Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:27-01-2016
Uruchomiony przez Szymek (administrator)  CIVIC-PC (06-02-2016 19:56:38)
Uruchomiony z C:\Users\Szymek\Downloads
Załadowane profile: Szymek (Dostępne profile: Szymek)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 7 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgcsrvx.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgwdsvcx.exe
() C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
() C:\ACER\Mobility Center\MobilityService.exe
() C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe
() C:\Program Files\Cyberlink\Shared files\RichVideo.exe
(StarWind Software) C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgemcx.exe
() C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
() C:\Windows\PLFSetI.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(CyberLink Corp.) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(CyberLink) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
(GG Network S.A.) C:\Users\Szymek\AppData\Local\GG\Application\gghub.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgui.exe
(GG Network S.A.) C:\Users\Szymek\AppData\Local\GG\Application\ggapp.exe
() C:\Program Files\Plus Internet\Plus Internet.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(GG Network S.A.) C:\Users\Szymek\AppData\Local\GG\Application\ggdrive\ggdrive.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [690720 2008-12-18] (Acer Incorporated)
HKLM\...\Run: [BkupTray] => C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [28672 2008-04-25] ()
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [200704 2008-06-30] ()
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [870920 2009-01-09] (Dritek System Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1418536 2009-01-09] (Synaptics, Inc.)
HKLM\...\Run: [ArcadeDeluxeAgent] => C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [147456 2008-10-08] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer] => C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [167936 2008-10-08] (CyberLink)
HKLM\...\Run: [Plus Internet] => C:\Program Files\Plus Internet\PlusInternetChecker.exe [476480 2011-11-12] ()
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\Av\avgui.exe [3873704 2016-01-25] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguirnx.exe [179624 2016-01-12] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-2139341513-177199769-1953883171-1001\...\Run: [AlcoholAutomount] => C:\Program Files\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
HKU\S-1-5-21-2139341513-177199769-1953883171-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2139341513-177199769-1953883171-1001\...\Run: [GG] => C:\Users\Szymek\AppData\Local\GG\Application\gghub.exe [4078144 2015-06-17] (GG Network S.A.)
HKU\S-1-5-21-2139341513-177199769-1953883171-1001\...\MountPoints2: {df813641-e773-11e4-9a69-806e6f6e6963} - K:\autorun.exe
HKU\S-1-5-21-2139341513-177199769-1953883171-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\acer.scr [7585792 2008-12-05] (Acer)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 212.2.96.51 212.2.96.52
Tcpip\..\Interfaces\{E50073E0-2AF8-4CDA-8D6D-05C0E417696E}: [DhcpNameServer] 212.2.96.51 212.2.96.52

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-2139341513-177199769-1953883171-1001\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
HKU\S-1-5-21-2139341513-177199769-1953883171-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&s=2&o=vp32&d=0415&m=aspire_5737z
HKU\S-1-5-21-2139341513-177199769-1953883171-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&s=2&o=vp32&d=0415&m=aspire_5737z
HKU\S-1-5-21-2139341513-177199769-1953883171-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://global.acer.com
HKU\S-1-5-21-2139341513-177199769-1953883171-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
BHO: Pomocnik rejestracji usługi Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2008-11-18] (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll [2008-12-02] (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll [2008-12-02] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Szymek\AppData\Roaming\Mozilla\Firefox\Profiles\gnvti1rx.default-1429872478617
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-20] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2008-12-04] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Szymek\AppData\Roaming\Mozilla\Firefox\Profiles\gnvti1rx.default-1429872478617\extensions\adblockpopups@jessehakanen.net.xpi [2016-01-02]
FF Extension: Adblock Plus - C:\Users\Szymek\AppData\Roaming\Mozilla\Firefox\Profiles\gnvti1rx.default-1429872478617\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-19]

Chrome: 
=======
CHR Profile: C:\Users\Szymek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Szymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-20]
CHR Extension: (Dokumenty Google) - C:\Users\Szymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-20]
CHR Extension: (Dysk Google) - C:\Users\Szymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-20]
CHR Extension: (YouTube) - C:\Users\Szymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-20]
CHR Extension: (Google Search) - C:\Users\Szymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-20]
CHR Extension: (Arkusze Google) - C:\Users\Szymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-20]
CHR Extension: (Dokumenty Google offline) - C:\Users\Szymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-02-06]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Szymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-20]
CHR Extension: (Gmail) - C:\Users\Szymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-20]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AVGIDSAgent; C:\Program Files\AVG\Av\avgidsagent.exe [3881696 2016-01-25] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [865704 2016-01-12] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\Av\avgwdsvcx.exe [561104 2016-01-25] (AVG Technologies CZ, s.r.o.)
S2 AxAutoMntSrv; C:\Program Files\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
S4 BUNAgentSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [16384 2008-03-03] (NewTech Infosystems, Inc.) [Brak podpisu cyfrowego]
R2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [69632 2008-10-04] () [Brak podpisu cyfrowego]
R2 ePowerSvc; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [653856 2008-12-18] (Acer Incorporated)
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440 2007-01-17] (Hewlett-Packard Company) [Brak podpisu cyfrowego]
R2 MobilityService; C:\Acer\Mobility Center\MobilityService.exe [110592 2007-12-06] () [Brak podpisu cyfrowego]
R2 MotoHelper; C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe [202048 2010-09-07] ()
S4 NTIBackupSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [45056 2008-04-25] (NewTech InfoSystems, Inc.) [Brak podpisu cyfrowego]
S4 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072 2008-04-25] () [Brak podpisu cyfrowego]
R2 RichVideo; C:\Program Files\Cyberlink\Shared files\RichVideo.exe [272024 2007-01-09] ()
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [Brak podpisu cyfrowego]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [149936 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [257456 2016-01-05] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [207792 2016-01-08] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [31664 2015-11-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [229296 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [308656 2015-08-14] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [198576 2016-01-22] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [37296 2015-12-04] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [231856 2015-10-08] (AVG Technologies CZ, s.r.o.)
R0 Avgunivx; C:\Windows\System32\DRIVERS\avgunivx.sys [23472 2016-01-08] (AVG Technologies CZ, s.r.o.)
R1 DritekPortIO; C:\Program Files\Launch Manager\DPortIO.sys [20112 2006-11-02] (Dritek System Inc.)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2015-04-20] (Disc Soft Ltd)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [320120 2015-04-20] (Duplex Secure Ltd.)
U3 axbmrn3j; C:\Windows\system32\Drivers\axbmrn3j.sys [0 ] (NVIDIA Corporation) <==== UWAGA (zerobajtowy plik/folder)
U3 axpxxfvc; C:\Windows\system32\Drivers\axpxxfvc.sys [0 ] (NVIDIA Corporation) <==== UWAGA (zerobajtowy plik/folder)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-02-06 18:32 - 2016-02-06 18:38 - 00003821 _____ C:\Users\Szymek\Downloads\Fixlog.txt
2016-02-06 16:33 - 2016-02-06 16:33 - 00380416 _____ C:\Users\Szymek\Downloads\sbc95gcq.exe
2016-02-06 15:48 - 2016-02-06 15:48 - 00061501 _____ C:\Users\Szymek\Downloads\Shortcut.txt
2016-02-06 15:45 - 2016-02-06 19:52 - 00028203 _____ C:\Users\Szymek\Downloads\Addition.txt
2016-02-06 15:44 - 2016-02-06 19:56 - 00015115 _____ C:\Users\Szymek\Downloads\FRST.txt
2016-02-06 15:31 - 2016-02-06 15:31 - 00000000 ____D C:\Users\Szymek\Desktop\Dokumenty
2016-02-06 14:16 - 2016-02-06 19:56 - 00000000 ____D C:\FRST
2016-02-06 14:15 - 2016-02-06 14:15 - 01721856 _____ (Farbar) C:\Users\Szymek\Downloads\FRST.exe
2016-02-06 12:53 - 2016-02-06 12:53 - 01508352 _____ C:\Users\Szymek\Downloads\adwcleaner_5.032.exe
2016-02-05 20:52 - 2016-02-05 20:52 - 17971883 _____ C:\Users\Szymek\Desktop\Soundtrack _La Migliore Offerta_ - Volti E Fantasmi.mp4
2016-02-04 15:23 - 2016-02-04 15:23 - 15848714 _____ C:\Users\Szymek\Desktop\The Beep Beep Song - Simone White.mp4
2016-02-04 15:22 - 2016-02-04 15:22 - 05391958 _____ C:\Users\Szymek\Desktop\Fly The song.mp4
2016-02-04 15:10 - 2016-02-04 15:10 - 00687675 _____ C:\Users\Szymek\Downloads\804122520455_Polisa_na_kolejny_rok_AVIVA.zip
2016-01-23 23:19 - 2016-02-03 13:34 - 39117205 _____ C:\Users\Szymek\Desktop\Coldplay - A Sky Full Of Stars (Official audio).mp4
2016-01-22 15:13 - 2016-01-22 15:13 - 00198576 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx86.sys
2016-01-16 23:49 - 2016-01-23 21:31 - 00000000 ____D C:\Users\Szymek\AppData\LocalLow\uTorrent
2016-01-08 10:49 - 2016-01-08 10:49 - 00207792 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidshx.sys
2016-01-08 10:49 - 2016-01-08 10:49 - 00023472 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgunivx.sys
2016-01-07 13:27 - 2016-01-07 13:45 - 00000000 ____D C:\Users\Szymek\Desktop\lampa

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2060-08-18 18:02 - 2015-04-20 15:55 - 02023424 ____N (Inprise Corporation) C:\Windows\system32\VCL50.BPL
2060-08-18 18:02 - 2015-04-20 15:55 - 01496064 ____N (Inprise Corporation) C:\Windows\system32\CC3250MT.DLL
2060-08-18 18:02 - 2015-04-20 15:55 - 00248832 ____N (Inprise Corporation) C:\Windows\system32\VCLX50.BPL
2060-08-18 17:40 - 2015-04-20 15:55 - 00909824 ____N (Inprise Corporation) C:\Windows\system32\CP3245MT.DLL
2060-08-18 17:40 - 2015-04-20 15:55 - 00024064 ____N (Inprise Corporation) C:\Windows\system32\BORLNDMM.DLL
2016-02-06 19:55 - 2015-12-18 21:22 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-02-06 19:36 - 2015-12-18 21:25 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-06 19:23 - 2015-04-17 21:37 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-02-06 18:49 - 2013-02-01 13:15 - 00031966 _____ C:\ProgramData\nvModes.001
2016-02-06 18:49 - 2013-02-01 13:09 - 00031966 _____ C:\ProgramData\nvModes.dat
2016-02-06 18:48 - 2015-12-18 21:25 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-06 18:48 - 2013-11-18 00:45 - 00000000 ____D C:\ProgramData\MFAData
2016-02-06 18:48 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-06 18:48 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-06 18:48 - 2006-11-02 13:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-06 18:47 - 2006-11-02 14:01 - 00032544 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-02-06 17:56 - 2009-02-05 19:17 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-02-06 15:31 - 2015-08-01 16:15 - 00000000 ____D C:\Users\Szymek\Desktop\moje
2016-02-06 12:26 - 2015-10-16 16:58 - 00000000 ____D C:\Users\Szymek\AppData\Roaming\GG
2016-02-05 12:29 - 2015-04-17 15:56 - 00000000 ____D C:\Users\Szymek\Desktop\Teledyski
2016-02-04 23:02 - 2008-01-21 07:24 - 00858098 _____ C:\Windows\system32\PerfStringBackup.INI
2016-02-04 23:02 - 2008-01-21 07:24 - 00711708 _____ C:\Windows\system32\perfh015.dat
2016-02-04 23:02 - 2008-01-21 07:24 - 00149662 _____ C:\Windows\system32\perfc015.dat
2016-02-04 23:02 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\inf
2016-02-04 21:40 - 2015-12-18 21:27 - 00001993 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-04 21:40 - 2015-12-18 21:27 - 00001981 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-04 17:01 - 2015-04-17 15:46 - 00000000 ____D C:\Users\Szymek
2016-02-02 22:13 - 2015-10-16 16:58 - 00000000 ____D C:\Users\Szymek\AppData\Local\GG
2016-01-29 19:01 - 2015-01-27 13:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-01-29 18:59 - 2015-05-23 10:11 - 00000000 ____D C:\Users\Szymek\AppData\Local\Avg
2016-01-23 23:20 - 2015-04-22 13:58 - 00000000 ____D C:\Users\Szymek\AppData\Roaming\uTorrent
2016-01-20 20:23 - 2015-04-17 21:37 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-01-20 20:23 - 2015-04-17 21:37 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

==================== Pliki w katalogu głównym wybranych folderów =======

2015-04-17 17:14 - 2015-04-17 17:14 - 0003061 _____ () C:\Users\Szymek\AppData\Local\MyWinLockerInstaller.txt-20150417.log
2015-06-18 12:44 - 2015-06-18 12:47 - 0005463 _____ () C:\Users\Szymek\AppData\Local\MyWinLockerInstaller.txt-20150618.log
2013-02-01 00:20 - 2015-04-17 13:51 - 0006103 _____ () C:\ProgramData\ArcadeDeluxe2.log
2013-02-01 13:15 - 2016-02-06 18:49 - 0031966 _____ () C:\ProgramData\nvModes.001
2013-02-01 13:09 - 2016-02-06 18:49 - 0031966 _____ () C:\ProgramData\nvModes.dat

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-02-06 18:53

==================== Koniec  FRST.txt ============================