Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:27-01-2016
Uruchomiony przez Ewa (administrator)  EWA-HP (30-01-2016 00:43:49)
Uruchomiony z C:\Users\Ewa\Desktop
Załadowane profile: Ewa (Dostępne profile: Ewa)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: IE)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
() C:\Program Files (x86)\Tor\tor.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwtxapps.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1580360 2014-08-20] (Bitdefender)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-2060724838-3934703078-1233277874-1000\...\Run: [Bitdefender Wallet Agent] => "C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe"
HKU\S-1-5-21-2060724838-3934703078-1233277874-1000\...\Run: [Agent Portfela Bitdefender] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [815088 2014-08-14] (Bitdefender)
HKU\S-1-5-21-2060724838-3934703078-1233277874-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-2060724838-3934703078-1233277874-1000\...\Policies\system: [DisableChangePassword] 0
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-08-01] (EasyBits Software Corp.)
ShellIconOverlayIdentifiers: [__SafeBox1] -> {152C96EB-288E-4EDC-B7C6-D21F8250ADF3} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox2] -> {342DAA0B-D796-460D-8566-901E08A1CCAD} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox3] -> {57595DAE-1AE1-4D97-A49E-67CBB53B52DF} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)
ShellIconOverlayIdentifiers: [__SafeBox4] -> {33816773-98AE-4723-ADE0-EBE54C8B5A67} => C:\Program Files\Bitdefender\Bitdefender SafeBox\SafeBoxShell.dll [2014-07-04] (Bitdefender)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local: [ActivePolicy] SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecPolicy{2996d584-b7e4-4160-b873-aef041cfcb50} <======= UWAGA (Ograniczenia - IP)
Tcpip\Parameters: [DhcpNameServer] 194.204.152.34 194.204.159.1
Tcpip\..\Interfaces\{3155BECC-7B60-4733-9240-9B93AC160E68}: [DhcpNameServer] 194.204.152.34 194.204.159.1
Tcpip\..\Interfaces\{FFCD6762-98A4-4066-A43F-B7795ECD1249}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\S-1-5-21-2060724838-3934703078-1233277874-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2060724838-3934703078-1233277874-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CPNTDF
SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://pl.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM -> {D6523AD3-6238-41FA-8C76-EFD64D53A97B} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CPNTDF
SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://pl.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 -> {D6523AD3-6238-41FA-8C76-EFD64D53A97B} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-2060724838-3934703078-1233277874-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2060724838-3934703078-1233277874-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2060724838-3934703078-1233277874-1000 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CPNTDF
SearchScopes: HKU\S-1-5-21-2060724838-3934703078-1233277874-1000 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://pl.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKU\S-1-5-21-2060724838-3934703078-1233277874-1000 -> {D6523AD3-6238-41FA-8C76-EFD64D53A97B} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-06-14] (Atheros Commnucations)
Toolbar: HKLM - Portfel Bitdefender - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2014-08-11] (Bitdefender)
Toolbar: HKLM-x32 - Portfel Bitdefender - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2014-08-11] (Bitdefender)
Toolbar: HKU\S-1-5-21-2060724838-3934703078-1233277874-1000 -> Brak nazwy - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Brak pliku

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [Brak pliku]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Brak pliku]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext
FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2014-09-04] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: HP Smart Print - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2013-04-28] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff [2014-09-04] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext

Chrome: 
=======
CHR Profile: C:\Users\Ewa\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Ewa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-30]
CHR Extension: (uBlock Origin) - C:\Users\Ewa\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-01-29]
CHR Extension: (Google Search) - C:\Users\Ewa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-02]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Ewa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-02]
CHR Extension: (Gmail) - C:\Users\Ewa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-19]
CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [5164328 2015-05-10] (Emsisoft Ltd)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-06-14] (Atheros) [Brak podpisu cyfrowego]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [97952 2011-06-14] (Atheros Commnucations) [Brak podpisu cyfrowego]
S3 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [77632 2014-08-08] (Bitdefender)
R2 ezSharedSvc; C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232 2010-04-23] (EasyBits Software AS) [Brak podpisu cyfrowego]
R2 hasplms; C:\Windows\system32\hasplms.exe [3750400 2009-12-16] (SafeNet Inc.)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1817088 2010-12-27] (Realsil Microelectronics Inc.) [Brak podpisu cyfrowego]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 MSSQL$ELISOFT; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
R2 SafeBox; C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [94624 2013-07-08] (Bitdefender)
R2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-09-11] () [Brak podpisu cyfrowego] <==== UWAGA
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1513952 2014-08-11] (Bitdefender)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 hpqwmiex; "C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe" [X]
S2 UPDATESRV; "C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe" /service [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1260120 2014-05-16] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [647752 2014-05-16] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-11-13] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107080 2012-10-29] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-11-04] (BitDefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2012-04-17] (BitDefender)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 epp64; C:\Windows\System32\DRIVERS\epp64.sys [135800 2015-03-24] (Emsisoft GmbH)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-08-23] (BitDefender LLC)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [419616 2014-07-02] (BitDefender S.R.L.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbfake; system32\DRIVERS\ewusbfake.sys [X]
U3 fxldapow; \??\C:/Temp\fxldapow.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-30 00:38 - 2016-01-30 00:43 - 00018974 _____ C:\Users\Ewa\Desktop\FRST.txt
2016-01-30 00:33 - 2016-01-30 00:43 - 00000000 ____D C:\FRST
2016-01-30 00:32 - 2016-01-30 00:32 - 00002816 _____ C:\Users\Ewa\Desktop\GMER.txt
2016-01-29 23:45 - 2016-01-29 23:45 - 02370560 _____ (Farbar) C:\Users\Ewa\Desktop\FRST64.exe
2016-01-29 23:43 - 2016-01-29 23:43 - 00380416 _____ C:\Users\Ewa\Downloads\x6g3plmj.exe
2016-01-29 23:24 - 2016-01-29 23:24 - 00020790 _____ C:\Users\Ewa\Desktop\dds.txt
2016-01-29 23:24 - 2016-01-29 23:24 - 00008775 _____ C:\Users\Ewa\Desktop\attach.txt
2016-01-29 23:17 - 2016-01-29 23:18 - 10440038 _____ (IdeaMK ) C:\Users\Ewa\Downloads\DDSViewerSetup.exe
2016-01-29 21:46 - 2016-01-29 21:46 - 00000000 ____D C:\ProgramData\Emsisoft
2016-01-29 21:29 - 2016-01-29 21:29 - 00001055 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2016-01-29 21:29 - 2016-01-29 21:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2016-01-29 21:28 - 2016-01-30 00:41 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware
2016-01-29 21:28 - 2016-01-29 21:28 - 00000000 ____D C:\Users\Ewa\Desktop\Emsisoft Anti-Malware 10
2016-01-29 21:28 - 2015-03-24 00:17 - 00135800 _____ (Emsisoft GmbH) C:\Windows\system32\Drivers\epp64.sys
2016-01-29 18:04 - 2016-01-29 18:04 - 00498455 _____ C:\ProgramData\1454086481.bdinstall.bin
2016-01-29 18:03 - 2016-01-29 18:03 - 00002126 _____ C:\Users\Public\Desktop\Bitdefender Total Security 2015.lnk
2016-01-29 18:03 - 2016-01-29 18:03 - 00000684 ____H C:\bdr-cf01
2016-01-29 18:03 - 2016-01-29 18:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2015
2016-01-29 18:02 - 2012-04-17 14:34 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys
2016-01-29 18:01 - 2013-11-13 15:41 - 00093600 _____ (BitDefender LLC) C:\Windows\system32\Drivers\BdfNdisf6.sys
2016-01-29 18:00 - 2014-05-16 13:04 - 00647752 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys
2016-01-29 18:00 - 2014-05-16 13:01 - 01260120 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys
2016-01-29 18:00 - 2013-11-04 15:47 - 00082824 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys
2016-01-29 18:00 - 2013-11-04 15:47 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
2016-01-29 18:00 - 2012-11-02 13:17 - 00261056 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys
2016-01-29 17:58 - 2016-01-29 18:09 - 00000000 ____D C:\Users\Ewa\AppData\Roaming\Bitdefender
2016-01-29 17:58 - 2016-01-29 18:03 - 00253404 ____H C:\bdr-ld01
2016-01-29 17:58 - 2016-01-29 18:03 - 00009216 ____H C:\bdr-ld01.mbr
2016-01-29 17:58 - 2014-07-04 17:49 - 49563064 ____H C:\bdr-im01.gz
2016-01-29 17:58 - 2013-08-13 13:38 - 03271472 ____H C:\bdr-bz01
2016-01-29 17:54 - 2016-01-29 18:04 - 00000000 ____D C:\ProgramData\Bitdefender
2016-01-29 17:54 - 2016-01-29 17:54 - 00000000 _____ C:\Windows\system32\BDSandBoxUISkin32.dll
2016-01-29 17:54 - 2014-07-02 16:47 - 00419616 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2016-01-29 17:54 - 2013-11-04 15:47 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUISkin.dll
2016-01-29 17:54 - 2013-11-04 15:46 - 00034384 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUH.dll
2016-01-29 17:54 - 2013-08-23 12:48 - 00150256 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2016-01-29 17:41 - 2016-01-29 17:58 - 00000000 ____D C:\Program Files\Bitdefender
2016-01-29 17:41 - 2016-01-29 17:49 - 382108816 _____ C:\Users\Ewa\Downloads\BDTS_x64.exe
2016-01-29 17:31 - 2016-01-29 17:31 - 00188536 _____ C:\Windows\ntbtlog.txt
2016-01-29 17:19 - 2016-01-29 17:19 - 00000385 _____ C:\Users\Ewa\AppData\Roaminguser_gensett.xml
2016-01-29 17:12 - 2016-01-29 22:59 - 00004032 _____ C:\bdlog.txt
2016-01-29 17:09 - 2016-01-29 17:09 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2016-01-29 17:07 - 2016-01-29 18:04 - 00000000 ____D C:\ProgramData\BDLogging
2016-01-29 17:07 - 2016-01-29 17:07 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2016-01-29 17:07 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2016-01-29 17:03 - 2016-01-29 17:54 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2016-01-29 17:03 - 2016-01-29 17:03 - 00000000 ____D C:\Users\Ewa\AppData\Roaming\QuickScan
2016-01-29 17:02 - 2016-01-30 00:43 - 00000000 ____D C:\Temp
2016-01-29 15:24 - 2016-01-29 15:41 - 00000000 ____D C:\Windows\SoftwareDistribution.old
2016-01-29 14:38 - 2016-01-29 14:59 - 00000000 ____D C:\Qoobox
2016-01-29 14:38 - 2016-01-29 14:57 - 00000000 ____D C:\Windows\erdnt
2016-01-29 14:38 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2016-01-29 14:38 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2016-01-29 14:38 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-01-29 14:38 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-01-29 14:38 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-01-29 14:38 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2016-01-29 14:38 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2016-01-29 14:38 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2016-01-29 14:37 - 2016-01-29 14:37 - 05652316 ____R (Swearware) C:\Users\Ewa\Downloads\ComboFix.exe
2016-01-29 14:31 - 2016-01-29 14:31 - 00000050 _____ C:\Windows\system32\Null
2016-01-29 12:21 - 2016-01-29 16:58 - 00000000 ____D C:\AdwCleaner
2016-01-29 12:14 - 2016-01-29 12:20 - 00000000 ____D C:\Windows\system32\oldcatroot2
2016-01-29 00:19 - 2016-01-29 00:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2016-01-29 00:19 - 2016-01-29 00:19 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2016-01-29 00:19 - 2015-12-18 11:00 - 00755200 _____ C:\Windows\system32\xvidcore.dll
2016-01-29 00:19 - 2015-12-18 11:00 - 00309248 _____ C:\Windows\system32\xvidvfw.dll
2016-01-29 00:19 - 2015-10-24 18:00 - 00126976 _____ C:\Windows\system32\ff_vfw.dll
2016-01-29 00:19 - 2015-10-24 18:00 - 00112128 _____ C:\Windows\SysWOW64\ff_vfw.dll
2016-01-29 00:19 - 2015-02-28 17:22 - 03571200 _____ (x264vfw project) C:\Windows\system32\x264vfw64.dll
2016-01-29 00:19 - 2015-02-28 17:21 - 03591680 _____ (x264vfw project) C:\Windows\SysWOW64\x264vfw.dll
2016-01-29 00:19 - 2012-07-21 12:55 - 00180736 _____ (fccHandler) C:\Windows\system32\ac3acm.acm
2016-01-29 00:19 - 2012-07-21 12:54 - 00122880 _____ (fccHandler) C:\Windows\SysWOW64\ac3acm.acm
2016-01-29 00:19 - 2011-12-07 19:37 - 00148992 _____ ( ) C:\Windows\system32\lagarith.dll
2016-01-29 00:19 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
2016-01-29 00:15 - 2016-01-29 00:16 - 42362568 _____ (KLCP ) C:\Users\Ewa\Downloads\K-Lite_Codec_Pack_1185_Mega.exe
2016-01-29 00:04 - 2016-01-29 00:04 - 00003106 _____ C:\Windows\System32\Tasks\{C7D1C61A-A881-4E7A-B7AE-6EE13F6B5F42}
2016-01-29 00:03 - 2016-01-29 14:59 - 00000000 ____D C:\Users\Malisa
2016-01-29 00:03 - 2016-01-29 00:03 - 00000000 ____D C:\Users\Malisa\Desktop\sp52420&524211
2016-01-29 00:02 - 2011-02-15 11:37 - 09888360 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsPStorIcon.dll
2016-01-29 00:02 - 2011-02-15 11:37 - 00335464 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsPStor.sys
2016-01-28 23:58 - 2016-01-28 23:58 - 00003106 _____ C:\Windows\System32\Tasks\{5B13B85D-F3F9-4CD4-BBED-60A85CBA1736}
2016-01-28 23:55 - 2011-04-27 18:01 - 00443040 _____ (Atheros) C:\Windows\system32\athihvs.dll
2016-01-28 23:47 - 2016-01-28 23:55 - 00000000 ____D C:\ProgramData\Atheros
2016-01-28 23:43 - 2016-01-28 23:44 - 00000000 ____D C:\Program Files (x86)\Bluetooth Suite
2016-01-28 23:43 - 2016-01-28 23:43 - 00000000 ____D C:\Users\Ewa\AppData\Roaming\Atheros
2016-01-28 23:31 - 2011-09-17 10:17 - 03073256 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-01-28 23:31 - 2011-09-17 08:18 - 00098408 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll
2016-01-28 23:31 - 2011-09-17 07:09 - 03209320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2016-01-28 23:31 - 2011-09-17 02:39 - 02519656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-01-28 23:31 - 2011-08-20 06:54 - 01881704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-01-28 23:31 - 2011-07-23 11:35 - 01247848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-01-28 23:31 - 2011-07-01 08:14 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-01-28 23:27 - 2016-01-28 23:27 - 00000000 ____D C:\Program Files (x86)\AMD High-Definition Graphics Driver
2016-01-28 23:21 - 2016-01-29 12:02 - 00000000 ____D C:\Users\Ewa\Desktop\kolorowanki
2016-01-28 23:17 - 2016-01-28 23:17 - 00001195 _____ C:\Users\Ewa\Desktop\Pobrane.lnk
2016-01-28 22:22 - 2016-01-28 23:20 - 00001852 _____ C:\Users\Ewa\Desktop\SUPERAntiSpyware Professional.lnk
2016-01-28 22:22 - 2016-01-28 22:22 - 00000000 ____D C:\Users\Ewa\AppData\Roaming\SUPERAntiSpyware.com
2016-01-28 22:22 - 2016-01-28 22:22 - 00000000 ____D C:\Users\Ewa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2016-01-28 22:22 - 2016-01-28 22:22 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2016-01-28 22:22 - 2016-01-28 22:22 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2016-01-28 22:18 - 2016-01-28 22:18 - 00000000 ____D C:\Users\Ewa\AppData\Roaming\AIMP
2016-01-28 22:18 - 2016-01-28 22:18 - 00000000 ____D C:\Program Files (x86)\AIMP
2016-01-28 22:17 - 2016-01-28 22:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer
2016-01-28 22:17 - 2016-01-28 22:17 - 00000000 ____D C:\ProgramData\ALLPlayer
2016-01-28 22:17 - 2016-01-28 22:17 - 00000000 ____D C:\Program Files (x86)\ALLPlayer
2016-01-28 22:17 - 2015-12-18 11:00 - 00674816 _____ C:\Windows\SysWOW64\xvidcore.dll
2016-01-28 22:17 - 2013-04-05 20:26 - 02106368 _____ C:\Windows\SysWOW64\ac3filter.ax
2016-01-28 22:17 - 2013-04-05 20:26 - 00276992 _____ (IntelleSoft) C:\Windows\SysWOW64\BugTrap.dll
2016-01-28 22:17 - 2007-10-07 14:36 - 00258048 _____ C:\Windows\SysWOW64\libFLAC.dll
2016-01-28 22:16 - 2016-01-28 22:16 - 00001023 _____ C:\Users\Ewa\Desktop\Odkurzacz.lnk
2016-01-28 22:16 - 2016-01-28 22:16 - 00000000 ____D C:\Program Files (x86)\Odkurzacz
2016-01-28 22:15 - 2016-01-28 22:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-01-28 22:15 - 2016-01-28 22:15 - 00000000 ____D C:\Program Files\7-Zip
2016-01-28 22:14 - 2016-01-28 23:20 - 00001768 _____ C:\Users\Ewa\Desktop\Defraggler.lnk
2016-01-28 22:14 - 2016-01-28 22:14 - 00000000 ____D C:\Program Files\Defraggler
2016-01-28 19:54 - 2016-01-28 19:54 - 00002782 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-01-28 19:50 - 2016-01-29 17:09 - 00003612 _____ C:\Windows\System32\Tasks\WSManHTTPConfig
2016-01-28 19:47 - 2016-01-28 20:04 - 00000000 ____D C:\Windows\pss
2016-01-28 19:46 - 2016-01-25 20:00 - 01507840 _____ C:\Users\Ewa\Desktop\adwcleaner_5.031.exe
2016-01-28 19:41 - 2016-01-29 20:09 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-01-28 19:41 - 2016-01-28 21:53 - 00001100 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-01-28 19:41 - 2016-01-28 19:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-01-28 19:41 - 2016-01-28 19:41 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-01-28 19:41 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-01-28 19:41 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-01-28 19:41 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-01-28 19:36 - 2016-01-28 21:52 - 00000866 _____ C:\Users\Ewa\Desktop\CCleaner.lnk
2016-01-28 19:36 - 2016-01-28 19:36 - 00000000 ____D C:\Program Files\CCleaner
2016-01-07 17:19 - 2016-01-07 17:19 - 00007847 _____ C:\Users\Ewa\Desktop\wniosek-o-sprawdzenie-kwalifikacji-do-obslugi-UNO KL3 i 2 ADR-1.rar

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-29 23:08 - 2009-07-14 05:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-29 23:08 - 2009-07-14 05:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-29 23:00 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-29 21:38 - 2009-07-14 06:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-01-29 20:55 - 2012-06-21 15:06 - 00000000 ____D C:\Users\Ewa
2016-01-29 18:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-01-29 14:50 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2016-01-29 14:39 - 2011-08-01 23:23 - 00788478 _____ C:\Windows\system32\perfh015.dat
2016-01-29 14:39 - 2011-08-01 23:23 - 00174516 _____ C:\Windows\system32\perfc015.dat
2016-01-29 14:39 - 2009-07-14 06:13 - 01805722 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-29 01:11 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\CatRoot2Old
2016-01-29 00:19 - 2012-11-16 20:24 - 00000000 ____D C:\Users\Ewa\Documents\Youcam
2016-01-29 00:19 - 2012-06-21 17:58 - 00000000 ____D C:\Users\Ewa\AppData\Roaming\_MDLogs
2016-01-29 00:13 - 2011-02-10 20:23 - 00000000 ____D C:\SWSetup
2016-01-29 00:09 - 2012-11-16 14:49 - 00000000 ____D C:\Windows\Minidump
2016-01-29 00:09 - 2007-01-02 02:25 - 00000000 ____D C:\Windows\Panther
2016-01-29 00:03 - 2011-11-06 21:30 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-01-29 00:02 - 2011-11-06 21:31 - 00000000 ____D C:\Windows\SysWOW64\sda
2016-01-29 00:01 - 2012-06-21 15:07 - 00000000 ____D C:\Users\Ewa\AppData\Roaming\Hewlett-Packard
2016-01-29 00:01 - 2011-11-06 21:38 - 00000000 ____D C:\Windows\Hewlett-Packard
2016-01-28 23:55 - 2011-11-06 21:32 - 00000000 ____D C:\Windows\system32\nn-NO
2016-01-28 23:55 - 2011-11-06 21:32 - 00000000 ____D C:\Program Files (x86)\Atheros
2016-01-28 23:52 - 2012-06-21 16:16 - 00000000 ____D C:\Users\Ewa\Documents\Bluetooth Folder
2016-01-28 23:44 - 2011-06-14 17:03 - 00246804 _____ C:\Windows\system32\Drivers\AtherosBt.bin
2016-01-28 23:44 - 2011-06-14 17:03 - 00001274 _____ C:\Windows\system32\Drivers\ramps_0x01020200_26.dfu
2016-01-28 23:44 - 2011-06-14 17:03 - 00001242 _____ C:\Windows\system32\Drivers\ramps_0x01020200_40_0x01.dfu
2016-01-28 23:44 - 2011-06-14 17:03 - 00001204 _____ C:\Windows\system32\Drivers\ramps_0x01020200_40_0x02.dfu
2016-01-28 23:44 - 2011-06-14 17:03 - 00001204 _____ C:\Windows\system32\Drivers\ramps_0x01020200_40.dfu
2016-01-28 23:32 - 2011-11-06 21:30 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-01-28 23:31 - 2011-11-06 21:31 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-01-28 23:23 - 2012-11-12 21:00 - 00000000 ____D C:\Users\Ewa\AppData\Roaming\SoftGrid Client
2016-01-28 23:07 - 2013-12-03 11:20 - 00002178 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-01-28 23:07 - 2013-12-03 11:20 - 00002149 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-01-28 22:57 - 2011-11-07 07:23 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-01-28 22:57 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-01-28 22:57 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\DVD Maker
2016-01-28 22:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-01-28 21:54 - 2011-08-01 14:05 - 00000000 ____D C:\Windows\en
2016-01-28 21:53 - 2014-08-21 20:58 - 00001960 _____ C:\Users\Public\Desktop\Router Wi-Fi Movil.lnk
2016-01-28 21:53 - 2014-05-18 20:21 - 00002013 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2016-01-28 21:53 - 2013-07-31 06:17 - 00002164 _____ C:\Users\Public\Desktop\HP Deskjet 3520 series.lnk
2016-01-28 21:53 - 2011-08-01 14:06 - 00002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2016-01-28 21:53 - 2011-08-01 14:00 - 00002423 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk
2016-01-28 21:53 - 2009-07-14 05:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-01-28 21:53 - 2009-07-14 05:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-01-28 21:53 - 2009-07-14 05:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-01-28 21:52 - 2013-06-19 04:16 - 00001425 _____ C:\Users\Ewa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-01-28 21:52 - 2012-12-19 16:47 - 00002349 _____ C:\Users\Ewa\Desktop\Microsoft Excel Starter 2010.lnk
2016-01-28 21:52 - 2012-06-21 16:16 - 00001425 _____ C:\Users\Ewa\Desktop\wiktor.lnk
2016-01-28 21:52 - 2009-07-14 06:01 - 00001218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-01-28 21:52 - 2009-07-14 05:49 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-01-28 20:59 - 2011-11-06 21:45 - 00000000 ____D C:\ProgramData\Norton
2016-01-28 20:57 - 2014-05-25 15:02 - 00000000 ____D C:\Program Files (x86)\Internet Mobilny
2016-01-28 20:56 - 2014-05-25 15:02 - 00000000 ____D C:\ProgramData\DatacardService
2016-01-28 20:54 - 2011-08-01 14:01 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2016-01-28 20:54 - 2011-08-01 13:49 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2016-01-28 20:53 - 2011-08-01 13:53 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2016-01-28 20:51 - 2014-07-24 10:26 - 00000000 ____D C:\Program Files (x86)\Opera
2016-01-28 20:50 - 2011-08-01 14:02 - 00000000 ____D C:\Program Files (x86)\Windows Live
2016-01-28 20:47 - 2011-08-01 14:02 - 00000000 ____D C:\Program Files\Windows Live
2016-01-28 20:46 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-01-28 20:44 - 2013-12-03 11:23 - 00000000 ____D C:\Users\Ewa\AppData\Roaming\RealNetworks
2016-01-28 20:44 - 2013-12-03 11:23 - 00000000 ____D C:\ProgramData\RealNetworks
2016-01-28 20:44 - 2013-12-03 11:21 - 00000000 ____D C:\Users\Ewa\AppData\Roaming\Real
2016-01-28 20:44 - 2013-12-03 11:21 - 00000000 ____D C:\Program Files (x86)\Real
2016-01-28 20:38 - 2012-11-12 09:55 - 00000000 ____D C:\Program Files (x86)\iPlus
2016-01-28 20:37 - 2013-04-28 19:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2016-01-28 20:37 - 2013-04-28 19:58 - 00000000 ____D C:\Program Files (x86)\HP
2016-01-28 20:37 - 2012-11-13 06:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Informator
2016-01-28 20:23 - 2015-09-21 09:02 - 00000000 ____D C:\Windows\System32\Tasks\Remediation
2016-01-28 20:18 - 2013-12-03 11:24 - 00000000 ____D C:\Program Files\Google
2016-01-28 20:18 - 2013-12-03 11:19 - 00000000 ____D C:\Program Files (x86)\Google
2016-01-28 20:09 - 2011-08-01 13:55 - 00000000 ____D C:\Program Files (x86)\HP Games
2016-01-28 20:09 - 2011-06-14 05:09 - 00000000 ____D C:\Program Files\Hewlett-Packard
2016-01-28 20:06 - 2011-08-01 13:55 - 00000000 ____D C:\ProgramData\WildTangent
2016-01-28 19:55 - 2012-07-01 04:35 - 00000000 ____D C:\Program Files (x86)\Draco - Faktury VAT
2016-01-03 15:52 - 2015-08-02 17:19 - 00000000 ____D C:\Users\Public\Downloads\Norton

==================== Pliki w katalogu głównym wybranych folderów =======

2015-11-08 14:51 - 2015-11-08 14:51 - 0008636 _____ () C:\Users\Ewa\AppData\Roaming\HELP_DECRYPT.HTML
2015-11-08 14:51 - 2015-11-08 14:51 - 0046037 _____ () C:\Users\Ewa\AppData\Roaming\HELP_DECRYPT.PNG
2015-11-08 14:51 - 2015-11-08 14:51 - 0004258 _____ () C:\Users\Ewa\AppData\Roaming\HELP_DECRYPT.TXT
2015-11-08 14:51 - 2015-11-08 14:51 - 0000296 _____ () C:\Users\Ewa\AppData\Roaming\HELP_DECRYPT.URL
2015-10-30 11:34 - 2015-10-30 11:34 - 0018656 _____ () C:\Users\Ewa\AppData\Roaming\ICSW_1Q1F1S1C1P1E1C1F1N1C1T1H2UtF1E1ItJ1V0R1P1T1R1M0I2Z.txt
2015-05-20 11:59 - 2015-05-20 11:59 - 0167712 _____ () C:\Users\Ewa\AppData\Roaming\Torrent downloaded from Kickass.to.txt
2013-07-27 17:40 - 2015-09-24 15:51 - 0000199 _____ () C:\Users\Ewa\AppData\Roaming\WB.CFG
2013-07-10 21:24 - 2013-07-10 21:24 - 0000005 _____ () C:\Users\Ewa\AppData\Roaming\WBPU-Q4-TTL.DAT
2013-07-27 17:47 - 2013-07-27 17:47 - 0000005 _____ () C:\Users\Ewa\AppData\Roaming\WBPU-Q5-TTL.DAT
2013-06-24 16:11 - 2014-01-29 17:24 - 0000005 _____ () C:\Users\Ewa\AppData\Roaming\WBPU-TTL.DAT
2015-10-08 16:23 - 2015-11-02 09:51 - 0000000 ____H () C:\Users\Ewa\AppData\Roaming\wincfg.txt
2015-05-10 11:09 - 2015-11-07 15:58 - 0000000 ____H () C:\Users\Ewa\AppData\Roaming\winmgr.txt
2015-09-21 17:40 - 2015-10-08 16:21 - 0000000 ____H () C:\Users\Ewa\AppData\Roaming\winsrvc.txt
2015-11-08 14:51 - 2015-11-08 14:51 - 0008636 _____ () C:\Users\Ewa\AppData\Roaming\Microsoft\HELP_DECRYPT.HTML
2015-11-08 14:51 - 2015-11-08 14:51 - 0046037 _____ () C:\Users\Ewa\AppData\Roaming\Microsoft\HELP_DECRYPT.PNG
2015-11-08 14:51 - 2015-11-08 14:51 - 0004258 _____ () C:\Users\Ewa\AppData\Roaming\Microsoft\HELP_DECRYPT.TXT
2015-11-08 14:51 - 2015-11-08 14:51 - 0000296 _____ () C:\Users\Ewa\AppData\Roaming\Microsoft\HELP_DECRYPT.URL
2016-01-29 18:04 - 2016-01-29 18:04 - 0498455 _____ () C:\ProgramData\1454086481.bdinstall.bin
2013-04-28 19:57 - 2013-04-28 19:57 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-11-08 14:50 - 2015-11-08 14:50 - 0008636 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-11-08 14:50 - 2015-11-08 14:50 - 0046037 _____ () C:\ProgramData\HELP_DECRYPT.PNG
2015-11-08 14:50 - 2015-11-08 14:50 - 0004258 _____ () C:\ProgramData\HELP_DECRYPT.TXT
2015-11-08 14:50 - 2015-11-08 14:50 - 0000296 _____ () C:\ProgramData\HELP_DECRYPT.URL

Niektóre zerobajtowe pliki/foldery:
==========================
C:\Windows\System32\BDSandBoxUISkin32.dll

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-01-29 20:07

==================== Koniec  FRST.txt ============================