Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:25-01-2016
Uruchomiony przez Sławomir (administrator)  RODZINNY (27-01-2016 12:31:42)
Uruchomiony z C:\Users\Sławomir\Desktop
Załadowane profile: Sławomir (Dostępne profile: Sławomir)
Platform: Windows 8.1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [6339656 2013-04-24] (Realtek semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [899680 2013-02-04] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2013-03-05] (Conexant Systems, Inc.)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17097200 2013-10-29] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [193008 2013-10-29] (Lenovo(beijing) Limited)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3050736 2013-04-04] (Synaptics Incorporated)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-30] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2015-07-27] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-07-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-12] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-12-12] (AVAST Software)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

AutoConfigURL: [S-1-5-21-1723503536-4267823742-188912024-1001] => hxxp://get-access.me/wpad.dat?97d80e5878ebc2a0b4316c8ceefcea041701166
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{5F31444D-DB3E-4EE7-BF69-090DCF09E538}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{9398C592-9438-427A-83A1-72A8787F90A6}: [DhcpNameServer] 10.0.0.13 10.0.0.12

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1723503536-4267823742-188912024-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-12-12] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-12-12] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Sławomir\AppData\Roaming\Mozilla\Firefox\Profiles\kgt2j0xe.default-1453821192482
FF Plugin ProgramFiles/Appdata: C:\Users\Sławomir\AppData\Roaming\mozilla\plugins\npoctoshape.dll [2015-07-27] (Octoshape ApS)

Chrome: 
=======
CHR Profile: C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-27]
CHR Extension: (Dokumenty Google) - C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-27]
CHR Extension: (Arkusze Google) - C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-27]
CHR Extension: (Dokumenty Google offline) - C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-27]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-12] (AVAST Software)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-20] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-08-02] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-08-21] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-04-18] ()
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2014-09-03] ()
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.)
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [68368 2013-10-29] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3388144 2013-04-18] (Intel® Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2014-07-21] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-12-12] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-12-18] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-12-12] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-12-12] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065208 2016-01-21] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [464256 2016-01-21] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2015-12-12] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-12-12] (AVAST Software)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1385272 2013-04-23] (Motorola Solutions, Inc.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2015-07-14] (LogMeIn Inc.)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8243144 2013-04-24] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-04-04] (Synaptics Incorporated)
S3 ssudcdf; C:\Windows\System32\drivers\ssudcdf.sys [36608 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
U3 axtdrpow; \??\C:\Users\SAWOMI~1\AppData\Local\Temp\axtdrpow.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-27 12:31 - 2016-01-27 12:32 - 00014306 _____ C:\Users\Sławomir\Desktop\FRST.txt
2016-01-27 12:31 - 2016-01-27 12:31 - 00008321 _____ C:\Users\Sławomir\Desktop\GMER.txt
2016-01-27 11:51 - 2016-01-27 11:51 - 02370560 _____ (Farbar) C:\Users\Sławomir\Desktop\FRST64.exe
2016-01-27 11:51 - 2016-01-27 11:51 - 00380416 _____ C:\Users\Sławomir\Desktop\wcog0kzx.exe
2016-01-27 00:43 - 2016-01-27 11:48 - 00001070 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-27 00:43 - 2016-01-27 00:43 - 00002281 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-01-27 00:43 - 2016-01-27 00:43 - 00002252 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-01-27 00:42 - 2016-01-27 11:47 - 00001066 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-27 00:42 - 2016-01-27 00:43 - 00000000 ____D C:\Program Files (x86)\Google
2016-01-27 00:42 - 2016-01-27 00:42 - 00927824 _____ (Google Inc.) C:\Users\Sławomir\Downloads\ChromeSetup(2).exe
2016-01-27 00:12 - 2016-01-27 00:12 - 00007610 _____ C:\Users\Sławomir\AppData\Local\Resmon.ResmonCfg
2016-01-26 23:40 - 2016-01-26 23:40 - 00027517 _____ C:\Users\Sławomir\Desktop\bookmarks_26.01.2016.html
2016-01-26 23:23 - 2016-01-27 12:31 - 00000000 ____D C:\FRST
2016-01-24 14:41 - 2016-01-24 14:41 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2016-01-24 14:33 - 2016-01-24 14:33 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-01-24 14:28 - 2016-01-24 14:28 - 00003943 _____ C:\Users\Sławomir\Desktop\KOD.txt
2016-01-24 14:24 - 2016-01-24 14:24 - 00000565 _____ C:\Users\Public\Desktop\TomTom MyDrive Connect.lnk
2016-01-24 14:23 - 2016-01-24 14:20 - 30177880 _____ (TomTom International B.V.) C:\Users\Sławomir\Downloads\InstallMyDriveConnect_4_0_7_2442.exe
2016-01-18 13:50 - 2016-01-18 13:50 - 00226984 _____ C:\Users\Sławomir\Downloads\Wyniki_Wojewodzkiego_Konkursu_Przyrodniczego.pdf
2016-01-16 15:06 - 2016-01-16 15:06 - 00000000 ____D C:\Users\Sławomir\Documents\My Games
2016-01-13 05:53 - 2016-01-13 05:53 - 00316352 _____ (FTDI Ltd.) C:\WINDOWS\system32\ftd2xx.dll
2016-01-13 05:53 - 2016-01-13 05:53 - 00274880 _____ (FTDI Ltd.) C:\WINDOWS\system32\FTLang.dll
2016-01-13 05:53 - 2016-01-13 05:53 - 00274360 _____ (FTDI Ltd.) C:\WINDOWS\SysWOW64\ftd2xx.dll
2016-01-13 05:53 - 2016-01-13 05:53 - 00168384 _____ (FTDI Ltd.) C:\WINDOWS\system32\ftbusui.dll
2016-01-13 05:53 - 2016-01-13 05:53 - 00110904 _____ (FTDI Ltd.) C:\WINDOWS\system32\Drivers\ftdibus.sys
2016-01-11 17:34 - 2016-01-24 18:48 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-01-07 11:13 - 2016-01-15 16:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-27 12:18 - 2014-01-11 22:59 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-01-27 07:58 - 2014-01-11 20:59 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1723503536-4267823742-188912024-1001
2016-01-27 07:51 - 2014-09-02 16:27 - 00003996 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9CBD1733-DFE7-455F-94B7-8DAA07C41146}
2016-01-27 03:02 - 2014-08-17 19:30 - 00172032 ___SH C:\Users\Sławomir\Downloads\Thumbs.db
2016-01-27 02:45 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf
2016-01-27 02:39 - 2013-08-22 14:36 - 00000000 ____D C:\Windows
2016-01-27 02:36 - 2014-02-19 16:28 - 02213888 ___SH C:\Users\Sławomir\Desktop\Thumbs.db
2016-01-27 02:35 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-27 02:34 - 2013-10-29 12:18 - 00031232 _____ C:\WINDOWS\system32\VfService.trf
2016-01-27 01:50 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-01-27 00:43 - 2015-08-31 15:21 - 00004042 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-01-27 00:43 - 2014-01-21 20:02 - 00000000 ____D C:\Users\Sławomir\AppData\Local\Google
2016-01-27 00:42 - 2015-06-17 16:58 - 00003806 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-01-27 00:40 - 2015-08-25 16:55 - 00000000 ____D C:\Users\Sławomir\AppData\Local\ElevatedDiagnostics
2016-01-27 00:31 - 2013-08-22 15:44 - 00564832 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-01-26 23:14 - 2015-12-12 16:59 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-01-26 16:24 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-01-24 18:49 - 2015-10-23 16:51 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-01-24 14:24 - 2014-06-29 19:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2016-01-24 14:22 - 2014-03-18 10:57 - 01828496 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-24 14:22 - 2014-03-18 10:28 - 00808198 _____ C:\WINDOWS\system32\perfh015.dat
2016-01-24 14:22 - 2014-03-18 10:28 - 00164014 _____ C:\WINDOWS\system32\perfc015.dat
2016-01-24 14:19 - 2014-01-29 13:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-23 14:54 - 2015-04-09 17:48 - 00000000 ____D C:\Users\Sławomir\AppData\Roaming\TS3Client
2016-01-21 17:01 - 2015-12-12 16:59 - 01065208 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2016-01-21 17:01 - 2015-12-12 16:59 - 00464256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2016-01-20 19:18 - 2014-01-11 22:59 - 00003818 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-01-18 13:56 - 2013-08-22 16:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-01-18 13:56 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-01-18 13:49 - 2014-01-11 20:41 - 00000000 ____D C:\Users\Sławomir\AppData\Local\Adobe
2016-01-15 16:26 - 2014-02-25 17:33 - 00000000 ____D C:\Users\Sławomir\AppData\LocalLow\Temp
2016-01-11 17:34 - 2013-10-29 12:12 - 00000000 ____D C:\ProgramData\Adobe
2016-01-11 17:34 - 2013-10-29 12:12 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-12-30 16:33 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-30 16:32 - 2015-08-24 22:01 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-12-30 16:32 - 2015-08-24 22:01 - 00000000 ___SD C:\WINDOWS\system32\GWX

==================== Pliki w katalogu głównym wybranych folderów =======

2015-08-20 18:44 - 2015-08-20 18:44 - 0000000 _____ () C:\Users\Sławomir\AppData\Roaming\gdfw.log
2015-08-20 18:44 - 2015-08-20 18:44 - 0000779 _____ () C:\Users\Sławomir\AppData\Roaming\gdscan.log
2014-02-04 20:28 - 2014-07-20 20:30 - 0000143 _____ () C:\Users\Sławomir\AppData\Roaming\WB.CFG
2015-11-21 21:39 - 2015-11-21 21:39 - 0004072 _____ () C:\Users\Sławomir\AppData\Local\recently-used.xbel
2016-01-27 00:12 - 2016-01-27 00:12 - 0007610 _____ () C:\Users\Sławomir\AppData\Local\Resmon.ResmonCfg
2015-08-13 20:08 - 2015-08-13 20:08 - 0000000 _____ () C:\Users\Sławomir\AppData\Local\{92DF5489-9C36-4ED8-B64A-8831E0D28096}
2016-01-24 14:33 - 2016-01-24 14:33 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Pliki do przeniesienia lub usunięcia:
====================
C:\Users\Sławomir\setup.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-01-24 18:02

==================== Koniec  FRST.txt ============================