Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:27-01-2016
Uruchomiony przez Maaciek (administrator)  ELA-KOMPUTER (05-02-2016 13:59:41)
Uruchomiony z C:\Users\Maaciek\Downloads
Załadowane profile: Maaciek (Dostępne profile: Ela & Maaciek)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
() C:\Users\Maaciek\Downloads\qt54ptx8.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2010-04-19] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12111576 2015-02-21] (Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-07-01] (Avast Software s.r.o.)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2015-01-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
HKLM\...\Policies\Explorer: [RestrictRun] 0
HKU\S-1-5-21-2744727062-2866847131-1637843027-1011\...\Run: [F.lux] => C:\Users\Maaciek\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-16] (Flux Software LLC)
HKU\S-1-5-21-2744727062-2866847131-1637843027-1011\...\Policies\Explorer: [RestrictRun] 0
HKU\S-1-5-21-2744727062-2866847131-1637843027-1011\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Tropix.scr [3974656 2010-01-04] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-07-01] (Avast Software s.r.o.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{202A691E-1362-4D23-A6CF-A3F52596334F}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{333B64B9-2473-4623-9935-B502B2A6CA9B}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{34929617-FC0D-4C95-844E-540C6808516F}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{3F12CE70-9157-405A-AE1D-D735C2891407}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{E2092249-E198-46C5-A2DF-FF16CE8CB2CA}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\S-1-5-21-2744727062-2866847131-1637843027-1011\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2744727062-2866847131-1637843027-1011\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2744727062-2866847131-1637843027-1011\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKU\S-1-5-21-2744727062-2866847131-1637843027-1011\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://eeepc.asus.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {AB7E738E-D9E0-4E59-A84F-475BC00BD4FE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll [2015-02-19] (IObit)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-05-11] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-01] (Avast Software s.r.o.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2014-10-17] (IObit)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-05-11] (Oracle Corporation)
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Maaciek\AppData\Roaming\Mozilla\Firefox\Profiles\h6wlrabr.default
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll [2014-06-03] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin: @idsoftware.com/QuakeLive -> C:\ProgramData\id Software\QuakeLive\npquakezero.dll [2012-02-14] (id Software Inc.)
FF Plugin: @IObit.com/np_Asc_Plugin -> C:\Program Files\IObit\Surfing Protection\BrowerProtect\np_Asc_plugin.dll [2013-07-17] (IObit)
FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-05-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-05-11] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll [2014-02-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2008-11-13] (Microsoft Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [Brak pliku]
FF Plugin: @t.garena.com/garenatalk -> C:\Program Files\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll [Brak pliku]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=1.1.11 -> D:\Program Files\VideoLAN\VLC\npvlc.dll [Brak pliku]
FF Plugin: @vividas.com/npVividasPlayer -> C:\Program Files\Vividas\Player\npVividasPlayer.dll [2011-02-10] ( )
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2744727062-2866847131-1637843027-1011: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Maaciek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-11-16] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npffvsharetvplg.dll [2012-10-26] (vShare.tv)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF Extension: Firefox Old Version Update Hotfix - C:\Users\Maaciek\AppData\Roaming\Mozilla\Firefox\Profiles\h6wlrabr.default\Extensions\firefox-hotfix@mozilla.org.xpi [2014-08-26] [Brak podpisu cyfrowego]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Maaciek\AppData\Roaming\Mozilla\Firefox\Profiles\h6wlrabr.default\Extensions\iobitascsurfingprotection@iobit.com [2015-02-19] [Brak podpisu cyfrowego]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-14]

Chrome: 
=======
CHR Profile: C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-06]
CHR Extension: (Dysk Google) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd [2014-10-06]
CHR Extension: (YouTube) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]
CHR Extension: (Adblock Plus) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-04]
CHR Extension: (Google Search) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Dokumenty Google offline) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-22]
CHR Extension: (AdBlock) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-01]
CHR Extension: (Avast Online Security) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-09]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-21]
CHR Extension: (Gmail) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-31]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-01]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S4 AdvancedSystemCareService8; C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe [815392 2014-11-04] (IObit)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-07-01] (Avast Software s.r.o.)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3207800 2015-07-01] (Avast Software)
S4 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [Brak podpisu cyfrowego]
S4 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
S4 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S4 game assistant by-pass UAC; C:\Program Files\IObit\Game Assistant\gatsvc.exe [80728 2014-10-28] (IObit)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [915600 2015-01-16] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [Brak podpisu cyfrowego]
S4 IMFservice; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [341824 2013-11-11] (IObit)
S4 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2724128 2015-01-16] (IObit)
R2 Net Driver HPZ12; C:\windows\system32\HPZinw12.dll [44032 2009-05-15] (Hewlett-Packard) [Brak podpisu cyfrowego]
S3 npggsvc; C:\windows\system32\GameMon.des [3758336 2015-11-29] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-01-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19775632 2015-01-16] (NVIDIA Corporation)
R2 Pml Driver HPZ12; C:\windows\system32\HPZipm12.dll [53760 2009-05-15] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [252632 2015-02-21] (Realtek Semiconductor)
S4 RzKLService; C:\Program Files\Razer\Razer Game Booster\RzKLService.exe [105448 2013-11-22] (Razer Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-07-13] (Microsoft Corporation)
S3 Sony PC Companion; "C:\Program Files\Sony\Sony PC Companion\PCCService.exe" [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 ACEDRV05; C:\windows\system32\drivers\ACEDRV05.sys [97792 2013-10-07] (Protect Software GmbH) [Brak podpisu cyfrowego]
S3 andnetadb; C:\windows\System32\Drivers\lgandnetadb.sys [25856 2014-03-28] (Google Inc)
S3 AndNetDiag; C:\windows\System32\DRIVERS\lgandnetdiag.sys [23168 2014-03-28] (LG Electronics Inc.)
S3 ANDNetModem; C:\windows\System32\DRIVERS\lgandnetmodem.sys [27776 2014-03-28] (LG Electronics Inc.)
S3 andnetndis; C:\windows\System32\DRIVERS\lgandnetndis.sys [74240 2014-03-28] (LG Electronics Inc.)
R1 AsUpIO; C:\windows\System32\drivers\AsUpIO.sys [11832 2011-02-09] ()
R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24144 2015-07-01] ()
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [74976 2015-07-01] (Avast Software s.r.o.)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81728 2015-07-01] (Avast Software s.r.o.)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49904 2015-07-01] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [787760 2015-07-01] (Avast Software s.r.o.)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [428120 2015-07-01] (Avast Software s.r.o.)
R2 aswStm; C:\windows\system32\drivers\aswStm.sys [106912 2015-07-01] (Avast Software s.r.o.)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [209048 2015-07-01] ()
S3 CEDRIVER60; C:\Program Files\Cheat Engine 6.1\dbk32.sys [72576 2011-06-11] () [Brak podpisu cyfrowego]
R1 dtsoftbus01; C:\windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-11-09] (Disc Soft Ltd)
S3 epmntdrv; C:\windows\system32\epmntdrv.sys [14216 2011-07-29] () [Brak podpisu cyfrowego]
S3 EuGdiDrv; C:\windows\system32\EuGdiDrv.sys [8456 2011-07-29] () [Brak podpisu cyfrowego]
S3 FileMonitor; C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [21480 2013-03-23] (IObit)
S3 ggsomc; C:\windows\System32\DRIVERS\ggsomc.sys [26328 2014-08-04] (Sony Mobile Communications)
S3 hitmanpro37; C:\windows\system32\drivers\hitmanpro37.sys [30976 2014-08-03] ()
S3 HPMo4DE3; C:\windows\System32\DRIVERS\HPMo4DE3.sys [20992 2011-03-09] (TPMX Electronics Ltd.)
S3 HPub4DE3; C:\windows\System32\Drivers\HPub4DE3.sys [13824 2011-04-12] (TPMX Electronics Ltd.)
R1 HWiNFO32; C:\windows\system32\drivers\HWiNFO32.SYS [23840 2015-02-19] (REALiX(tm))
R3 kbfiltr; C:\windows\System32\DRIVERS\kbfiltr.sys [13880 2010-04-19] ( )
R3 L1C; C:\windows\System32\DRIVERS\L1C62x86.sys [110280 2015-02-21] (Qualcomm Atheros Co., Ltd.)
R3 NPPTNT2; C:\windows\system32\npptNT2.sys [4682 2004-12-30] (INCA Internet Co., Ltd.) [Brak podpisu cyfrowego]
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18576 2015-01-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\windows\System32\drivers\nvvad32v.sys [32912 2014-11-22] (NVIDIA Corporation)
S3 RegFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [32288 2013-11-19] (IObit.com)
R3 rtsuvc; C:\windows\System32\DRIVERS\rtsuvc.sys [7091416 2015-02-21] (Realtek Semiconductor Corp.)
R0 SmartDefragDriver; C:\windows\System32\Drivers\SmartDefragDriver.sys [15672 2013-05-22] ()
S0 sptd; C:\windows\System32\Drivers\sptd.sys [685816 2011-12-30] (Duplex Secure Ltd.)
S3 ssm_bus; C:\windows\System32\DRIVERS\ssm_bus.sys [58320 2005-08-30] (MCCI)
S3 UrlFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [20944 2013-11-19] (IObit.com)
S3 usbrndis6; C:\windows\System32\DRIVERS\usb80236.sys [15872 2013-03-16] (Microsoft Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-07-01] (Avast Software)
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 cpuz138; \??\C:\windows\TEMP\cpuz138\cpuz138_x32.sys [X]
U3 uxriipow; \??\C:\Users\Maaciek\AppData\Local\Temp\uxriipow.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-02-05 13:59 - 2016-02-05 14:00 - 00021052 _____ C:\Users\Maaciek\Downloads\FRST.txt
2016-02-05 13:49 - 2016-02-05 13:50 - 01721856 _____ (Farbar) C:\Users\Maaciek\Downloads\FRST.exe
2016-02-05 13:48 - 2016-02-05 13:48 - 00380416 _____ C:\Users\Maaciek\Downloads\qt54ptx8.exe
2016-02-05 13:38 - 2016-02-05 13:38 - 00001955 _____ C:\Users\Maaciek\Desktop\epm0 — skrót.lnk
2016-02-05 10:01 - 2016-02-05 10:01 - 00029723 _____ C:\Users\Ela\Downloads\bilet_KA02399225_2016-02-10.pdf
2016-02-04 21:35 - 2016-02-04 21:35 - 00998400 _____ C:\Users\Maaciek\Downloads\MicrosoftFixit50814.msi
2016-02-04 20:51 - 2016-02-04 20:52 - 04190144 _____ (Crystal Dew World ) C:\Users\Maaciek\Downloads\CrystalDiskInfo6_7_5-en.exe
2016-02-04 20:49 - 2016-02-04 20:50 - 02512567 _____ C:\Users\Maaciek\Downloads\SystemExplorerPortable_700.zip
2016-02-04 20:46 - 2016-02-04 20:47 - 04202240 _____ C:\Users\Maaciek\Downloads\memtest86-iso.zip
2016-02-04 18:40 - 2016-02-04 18:46 - 00000000 ____D C:\AdwCleaner
2016-02-04 17:39 - 2016-02-04 17:39 - 00000000 ____D C:\32788R22FWJFW
2016-02-04 17:38 - 2016-02-05 13:59 - 00000000 ____D C:\FRST
2016-02-04 16:17 - 2015-11-29 09:02 - 03758336 _____ (INCA Internet Co., Ltd.) C:\windows\system32\GameMon.des
2016-02-04 16:17 - 2004-12-30 13:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\windows\system32\npptNT2.sys
2016-02-04 16:17 - 2003-07-15 22:17 - 00005174 _____ C:\windows\system32\nppt9x.vxd
2016-02-04 13:36 - 2016-02-04 13:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2016-02-04 13:36 - 2016-02-04 13:36 - 00000000 ____D C:\Users\Maaciek\Downloads\Gameforge Live
2016-02-04 13:36 - 2016-02-04 13:36 - 00000000 ____D C:\Users\Maaciek\AppData\Local\Gameforge4d
2016-02-03 22:08 - 2016-02-03 22:08 - 00000490 _____ C:\Users\Maaciek\Downloads\Speedhack.CT
2016-02-03 21:59 - 2016-02-03 21:59 - 01406404 _____ C:\Users\Maaciek\Downloads\Hack Elsword [8.0].rar
2016-02-03 21:58 - 2016-02-03 21:59 - 06538663 _____ C:\Users\Maaciek\Downloads\Hack Elsword VOID [8.8].rar
2016-02-03 21:58 - 2016-02-03 21:58 - 06589276 _____ C:\Users\Maaciek\Downloads\Hack Elsword NA [8.9.2].rar
2016-02-02 11:52 - 2016-02-02 11:52 - 00065438 _____ C:\Users\Ela\Downloads\braki magazynowe (6).pdf
2016-02-02 11:51 - 2016-02-02 11:51 - 00635459 _____ C:\Users\Ela\Downloads\promocja DR 02.pdf
2016-02-02 11:47 - 2016-02-02 11:47 - 00029962 _____ C:\Users\Ela\Downloads\transfer_20160202.pdf
2016-02-02 10:53 - 2016-02-02 10:53 - 16997032 _____ C:\Users\Ela\Downloads\SM_DCP130C_DCP330C_DCP540CN.pdf
2016-02-02 10:37 - 1620-12-01 01:32 - 00000000 ____D C:\Users\Ela\Desktop\newsletter_ALL
2016-02-02 10:35 - 2016-02-02 10:35 - 00344152 _____ C:\Users\Ela\Downloads\newsletter_ALL.zip
2016-02-01 22:37 - 2016-02-02 17:27 - 00000000 ____D C:\Users\Ela\Desktop\Brother DPC 135 c
2016-02-01 13:15 - 2016-02-01 13:15 - 02891760 _____ C:\Users\Ela\Downloads\09.01.2014.09.24.08_program_funkcjonalno_uzytkowy.pdf
2016-02-01 12:19 - 2016-02-01 12:19 - 01161933 _____ C:\Users\Ela\Downloads\file_5.pdf
2016-02-01 12:16 - 2016-02-01 12:16 - 02479974 _____ C:\Users\Ela\Downloads\file_6.pdf
2016-02-01 12:14 - 2016-02-01 12:14 - 02233908 _____ C:\Users\Ela\Downloads\file_8.pdf
2016-02-01 12:11 - 2016-02-01 12:11 - 00954775 _____ C:\Users\Ela\Downloads\file_14.pdf
2016-02-01 10:03 - 2016-02-01 10:03 - 00003828 _____ C:\Users\Ela\Downloads\CreatePDF417BarcodeEncodedPayload (2).aspx
2016-02-01 10:02 - 2016-02-01 10:02 - 00003828 _____ C:\Users\Ela\Downloads\CreatePDF417BarcodeEncodedPayload (1).pdf.aspx
2016-02-01 09:58 - 2016-02-01 09:58 - 00287609 _____ C:\Users\Ela\Downloads\CD4YVK_Beczkowski (1).pdf
2016-02-01 09:56 - 2016-02-01 09:56 - 00003828 _____ C:\Users\Ela\Downloads\CreatePDF417BarcodeEncodedPayload.aspx
2016-02-01 09:55 - 2016-02-01 09:55 - 00090700 _____ C:\Users\Ela\Downloads\004535951Z (1).pdf
2016-02-01 09:48 - 2016-02-01 09:48 - 00090700 _____ C:\Users\Ela\Downloads\004535951Z.pdf
2016-01-31 15:18 - 2016-01-31 15:18 - 00000000 ____D C:\Users\Ela\Downloads\SkySales BILET LOTNICZY DLA rOMKA.html
2016-01-31 15:17 - 2016-01-31 15:17 - 00287609 _____ C:\Users\Ela\Downloads\CD4YVK_Beczkowski.pdf
2016-01-31 15:11 - 2016-01-31 15:11 - 00129866 _____ C:\Users\Ela\Downloads\List_of_prohibited_articles_in_cabin_baggage.pdf
2016-01-28 13:24 - 2016-01-28 13:25 - 00032935 _____ C:\Users\Ela\Downloads\promocjastyczeń_koniec miesiąca.pdf
2016-01-27 21:51 - 2016-01-27 21:51 - 00025061 _____ C:\Users\Maaciek\Downloads\3716.mid
2016-01-27 21:44 - 2016-01-27 21:38 - 00038443 _____ C:\Users\Ela\Desktop\plan nauczycieli 3lo.pdf
2016-01-27 21:44 - 2016-01-27 21:38 - 00034162 _____ C:\Users\Ela\Desktop\plan klas 3lo.pdf
2016-01-27 21:38 - 2016-01-27 21:38 - 00038443 _____ C:\Users\Maaciek\Downloads\plan nauczycieli 3lo.pdf
2016-01-27 21:38 - 2016-01-27 21:38 - 00034162 _____ C:\Users\Maaciek\Downloads\plan klas 3lo.pdf
2016-01-27 21:29 - 2016-01-02 21:01 - 04218880 _____ C:\Users\Maaciek\Desktop\videoplayback[1].mp4
2016-01-27 12:14 - 2016-01-27 12:14 - 00057845 _____ C:\Users\Ela\Downloads\43090741_F_50010832_01_16_F.pdf
2016-01-23 10:54 - 2016-01-23 10:54 - 00000000 ____D C:\Users\Ela\AppData\Local\Microsoft Help
2016-01-22 00:46 - 2016-01-22 00:46 - 00809197 _____ C:\Users\Ela\Downloads\wydruk_dokumentu_prowizji (15).pdf
2016-01-22 00:45 - 2016-01-22 00:45 - 00132566 _____ C:\Users\Ela\Downloads\wydruk_struktury_z_obrotami (7).pdf
2016-01-22 00:40 - 2016-01-22 00:41 - 00809241 _____ C:\Users\Ela\Downloads\wydruk_dokumentu_prowizji (14).pdf
2016-01-22 00:39 - 2016-01-22 00:39 - 00809187 _____ C:\Users\Ela\Downloads\wydruk_dokumentu_prowizji (13).pdf
2016-01-22 00:38 - 2016-01-22 00:38 - 00132481 _____ C:\Users\Ela\Downloads\wydruk_struktury_z_obrotami (6).pdf
2016-01-22 00:38 - 2016-01-22 00:38 - 00132481 _____ C:\Users\Ela\Downloads\wydruk_struktury_z_obrotami (5).pdf
2016-01-22 00:37 - 2016-01-22 00:37 - 00809157 _____ C:\Users\Ela\Downloads\wydruk_dokumentu_prowizji (12).pdf
2016-01-22 00:16 - 2016-01-22 00:16 - 00053272 _____ C:\Users\Ela\Downloads\promocjastyczeń_dzieńbabcidziadka.pdf
2016-01-22 00:01 - 2016-01-22 00:01 - 00132535 _____ C:\Users\Ela\Downloads\wydruk_struktury_z_obrotami (4).pdf
2016-01-22 00:01 - 2016-01-22 00:01 - 00132535 _____ C:\Users\Ela\Downloads\wydruk_struktury_z_obrotami (3).pdf
2016-01-22 00:00 - 2016-01-22 00:01 - 00809154 _____ C:\Users\Ela\Downloads\wydruk_dokumentu_prowizji (11).pdf
2016-01-20 10:29 - 2016-01-20 11:15 - 00616031 _____ C:\Users\Maaciek\Desktop\Stalingrad.pptx
2016-01-12 09:23 - 2016-01-12 09:23 - 00637649 _____ C:\Users\Ela\Downloads\promocja DR 01.pdf
2016-01-12 09:23 - 2016-01-12 09:23 - 00368937 _____ C:\Users\Ela\Downloads\braki magazynowe (2).pdf
2016-01-12 09:23 - 2016-01-12 09:23 - 00038421 _____ C:\Users\Ela\Downloads\cennik oferta pozakatalogowa.pdf
2016-01-11 21:59 - 2016-01-11 21:59 - 01487838 _____ C:\Users\Ela\Downloads\biuletyn 1-2016.pdf
2016-01-08 01:30 - 2016-01-08 01:30 - 00030282 _____ C:\Users\Ela\Downloads\transfer_20160108.pdf
2016-01-07 23:37 - 2016-01-25 13:58 - 00000000 ____D C:\Users\Ela\Desktop\FIRMA2016

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-02-05 13:40 - 2012-08-21 16:01 - 00000930 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2016-02-05 13:35 - 2012-05-07 12:54 - 00001036 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-05 13:22 - 2009-07-14 05:34 - 00009920 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-05 13:22 - 2009-07-14 05:34 - 00009920 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-05 13:16 - 2012-05-07 12:54 - 00001032 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-05 13:14 - 2010-04-26 01:17 - 00000000 ____D C:\ProgramData\NVIDIA
2016-02-05 13:14 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2016-02-05 12:42 - 2010-04-26 01:16 - 01643124 _____ C:\windows\system32\PerfStringBackup.INI
2016-02-05 12:42 - 2009-06-20 20:25 - 00740672 _____ C:\windows\system32\perfh015.dat
2016-02-05 12:42 - 2009-06-20 20:25 - 00156214 _____ C:\windows\system32\perfc015.dat
2016-02-05 12:41 - 2009-07-14 03:37 - 00000000 ____D C:\windows\inf
2016-02-05 12:13 - 2011-06-16 19:35 - 00000000 ____D C:\Users\Ela\AppData\Roaming\Skype
2016-02-04 22:40 - 2014-07-30 22:34 - 00002124 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-04 22:40 - 2014-07-30 22:34 - 00002095 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-04 17:21 - 2014-12-16 20:36 - 00000000 ____D C:\Users\Maaciek\AppData\Local\screenSHU
2016-02-04 16:08 - 2013-08-09 06:19 - 00000000 ____D C:\Users\Maaciek\Documents\My Games
2016-02-03 13:26 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\NDF
2016-02-02 22:12 - 2011-07-08 19:06 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2016-02-02 22:12 - 2011-07-08 19:06 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-02-02 12:55 - 2012-05-14 13:33 - 00000000 ____D C:\Users\Ela\Desktop\Jarek
2016-02-01 14:41 - 2015-10-20 00:55 - 00000000 ____D C:\Users\Maaciek\Downloads\stare
2016-01-31 21:59 - 2015-09-05 21:06 - 00001067 _____ C:\Users\Ela\Desktop\filmy.txt
2016-01-27 17:30 - 2015-09-12 08:22 - 00001686 _____ C:\Users\Ela\Desktop\linki do przejżenia.txt
2016-01-27 09:55 - 2010-04-26 01:44 - 00000000 ____D C:\ProgramData\Skype
2016-01-23 10:55 - 2015-06-25 09:45 - 00000000 ___RD C:\Users\Ela\Documents\Scanned Documents
2016-01-20 10:18 - 2009-07-14 05:53 - 00032604 _____ C:\windows\Tasks\SCHEDLGU.TXT
2016-01-18 23:03 - 2015-01-28 23:51 - 00000000 ____D C:\Users\Ela\Desktop\FIRMA2015
2016-01-17 23:51 - 2014-09-15 22:00 - 00000000 ___HD C:\Users\Maaciek\Desktop\.picasaoriginals

==================== Pliki w katalogu głównym wybranych folderów =======

2012-09-15 13:21 - 2012-09-15 13:21 - 0000604 ____H () C:\Program Files\_Z2
2013-08-08 10:25 - 2013-08-08 10:25 - 0138056 _____ () C:\Users\Maaciek\AppData\Roaming\PnkBstrK.sys
2015-11-23 00:05 - 2015-11-23 00:05 - 0001985 _____ () C:\Users\Maaciek\AppData\Local\recently-used.xbel
2014-01-04 18:58 - 2014-07-03 21:52 - 0007595 _____ () C:\Users\Maaciek\AppData\Local\resmon.resmoncfg
2011-06-16 19:36 - 2011-06-16 19:36 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2010-04-26 01:51 - 2010-04-29 03:38 - 0131984 _____ () C:\ProgramData\FullRemove.exe

Niektóre pliki w TEMP:
====================
C:\Users\Ela\AppData\Local\temp\BingSvc.exe
C:\Users\Ela\AppData\Local\temp\BSvcProcessor.exe
C:\Users\Ela\AppData\Local\temp\BSvcUpdater.exe
C:\Users\Maaciek\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\windows\explorer.exe => Plik podpisany cyfrowo
C:\windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\windows\system32\services.exe => Plik podpisany cyfrowo
C:\windows\system32\User32.dll => Plik podpisany cyfrowo
C:\windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-01-29 10:01

==================== Koniec  FRST.txt ============================