Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:07-01-2015
Uruchomiony przez sfinx (administrator)  SFINX-KOMPUTER (08-01-2016 16:30:57)
Uruchomiony z C:\Users\sfinx\Downloads
Załadowane profile: sfinx (Dostępne profile: sfinx)
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
() C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8461528 2015-03-04] (Realtek Semiconductor)
HKLM\...\Run: [ISCT Tray] => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5860656 2014-08-25] (Intel Corporation)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [4035152 2011-09-22] (ESET)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-06-27] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1172256 2014-11-10] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [590144 2015-03-12] (Razer Inc.)
HKLM-x32\...\Run: [Dare-U Keyboard] => C:\Program Files (x86)\Gaming Keyboard\Monitor.exe [745472 2013-05-15] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKU\S-1-5-21-2510066527-1310542247-2234334929-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-12-06] (AMD)
HKU\S-1-5-21-2510066527-1310542247-2234334929-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8590760 2015-12-08] (Piriform Ltd)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 193.213.112.4 130.67.15.198
Tcpip\..\Interfaces\{91710C8E-E071-4FC6-9F77-3468750ED2E0}: [DhcpNameServer] 193.213.112.4 130.67.15.198

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\S-1-5-21-2510066527-1310542247-2234334929-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1452246092&z=503abcb1b25ef8b9b4f9599g2z9w5ofo7z6qagacbm&from=wpm01073&uid=CrucialXCT128M550SSD1_14110C0B3A610C0B3A61
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1452246092&z=503abcb1b25ef8b9b4f9599g2z9w5ofo7z6qagacbm&from=wpm01073&uid=CrucialXCT128M550SSD1_14110C0B3A610C0B3A61
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://yoursites123.com/web?type=ds&ts=1452246092&z=503abcb1b25ef8b9b4f9599g2z9w5ofo7z6qagacbm&from=wpm01073&uid=CrucialXCT128M550SSD1_14110C0B3A610C0B3A61&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1452246092&z=503abcb1b25ef8b9b4f9599g2z9w5ofo7z6qagacbm&from=wpm01073&uid=CrucialXCT128M550SSD1_14110C0B3A610C0B3A61
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://yoursites123.com/web?type=ds&ts=1452246092&z=503abcb1b25ef8b9b4f9599g2z9w5ofo7z6qagacbm&from=wpm01073&uid=CrucialXCT128M550SSD1_14110C0B3A610C0B3A61&q={searchTerms}
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2510066527-1310542247-2234334929-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2510066527-1310542247-2234334929-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1452246092&z=503abcb1b25ef8b9b4f9599g2z9w5ofo7z6qagacbm&from=wpm01073&uid=CrucialXCT128M550SSD1_14110C0B3A610C0B3A61
HKU\S-1-5-21-2510066527-1310542247-2234334929-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://yoursites123.com/web?type=ds&ts=1452246092&z=503abcb1b25ef8b9b4f9599g2z9w5ofo7z6qagacbm&from=wpm01073&uid=CrucialXCT128M550SSD1_14110C0B3A610C0B3A61&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = 
SearchScopes: HKU\S-1-5-21-2510066527-1310542247-2234334929-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-12-09] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-09] (Oracle Corporation)

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-09] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-09] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-11-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-11-10] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2016-01-08] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.yoursites123.com/?type=hp&ts=1452246092&z=503abcb1b25ef8b9b4f9599g2z9w5ofo7z6qagacbm&from=wpm01073&uid=CrucialXCT128M550SSD1_14110C0B3A610C0B3A61
CHR StartupUrls: Default -> "hxxp://www.yoursites123.com/?type=hp&ts=1452246092&z=503abcb1b25ef8b9b4f9599g2z9w5ofo7z6qagacbm&from=wpm01073&uid=CrucialXCT128M550SSD1_14110C0B3A610C0B3A61"
CHR Session Restore: Default -> [funkcja włączona]
CHR Profile: C:\Users\sfinx\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\sfinx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-03]
CHR Extension: (Dokumenty Google) - C:\Users\sfinx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-03]
CHR Extension: (Dysk Google) - C:\Users\sfinx\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-03]
CHR Extension: (YouTube) - C:\Users\sfinx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-03]
CHR Extension: (Google Search) - C:\Users\sfinx\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-03]
CHR Extension: (Arkusze Google) - C:\Users\sfinx\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\sfinx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-04]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\sfinx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-03]
CHR Extension: (Gmail) - C:\Users\sfinx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-03]
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.yoursites123.com/?type=sc&ts=1452246092&z=503abcb1b25ef8b9b4f9599g2z9w5ofo7z6qagacbm&from=wpm01073&uid=CrucialXCT128M550SSD1_14110C0B3A610C0B3A61

Opera: 
=======
OPR Extension: (Adblock Plus) - C:\Users\sfinx\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-01-08]
StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe hxxp://www.yoursites123.com/?type=sc&ts=1452246092&z=503abcb1b25ef8b9b4f9599g2z9w5ofo7z6qagacbm&from=wpm01073&uid=CrucialXCT128M550SSD1_14110C0B3A610C0B3A61

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [Brak podpisu cyfrowego]
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [974944 2011-09-22] (ESET)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation)
S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [54976 2014-03-27] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-08-25] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2014-11-10] (Intel Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3049608 2014-11-14] (INCA Internet Co., Ltd.) [Brak podpisu cyfrowego]
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] ()
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-04-18] (Razer, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-11-10] (Microsoft Corporation)
S2 EsetNod32Fix; %SystemRoot%\Regedit.exe /s %WinDir%\Fix.reg [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [202576 2011-08-09] (ESET)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [146432 2011-08-04] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [137144 2011-08-04] (ESET)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [22216 2014-05-27] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [22728 2014-05-27] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [25800 2014-05-27] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [44744 2014-05-27] ()
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (EZB Systems, Inc.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-11-10] (Intel Corporation)
R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-04-18] (Razer, Inc.)
R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39592 2014-12-30] (Razer Inc)
R1 RzFilter; C:\Windows\system32\drivers\RzFilter.sys [74432 2014-04-18] (Razer, Inc.)
R3 rzmpos; C:\Windows\System32\DRIVERS\rzmpos.sys [35496 2014-12-30] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129600 2015-03-03] (Razer, Inc.)
U3 catchme; \??\C:\ComboFix\catchme.sys [X]
R4 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-08 16:30 - 2016-01-08 16:31 - 00016142 _____ C:\Users\sfinx\Downloads\FRST.txt
2016-01-08 16:30 - 2016-01-08 16:30 - 00380416 _____ C:\Users\sfinx\Downloads\3xcubvif.exe
2016-01-08 16:30 - 2016-01-08 16:30 - 00000000 ____D C:\FRST
2016-01-08 16:29 - 2016-01-08 16:30 - 02370560 _____ (Farbar) C:\Users\sfinx\Downloads\FRST64.exe
2016-01-08 16:21 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2016-01-08 16:21 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2016-01-08 16:21 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-01-08 16:21 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-01-08 16:21 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-01-08 16:21 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2016-01-08 16:21 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2016-01-08 16:21 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2016-01-08 16:20 - 2016-01-08 16:25 - 00000000 ____D C:\Qoobox
2016-01-08 16:20 - 2016-01-08 16:24 - 00000000 ____D C:\Windows\erdnt
2016-01-08 16:20 - 2016-01-08 16:20 - 05646860 ____R (Swearware) C:\Users\sfinx\Downloads\ComboFix.exe
2016-01-08 16:15 - 2016-01-08 16:15 - 00093950 _____ C:\Users\sfinx\Documents\cc_20160108_161521.reg
2016-01-08 16:14 - 2016-01-08 16:14 - 00002802 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-01-08 16:14 - 2016-01-08 16:14 - 00000826 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-01-08 16:14 - 2016-01-08 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-01-08 16:14 - 2016-01-08 16:14 - 00000000 ____D C:\Program Files\CCleaner
2016-01-08 16:13 - 2016-01-08 16:13 - 06805440 _____ (Piriform Ltd) C:\Users\sfinx\Downloads\ccsetup513.exe
2016-01-08 15:33 - 2016-01-08 15:33 - 00000000 ____D C:\Users\sfinx\AppData\Local\ESET
2016-01-08 15:25 - 2016-01-08 15:25 - 00003350 _____ C:\Windows\System32\Tasks\ESET Windows 10 upgrade – Refresh settings
2016-01-08 15:25 - 2016-01-08 15:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2016-01-08 15:25 - 2016-01-08 15:25 - 00000000 ____D C:\ProgramData\ESET
2016-01-08 15:25 - 2016-01-08 15:25 - 00000000 ____D C:\Program Files\ESET
2016-01-08 15:25 - 2016-01-08 15:25 - 00000000 ____D C:\Program Files\Common Files\AV
2016-01-08 14:58 - 2016-01-08 14:58 - 00000000 ____D C:\Users\sfinx\Desktop\ESET NOD 32 5.0.94.0 Finał [ PL][86&64Bit] Niezbędne akcesoria
2016-01-08 14:54 - 2016-01-08 14:54 - 00003092 _____ C:\Windows\System32\Tasks\{8314BDBF-B782-4009-8284-4CA70F09AE51}
2016-01-08 14:47 - 2016-01-08 14:54 - 00000000 ____D C:\Program Files (x86)\ESET
2016-01-08 14:45 - 2016-01-08 14:45 - 21923328 _____ C:\Users\sfinx\Downloads\ESET NOD32 Antivirus 64-Bit Installer.msi
2016-01-08 10:42 - 2016-01-08 16:07 - 00000000 ____D C:\Users\sfinx\AppData\Roaming\TSv
2016-01-08 10:42 - 2016-01-08 16:07 - 00000000 ____D C:\Program Files (x86)\SFK
2016-01-08 10:42 - 2016-01-08 10:48 - 00000000 ____D C:\Program Files (x86)\WinZipper
2016-01-08 10:41 - 2016-01-08 16:07 - 00000000 ____D C:\ProgramData\nWdMn
2016-01-08 10:41 - 2016-01-08 10:41 - 00000074 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-12-17 23:17 - 2015-12-17 23:17 - 00040090 _____ C:\Users\sfinx\Downloads\skills.htm
2015-12-15 16:51 - 2015-12-15 16:51 - 00005235 _____ C:\Users\sfinx\Downloads\RAWR.SU zoom_hf.rar
2015-12-15 16:35 - 2015-12-15 16:37 - 31858568 _____ C:\Users\sfinx\Downloads\selivAn addon for HF v1.1.rar
2015-12-14 17:42 - 2015-12-14 17:44 - 00000000 ____D C:\Users\sfinx\Desktop\nowy pacz
2015-12-14 16:17 - 2015-12-14 17:50 - 00000000 ____D C:\Users\sfinx\Desktop\skrypty
2015-12-09 15:40 - 2015-12-09 15:40 - 01738240 _____ C:\Users\sfinx\Downloads\AdwCleaner 5.024.exe
2015-12-09 15:30 - 2015-12-09 15:31 - 04616266 _____ (FranmoSoftware ) C:\Users\sfinx\Downloads\odk13.5.4.1971setup.exe
2015-12-09 08:44 - 2016-01-08 16:07 - 00000000 ____D C:\ProgramData\4WdM4
2015-12-09 08:42 - 2016-01-08 16:07 - 00000000 ____D C:\ProgramData\DWdMD

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-08 16:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2016-01-08 16:29 - 2015-12-03 16:17 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-08 16:23 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2016-01-08 16:15 - 2015-03-29 13:23 - 00000000 ____D C:\Users\sfinx\AppData\Roaming\TS3Client
2016-01-08 16:15 - 2013-11-15 11:17 - 00000000 ____D C:\Windows\Panther
2016-01-08 16:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-01-08 16:13 - 2011-04-12 14:21 - 00739694 _____ C:\Windows\system32\perfh015.dat
2016-01-08 16:13 - 2011-04-12 14:21 - 00155268 _____ C:\Windows\system32\perfc015.dat
2016-01-08 16:13 - 2009-07-14 06:13 - 01668226 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-08 16:08 - 2015-12-03 16:17 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-08 16:08 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-08 16:08 - 2009-07-14 05:45 - 00023520 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-08 16:08 - 2009-07-14 05:45 - 00023520 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-08 16:07 - 2015-11-22 20:08 - 00000000 ____D C:\Users\sfinx\Desktop\cpTracker2
2016-01-08 16:07 - 2015-03-31 11:21 - 00000000 ____D C:\Users\sfinx\Desktop\podatek za 2014
2016-01-08 16:07 - 2015-03-29 19:22 - 00000000 ____D C:\Program Files (x86)\KMSPico 10.0.6
2016-01-08 15:06 - 2015-04-02 18:42 - 00000000 ____D C:\ProgramData\Skype
2016-01-08 10:44 - 2015-09-05 11:23 - 00000000 ____D C:\Users\sfinx\AppData\Roaming\.minecraft
2016-01-08 10:41 - 2015-12-03 16:18 - 00002513 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-01-08 10:41 - 2015-03-29 12:40 - 00001322 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-01-08 10:41 - 2015-03-29 12:40 - 00001310 _____ C:\Users\Public\Desktop\Opera.lnk
2016-01-08 10:41 - 2015-03-29 11:51 - 00001323 _____ C:\Users\sfinx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-17 20:05 - 2015-10-14 17:30 - 00000000 ____D C:\Users\sfinx\Desktop\muzyka
2015-12-15 17:05 - 2015-01-11 17:08 - 00000000 ____D C:\Games
2015-12-14 18:21 - 2015-04-02 18:42 - 00000000 ____D C:\Users\sfinx\AppData\Roaming\Skype
2015-12-14 17:26 - 2015-10-07 14:46 - 00000726 _____ C:\Users\sfinx\Desktop\l2.exe — skrót.lnk
2015-12-13 01:15 - 2015-09-17 09:58 - 00000992 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-12-11 00:08 - 2015-12-06 16:58 - 00000119 _____ C:\Users\sfinx\Desktop\passy.txt
2015-12-09 15:49 - 2015-09-05 11:26 - 00000000 ____D C:\ProgramData\Oracle
2015-12-09 15:49 - 2015-09-05 11:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-12-09 15:49 - 2015-09-05 11:26 - 00000000 ____D C:\Program Files\Java
2015-12-09 15:48 - 2015-09-05 11:26 - 00110176 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-12-09 15:48 - 2015-09-05 11:26 - 00000000 ____D C:\Users\sfinx\.oracle_jre_usage
2015-12-09 15:47 - 2015-09-17 09:58 - 00003998 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-12-09 15:47 - 2015-03-30 14:02 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-12-09 15:47 - 2015-03-30 14:02 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-09 15:47 - 2015-03-30 14:02 - 00000000 ____D C:\Users\sfinx\AppData\Local\Adobe
2015-12-09 15:41 - 2015-06-11 13:46 - 00000000 ____D C:\Windows\system32\log
2015-12-09 15:34 - 2015-03-29 13:03 - 00000000 ____D C:\Windows\Downloaded Installations
2015-12-09 15:32 - 2015-04-13 14:59 - 00000000 ____D C:\Windows\Minidump
2015-12-09 12:58 - 2015-03-29 12:40 - 00003900 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1427629207
2015-12-09 12:58 - 2015-03-29 12:39 - 00000000 ____D C:\Program Files (x86)\Opera
2015-12-09 12:53 - 2009-07-14 06:08 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT

==================== Pliki w katalogu głównym wybranych folderów =======

2016-01-08 10:41 - 2016-01-08 10:41 - 0000074 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-01-08 14:31

==================== Koniec  FRST.txt ============================