Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:31-12-2015
Uruchomiony przez Szymon (administrator)  USER-KOMPUTER (05-01-2016 21:01:37)
Uruchomiony z C:\Users\Szymon.User-Komputer\Downloads
Załadowane profile: Szymon (Dostępne profile: Szymon & Gość)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Valve Corporation) D:\Steam\Steam.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Valve Corporation) D:\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() D:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() D:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.1.5\deploy\LoLLauncher.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10996368 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-22] (AVAST Software)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKU\S-1-5-21-1460100641-3124155178-1872661674-1006\...\Run: [Steam] => D:\Steam\steam.exe [3013712 2015-12-14] (Valve Corporation)
HKU\S-1-5-21-1460100641-3124155178-1872661674-1006\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-1460100641-3124155178-1872661674-1006\...\MountPoints2: J - J:\LG_PC_Programs.exe
HKU\S-1-5-21-1460100641-3124155178-1872661674-1006\...\MountPoints2: {14aa5abc-4e9c-11e3-8aad-001fd0b6d7c6} - J:\Startme.exe
HKU\S-1-5-21-1460100641-3124155178-1872661674-1006\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [10240 2009-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-12-22] (AVAST Software)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: 46.23.70.78 pagead2.googlesyndication.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{502D841E-A087-488A-BCE7-7A1D34782A48}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKLM -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1460100641-3124155178-1872661674-1006 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1460100641-3124155178-1872661674-1006 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll [2015-10-25] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-29] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-25] (Oracle Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)

FireFox:
========
FF Plugin HKU\S-1-5-21-1460100641-3124155178-1872661674-1006: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Szymon.User-Komputer\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-08] (Unity Technologies ApS)

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR DefaultSearchURL: Default -> hxxp://www.google.com/search?q={searchTerms}
CHR DefaultSearchKeyword: Default -> google
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Szymon.User-Komputer\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.866\_platform_specific\win_x86\widevinecdmadapter.dll (Google Inc.)
CHR Plugin: (Shockwave Flash) - C:\Users\Szymon.User-Komputer\AppData\Local\Google\Chrome\User Data\PepperFlash\20.0.0.267\pepflashplayer.dll ()
CHR Profile: C:\Users\Szymon.User-Komputer\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Szymon.User-Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-01]
CHR Extension: (Dokumenty Google) - C:\Users\Szymon.User-Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-01]
CHR Extension: (Dysk Google) - C:\Users\Szymon.User-Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-01]
CHR Extension: (YouTube) - C:\Users\Szymon.User-Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-01]
CHR Extension: (Adblock Plus) - C:\Users\Szymon.User-Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-01-01]
CHR Extension: (Google Search) - C:\Users\Szymon.User-Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-01]
CHR Extension: (Arkusze Google) - C:\Users\Szymon.User-Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-01]
CHR Extension: (Dokumenty Google offline) - C:\Users\Szymon.User-Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-01]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Szymon.User-Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-01]
CHR Extension: (Gmail) - C:\Users\Szymon.User-Komputer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-01]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-22] (AVAST Software)
S4 EasyAntiCheat; C:\Windows\system32\EasyAntiCheat.exe [237864 2015-04-15] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [918160 2015-03-28] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Brak podpisu cyfrowego]
S3 npggsvc; C:\Windows\system32\GameMon.des [5268336 2014-03-25] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [20696720 2015-03-28] (NVIDIA Corporation)
S3 sppuinotify; C:\Windows\system32\sppuinotify.dll [53760 2010-11-20] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 apf004; C:\Windows\system32\apf004.sys [15112 2015-04-16] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24016 2015-12-22] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [81168 2015-12-22] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-12-22] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49776 2015-12-22] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [794952 2015-12-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436360 2015-12-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [117712 2015-12-22] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209432 2015-12-22] (AVAST Software)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2012-12-24] ()
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2012-12-24] ()
R0 nvamacpi; C:\Windows\System32\DRIVERS\NVAMACPI.sys [24680 2009-11-24] (NVIDIA Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18576 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [32912 2014-11-22] (NVIDIA Corporation)
S3 PortTalk; C:\Windows\System32\Drivers\PortTalk.sys [3567 2002-01-12] (Beyond Logic hxxp://www.beyondlogic.org) [Brak podpisu cyfrowego]
S3 SDGame; C:\Windows\System32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [584872 2013-06-26] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [197800 2013-06-26] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [24232 2013-06-26] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [20136 2013-06-26] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [320120 2014-05-15] (Duplex Secure Ltd.)
U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
U3 a8xnretk; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-04 19:10 - 2016-01-05 21:01 - 00000000 ___DC C:\FRST
2016-01-04 19:00 - 2016-01-04 19:00 - 00380416 _____ C:\Users\Szymon.User-Komputer\Downloads\dh4t1k7m.exe
2016-01-04 18:58 - 2016-01-05 21:05 - 00013717 _____ C:\Users\Szymon.User-Komputer\Downloads\FRST.txt
2016-01-04 18:57 - 2016-01-04 18:58 - 01721856 _____ (Farbar) C:\Users\Szymon.User-Komputer\Downloads\FRST.exe
2016-01-02 23:02 - 2016-01-02 23:02 - 00000000 ____D C:\Users\Szymon.User-Komputer\AppData\Roaming\Shooter
2016-01-02 22:58 - 2016-01-03 10:10 - 00000000 ____D C:\Users\Szymon.User-Komputer\Documents\My Games
2016-01-02 22:25 - 2016-01-02 22:25 - 00000202 _____ C:\Users\Szymon.User-Komputer\Desktop\Dirty Bomb.url
2016-01-02 22:18 - 2016-01-02 22:18 - 00000000 ____D C:\Users\Szymon.User-Komputer\AppData\Local\Steam
2016-01-02 22:18 - 2016-01-02 22:18 - 00000000 ____D C:\Users\Szymon.User-Komputer\AppData\Local\CEF
2016-01-02 22:16 - 2016-01-02 22:16 - 00000512 _____ C:\Users\Public\Desktop\Steam.lnk
2016-01-02 22:16 - 2016-01-02 22:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-01-02 22:14 - 2016-01-02 22:14 - 01380712 _____ C:\Users\Szymon.User-Komputer\Downloads\SteamSetup.exe
2016-01-02 14:14 - 2016-01-02 19:57 - 00000000 ___DC C:\AdwCleaner
2016-01-02 14:13 - 2016-01-02 14:13 - 01745920 _____ C:\Users\Szymon.User-Komputer\Downloads\adwcleaner_5.027.exe
2016-01-01 11:53 - 2016-01-01 11:53 - 00002171 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-01-01 11:53 - 2016-01-01 11:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-01-01 11:41 - 2016-01-01 11:41 - 00927824 _____ (Google Inc.) C:\Users\Szymon.User-Komputer\Downloads\ChromeSetup.exe
2016-01-01 10:18 - 2016-01-01 10:18 - 05822720 _____ (Advanced System Protector ) C:\Users\Szymon.User-Komputer\Downloads\aspsetup.exe
2016-01-01 10:17 - 2016-01-01 10:17 - 00110320 _____ C:\Users\Szymon.User-Komputer\AppData\Local\GDIPFONTCACHEV1.DAT
2015-12-31 22:28 - 2015-12-31 22:29 - 00418504 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-31 21:26 - 2015-12-31 21:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-30 21:51 - 2015-12-30 21:51 - 00000000 ____D C:\Users\Szymon.User-Komputer\AppData\Local\NVIDIA Corporation
2015-12-30 16:54 - 2015-12-30 16:54 - 00000000 ____D C:\Users\Szymon.User-Komputer\AppData\Roaming\MailProducts
2015-12-30 16:54 - 2015-12-30 16:54 - 00000000 ____D C:\Users\Szymon.User-Komputer\AppData\LocalLow\Unity
2015-12-27 09:51 - 2015-12-27 09:51 - 00000000 ____D C:\Users\Szymon.User-Komputer\Documents\Electronic Arts
2015-12-22 18:39 - 2015-12-22 18:39 - 00322760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-12-22 18:39 - 2015-12-22 18:39 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-12-14 22:26 - 2015-12-14 22:26 - 00000000 ____D C:\Users\Szymon.User-Komputer\Downloads\Originals
2015-12-14 20:55 - 2015-12-14 20:55 - 00014336 ____H C:\Users\Szymon.User-Komputer\Documents\photothumb.db
2015-12-14 20:33 - 2015-12-27 12:24 - 00000000 ____D C:\Users\Szymon.User-Komputer\AppData\Roaming\PhotoScape
2015-12-14 20:33 - 2015-12-14 20:33 - 21360800 _____ (Mooii) C:\Users\Szymon.User-Komputer\Downloads\PhotoScape_V3.7.exe
2015-12-14 20:33 - 2015-12-14 20:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape
2015-12-14 20:13 - 2015-12-14 20:13 - 06316983 _____ C:\Users\Szymon.User-Komputer\Documents\Zdjęcie.xcf
2015-12-12 22:21 - 2015-12-12 22:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chomikuj.pl
2015-12-12 22:19 - 2015-12-12 22:20 - 28266496 _____ C:\Users\Szymon.User-Komputer\Downloads\ChomikBox.msi
2015-12-12 14:23 - 2015-12-12 14:23 - 00113037 _____ C:\Users\Szymon.User-Komputer\Downloads\[kat.cr]polish.listy.do.m.2011.dvdrip.xvid.ac3.venoom.torrent
2015-12-09 22:32 - 2015-12-09 22:32 - 00001658 _____ C:\Users\Szymon.User-Komputer\Documents\cc_20151209_223243.reg
2015-12-09 22:31 - 2015-12-09 22:31 - 00421342 _____ C:\Users\Szymon.User-Komputer\Documents\cc_20151209_223045.reg
2015-12-09 22:31 - 2015-12-09 22:31 - 00011746 _____ C:\Users\Szymon.User-Komputer\Documents\cc_20151209_223141.reg
2015-12-09 16:39 - 2015-12-09 16:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2015-12-09 15:41 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2015-12-09 15:41 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2015-12-09 15:41 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-12-09 15:41 - 2015-11-10 19:39 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-12-09 15:41 - 2015-11-10 19:39 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-12-09 15:41 - 2015-11-10 18:40 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-12-09 15:40 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-12-09 15:40 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-12-09 15:40 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-12-09 15:40 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-12-09 15:40 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-12-09 15:40 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-12-09 15:40 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-12-09 15:40 - 2015-11-10 01:24 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-12-09 15:40 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-12-09 15:40 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-12-09 15:40 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-12-09 15:40 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-12-09 15:40 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-12-09 15:40 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-12-09 15:40 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-12-09 15:40 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-12-09 15:40 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-12-09 15:40 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-12-09 15:40 - 2015-11-10 01:03 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-12-09 15:40 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-12-09 15:40 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-12-09 15:40 - 2015-11-10 00:57 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-12-09 15:40 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-12-09 15:40 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-12-09 15:40 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-12-09 15:40 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-12-09 15:40 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-12-09 15:40 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-12-09 15:40 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-12-09 15:40 - 2015-11-10 00:36 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-12-09 15:40 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-12-09 15:40 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-12-09 15:40 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-12-09 15:40 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-12-09 15:37 - 2015-11-20 19:34 - 02956800 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-12-09 15:37 - 2015-11-20 19:34 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-12-09 15:37 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-12-09 15:37 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-12-09 15:37 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-12-09 15:37 - 2015-11-20 19:34 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-12-09 15:37 - 2015-11-20 19:34 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-12-09 15:37 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-12-09 15:37 - 2015-11-20 19:33 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-12-09 15:37 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-12-09 15:37 - 2015-11-20 19:33 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-12-09 15:37 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2015-12-09 15:36 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2015-12-09 15:36 - 2015-11-05 10:48 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2015-12-09 15:36 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-12-06 22:28 - 2015-12-14 20:55 - 00000000 ___RD C:\Users\Szymon.User-Komputer\Documents\Scanned Documents

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-05 20:58 - 2013-11-12 18:07 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-05 20:58 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-05 20:58 - 2009-07-14 03:37 - 00000000 ____D C:\Windows
2016-01-05 20:57 - 2009-07-14 05:34 - 00022144 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-05 20:57 - 2009-07-14 05:34 - 00022144 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-05 20:55 - 2013-11-12 18:08 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-04 22:27 - 2013-12-22 18:28 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-03 10:31 - 2014-08-26 18:33 - 00000000 ____D C:\Users\Szymon.User-Komputer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-01-02 20:27 - 2013-07-08 18:07 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-01-02 20:27 - 2013-07-08 18:07 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-01-02 19:56 - 2013-05-29 16:23 - 00000000 ____D C:\Users\Szymon.User-Komputer
2016-01-01 16:24 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2016-01-01 10:27 - 2015-11-20 15:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2016-01-01 10:27 - 2015-11-05 17:42 - 00000000 ____D C:\Users\Szymon.User-Komputer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Binding of Isaac Rebirth
2016-01-01 10:27 - 2015-09-27 14:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm
2016-01-01 10:27 - 2015-09-14 15:59 - 00000000 __HDC C:\$Windows.~BT
2016-01-01 10:27 - 2015-01-14 18:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2016-01-01 10:27 - 2014-05-15 12:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120%
2016-01-01 10:27 - 2014-05-15 12:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2016-01-01 10:27 - 2014-04-06 14:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gimnazjum - Chemia Nowej Ery 2
2016-01-01 10:27 - 2012-12-04 22:58 - 00000000 ____D C:\Windows\Panther
2016-01-01 10:16 - 2015-12-04 16:37 - 00000000 ____D C:\Users\Szymon.User-Komputer\.gstreamer-0.10
2016-01-01 10:13 - 2012-12-28 21:46 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-31 21:39 - 2013-09-13 16:53 - 00000000 ____D C:\Users\Szymon.User-Komputer\AppData\Roaming\BitTorrent
2015-12-30 16:52 - 2015-12-04 20:44 - 00000000 ____D C:\Users\Szymon.User-Komputer\AppData\LocalLow\BitTorrent
2015-12-30 16:49 - 2009-07-14 03:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-12-29 14:35 - 2015-10-24 08:54 - 00000568 _____ C:\Users\Public\Desktop\Championify.lnk
2015-12-28 19:47 - 2015-10-13 17:48 - 00000577 _____ C:\Users\Public\Desktop\The Sims 4.lnk
2015-12-28 19:46 - 2013-03-31 19:20 - 00000000 ____D C:\Windows\system32\directx
2015-12-28 18:03 - 2014-03-08 20:56 - 00000000 ____D C:\Users\Szymon.User-Komputer\.gimp-2.8
2015-12-22 18:40 - 2013-02-26 20:36 - 00436360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2015-12-22 18:40 - 2013-02-26 20:36 - 00081168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2015-12-22 18:39 - 2014-05-10 05:52 - 00024016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-12-22 18:39 - 2014-01-02 22:00 - 00117712 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-12-22 18:39 - 2013-05-18 20:44 - 00209432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-12-22 18:39 - 2013-05-18 20:44 - 00049776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-12-22 18:39 - 2013-02-26 20:36 - 00794952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-12-22 18:39 - 2013-02-26 20:36 - 00081728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-12-21 17:01 - 2015-12-04 16:36 - 00000000 ____D C:\Users\Szymon.User-Komputer\AppData\Local\ChomikBox
2015-12-14 20:03 - 2015-11-08 15:14 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-12-14 20:02 - 2013-05-29 16:23 - 00000000 ____D C:\Users\Szymon.User-Komputer\AppData\Roaming\Adobe
2015-12-14 19:45 - 2012-12-04 23:09 - 01680874 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-14 19:45 - 2009-07-14 09:07 - 00744252 _____ C:\Windows\system32\perfh015.dat
2015-12-14 19:45 - 2009-07-14 09:07 - 00157476 _____ C:\Windows\system32\perfc015.dat
2015-12-10 23:31 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2015-12-09 22:00 - 2013-09-20 20:12 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-09 21:59 - 2013-01-06 17:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-09 21:58 - 2013-01-06 17:32 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-09 21:55 - 2013-08-14 09:36 - 00000000 ____D C:\Windows\system32\MRT
2015-12-09 21:49 - 2013-01-05 16:14 - 137798368 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-12-09 16:40 - 2013-10-14 16:33 - 00000000 ____D C:\Users\Szymon.User-Komputer\AppData\Roaming\Riot Games
2015-12-07 17:47 - 2009-07-14 05:53 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-12-06 22:28 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-12-06 11:01 - 2015-12-05 14:51 - 00000000 ____D C:\Program Files\Lenovo

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-12-10 23:23

==================== Koniec  FRST.txt ============================