Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:23-12-2015
Uruchomiony przez mariusz (administrator)  MARIUSZ-HP (23-12-2015 13:19:16)
Uruchomiony z C:\Users\mariusz\Desktop
Załadowane profile: mariusz (Dostępne profile: mariusz)
Platform: Microsoft Windows 7 Starter  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(IDT, Inc.) C:\Program Files\IDT\wdm\stacsv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(IDT, Inc.) C:\Program Files\IDT\wdm\sttray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\wdm\AESTSrv.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
() C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(QUALCOMM, Inc.) C:\Program Files\QUALCOMM\QDLService2k\QDLService2kHP.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Smith Micro Software, Inc.) C:\Program Files\Hewlett-Packard\HP Connection Manager\SMManager.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [1704028 2013-12-04] (IDT, Inc.)
HKLM\...\Run: [HP Connection Manager.exe] => 0
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2014-12-30] (Microsoft Corporation)
BootExecute: autocheck autochk *  
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
CHR HKU\S-1-5-21-1797894393-2656075938-2243442716-1000\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{3335BE57-CBE9-4E73-9BD4-B5E19A484041}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{DDD289FD-E128-4CF6-BDD1-76F9E6F28BF9}: [DhcpNameServer] 89.231.1.206 217.172.224.160

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\S-1-5-21-1797894393-2656075938-2243442716-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1797894393-2656075938-2243442716-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> DefaultScope - brak wartości

FireFox:
========
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.)
FF Plugin: @ganymede/CARDS,version=1.0 -> C:\Program Files\Ganymede\Plugins\CARDS\NPCARDS.dll [2011-04-21] (Ganymede Technologies)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\4.0.50401.0\npctrl.dll [2010-04-01] ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-23] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-23] (Google Inc.)
FF Plugin HKU\S-1-5-21-1797894393-2656075938-2243442716-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\mariusz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-09-12] (Unity Technologies ApS)

Chrome: 
=======
CHR HomePage: Default -> mysearch.avg.com/?rvt=1
CHR RestoreOnStartup: Default -> "hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRghCIlteAlxFERgWeQtaTA0QRAcOIloJUhRBFgMbcwoBUwwSQgQFIk0FA1oDB0VXfV5bFElXTwhxJVpXE10hQFJG"
CHR StartupUrls: Default -> "hxxp://websearch.hotsearches.info/?pid=24386&r=2015/08/10&hid=8547155841038376144&lg=EN&cc=PL&unqvl=90"
CHR DefaultSearchURL: Default -> hxxps://mysearch.avg.com/search?rvt=1&sap=dsp&q={searchTerms}
CHR DefaultSearchKeyword: Default -> https://mysearch.avg.com
CHR DefaultSuggestURL: Default -> hxxps://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR Profile: C:\Users\mariusz\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\mariusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-12-23]
CHR Extension: (EnormoouSSaless) - C:\Users\mariusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhaidnnbokphbbaaghbgpdklgflflcfp [2015-06-26]
CHR Extension: (Dokumenty Google offline) - C:\Users\mariusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-23]
CHR Extension: (PereiceMMiannus) - C:\ProgramData\bhgpokoilanjpkjcifnengjmncdkgjlm\ []
CHR Extension: (PruiceMiinuus) - C:\ProgramData\gfmjecdaiakenfidfmlllejladoamocn\ []
CHR Extension: (PerriceMIInuus) - C:\ProgramData\milbaoepgikkfipjkkbbllfcdfndkmfa\ []
CHR Extension: (CUtTTheePrIcae) - C:\ProgramData\mmonljdibeefdpiokekmpaiddbgkngej\ []
CHR Extension: (PricieMoionnuus) - C:\ProgramData\nlhhadbiimbfcdfmhihblkegifdlnhjm\ []
CHR HKU\S-1-5-21-1797894393-2656075938-2243442716-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
OPR StartupUrls:  "hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRghCIlteAlxFERgWeQtaTA0QRAcOIloJUhRBFgMbcwoBUwwSQgQFIk0FA1oDB0VXfV5bFElXTwhxJVpXE10hQFJG" 

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [121344 2010-06-30] (Hewlett-Packard Company) [Brak podpisu cyfrowego]
R2 HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [103992 2010-07-08] (Hewlett-Packard Company)
R2 HPWMISVC; C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [27192 2010-06-29] ()
R2 QDLService2kHP; C:\Program Files\QUALCOMM\QDLService2k\QDLService2kHP.exe [331512 2010-05-12] (QUALCOMM, Inc.)
R2 SMManager; C:\Program Files\Hewlett-Packard\HP Connection Manager\SMManager.exe [84808 2010-06-08] (Smith Micro Software, Inc.)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV.exe [319570 2013-12-04] (IDT, Inc.) [Brak podpisu cyfrowego]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AmUStor; C:\Windows\System32\drivers\AmUStor.SYS [27136 2010-06-17] (Alcor Micro, Corp.)
S3 btwampfl; C:\Windows\System32\drivers\btwampfl.sys [294952 2010-06-10] (Broadcom Corporation.)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [17472 2015-12-21] (Glarysoft Ltd)
R3 int0800; C:\Windows\System32\DRIVERS\flashud.sys [42496 2009-09-09] (Intel Corporation)
R3 qcfilterhp2k; C:\Windows\System32\DRIVERS\qcfilterhp2k.sys [5248 2010-10-21] (QUALCOMM Incorporated)
R3 qcombushp; C:\Windows\System32\DRIVERS\qcombushp.sys [106184 2010-10-21] (MCCI)
R3 qcusbnethp2k; C:\Windows\System32\DRIVERS\qcusbnethp2k.sys [374784 2010-10-21] (QUALCOMM Incorporated)
R3 qcusbserhp2k; C:\Windows\System32\DRIVERS\qcusbserhp2k.sys [190592 2010-10-21] (QUALCOMM Incorporated)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\mariusz\AppData\Local\Temp\catchme.sys [X]
S3 MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [X]
S3 MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-23 13:19 - 2015-12-23 13:20 - 00010023 _____ C:\Users\mariusz\Desktop\FRST.txt
2015-12-23 13:19 - 2015-12-23 13:19 - 00000000 ____D C:\FRST
2015-12-23 13:18 - 2015-12-23 13:08 - 01721856 _____ (Farbar) C:\Users\mariusz\Desktop\FRST.exe
2015-12-23 12:48 - 2015-12-23 13:11 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-23 12:48 - 2015-12-23 13:00 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-23 12:48 - 2015-12-23 12:48 - 00002211 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-23 12:48 - 2015-12-23 12:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-23 12:38 - 2015-12-23 12:38 - 00000000 ____D C:\ProgramData\AT&T
2015-12-23 12:38 - 2015-12-23 12:38 - 00000000 ____D C:\Program Files\Telespree
2015-12-23 12:38 - 2015-12-23 12:38 - 00000000 ____D C:\Program Files\Common Files\Telespree
2015-12-23 12:38 - 2015-12-23 12:38 - 00000000 ____D C:\Program Files\AT&T
2015-12-23 12:24 - 2015-12-23 12:24 - 00016539 _____ C:\ComboFix.txt
2015-12-23 11:51 - 2015-12-23 11:51 - 00000000 ____D C:\anti-malware.quarantine
2015-12-23 10:59 - 2015-12-23 12:26 - 00000000 ____D C:\Program Files\Auslogics
2015-12-23 09:33 - 2015-12-23 09:33 - 00000000 ____D C:\Users\mariusz\AppData\Local\VS Revo Group
2015-12-23 09:33 - 2015-12-23 09:33 - 00000000 ____D C:\ProgramData\VS Revo Group
2015-12-22 10:37 - 2010-10-21 13:15 - 00374784 _____ (QUALCOMM Incorporated) C:\Windows\system32\Drivers\qcusbnethp2k.sys
2015-12-22 10:37 - 2010-10-21 13:15 - 00190592 _____ (QUALCOMM Incorporated) C:\Windows\system32\Drivers\qcusbserhp2k.sys
2015-12-22 10:37 - 2010-10-21 13:15 - 00106184 _____ (MCCI) C:\Windows\system32\Drivers\qcombushp.sys
2015-12-22 10:37 - 2010-10-21 13:15 - 00012616 _____ (MCCI Corporation) C:\Windows\system32\Drivers\qcomwh.sys
2015-12-22 10:37 - 2010-10-21 13:15 - 00005248 _____ (QUALCOMM Incorporated) C:\Windows\system32\Drivers\qcfilterhp2k.sys
2015-12-22 10:36 - 2015-12-22 10:36 - 00000000 ____D C:\Windows\system32\x64
2015-12-22 10:35 - 2011-10-30 20:51 - 00039548 _____ C:\Windows\system32\iglhxs32.vp
2015-12-22 10:34 - 2011-10-30 20:15 - 04816896 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd32.sys
2015-12-22 10:34 - 2011-10-30 20:02 - 00310784 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00304640 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00303616 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00303616 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00303104 _____ (Intel Corporation) C:\Windows\system32\igfxresp.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00299520 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00294912 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00291328 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00289280 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00288256 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00287744 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00282624 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00282624 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00282624 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00281088 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00280576 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00280064 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00279040 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00277504 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00262656 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00252416 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00249856 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00206848 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00205312 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00179712 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc
2015-12-22 10:34 - 2011-10-30 20:02 - 00178176 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc
2015-12-22 10:34 - 2011-10-30 19:59 - 00275968 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc
2015-12-22 10:34 - 2011-10-30 19:59 - 00119296 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl
2015-12-22 10:34 - 2011-10-30 19:59 - 00059392 _____ (Intel Corporation) C:\Windows\system32\oemdspif.dll
2015-12-22 10:33 - 2011-10-30 20:20 - 00155648 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v2567.dll
2015-12-22 10:33 - 2011-10-30 20:15 - 03829760 _____ (Intel Corporation) C:\Windows\system32\igdumd32.dll
2015-12-22 10:33 - 2011-10-30 20:14 - 00536576 _____ (Intel Corporation) C:\Windows\system32\igdumdx32.dll
2015-12-22 10:33 - 2011-10-30 19:59 - 05702656 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll
2015-12-22 10:33 - 2011-10-30 19:59 - 00257536 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll
2015-12-22 10:33 - 2011-10-30 19:59 - 00199680 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2015-12-22 10:33 - 2011-10-30 19:59 - 00130048 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll
2015-12-22 10:33 - 2011-10-30 19:59 - 00023552 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2015-12-22 10:32 - 2011-11-08 16:25 - 00673048 _____ (Intel Corporation) C:\Windows\system32\igfxcfg.exe
2015-12-22 10:32 - 2011-11-08 16:25 - 00253208 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe
2015-12-22 10:32 - 2011-11-08 16:25 - 00174360 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe
2015-12-22 10:32 - 2011-11-08 16:25 - 00173336 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2015-12-22 10:32 - 2011-11-08 16:25 - 00150808 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe
2015-12-22 10:32 - 2011-11-08 16:25 - 00142104 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe
2015-12-22 10:32 - 2011-10-30 20:08 - 04104192 _____ (Intel Corporation) C:\Windows\system32\ig4icd32.dll
2015-12-22 10:32 - 2011-10-30 20:08 - 02686976 _____ (Intel Corporation) C:\Windows\system32\ig4dev32.dll
2015-12-22 10:29 - 2013-12-04 22:32 - 13893724 _____ (IDT, Inc.) C:\Windows\system32\idtcpl.cpl
2015-12-22 10:29 - 2013-12-04 22:32 - 00536576 _____ (IDT, Inc.) C:\Windows\system32\idtmini1.exe
2015-12-22 10:21 - 2013-12-04 22:32 - 01478656 _____ (IDT, Inc.) C:\Windows\system32\stapo.dll
2015-12-22 10:21 - 2013-12-04 22:32 - 00571392 _____ (IDT, Inc.) C:\Windows\system32\stapi32.dll
2015-12-22 10:21 - 2013-12-04 22:32 - 00459264 _____ (IDT, Inc.) C:\Windows\system32\Drivers\stwrt.sys
2015-12-22 10:21 - 2013-12-04 22:32 - 00454656 _____ (IDT, Inc.) C:\Windows\system32\stcplx.dll
2015-12-22 10:21 - 2013-12-04 22:32 - 00211968 _____ (IDT, Inc.) C:\Windows\system32\st326498.dll
2015-12-22 10:19 - 2015-12-22 10:19 - 00016400 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2015-12-22 10:19 - 2015-06-18 03:25 - 00053904 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LHidFilt.Sys
2015-12-22 10:19 - 2015-06-18 03:25 - 00047632 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LMouFilt.Sys
2015-12-22 10:18 - 2015-06-18 03:25 - 01591952 _____ (Logitech, Inc.) C:\Windows\system32\LkmdfCoInst.dll
2015-12-22 10:18 - 2015-06-18 03:25 - 00063632 _____ (Logitech, Inc.) C:\Windows\system32\LMouFiltCoInst.dll
2015-12-22 10:17 - 2012-06-12 18:29 - 00470848 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys
2015-12-22 10:13 - 2015-05-19 17:39 - 00731904 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2015-12-22 10:13 - 2015-05-19 17:39 - 00085616 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2015-12-22 10:10 - 2009-09-09 10:23 - 00042496 _____ (Intel Corporation) C:\Windows\system32\Drivers\flashud.sys
2015-12-21 17:21 - 2015-12-23 12:24 - 00000000 ____D C:\Qoobox
2015-12-21 17:21 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2015-12-21 17:21 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2015-12-21 17:21 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-12-21 17:21 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-12-21 17:21 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-12-21 17:21 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2015-12-21 17:21 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2015-12-21 17:21 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2015-12-21 17:20 - 2015-12-22 09:55 - 00000000 ____D C:\Windows\erdnt
2015-12-21 15:59 - 2015-12-23 10:45 - 00000000 ____D C:\AdwCleaner
2015-12-21 15:53 - 2015-12-21 15:53 - 00017472 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys
2015-12-12 12:59 - 2015-12-12 12:59 - 00002687 _____ C:\Users\Public\Desktop\Skype.lnk
2015-12-12 12:59 - 2015-12-12 12:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-12 12:59 - 2015-12-12 12:59 - 00000000 ____D C:\Program Files\Common Files\Skype
2015-12-09 18:19 - 2015-12-09 20:19 - 19452096 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
2015-12-06 19:48 - 2015-12-06 19:48 - 00000000 ____D C:\ProgramData\{33ab4d6d-0064-0}
2015-12-06 19:48 - 2015-12-06 19:48 - 00000000 ____D C:\ProgramData\{0333a3b8-5064-1}
2015-12-03 19:48 - 2015-12-06 19:48 - 00000000 ____D C:\ProgramData\{2caae1e9-3064-0}
2015-12-03 19:48 - 2015-12-06 19:48 - 00000000 ____D C:\ProgramData\{058b8761-1064-1}

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-23 13:19 - 2009-07-14 05:34 - 00014128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-23 13:19 - 2009-07-14 05:34 - 00014128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-23 13:19 - 2009-07-14 03:37 - 00000000 ____D C:\Windows
2015-12-23 13:18 - 2010-08-23 18:24 - 00740348 _____ C:\Windows\system32\perfh015.dat
2015-12-23 13:18 - 2010-08-23 18:24 - 00155890 _____ C:\Windows\system32\perfc015.dat
2015-12-23 13:18 - 2009-09-07 00:02 - 01669190 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-23 13:18 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2015-12-23 13:16 - 2015-03-05 19:38 - 00000000 ____D C:\Program Files\Opera
2015-12-23 13:11 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-23 12:56 - 2014-12-29 21:02 - 00000000 ____D C:\Users\mariusz\AppData\Roaming\Skype
2015-12-23 12:48 - 2014-12-28 19:54 - 00000000 ____D C:\Program Files\Google
2015-12-23 12:40 - 2009-07-14 05:33 - 00268936 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-23 12:38 - 2014-12-28 15:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-12-23 12:38 - 2014-12-28 15:08 - 00000000 ____D C:\Program Files\Hewlett-Packard
2015-12-23 12:20 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini
2015-12-23 11:37 - 2015-05-22 18:51 - 00000266 __RSH C:\ProgramData\ntuser.pol
2015-12-23 11:36 - 2015-07-10 15:05 - 00000000 ____D C:\Program Files\Gaudy Discipline
2015-12-23 11:36 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\addins
2015-12-23 11:34 - 2015-08-07 14:56 - 00000000 ____D C:\Program Files\Right Inbox for Gmail
2015-12-23 11:00 - 2014-12-28 15:59 - 00058016 _____ C:\Users\mariusz\AppData\Local\GDIPFONTCACHEV1.DAT
2015-12-23 10:53 - 2015-02-22 09:15 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2015-12-23 09:59 - 2014-12-28 15:59 - 00000000 ____D C:\Users\mariusz\AppData\Roaming\hpqLog
2015-12-23 09:44 - 2015-10-03 09:52 - 00000000 ____D C:\Users\mariusz\AppData\Local\Lenovo
2015-12-23 09:43 - 2015-10-03 09:47 - 00000000 ____D C:\Program Files\Lenovo
2015-12-23 09:40 - 2015-04-18 14:21 - 00000000 ____D C:\ProgramData\Norton
2015-12-22 15:51 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2015-12-22 15:49 - 2015-01-31 18:18 - 00000000 ____D C:\Users\mariusz\AppData\Local\ElevatedDiagnostics
2015-12-22 12:05 - 2015-06-26 19:05 - 00000024 _____ C:\Users\mariusz\AppData\Roaming\appdataFr25.bin
2015-12-22 11:15 - 2009-09-07 01:39 - 00000000 ____D C:\SwSetup
2015-12-22 10:28 - 2014-12-28 15:22 - 00000000 ____D C:\Program Files\IDT
2015-12-21 17:18 - 2009-09-07 00:51 - 00000000 ____D C:\Windows\Panther
2015-12-21 17:18 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\ModemLogs
2015-12-21 16:06 - 2015-07-08 16:58 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-12-21 16:06 - 2015-03-05 19:40 - 00000944 _____ C:\Users\mariusz\Desktop\Opera.lnk
2015-12-21 16:06 - 2014-12-28 15:59 - 00001158 _____ C:\Users\mariusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-21 16:06 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\System
2015-12-13 18:24 - 2014-12-28 20:04 - 00000000 ____D C:\ProgramData\AVG2015
2015-12-13 18:24 - 2014-12-28 20:00 - 00000000 ____D C:\ProgramData\MFAData
2015-12-13 18:23 - 2014-12-28 20:00 - 00000000 ____D C:\Users\mariusz\AppData\Local\Avg2015
2015-12-13 18:21 - 2014-12-28 20:04 - 00000000 ____D C:\$AVG
2015-12-13 18:07 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2015-12-12 12:59 - 2014-12-29 20:53 - 00000000 ___RD C:\Program Files\Skype
2015-12-12 12:59 - 2014-12-28 19:54 - 00000000 ____D C:\ProgramData\Skype
2015-12-12 12:58 - 2014-12-28 19:56 - 00000000 ____D C:\Users\mariusz\AppData\Local\Skype
2015-12-10 02:10 - 2015-04-04 11:02 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-10 02:10 - 2014-12-28 15:37 - 00000000 ____D C:\Windows\system32\Macromed
2015-12-10 02:10 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\registration
2015-12-09 17:12 - 2014-12-28 15:57 - 00000000 ____D C:\Users\mariusz

==================== Pliki w katalogu głównym wybranych folderów =======

2015-07-16 13:18 - 2015-07-16 13:18 - 6420480 _____ () C:\Program Files\GUT43B5.tmp
2015-06-26 19:05 - 2015-12-22 12:05 - 0000024 _____ () C:\Users\mariusz\AppData\Roaming\appdataFr25.bin
2015-04-13 16:21 - 2015-04-13 16:21 - 0000000 _____ () C:\Users\mariusz\AppData\Local\{77562900-185B-4C5A-B465-21A5B63D7CA9}
2015-04-17 17:00 - 2015-04-17 17:00 - 0000000 _____ () C:\Users\mariusz\AppData\Local\{DC4D220A-163B-4E04-AEFF-6EA74C3E7417}

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-12-22 15:42

==================== Koniec  FRST.txt ============================