013-03-02] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Ola\AppData\Roaming\Mozilla\Firefox\Profiles\hk5egpna.default-1447649916293 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-18] () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\npPDFXCviewNPPlugin.dll [Brak pliku] FF Plugin: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-29] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-29] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [1999-12-31] (Tracker Software Products Ltd.) FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-18] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] () FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\Win32\npPDFXCviewNPPlugin.dll [Brak pliku] FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-29] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-29] (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files (x86)\Sony\MSS\3.8.130\npMcAfeeMss.dll [Brak pliku] FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-22] (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2012-07-18] (Pando Networks) FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files (x86)\Sony\Media Go\npmediago.dll [2010-06-02] (Sony Media Software and Services Inc) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.) FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [1999-12-31] (Tracker Software Products Ltd.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-4089810689-250214727-3830045157-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\Win32\npPDFXCviewNPPlugin.dll [Brak pliku] FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npcnmozillainterface.dll [2006-12-11] (Multimedia Cafe www.mmcafe.pl) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-09-30] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [1999-12-31] (Tracker Software Products Ltd.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-08-11] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-08-11] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-08-11] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-08-11] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-08-11] (Apple Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\pandasecuritytb.xml [2015-02-09] FF Extension: Thumbnail Zoom Plus - C:\Users\Ola\AppData\Roaming\Mozilla\Firefox\Profiles\hk5egpna.default-1447649916293\extensions\thumbnailZoom@dadler.github.com.xpi [2015-12-05] FF Extension: Better Twitter Auto-Refresh - C:\Users\Ola\AppData\Roaming\Mozilla\Firefox\Profiles\hk5egpna.default-1447649916293\Extensions\@twitteraf.xpi [2015-12-05] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-12-07] [Brak podpisu cyfrowego] FF HKLM-x32\...\Firefox\Extensions: [{6D5C8FC4-DE46-41bf-9092-93F0F78E9115}] - C:\ProgramData\Norton\{78CA3BF0-9C3B-40e1-B46D-38C877EF059A}\NSM_2.6.0.43\coFFFw => nie znaleziono FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2014-03-09] [Brak podpisu cyfrowego] Chrome: ======= CHR HomePage: Default -> hxxp://www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=pl-pl CHR StartupUrls: Default -> "hxxp://www.google.com/" CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms} CHR DefaultSearchKeyword: Default -> bing.com CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\ppGoogleNaClPluginChrome.dll => Brak pliku CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\pdf.dll => Brak pliku CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\gcswf32.dll => Brak pliku CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll => Brak pliku CHR Plugin: (Skype Toolbars) - C:\Users\Ola\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll => Brak pliku CHR Plugin: (Norton Confidential) - C:\Users\Ola\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbkkogpfmmfmppkbopdikooeibnjhfpi\2.2.0.40_0\npcoplgn.dll => Brak pliku CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll => Brak pliku CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Google\Chrome\Application\plugins\nppl3260.dll => Brak pliku CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Google\Chrome\Application\plugins\nprpjplug.dll => Brak pliku CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll => Brak pliku CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll => Brak pliku CHR Plugin: (Cafe News interface container) - C:\Program Files (x86)\Mozilla Firefox\plugins\npcnmozillainterface.dll (Multimedia Cafe www.mmcafe.pl) CHR Plugin: (Imagine Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\npImagine.dll => Brak pliku CHR Plugin: (PDF-XChange Viewer) - C:\Program Files (x86)\Mozilla Firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.) CHR Plugin: (QuickTime Plug-in 7.6.8) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.8) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.8) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.8) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.8) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.8) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll => Brak pliku CHR Plugin: (QuickTime Plug-in 7.6.8) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll => Brak pliku CHR Plugin: (Google Talk Plugin) - C:\Users\Ola\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll => Brak pliku CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Ola\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll => Brak pliku CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll => Brak pliku CHR Plugin: (Media Go Detector) - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Media Software and Services Inc) CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll => Brak pliku CHR Profile: C:\Users\Ola\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (YouTube) - C:\Users\Ola\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Adblock Plus) - C:\Users\Ola\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-11-24] CHR Extension: (Google Search) - C:\Users\Ola\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Wysoki kontrast.) - C:\Users\Ola\AppData\Local\Google\Chrome\User Data\Default\Extensions\djcfdncoelnlbldjfhinnjlhdjlikmph [2015-09-24] CHR Extension: (Video Downloader professional) - C:\Users\Ola\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2015-08-09] CHR Extension: (Video Downloader Super) - C:\Users\Ola\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghciphhakbampjemlfbahnhhaemoeolf [2015-04-08] CHR Extension: (Power Zoom - Zoom Images with a Mouse Hover) - C:\Users\Ola\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlioidldolgbmanndggdnldambdlglgj [2015-12-14] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Ola\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-24] CHR Extension: (Gmail) - C:\Users\Ola\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28] CHR HKU\S-1-5-21-4089810689-250214727-3830045157-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [fdhbkaahephniejapepaiggngjnedpci] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.) S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [245544 2015-08-20] (EasyAntiCheat Ltd) S4 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-26] () S4 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] () S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes) S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe [235216 2013-10-16] (McAfee, Inc.) R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego] S4 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) S4 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) S2 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2013-12-23] () R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego] R2 postgresql-8.4; c:\postgreSQL\bin\pg_ctl.exe [81920 2013-04-02] (PostgreSQL Global Development Group) [Brak podpisu cyfrowego] R2 Process Blocker; C:\Program Files\Softros Systems\Process Blocker\Process Blocker.exe [2198352 2015-07-23] (Softros Systems, Inc.) S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions) S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions) S4 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.) S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-26] () R2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [845312 2010-08-11] (Sony Corporation) [Brak podpisu cyfrowego] R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1653272 2015-07-31] (Sony Corporation) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) S4 panda_url_filtering; C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filteringb.exe -- [X] ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) S3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [7778176 2009-12-16] (Intel Corporation) [Brak podpisu cyfrowego] S3 Impcd; C:\Windows\System32\DRIVERS\Impcd.sys [151936 2009-11-13] (Intel Corporation) [Brak podpisu cyfrowego] S3 IntcDAud; C:\Windows\System32\DRIVERS\IntcDAud.sys [244736 2009-12-16] (Intel(R) Corporation) [Brak podpisu cyfrowego] R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-18] (Malwarebytes) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation) S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [22528 2010-04-19] (Apple Inc.) [Brak podpisu cyfrowego] S3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [29352 2015-10-29] () S2 spd3ssl; C:\Program Files (x86)\Spyware Process Detector\spd324.sys [15872 2015-09-10] () [Brak podpisu cyfrowego] R0 sptd; C:\Windows\System32\Drivers\sptd.sys [526392 2011-10-31] () [Brak podpisu cyfrowego] S3 TVICHW64; C:\Windows\system32\DRIVERS\TVICHW64.SYS [21200 2010-10-22] (EnTech Taiwan) R1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [117768 2015-10-15] (Oracle Corporation) R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [146584 2015-10-15] (Oracle Corporation) R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-11-12] () S3 connctfy; system32\DRIVERS\connctfy.sys [X] S3 connctfyMP; system32\DRIVERS\connctfy.sys [X] S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X] S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X] S3 panda_url_filteringd; \??\C:\ProgramData\Panda Security URL Filtering\panda_url_filteringd.sys [X] S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X] U3 pxldypog; \??\C:\Users\Ola\AppData\Local\Temp\pxldypog.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-18 12:50 - 2015-12-18 13:10 - 00000369 _____ C:\Users\Ola\Desktop\gmer.txt 2015-12-18 12:45 - 2015-12-18 12:47 - 00095762 _____ C:\Windows\ntbtlog.txt 2015-12-18 09:45 - 2015-12-18 13:03 - 00000000 ____D C:\Program Files (x86)\Spyware Process Detector 2015-12-18 09:45 - 2015-12-18 09:45 - 00001139 _____ C:\Users\Public\Desktop\Spyware Process Detector v3.23.lnk 2015-12-18 09:45 - 2015-12-18 09:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Process Detector 2015-12-18 09:43 - 2015-12-18 09:44 - 01056659 _____ (System SoftLab ) C:\Users\Ola\Downloads\spydetector324eng.exe 2015-12-18 09:33 - 2015-12-18 09:34 - 09052192 _____ (Cheat Engine ) C:\Users\Ola\Downloads\CheatEngine v 6.4.exe 2015-12-18 09:33 - 2015-12-18 09:33 - 01710465 _____ (System SoftLab ) C:\Users\Ola\Downloads\ArtMoney SE v7.43.exe 2015-12-14 03:27 - 2015-12-14 03:27 - 00000000 ____D C:\Windows\system32\SPReview 2015-12-13 20:12 - 2015-12-13 20:12 - 00000000 ____D C:\Users\Ola_2\AppData\Roaming\iolo 2015-12-13 20:02 - 2015-12-13 20:03 - 06817235 _____ C:\Users\Ola_2\Downloads\OneDrive-2015-12-13.zip 2015-12-13 03:16 - 2015-12-13 03:23 - 00000000 ____D C:\784fc656348b7e2600 2015-12-11 20:11 - 2015-12-11 20:11 - 00000000 ____D C:\Users\Ola\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-12-10 08:17 - 2015-12-10 08:20 - 255444936 _____ C:\Users\Ola\Downloads\Trudne spoty - obrona small blinda.mp4 2015-12-10 08:17 - 2015-12-10 08:20 - 223764265 _____ C:\Users\Ola\Downloads\Guilty of Stealing wstęp oraz pozycje CO i BU.mp4 2015-12-10 08:17 - 2015-12-10 08:19 - 192910574 _____ C:\Users\Ola\Downloads\Zacznij walczyć o big blinda - gra po flopie jako 3-betujący.mp4 2015-12-10 08:16 - 2015-12-10 08:19 - 204817621 _____ C:\Users\Ola\Downloads\Zacznij walczyć o big blinda - pasywna gra postflop.mp4 2015-12-10 08:13 - 2015-12-10 08:16 - 264837850 _____ C:\Users\Ola\Downloads\Zacznij walczyć o big blinda - calling i 3-betting range z bb.mp4 2015-12-10 08:13 - 2015-12-10 08:16 - 178079723 _____ C:\Users\Ola\Downloads\Zacznij walczyć o big blinda - calling i 3-betting range z sb.mp4 2015-12-10 08:12 - 2015-12-10 08:16 - 300776523 _____ C:\Users\Ola\Downloads\Trudne spoty - pasywna obrona big blinda - donkbety.mp4 2015-12-10 08:12 - 2015-12-10 08:16 - 284476502 _____ C:\Users\Ola\Downloads\Trudne spoty - pasywna obrona big blinda.mp4 2015-12-10 08:09 - 2015-12-10 08:12 - 242181189 _____ C:\Users\Ola\Downloads\Guilty of Stealing gra w re-stealowanych pulach.mp4 2015-12-10 08:09 - 2015-12-10 08:12 - 200513318 _____ C:\Users\Ola\Downloads\Guilty of Stealing alternatywne linie oraz gra jako agresor.mp4 2015-12-10 08:08 - 2015-12-10 08:12 - 217602754 _____ C:\Users\Ola\Downloads\Guilty of Stealing pozycja SB.mp4 2015-12-10 08:08 - 2015-12-10 08:12 - 205200378 _____ C:\Users\Ola\Downloads\Guilty of Stealing gameplan przeciwko re-stealom.mp4 2015-12-08 09:39 - 2015-12-08 09:39 - 00000972 _____ C:\Users\Ola\Desktop\REGNB.lnk 2015-12-07 09:49 - 2015-12-07 09:49 - 00227204 _____ C:\Users\Ola\Downloads\thread.htm 2015-12-07 09:49 - 2015-12-07 09:49 - 00227204 _____ C:\Users\Ola\Downloads\thread (2).htm 2015-12-07 09:49 - 2015-12-07 09:49 - 00227204 _____ C:\Users\Ola\Downloads\thread (1).htm 2015-12-07 09:49 - 2015-12-07 09:49 - 00132922 _____ C:\Users\Ola\Downloads\usercp.htm 2015-12-07 07:20 - 2015-12-07 07:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-12-06 20:17 - 2015-12-06 20:17 - 00091829 _____ C:\Users\Ola_2\Downloads\dosLO.pdf 2015-12-04 16:22 - 2015-12-18 06:02 - 00000000 ____D C:\Users\Ola\Desktop\too 2015-12-03 15:08 - 2015-12-18 06:02 - 00000000 ____D C:\Users\Ola\Desktop\teeets 2015-12-02 21:24 - 2015-12-18 13:29 - 00000000 ____D C:\Users\Ola\Downloads\FRST-OlderVersion 2015-12-02 21:11 - 2015-12-02 21:11 - 02890818 _____ C:\Users\Ola\Downloads\D1997483.pdf 2015-12-02 21:10 - 2015-12-02 21:10 - 10244451 _____ C:\Users\Ola\Downloads\D1952033000001.pdf 2015-12-01 21:52 - 2015-12-01 21:52 - 00000982 _____ C:\Users\Ola\Desktop\SpinAll.lnk 2015-12-01 12:17 - 2015-12-01 12:17 - 00000962 _____ C:\Users\Ola\Desktop\REG.lnk 2015-11-29 15:55 - 2015-11-29 15:55 - 05422330 _____ C:\Users\Ola\Downloads\Nisan_Non-printable.pdf 2015-11-29 15:53 - 2015-11-29 15:53 - 02323331 _____ C:\Users\Ola\Downloads\Annie_Duke_Decide_to_Play_Great_Poker.pdf 2015-11-29 03:10 - 2015-11-29 03:22 - 00000000 ____D C:\13b93a65c6da4e3ccec1690c 2015-11-28 13:33 - 2015-11-28 13:33 - 00000962 _____ C:\Users\Ola\Desktop\NBS.lnk 2015-11-28 07:47 - 2015-11-28 07:47 - 00000000 ____D C:\ProgramData\Sony 2015-11-28 03:08 - 2015-11-28 03:24 - 00000000 ____D C:\acf455f8ac29f8323380b2f6f1 2015-11-27 13:28 - 2015-11-27 13:28 - 00002170 _____ C:\Users\Ola\Downloads\pythonbot_1.1 (1).zip 2015-11-27 13:27 - 2015-11-27 13:28 - 00002170 _____ C:\Users\Ola\Downloads\pythonbot_1.1.zip 2015-11-26 18:31 - 2015-02-04 13:59 - 00380416 _____ C:\Users\Ola\Desktop\jhnmqgsg.exe 2015-11-26 18:30 - 2015-11-26 18:30 - 00371057 _____ C:\Users\Ola\Downloads\gm.zip 2015-11-26 18:07 - 2015-12-18 13:02 - 00001981 _____ C:\Users\Ola\Desktop\aaa.txt 2015-11-26 17:52 - 2015-12-02 21:37 - 00111955 _____ C:\Users\Ola\Downloads\Addition.txt 2015-11-26 17:50 - 2015-12-18 13:37 - 00036754 _____ C:\Users\Ola\Downloads\FRST.txt 2015-11-26 17:48 - 2015-12-18 13:29 - 00000000 ____D C:\FRST 2015-11-26 17:47 - 2015-12-18 13:29 - 02370048 _____ (Farbar) C:\Users\Ola\Downloads\FRST64.exe 2015-11-26 15:39 - 2015-11-26 15:43 - 300806184 _____ (AMD Inc.) C:\Users\Ola\Downloads\amd-catalyst-15.7.1-with-dotnet45-win7-64bit.exe 2015-11-26 15:11 - 2015-11-26 15:11 - 00093111 _____ C:\Users\Ola\Downloads\ExcelYourRange.xlsm 2015-11-26 09:47 - 2015-11-26 09:47 - 00000000 ___HT C:\Windows\wusa.lock 2015-11-26 09:47 - 2015-11-26 09:47 - 00000000 ____D C:\511185a4651c7aafb8b4 2015-11-26 09:46 - 2015-11-26 09:46 - 00000000 ____D C:\Users\Ola\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Process Blocker 2015-11-26 09:46 - 2015-11-26 09:46 - 00000000 ____D C:\Program Files\Softros Systems 2015-11-26 09:43 - 2015-11-26 09:43 - 03086960 _____ C:\Users\Ola\Downloads\Windows6.0-KB942288-v2-x64.msu 2015-11-26 09:42 - 2015-11-26 09:42 - 06541312 _____ C:\Users\Ola\Downloads\processblocker64.msi 2015-11-25 13:19 - 2015-11-25 13:19 - 04947168 _____ (Advanced Micro Devices, Inc.) C:\Users\Ola\Downloads\autodetectutility.exe 2015-11-24 19:24 - 2015-11-24 19:25 - 00985600 _____ C:\Users\Ola\Downloads\MicrosoftFixit50123.msi 2015-11-18 14:11 - 2015-11-18 14:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net 2015-11-18 14:08 - 2015-11-20 16:38 - 00000000 ____D C:\Program Files (x86)\Battle.net 2015-11-18 14:00 - 2015-11-18 14:03 - 03142712 _____ (Blizzard Entertainment) C:\Users\Ola\Downloads\Hearthstone-Setup.exe ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-18 13:11 - 2009-07-14 05:45 - 00015792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-12-18 13:11 - 2009-07-14 05:45 - 00015792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-12-18 13:08 - 2015-06-23 09:41 - 00001154 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-4089810689-250214727-3830045157-1001UA.job 2015-12-18 13:08 - 2010-05-05 21:32 - 00652508 _____ C:\Windows\system32\perfh01F.dat 2015-12-18 13:08 - 2010-05-05 21:32 - 00141830 _____ C:\Windows\system32\perfc01F.dat 2015-12-18 13:08 - 2010-05-05 21:24 - 00659546 _____ C:\Windows\system32\perfh01D.dat 2015-12-18 13:08 - 2010-05-05 21:24 - 00144304 _____ C:\Windows\system32\perfc01D.dat 2015-12-18 13:08 - 2010-05-05 21:08 - 00724844 _____ C:\Windows\system32\prfh0816.dat 2015-12-18 13:08 - 2010-05-05 21:08 - 00154736 _____ C:\Windows\system32\prfc0816.dat 2015-12-18 13:08 - 2010-05-05 21:01 - 00744814 _____ C:\Windows\system32\perfh015.dat 2015-12-18 13:08 - 2010-05-05 21:01 - 00158264 _____ C:\Windows\system32\perfc015.dat 2015-12-18 13:08 - 2010-05-05 20:54 - 00490340 _____ C:\Windows\system32\perfh014.dat 2015-12-18 13:08 - 2010-05-05 20:54 - 00097234 _____ C:\Windows\system32\perfc014.dat 2015-12-18 13:08 - 2010-05-05 20:47 - 00679580 _____ C:\Windows\system32\perfh00E.dat 2015-12-18 13:08 - 2010-05-05 20:47 - 00173104 _____ C:\Windows\system32\perfc00E.dat 2015-12-18 13:08 - 2010-05-05 20:41 - 00602814 _____ C:\Windows\system32\perfh008.dat 2015-12-18 13:08 - 2010-05-05 20:41 - 00112958 _____ C:\Windows\system32\perfc008.dat 2015-12-18 13:08 - 2010-05-05 20:35 - 00477328 _____ C:\Windows\system32\perfh00B.dat 2015-12-18 13:08 - 2010-05-05 20:35 - 00103350 _____ C:\Windows\system32\perfc00B.dat 2015-12-18 13:08 - 2010-05-05 20:28 - 00505240 _____ C:\Windows\system32\perfh006.dat 2015-12-18 13:08 - 2010-05-05 20:28 - 00100488 _____ C:\Windows\system32\perfc006.dat 2015-12-18 13:08 - 2009-07-14 06:13 - 07486924 _____ C:\Windows\system32\PerfStringBackup.INI 2015-12-18 13:08 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf 2015-12-18 13:04 - 2015-03-29 04:37 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-12-18 13:04 - 2010-12-02 17:50 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics 2015-12-18 12:59 - 2013-08-12 20:18 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-12-18 12:59 - 2013-08-12 20:18 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-12-18 12:59 - 2013-08-12 20:18 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-12-18 12:59 - 2011-12-01 08:13 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-12-18 12:58 - 2010-05-16 05:08 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-12-18 12:57 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-12-18 12:45 - 2009-07-14 04:20 - 00000000 ____D C:\Windows 2015-12-18 12:36 - 2013-12-21 16:00 - 00000000 ____D C:\Users\postgres 2015-12-18 12:22 - 2015-11-10 14:20 - 00000000 ____D C:\Users\Ola\AppData\Local\PokerStars.EU 2015-12-18 11:44 - 2010-05-16 05:08 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-12-18 11:09 - 2014-07-09 12:40 - 00000000 ____D C:\Users\Ola\AppData\Roaming\HoldemManager 2015-12-18 10:30 - 2010-10-19 20:52 - 00003942 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E1AA2E26-B1F1-4B63-90F7-9D5956122188} 2015-12-18 09:37 - 2014-01-30 08:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArtMoney SE 2015-12-18 06:00 - 2015-06-23 09:41 - 00001102 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-4089810689-250214727-3830045157-1001Core.job 2015-12-17 19:42 - 2013-11-18 11:10 - 00000000 ____D C:\Program Files (x86)\PokerStars.EU 2015-12-16 17:45 - 2014-02-03 13:50 - 00000000 ____D C:\Users\Ola\AppData\Local\Equilab 2015-12-15 11:31 - 2011-08-16 05:50 - 00000000 ____D C:\Users\Ola\AppData\Local\CrashDumps 2015-12-14 09:08 - 2015-07-30 18:05 - 00000000 ____D C:\Pulpit 2015-12-13 20:14 - 2013-12-11 09:30 - 00000000 ____D C:\Users\Ola_2\AppData\Local\Spotify 2015-12-13 20:11 - 2010-11-06 17:20 - 00000000 ____D C:\Users\Ola_2\AppData\Roaming\Skype 2015-12-13 20:06 - 2013-12-11 09:29 - 00000000 ____D C:\Users\Ola_2\AppData\Roaming\Spotify 2015-12-13 05:33 - 2012-09-29 11:33 - 00000000 ____D C:\ProgramData\Microsoft Help 2015-12-13 05:32 - 2013-03-16 03:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-12-13 05:30 - 2013-03-16 03:04 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-12-13 05:30 - 2013-03-16 03:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2015-12-13 05:28 - 2013-08-16 02:02 - 00000000 ____D C:\Windows\system32\MRT 2015-12-13 04:59 - 2010-10-20 13:05 - 140158008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-12-11 20:11 - 2014-07-03 17:38 - 00000000 ____D C:\Users\Ola\AppData\Roaming\Dropbox 2015-12-10 08:26 - 2015-09-12 09:49 - 00000000 ____D C:\Users\Ola\Downloads\ps video 2015-12-08 16:03 - 2012-05-05 10:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-12-06 20:19 - 2015-10-29 12:28 - 00001173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk 2015-12-04 12:39 - 2010-05-16 05:08 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-12-04 12:39 - 2010-05-16 05:08 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-12-02 21:13 - 2014-02-03 11:54 - 00101184 _____ (Amazon.com, Inc.) C:\Windows\system32\stkMonitor.dll 2015-12-02 21:13 - 2014-02-03 11:54 - 00000000 ____D C:\Program Files (x86)\Amazon 2015-12-02 13:18 - 2011-05-22 08:03 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2015-11-29 06:08 - 2009-07-14 06:08 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-11-28 07:49 - 2015-10-29 14:45 - 00000000 ____D C:\Users\Ola\AppData\Roaming\iolo 2015-11-27 12:21 - 2014-07-10 16:20 - 00001945 _____ C:\Windows\epplauncher.mif 2015-11-27 10:22 - 2014-03-09 11:35 - 00000000 ____D C:\Users\Ola\AppData\Roaming\Notepad++ 2015-11-26 16:28 - 2015-10-29 14:15 - 00000000 ____D C:\Windows\pss 2015-11-26 16:20 - 2015-02-09 07:43 - 00000000 ____D C:\Program Files\CCleaner 2015-11-26 16:19 - 2014-02-17 08:06 - 00000000 ____D C:\Users\Ola\AppData\Local\Spotify 2015-11-26 16:01 - 2014-11-22 19:31 - 00000000 ____D C:\Program Files\AMD 2015-11-26 15:58 - 2010-05-16 05:02 - 00000000 ____D C:\Program Files\Apoint 2015-11-25 21:37 - 2013-06-09 16:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2015-11-25 19:52 - 2015-07-30 04:17 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2015-11-25 19:42 - 2011-05-29 11:00 - 00000000 ____D C:\Users\Ola_2\AppData\Local\CrashDumps 2015-11-24 18:49 - 2014-07-03 17:41 - 00000000 ___RD C:\Users\Ola\Dropbox 2015-11-24 18:45 - 2014-02-17 08:06 - 00000000 ____D C:\Users\Ola\AppData\Roaming\Spotify 2015-11-24 15:17 - 2010-10-20 06:45 - 00007622 _____ C:\Users\Ola\AppData\Local\Resmon.ResmonCfg 2015-11-22 02:57 - 2010-10-23 06:35 - 00008224 _____ C:\Users\Fruzia\AppData\Local\GDIPFONTCACHEV1.DAT 2015-11-20 20:08 - 2010-10-19 19:48 - 00000000 ____D C:\Users\Ola 2015-11-20 16:58 - 2014-05-30 17:06 - 00000000 ____D C:\Users\Ola\AppData\Local\Battle.net 2015-11-20 13:15 - 2013-12-21 16:01 - 00000000 ____D C:\Program Files (x86)\Holdem Manager 2 2015-11-20 12:26 - 2010-11-04 07:25 - 00000000 ____D C:\Users\Ola\.oanda 2015-11-18 14:23 - 2014-05-30 17:13 - 00000000 ____D C:\Program Files (x86)\Hearthstone ==================== Pliki w katalogu głównym wybranych folderów ======= 2014-03-16 12:38 - 2014-03-16 12:38 - 0000038 ___SH () C:\Users\Ola\AppData\Local\32cd2b0451e261ee292289.21073168 2015-08-09 15:46 - 2015-08-09 15:46 - 0000218 _____ () C:\Users\Ola\AppData\Local\recently-used.xbel 2010-10-20 06:45 - 2015-11-24 15:17 - 0007622 _____ () C:\Users\Ola\AppData\Local\Resmon.ResmonCfg 2010-10-20 07:43 - 2010-10-20 07:43 - 0000056 ____H () C:\ProgramData\ezsidmv.dat 2014-01-24 06:21 - 2014-01-24 06:21 - 0005052 _____ () C:\ProgramData\flwjycbm.bab 2013-09-17 06:32 - 2013-09-17 06:52 - 0000367 _____ () C:\ProgramData\hpzinstall.log 2014-10-06 06:05 - 2014-10-06 06:05 - 0004143 _____ () C:\ProgramData\kmytnfun.aqy 2015-05-15 13:56 - 2015-05-15 13:56 - 0004968 _____ () C:\ProgramData\lrbivjdu.eai 2014-02-14 13:38 - 2014-04-09 15:59 - 0000522 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc 2015-07-18 07:52 - 2015-07-18 07:52 - 0000016 _____ () C:\ProgramData\mntemp Pliki do przeniesienia lub usunięcia: ==================== C:\Users\Ola\swt-win32-3740-64.dll Niektóre pliki w TEMP: ==================== C:\Users\Ola\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpx0x_55.dll C:\Users\Ola\AppData\Local\Temp\jre-8u65-windows-au.exe C:\Users\Ola\AppData\Local\Temp\npp.6.8.6.Installer.exe C:\Users\Ola\AppData\Local\Temp\xmlUpdater.exe C:\Users\Ola\AppData\Local\Temp\_unps.exe C:\Users\Ola_2\AppData\Local\Temp\4rsa_b3c.dll C:\Users\Ola_2\AppData\Local\Temp\APNStub.exe C:\Users\Ola_2\AppData\Local\Temp\AutoRun.exe C:\Users\Ola_2\AppData\Local\Temp\AutoRunGUI.dll C:\Users\Ola_2\AppData\Local\Temp\AVG.exe C:\Users\Ola_2\AppData\Local\Temp\BingBarSetup-Partner.exe C:\Users\Ola_2\AppData\Local\Temp\drm_dyndata_7390006.dll C:\Users\Ola_2\AppData\Local\Temp\eauninstall.exe C:\Users\Ola_2\AppData\Local\Temp\First15.exe C:\Users\Ola_2\AppData\Local\Temp\gbxoufry.dll C:\Users\Ola_2\AppData\Local\Temp\GUninstaller.exe C:\Users\Ola_2\AppData\Local\Temp\iTunesPluginWinSetup_3.0.4.0.exe C:\Users\Ola_2\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe C:\Users\Ola_2\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe C:\Users\Ola_2\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe C:\Users\Ola_2\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\Ola_2\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Ola_2\AppData\Local\Temp\lkqpymoa.dll C:\Users\Ola_2\AppData\Local\Temp\MSN7DB9.exe C:\Users\Ola_2\AppData\Local\Temp\ose00000.exe C:\Users\Ola_2\AppData\Local\Temp\SkypeSetup.exe C:\Users\Ola_2\AppData\Local\Temp\swt-win32-3349.dll C:\Users\Ola_2\AppData\Local\Temp\The Sims 2_uninst.exe C:\Users\Ola_2\AppData\Local\Temp\uninst1.exe C:\Users\Ola_2\AppData\Local\Temp\VP6Install.exe C:\Users\Ola_2\AppData\Local\Temp\VP6VFW.dll C:\Users\Zuzia\AppData\Local\Temp\iTunesPluginWinSetup_3.0.4.0.exe ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-12-11 12:17 ==================== Koniec FRST.txt ============================