Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:31-12-2015 Uruchomiony przez Tobiaryna (administrator) LORDZIK (03-01-2016 13:56:00) Uruchomiony z C:\Users\Tobiaryna\Downloads Załadowane profile: Tobiaryna (Dostępne profile: Tobiaryna) Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 8 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe () C:\ProgramData\MobileBrServ\mbbService.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\CancelAutoPlay.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\Cyfrowy Polsat MF821.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe () C:\Windows\SysWOW64\C2MP\TrayMenu.exe (Creative Technology Ltd.) C:\Windows\V0420Mon.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe () C:\Users\Tobiaryna\Downloads\nd3s2f4w.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11775592 2011-01-18] (Realtek Semiconductor) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [zLoader.exe] => C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\zLoader.exe [26480 2012-05-22] () HKLM\...\Run: [CancelAutoPlay.exe] => C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\CancelAutoPlay.exe [74096 2012-05-22] () HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-03-15] (Adobe Systems Incorporated) HKLM-x32\...\Run: [V0420Mon.exe] => C:\Windows\V0420Mon.exe HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [309688 2012-10-11] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.) HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [803200 2015-12-01] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-11-23] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-1485770423-532772460-667618788-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3013712 2015-12-14] (Valve Corporation) HKU\S-1-5-21-1485770423-532772460-667618788-1000\...\Run: [ALLUpdate] => C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [1379840 2011-08-16] () HKU\S-1-5-21-1485770423-532772460-667618788-1000\...\Run: [RGSC] => C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent HKU\S-1-5-21-1485770423-532772460-667618788-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [966072 2012-10-11] (Samsung) HKU\S-1-5-21-1485770423-532772460-667618788-1000\...\Run: [KiesAirMessage] => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [580096 2012-10-09] (Samsung Electronics) HKU\S-1-5-21-1485770423-532772460-667618788-1000\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [842680 2012-10-11] (Samsung) HKU\S-1-5-21-1485770423-532772460-667618788-1000\...\Run: [Facebook Update] => C:\Users\Tobiaryna\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-05-16] (Facebook Inc.) HKU\S-1-5-21-1485770423-532772460-667618788-1000\...\Run: [GG] => C:\Users\Tobiaryna\AppData\Local\GG\Application\gghub.exe [4078144 2015-06-17] (GG Network S.A.) HKU\S-1-5-21-1485770423-532772460-667618788-1000\...\Run: [WTFast Tray] => C:\Program Files (x86)\WTFast\WTFast.exe [5255256 2015-09-14] (AAA Internet Publishing, Inc.) HKU\S-1-5-21-1485770423-532772460-667618788-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50264704 2015-11-05] (Skype Technologies S.A.) HKU\S-1-5-21-1485770423-532772460-667618788-1000\...\MountPoints2: D - D:\AutoRun.exe /s HKU\S-1-5-21-1485770423-532772460-667618788-1000\...\MountPoints2: F - F:\AutoRun.exe /s HKU\S-1-5-21-1485770423-532772460-667618788-1000\...\MountPoints2: {347e1a94-5076-11e4-8797-e069953bb12a} - F:\AutoRun.exe /s ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => Brak pliku ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => Brak pliku ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => Brak pliku ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => Brak pliku ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => Brak pliku ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => Brak pliku ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => Brak pliku ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => Brak pliku ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => Brak pliku ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => Brak pliku ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => Brak pliku ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => Brak pliku Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2014-01-12] ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\SysWOW64\C2MP\TrayMenu.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackUpdateChecker.lnk [2014-01-12] ShortcutTarget: CodecPackUpdateChecker.lnk -> C:\Windows\SysWOW64\C2MP\UpdateChecker.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk [2011-11-05] ShortcutTarget: LOLRecorder.lnk -> C:\Program Files (x86)\LOLReplay\LOLRecorder.exe (Brak pliku) BootExecute: autocheck autochk * sdnclean64.exe GroupPolicy: Ograniczenia - Chrome <======= UWAGA CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Winsock: Catalog9 01 C:\Windows\SysWOW64\WTFastDrv.dll [72296 2015-04-08] (Initex) Winsock: Catalog9 02 C:\Windows\SysWOW64\WTFastDrv.dll [72296 2015-04-08] (Initex) Winsock: Catalog9 03 C:\Windows\SysWOW64\WTFastDrv.dll [72296 2015-04-08] (Initex) Winsock: Catalog9 04 C:\Windows\SysWOW64\WTFastDrv.dll [72296 2015-04-08] (Initex) Winsock: Catalog9 15 C:\Windows\SysWOW64\WTFastDrv.dll [72296 2015-04-08] (Initex) Winsock: Catalog9-x64 01 C:\Windows\system32\WTFastDrv.dll [79464 2015-04-08] (Initex) Winsock: Catalog9-x64 02 C:\Windows\system32\WTFastDrv.dll [79464 2015-04-08] (Initex) Winsock: Catalog9-x64 03 C:\Windows\system32\WTFastDrv.dll [79464 2015-04-08] (Initex) Winsock: Catalog9-x64 04 C:\Windows\system32\WTFastDrv.dll [79464 2015-04-08] (Initex) Winsock: Catalog9-x64 15 C:\Windows\system32\WTFastDrv.dll [79464 2015-04-08] (Initex) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip\..\Interfaces\{2DA52C0A-A956-4E1B-AF59-65DE4FE0E0EC}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{674B4E9A-639B-433D-9057-1026E3D57DC3}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{674B4E9A-639B-433D-9057-1026E3D57DC3}: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip\..\Interfaces\{A3399835-5E41-4A52-9195-CB9618ACB20F}: [DhcpNameServer] 212.2.96.53 212.2.96.54 Tcpip\..\Interfaces\{DE40F06A-F133-4F41-8696-F9EE8936F823}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank HKU\S-1-5-21-1485770423-532772460-667618788-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.aol.com/?mtmhp=hyplogusaolp00000019 SearchScopes: HKLM-x32 -> DefaultScope {443789B7-F39C-4b5c-9287-DA72D38F4FE6} URL = hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=843&q={searchTerms}&s_it=amonetizetest1-ie&s_qt=sb&tb_uuid=71C41CFDD1724F869C81550502B74E37&tb_oid=25-04-2013&tb_mrud=25-04-2013 SearchScopes: HKLM-x32 -> {443789B7-F39C-4b5c-9287-DA72D38F4FE6} URL = hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=843&q={searchTerms}&s_it=amonetizetest1-ie&s_qt=sb&tb_uuid=71C41CFDD1724F869C81550502B74E37&tb_oid=25-04-2013&tb_mrud=25-04-2013 SearchScopes: HKU\S-1-5-21-1485770423-532772460-667618788-1000 -> {443789B7-F39C-4b5c-9287-DA72D38F4FE6} URL = hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=843&q={searchTerms}&s_it=amonetizetest1-ie&s_qt=sb&tb_uuid=71C41CFDD1724F869C81550502B74E37&tb_oid=25-04-2013&tb_mrud=25-04-2013 BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-03-27] (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-03-27] (Oracle Corporation) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated) BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll [2012-11-13] (Safer-Networking Ltd.) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-09-24] (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-09-24] (Oracle Corporation) BHO-x32: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll [2011-02-09] (ALLCinema Ltd.) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation) Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation) Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation) Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation) Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Tobiaryna\AppData\Roaming\Mozilla\Firefox\Profiles\ru9ryeq8.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2015-12-28] () FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-03-27] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-03-27] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll [2013-01-24] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-28] () FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=1.138.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll [2012-09-07] (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=1.140.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll [2012-10-23] (ESN Social Software AB) FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll [2011-12-20] ( ) FF Plugin-x32: @java.com/DTPlugin,version=10.7.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2012-10-07] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2012-09-24] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll [2013-01-24] ( Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameeu.dll [2012-05-06] (Nexon) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-03-04] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-03-04] (NVIDIA Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1485770423-532772460-667618788-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Tobiaryna\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited) FF Plugin HKU\S-1-5-21-1485770423-532772460-667618788-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Tobiaryna\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-07-04] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-1485770423-532772460-667618788-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-06-01] () FF user.js: detected! => C:\Users\Tobiaryna\AppData\Roaming\Mozilla\Firefox\Profiles\ru9ryeq8.default\user.js [2013-12-22] FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npganymedenet.dll [2011-12-20] ( ) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2012-09-23] (Adobe Systems Inc.) FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08] FF HKU\S-1-5-21-1485770423-532772460-667618788-1000\...\Firefox\Extensions: [support@mozilla.com] - C:\Users\Tobiaryna\AppData\Roaming\support@mozilla.com FF Extension: Firefox Extension Manager - C:\Users\Tobiaryna\AppData\Roaming\support@mozilla.com [2012-09-04] [Brak podpisu cyfrowego] Chrome: ======= CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [948392 2015-12-01] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1212048 2015-08-28] (Avira Operations GmbH & Co. KG) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [249624 2015-11-23] (Avira Operations GmbH & Co. KG) S3 BITCOMET_HELPER_SERVICE; C:\Program Files (x86)\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com) S4 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [Brak podpisu cyfrowego] S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [484592 2013-11-08] (BitRaider, LLC) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation) S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2011-10-26] (Macrovision Europe Ltd.) [Brak podpisu cyfrowego] R2 Huawei E3372; C:\ProgramData\MobileBrServ\mbbservice.exe [240720 2014-03-07] () S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Brak podpisu cyfrowego] R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-11-04] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Brak podpisu cyfrowego] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162072 2015-12-01] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [140448 2015-12-01] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [75472 2015-12-01] (Avira Operations GmbH & Co. KG) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) S3 flashusb; C:\Windows\System32\DRIVERS\flashusb.sys [19968 2012-06-27] (Danish Wireless Design A/S) S3 massfilter_lte; C:\Windows\system32\drivers\massfilter_lte.sys [18456 2011-12-14] (HandSet Incorporated) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation) S3 ssm_bus; C:\Windows\System32\DRIVERS\ssm_bus.sys [136192 2012-06-27] (MCCI Corporation) S3 ssm_mdfl; C:\Windows\System32\DRIVERS\ssm_mdfl.sys [18944 2012-06-27] (MCCI Corporation) S3 ssm_mdm; C:\Windows\System32\DRIVERS\ssm_mdm.sys [172032 2012-06-27] (MCCI Corporation) S3 tap-tb-0901; C:\Windows\System32\DRIVERS\tap-tb-0901.sys [38656 2015-08-10] (The OpenVPN Project) S3 V0420VID; C:\Windows\System32\DRIVERS\V0420Vid.sys [107072 2007-05-31] (Creative Technology Ltd.) S3 zgdcat; C:\Windows\System32\DRIVERS\zgdcat.sys [130200 2011-12-14] (ZTE Incorporated) S3 zgdcdiag; C:\Windows\System32\DRIVERS\zgdcdiag.sys [130200 2011-12-14] (ZTE Incorporated) S3 zgdcmdm; C:\Windows\System32\DRIVERS\zgdcmdm.sys [130200 2011-12-14] (ZTE Incorporated) S3 zgdcnet; C:\Windows\System32\DRIVERS\zgdcnet.sys [169496 2011-12-14] (ZTE Incorporated) S3 zgdcnmea; C:\Windows\System32\DRIVERS\zgdcnmea.sys [130200 2011-12-14] (ZTE Incorporated) S3 ALSysIO; \??\C:\Users\TOBIAR~1\AppData\Local\Temp\ALSysIO64.sys [X] S3 BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys [X] R4 dtsoftbus01; system32\DRIVERS\dtsoftbus01.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] S3 X6va006; \??\C:\Users\TOBIAR~1\AppData\Local\Temp\0069FE8.tmp [X] S3 X6va012; \??\C:\Windows\SysWOW64\Drivers\X6va012 [X] U3 kgldapob; \??\C:\Users\TOBIAR~1\AppData\Local\Temp\kgldapob.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-01-02 15:59 - 2016-01-02 16:01 - 00141277 _____ C:\Users\Tobiaryna\Downloads\Addition.txt 2016-01-02 15:59 - 2016-01-02 15:59 - 00380416 _____ C:\Users\Tobiaryna\Downloads\nd3s2f4w.exe 2016-01-02 15:58 - 2016-01-03 13:56 - 00026871 _____ C:\Users\Tobiaryna\Downloads\FRST.txt 2016-01-02 15:56 - 2016-01-03 13:56 - 00000000 ____D C:\FRST 2016-01-02 15:56 - 2016-01-02 15:56 - 02370560 _____ (Farbar) C:\Users\Tobiaryna\Downloads\FRST64.exe 2015-12-31 00:44 - 2015-12-31 00:44 - 00810987 _____ C:\Users\Tobiaryna\Downloads\100%.pdf(ost)33.pdf 2015-12-30 02:34 - 2015-12-30 02:34 - 00000000 ____D C:\ProgramData\0D84589A11C60A253FCCA7AF463184EC 2015-12-29 23:50 - 2015-12-29 23:50 - 00000000 ____D C:\Users\Tobiaryna\AppData\Local\Project1 2015-12-29 23:07 - 2015-12-29 23:44 - 00000000 ____D C:\Users\Tobiaryna\Documents\GameMaker 2015-12-29 23:06 - 2015-12-29 23:06 - 00000914 _____ C:\Users\Tobiaryna\Desktop\Startilla_V3.exe — skrót.lnk 2015-12-29 23:06 - 2015-12-29 23:06 - 00000000 ____D C:\ProgramData\gamemaker_studio 2015-12-29 22:02 - 2015-12-29 23:06 - 00000000 ____D C:\Users\Tobiaryna\AppData\Local\GameMaker_Studio 2015-12-29 22:02 - 2015-12-29 22:02 - 00001022 _____ C:\Users\Tobiaryna\Desktop\GameMaker Studio.lnk 2015-12-29 22:02 - 2015-12-29 22:02 - 00000000 ____D C:\Users\Tobiaryna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameMaker Studio 2015-12-29 22:02 - 2015-12-29 22:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameMaker Studio 2015-12-29 22:01 - 2015-12-29 23:44 - 00000000 ____D C:\Users\Tobiaryna\AppData\Roaming\GameMaker_Studio 2015-12-28 21:55 - 2015-12-29 21:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-12-28 21:47 - 2015-12-28 21:47 - 00743005 _____ C:\Users\Tobiaryna\Downloads\100%.pdf(ost)(2).pdf 2015-12-28 12:34 - 2016-01-02 17:50 - 00000000 ____D C:\Users\Tobiaryna\AppData\Local\DungeonSouls 2015-12-18 17:26 - 2015-12-18 17:26 - 00733878 _____ C:\Users\Tobiaryna\Downloads\100%.pdf(ost)(1).pdf 2015-12-16 00:34 - 2015-12-16 00:35 - 67196144 _____ C:\Users\Tobiaryna\Documents\clip0050.avi 2015-12-16 00:31 - 2015-12-16 00:31 - 04899164 _____ C:\Users\Tobiaryna\Documents\clip0049.avi 2015-12-16 00:26 - 2015-12-16 00:26 - 00003088 _____ C:\Windows\System32\Tasks\{B715BA46-B98E-4E4D-B6D3-987FD0B51D85} 2015-12-16 00:26 - 2015-12-16 00:26 - 00003088 _____ C:\Windows\System32\Tasks\{134BF4C8-9659-4C0C-AB88-3794EA16D468} 2015-12-12 13:29 - 2015-12-12 13:29 - 00719771 _____ C:\Users\Tobiaryna\Downloads\100%.pdf(ost).pdf 2015-12-08 02:08 - 2015-12-08 02:08 - 00715162 _____ C:\Users\Tobiaryna\Downloads\100%.pdf 2015-12-08 02:07 - 2015-12-08 02:07 - 00957248 _____ (Microsoft Corporation) C:\Users\Tobiaryna\Downloads\SaveAsPDFandXPS.exe ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-01-03 13:48 - 2012-05-05 17:24 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-01-03 07:47 - 2013-05-16 21:42 - 00000944 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1485770423-532772460-667618788-1000UA.job 2016-01-03 03:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf 2016-01-03 03:20 - 2014-01-31 16:57 - 00000000 ____D C:\Users\Tobiaryna\AppData\Local\LogMeIn Hamachi 2016-01-03 03:06 - 2012-04-07 23:27 - 00000000 ____D C:\Users\Tobiaryna\AppData\Roaming\GG 2016-01-03 03:06 - 2012-01-21 20:53 - 00000000 ____D C:\Users\Tobiaryna\AppData\Roaming\Skype 2016-01-03 03:06 - 2011-10-17 12:07 - 00000000 ____D C:\Program Files (x86)\Steam 2016-01-03 03:03 - 2009-07-14 05:45 - 00021248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-01-03 03:03 - 2009-07-14 05:45 - 00021248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-01-03 02:59 - 2012-04-07 23:27 - 00000000 ____D C:\Users\Tobiaryna\AppData\Local\GG 2016-01-03 02:55 - 2013-07-26 18:26 - 00000000 ____D C:\ProgramData\NVIDIA 2016-01-03 02:55 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-01-02 16:01 - 2009-07-14 04:20 - 00000000 ____D C:\Windows 2016-01-02 09:05 - 2012-05-05 17:24 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-01-02 09:05 - 2012-05-05 17:24 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-01-02 09:05 - 2011-10-14 20:56 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-12-29 22:47 - 2013-05-16 21:42 - 00000922 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1485770423-532772460-667618788-1000Core.job 2015-12-29 21:54 - 2011-11-12 20:55 - 00000000 ____D C:\Users\Tobiaryna\AppData\Roaming\BitComet 2015-12-29 21:24 - 2012-05-05 20:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-12-25 18:10 - 2014-01-30 17:49 - 00000000 ____D C:\Users\Tobiaryna\AppData\Local\Hero_Siege 2015-12-25 01:49 - 2013-06-01 23:54 - 00000000 ____D C:\Users\Tobiaryna\Desktop\duperele 2015-12-24 19:11 - 2010-11-21 13:53 - 00740422 _____ C:\Windows\system32\perfh015.dat 2015-12-24 19:11 - 2010-11-21 13:53 - 00155996 _____ C:\Windows\system32\perfc015.dat 2015-12-24 19:11 - 2009-07-14 06:13 - 01670518 _____ C:\Windows\system32\PerfStringBackup.INI 2015-12-24 03:26 - 2013-10-08 23:37 - 00000000 ____D C:\Users\Tobiaryna\AppData\Local\Battle.net 2015-12-24 00:52 - 2013-10-08 23:37 - 00000000 ____D C:\Program Files (x86)\Battle.net 2015-12-21 13:35 - 2011-10-14 20:34 - 00000000 ____D C:\Users\Tobiaryna 2015-12-21 00:45 - 2011-10-14 20:56 - 00000000 ____D C:\Users\Tobiaryna\AppData\Roaming\Adobe 2015-12-18 11:10 - 2013-11-25 09:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-12-18 11:10 - 2013-04-11 14:25 - 00000000 ____D C:\ProgramData\Package Cache 2015-12-17 21:41 - 2013-10-08 23:40 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2015-12-17 20:46 - 2009-07-14 06:08 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-12-16 00:26 - 2012-01-21 20:53 - 00000000 ____D C:\ProgramData\Skype 2015-12-14 23:22 - 2011-11-05 16:14 - 00000000 ____D C:\Users\Tobiaryna\AppData\Roaming\TS3Client 2015-12-14 22:38 - 2015-11-24 00:46 - 00000000 ____D C:\Users\Tobiaryna\AppData\Roaming\AlbionOnline 2015-12-08 23:12 - 2014-03-10 00:23 - 00000000 ____D C:\Users\Tobiaryna\Desktop\komorka 2015-12-08 13:46 - 2011-10-20 15:17 - 00000000 ____D C:\Users\Tobiaryna\AppData\Local\ElevatedDiagnostics 2015-12-08 02:07 - 2011-10-15 00:58 - 00000000 ____D C:\Program Files (x86)\MSECache ==================== Pliki w katalogu głównym wybranych folderów ======= 2012-07-18 12:29 - 2013-12-22 16:44 - 0007599 _____ () C:\Users\Tobiaryna\AppData\Local\Resmon.ResmonCfg 2008-02-05 12:28 - 2008-02-05 12:28 - 0000051 _____ () C:\Users\Tobiaryna\AppData\Local\setup.txt 2012-04-30 16:21 - 2012-03-01 16:21 - 0000032 ____R () C:\ProgramData\hash.dat 2012-07-05 19:18 - 2012-07-05 19:18 - 0000040 _____ () C:\ProgramData\ra3.ini Pliki do przeniesienia lub usunięcia: ==================== C:\ProgramData\hash.dat C:\Users\Public\Warcraft III Reign of Chaos & The Frozen Throne & Dota.exe Niektóre pliki w TEMP: ==================== C:\Users\Tobiaryna\AppData\Local\Temp\avgnt.exe C:\Users\Tobiaryna\AppData\Local\Temp\Bit283C.tmp.exe C:\Users\Tobiaryna\AppData\Local\Temp\Bit2D27.tmp.exe C:\Users\Tobiaryna\AppData\Local\Temp\Bit708E.tmp.exe C:\Users\Tobiaryna\AppData\Local\Temp\Bit7B18.tmp.exe C:\Users\Tobiaryna\AppData\Local\Temp\Bit7E00.tmp.exe C:\Users\Tobiaryna\AppData\Local\Temp\Bit8CF3.tmp.exe C:\Users\Tobiaryna\AppData\Local\Temp\Bit8DB0.tmp.exe C:\Users\Tobiaryna\AppData\Local\Temp\BitB347.tmp.exe C:\Users\Tobiaryna\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp17gn0v.dll C:\Users\Tobiaryna\AppData\Local\Temp\ggdrive-menu.exe C:\Users\Tobiaryna\AppData\Local\Temp\ggdrive-overlay.exe C:\Users\Tobiaryna\AppData\Local\Temp\installstats.exe C:\Users\Tobiaryna\AppData\Local\Temp\ose00000.exe C:\Users\Tobiaryna\AppData\Local\Temp\rootsupd.exe C:\Users\Tobiaryna\AppData\Local\Temp\SkypeSetup.exe C:\Users\Tobiaryna\AppData\Local\Temp\xmlUpdater.exe ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2016-01-01 09:11 ==================== Koniec FRST.txt ============================