Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:07-02-2016
Uruchomiony przez emilks (administrator)  EMILKS-KOMPUTER (08-02-2016 23:34:45)
Uruchomiony z C:\Users\emilks\Desktop
Załadowane profile: emilks (Dostępne profile: emilks)
Platform: Windows 10 Home (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(Visicom Media Inc.) C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
() C:\ProgramData\Cyfrowy Polsat E3276\OnlineUpdate\ouc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16174328 2015-09-27] (Realtek Semiconductor)
HKLM\...\Run: [zLoader.exe] => C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\zLoader.exe [26480 2012-05-22] ()
HKLM\...\Run: [CancelAutoPlay.exe] => C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\CancelAutoPlay.exe [74096 2012-05-22] ()
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [54520 2015-10-22] (Panda Security, S.L.)
HKU\S-1-5-21-4078289303-2873018174-163722337-1000\...\Run: [ALLUpdate] => C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [3670472 2015-07-28] (ALLPlayer Group Ltd.)
HKU\S-1-5-18\...\RunOnce: [panda] => reg.exe delete "HKCU\Software\AppDataLow\Software\panda" /f
HKU\S-1-5-18\...\RunOnce: [panda_XP] => reg.exe delete "HKCU\Software\panda" /f
GroupPolicyScripts-x32: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{2ca8ce93-cd33-4d3d-94f6-73869a14c08f}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{a87a0c48-2477-4487-b3cd-b931df03fd13}: [DhcpNameServer] 212.2.96.53 212.2.96.54
Tcpip\..\Interfaces\{d91d5570-868d-4c24-8b2e-7c30007fc0a3}: [DhcpNameServer] 212.2.96.53 212.2.96.54

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130856176003787216&GUID=00000000-0000-0000-0000-000000000000
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-4078289303-2873018174-163722337-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=188
URLSearchHook: HKU\S-1-5-21-4078289303-2873018174-163722337-1000 - Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll ()
URLSearchHook: HKU\S-1-5-21-4078289303-2873018174-163722337-1000 - Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll ()
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-4078289303-2873018174-163722337-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-4078289303-2873018174-163722337-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Panda Security Toolbar -> {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll [2015-10-05] ()
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Panda Security Toolbar -> {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll [2015-10-05] ()
BHO-x32: Discover Treasure -> {bfa55139-82af-4663-a19b-e135dac8d043} -> C:\Program Files (x86)\Discover Treasure\Extensions\bfa55139-82af-4663-a19b-e135dac8d043.dll => Brak pliku
Toolbar: HKLM - Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll [2015-10-05] ()
Toolbar: HKLM-x32 - Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll [2015-10-05] ()

FireFox:
========
FF ProfilePath: C:\Users\emilks\AppData\Roaming\Mozilla\Firefox\Profiles\5axno45x.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-19] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-19] ()
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Extension: Discover Treasure - C:\Users\emilks\AppData\Roaming\Mozilla\Firefox\Profiles\5axno45x.default\Extensions\{c8e0ef61-afee-4041-ad42-4dc97f63f6df}.xpi [2016-01-29] [Brak podpisu cyfrowego]

Chrome: 
=======
CHR Profile: C:\Users\emilks\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\emilks\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-01]
CHR Extension: (Dokumenty Google) - C:\Users\emilks\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-01]
CHR Extension: (Dysk Google) - C:\Users\emilks\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\emilks\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Google Search) - C:\Users\emilks\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-02]
CHR Extension: (Arkusze Google) - C:\Users\emilks\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-01]
CHR Extension: (Dokumenty Google offline) - C:\Users\emilks\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-17]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\emilks\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-24]
CHR Extension: (Gmail) - C:\Users\emilks\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]

Opera: 
=======
OPR StartupUrls:  "hxxp://www.gazeta.pl/0,0.html?p=188" 

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 Cyfrowy Polsat E3276. RunOuc; C:\Program Files (x86)\Cyfrowy Polsat E3276\UpdateDog\ouc.exe [650240 2013-01-23] () [Brak podpisu cyfrowego]
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S3 msiserver; C:\Windows\System32\msiexec.exe [65536 2015-09-10] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [142072 2015-10-18] (Panda Security, S.L.)
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [73464 2015-10-28] (Panda Security, S.L.)
R2 panda_url_filtering; C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe [287752 2015-10-02] (Visicom Media Inc.)
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [38136 2015-10-22] (Panda Security, S.L.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [109568 2013-01-25] (Huawei Technologies Co., Ltd.)
S3 massfilter_LTE; C:\Windows\System32\drivers\massfilter_LTE.sys [18456 2011-12-14] (HandSet Incorporated)
R1 NNSALPC; C:\Windows\system32\DRIVERS\NNSALPC.sys [103824 2015-07-16] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\system32\DRIVERS\NNSHTTP.sys [211352 2015-07-16] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\system32\DRIVERS\NNSHTTPS.sys [120216 2015-07-16] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\system32\DRIVERS\NNSIDS.sys [120208 2015-07-16] (Panda Security, S.L.)
R1 NNSNAHSL; C:\Windows\system32\DRIVERS\NNSNAHSL.sys [58616 2015-06-19] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\system32\DRIVERS\NNSPICC.sys [112536 2015-07-16] (Panda Security, S.L.)
R1 NNSPIHSW; C:\Windows\system32\DRIVERS\NNSPIHSW.sys [89472 2015-09-01] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\system32\DRIVERS\NNSPOP3.sys [133528 2015-07-16] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\system32\DRIVERS\NNSPROT.sys [309648 2015-07-16] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\system32\DRIVERS\NNSPRV.sys [179608 2015-07-16] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\system32\DRIVERS\NNSSMTP.sys [122776 2015-07-16] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\system32\DRIVERS\NNSSTRM.sys [267160 2015-07-16] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\system32\DRIVERS\NNSTLSC.sys [115600 2015-07-16] (Panda Security, S.L.)
R3 panda_url_filteringd; C:\Program Files\Panda Security URL Filtering\panda_url_filteringd.sys [51288 2014-03-19] (Visicom Media Inc.)
S4 PsBoot; C:\Windows\System32\Drivers\PsBoot.sys [42624 2015-06-16] (Panda Security, S.L.)
R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [173464 2015-07-21] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [130968 2015-07-21] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\system32\DRIVERS\PSINKNC.sys [207256 2015-07-21] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [133528 2015-07-21] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [143768 2015-07-21] (Panda Security, S.L.)
R2 PSINReg; C:\Windows\system32\DRIVERS\PSINReg.sys [117144 2015-07-21] (Panda Security, S.L.)
R3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [62080 2015-06-16] (Panda Security, S.L.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-06-18] (Realtek                                            )
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 zgdcat; C:\Windows\system32\DRIVERS\zgdcat.sys [130200 2011-12-14] (ZTE Incorporated)
S3 zgdcdiag; C:\Windows\system32\DRIVERS\zgdcdiag.sys [130200 2011-12-14] (ZTE Incorporated)
S3 zgdcmdm; C:\Windows\system32\DRIVERS\zgdcmdm.sys [130200 2011-12-14] (ZTE Incorporated)
S3 zgdcnet; C:\Windows\System32\drivers\zgdcnet.sys [169496 2011-12-14] (ZTE Incorporated)
S3 zgdcnmea; C:\Windows\system32\DRIVERS\zgdcnmea.sys [130200 2011-12-14] (ZTE Incorporated)
U3 idsvc; Brak ImagePath
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-02-08 23:12 - 2016-02-08 23:12 - 00040992 _____ C:\Users\emilks\Desktop\Shortcut.txt
2016-02-08 23:11 - 2016-02-08 23:12 - 00031309 _____ C:\Users\emilks\Desktop\Addition.txt
2016-02-08 23:09 - 2016-02-08 23:34 - 00015645 _____ C:\Users\emilks\Desktop\FRST.txt
2016-02-08 23:09 - 2016-02-08 23:34 - 00000000 ____D C:\FRST
2016-02-08 23:08 - 2015-06-16 15:41 - 00042624 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PsBoot.sys
2016-02-08 23:07 - 2016-02-08 23:08 - 02370560 ____N (Farbar) C:\Users\emilks\Desktop\FRST64.exe
2016-02-08 22:46 - 2016-02-08 22:46 - 00016148 _____ C:\WINDOWS\system32\EMILKS-KOMPUTER_emilks_HistoryPrediction.bin
2016-02-04 23:46 - 2016-02-04 23:46 - 00069572 _____ C:\Users\emilks\Desktop\Extras.Txt
2016-02-04 23:41 - 2016-02-04 23:41 - 00162086 _____ C:\Users\emilks\Desktop\OTL.Txt
2016-02-04 23:20 - 2016-02-04 23:20 - 00069572 _____ C:\Users\emilks\Downloads\Extras.Txt
2016-02-04 23:18 - 2016-02-04 23:41 - 00162086 _____ C:\Users\emilks\Downloads\OTL.Txt
2016-02-04 22:53 - 2016-02-04 22:52 - 00602112 _____ (OldTimer Tools) C:\Users\emilks\Desktop\OTL.exe
2016-02-04 22:52 - 2016-02-04 22:52 - 00602112 _____ (OldTimer Tools) C:\Users\emilks\Downloads\OTL.exe
2016-02-03 20:39 - 2016-02-03 20:39 - 00004146 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-03 20:39 - 2016-02-03 20:39 - 00003914 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-02 21:52 - 2016-02-02 21:56 - 127231689 _____ (Igor Pavlov) C:\Users\emilks\Downloads\OTLPENet.exe
2016-02-02 21:28 - 2016-02-02 21:29 - 00388608 _____ (Trend Micro Inc.) C:\Users\emilks\Downloads\HijackThis.exe
2016-01-31 17:50 - 2016-01-31 17:50 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2016-01-31 17:50 - 2016-01-31 17:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
2016-01-31 17:49 - 2016-01-31 17:49 - 00001220 _____ C:\Users\Public\Desktop\Cyfrowy Polsat E3276.lnk
2016-01-31 17:49 - 2016-01-31 17:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cyfrowy Polsat E3276
2016-01-31 17:49 - 2016-01-31 17:49 - 00000000 ____D C:\ProgramData\Cyfrowy Polsat E3276
2016-01-31 17:48 - 2013-02-17 04:16 - 00244736 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_juwwanecm.sys
2016-01-31 17:48 - 2013-02-17 04:15 - 00076800 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_jucdcecm.sys
2016-01-31 17:48 - 2013-01-25 04:35 - 00105984 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_jucdcacm.sys
2016-01-31 17:48 - 2013-01-25 02:16 - 00109568 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_hwusbdev.sys
2016-01-31 17:48 - 2013-01-23 08:02 - 00452096 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ewusbwwan.sys
2016-01-31 17:48 - 2013-01-23 07:57 - 00225920 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ewusbmdm.sys
2016-01-31 17:48 - 2013-01-23 04:32 - 00091648 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_jubusenum.sys
2016-01-31 17:48 - 2013-01-23 04:32 - 00030720 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_juextctrl.sys
2016-01-31 17:48 - 2012-12-22 02:46 - 00014976 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_usbenumfilter.sys
2016-01-31 17:48 - 2012-08-20 01:37 - 01490656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfCoInstaller01007.dll
2016-01-31 17:48 - 2010-10-08 09:59 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\WINDOWS\system32\Drivers\ewdcsc.sys
2016-01-31 17:48 - 2010-09-26 11:09 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_hwupgrade.sys
2016-01-31 17:48 - 2010-08-06 00:43 - 01001472 _____ (DiBcom SA) C:\WINDOWS\system32\Drivers\mod7700.sys
2016-01-31 17:47 - 2016-01-31 17:49 - 00000000 ____D C:\Program Files (x86)\Cyfrowy Polsat E3276
2016-01-31 17:46 - 2016-01-31 17:50 - 00000000 ____D C:\ProgramData\DatacardService
2016-01-29 23:44 - 2016-02-08 22:46 - 00004226 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9092ECF3-A042-40B2-BF7E-00EB006E3FE7}
2016-01-29 21:43 - 2016-01-29 21:44 - 01507840 _____ C:\Users\emilks\Downloads\adwcleaner_5.031.exe
2016-01-29 21:43 - 2016-01-29 21:43 - 19604160 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2016-01-29 21:36 - 2016-01-30 15:52 - 00000000 ____D C:\Users\emilks\AppData\Local\CleanBrowserApp
2016-01-29 21:34 - 2016-01-29 21:34 - 00002269 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Free Antivirus.lnk
2016-01-29 21:34 - 2016-01-29 21:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Free Antivirus
2016-01-29 21:33 - 2016-01-31 23:49 - 00000000 ____D C:\Program Files (x86)\CleanBrowser
2016-01-29 21:32 - 2016-01-29 21:51 - 00000000 ____D C:\Users\emilks\AppData\Roaming\InacbeEel
2016-01-29 21:32 - 2016-01-29 21:32 - 00000000 ____D C:\Users\emilks\AppData\Local\Tempfolder
2016-01-29 21:32 - 2015-07-21 23:27 - 00117144 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINReg.sys
2016-01-29 21:32 - 2015-07-21 23:22 - 00173464 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINAflt.sys
2016-01-29 21:32 - 2015-07-21 23:22 - 00143768 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINProt.sys
2016-01-29 21:31 - 2016-01-29 21:31 - 00000000 ____D C:\Users\emilks\AppData\LocalLow\Company
2016-01-29 21:31 - 2016-01-29 21:31 - 00000000 ____D C:\uninst
2016-01-29 21:31 - 2015-07-21 23:22 - 00133528 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINProc.sys
2016-01-29 21:31 - 2015-07-21 23:22 - 00130968 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINFile.sys
2016-01-29 21:30 - 2015-07-21 23:22 - 00207256 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSINKNC.sys
2016-01-29 21:03 - 2016-01-29 21:01 - 00000967 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2016-01-29 21:02 - 2016-01-29 21:03 - 00000000 ____D C:\Users\emilks\AppData\Local\Chromium
2016-01-29 20:58 - 2016-01-29 20:58 - 03833856 _____ C:\Users\emilks\Downloads\IUW_1.1_Flashing_Tool.iso
2016-01-29 20:44 - 2016-01-29 20:54 - 311980522 _____ C:\Users\emilks\Downloads\I921_1304.zip
2016-01-28 21:11 - 2016-01-28 21:11 - 00000000 ____D C:\Program Files\Panda Security URL Filtering
2016-01-28 21:11 - 2016-01-28 21:11 - 00000000 ____D C:\Program Files (x86)\pandasecuritytb
2016-01-26 21:58 - 2016-01-26 21:58 - 00124150 _____ C:\Users\emilks\Downloads\Dowod_Przyjecia_do_Naprawy_1.pdf
2016-01-26 21:45 - 2016-01-26 21:45 - 00000000 ____D C:\Users\emilks\AppData\Roaming\pandasecuritytb
2016-01-26 21:42 - 2016-01-29 21:09 - 00000000 ____D C:\SERWISON
2016-01-24 20:49 - 2016-01-24 20:49 - 06539752 _____ (Tim Kosse) C:\Users\emilks\Downloads\FileZilla_3.14.1_win64-setup.exe
2016-01-24 20:30 - 2016-01-24 20:30 - 00001088 _____ C:\Users\Public\Desktop\Notepad++.lnk
2016-01-24 20:30 - 2016-01-24 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2016-01-24 20:29 - 2016-01-24 20:30 - 00000000 ____D C:\Users\emilks\AppData\Roaming\Notepad++
2016-01-24 20:29 - 2016-01-24 20:30 - 00000000 ____D C:\Program Files (x86)\Notepad++
2016-01-24 20:29 - 2016-01-24 20:29 - 04121418 _____ C:\Users\emilks\Downloads\npp.6.8.8.Installer.exe
2016-01-24 19:27 - 2016-01-24 19:27 - 00000000 ____D C:\Users\emilks\Desktop\pl
2016-01-24 19:26 - 2012-07-31 18:48 - 00000000 ___RD C:\Users\emilks\Desktop\xNova
2016-01-22 22:25 - 2016-01-31 00:12 - 00000000 ____D C:\Users\emilks\AppData\Roaming\vlc
2016-01-22 22:24 - 2016-01-22 22:24 - 00001139 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-01-22 22:24 - 2016-01-22 22:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-01-22 22:24 - 2016-01-22 22:24 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-01-22 22:21 - 2016-01-22 22:23 - 28849904 _____ C:\Users\emilks\Downloads\vlc-2.2.1-win32.exe
2016-01-22 21:59 - 2016-01-22 21:59 - 00001200 _____ C:\Users\emilks\Desktop\ALLPlayer Radio.lnk
2016-01-22 21:59 - 2016-01-22 21:59 - 00001088 _____ C:\Users\emilks\Desktop\ALLPlayer.lnk
2016-01-22 21:59 - 2016-01-22 21:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer
2016-01-22 21:59 - 2013-04-05 20:26 - 02106368 _____ C:\WINDOWS\SysWOW64\ac3filter.ax
2016-01-22 21:59 - 2013-04-05 20:26 - 00276992 _____ (IntelleSoft) C:\WINDOWS\SysWOW64\BugTrap.dll
2016-01-22 21:59 - 2007-10-07 14:36 - 00258048 _____ C:\WINDOWS\SysWOW64\libFLAC.dll
2016-01-22 21:58 - 2016-01-22 21:59 - 00000000 ____D C:\ProgramData\ALLPlayer
2016-01-22 21:58 - 2016-01-22 21:59 - 00000000 ____D C:\Program Files (x86)\ALLPlayer
2016-01-22 21:39 - 2016-01-22 21:42 - 28757512 _____ (ALLPlayer ) C:\Users\emilks\Downloads\ALLPlayerPL.exe
2016-01-16 15:19 - 2016-01-16 15:19 - 04570320 _____ (Softperfect ) C:\Users\emilks\Downloads\networx_setup.exe
2016-01-16 15:13 - 2016-01-16 15:14 - 00000000 ____D C:\Users\emilks\AppData\Roaming\RedApp
2016-01-16 15:13 - 2011-12-14 07:49 - 00169496 _____ (ZTE Incorporated) C:\WINDOWS\system32\Drivers\zgdcnet3.sys
2016-01-16 15:13 - 2011-12-14 07:49 - 00169496 _____ (ZTE Incorporated) C:\WINDOWS\system32\Drivers\zgdcnet2.sys
2016-01-16 15:13 - 2011-12-14 07:49 - 00169496 _____ (ZTE Incorporated) C:\WINDOWS\system32\Drivers\zgdcnet.sys
2016-01-16 15:13 - 2011-12-14 07:49 - 00130200 _____ (ZTE Incorporated) C:\WINDOWS\system32\Drivers\zgdcvousb.sys
2016-01-16 15:13 - 2011-12-14 07:49 - 00130200 _____ (ZTE Incorporated) C:\WINDOWS\system32\Drivers\zgdcnmea.sys
2016-01-16 15:13 - 2011-12-14 07:49 - 00130200 _____ (ZTE Incorporated) C:\WINDOWS\system32\Drivers\zgdcmdm.sys
2016-01-16 15:13 - 2011-12-14 07:49 - 00130200 _____ (ZTE Incorporated) C:\WINDOWS\system32\Drivers\zgdcdiag.sys
2016-01-16 15:13 - 2011-12-14 07:49 - 00130200 _____ (ZTE Incorporated) C:\WINDOWS\system32\Drivers\zgdcatext.sys
2016-01-16 15:13 - 2011-12-14 07:49 - 00130200 _____ (ZTE Incorporated) C:\WINDOWS\system32\Drivers\zgdcat.sys
2016-01-16 15:13 - 2011-12-14 07:49 - 00018456 _____ (HandSet Incorporated) C:\WINDOWS\system32\Drivers\massfilter_LTE.sys
2016-01-16 15:12 - 2016-01-16 15:13 - 00000000 ____D C:\Program Files (x86)\RedApp
2016-01-16 15:12 - 2016-01-16 15:12 - 00002396 _____ C:\Users\Public\Desktop\Cyfrowy Polsat MF821.lnk
2016-01-16 15:12 - 2016-01-16 15:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cyfrowy Polsat MF821
2016-01-13 21:28 - 2016-01-13 21:28 - 02734344 _____ C:\Users\emilks\Downloads\gazetka ST 59 - 2016-01 k2.zip
2016-01-13 21:19 - 2016-01-13 21:20 - 04968693 _____ C:\Users\emilks\Downloads\pdf_64.zip

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-02-08 16:44 - 2015-03-01 21:26 - 00001088 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-08 16:40 - 2015-07-09 18:51 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-02-08 12:14 - 2015-07-30 23:42 - 00000000 ___HD C:\Program Files\WindowsApps
2016-02-08 12:14 - 2015-07-30 23:42 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-02-08 12:02 - 2015-03-01 22:36 - 00000000 ____D C:\ProgramData\panda_url_filtering
2016-02-04 21:50 - 2015-03-01 21:27 - 00002278 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-04 21:50 - 2015-03-01 21:27 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-03 20:39 - 2015-03-01 21:26 - 00001084 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-03 20:07 - 2015-11-08 12:03 - 00001917 _____ C:\Users\emilks\Desktop\IrfanView 64 Thumbnails.lnk
2016-02-02 22:32 - 2015-07-30 22:52 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-02-02 22:32 - 2015-07-10 10:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-02-02 21:33 - 2015-03-01 19:46 - 00000000 ____D C:\Users\emilks\AppData\Local\VirtualStore
2016-02-01 22:56 - 2015-09-27 19:59 - 00000000 ____D C:\Users\emilks
2016-01-31 17:58 - 2015-07-30 23:40 - 00000000 ____D C:\WINDOWS\INF
2016-01-31 17:54 - 2015-09-27 20:17 - 01836100 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-31 17:54 - 2015-09-10 06:09 - 00813762 _____ C:\WINDOWS\system32\perfh015.dat
2016-01-31 17:54 - 2015-09-10 06:09 - 00156260 _____ C:\WINDOWS\system32\perfc015.dat
2016-01-31 12:32 - 2015-09-27 20:36 - 00000000 ___DC C:\WINDOWS\Panther
2016-01-31 12:27 - 2015-10-30 20:56 - 00000000 ___HD C:\$WINDOWS.~BT
2016-01-29 23:08 - 2015-12-09 20:58 - 00000000 ____D C:\AdwCleaner
2016-01-29 21:54 - 2015-07-30 22:49 - 00380216 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-01-29 21:51 - 2015-12-22 21:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2016-01-29 21:51 - 2015-03-06 19:15 - 00001130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-01-29 21:51 - 2015-03-06 19:15 - 00001118 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-01-28 21:11 - 2015-03-01 22:35 - 00000000 ____D C:\Program Files (x86)\Panda Security
2016-01-27 20:28 - 2015-07-30 23:42 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2016-01-26 21:53 - 2015-09-30 20:59 - 00000000 ____D C:\Users\emilks\AppData\Local\ElevatedDiagnostics
2016-01-26 21:45 - 2015-03-01 22:36 - 00000000 ____D C:\Users\emilks\AppData\LocalLow\pandasecuritytb
2016-01-24 22:12 - 2015-05-14 21:00 - 00000000 ____D C:\Users\emilks\AppData\Roaming\FileZilla
2016-01-16 15:12 - 2015-03-01 21:19 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-01-16 15:12 - 2015-03-01 21:19 - 00000000 ____D C:\WINDOWS\SysWOW64\SupportAppZXH
2016-01-16 15:12 - 2015-03-01 21:19 - 00000000 ____D C:\Program Files (x86)\Cyfrowy Polsat
2016-01-14 17:43 - 2015-07-30 23:25 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-01-14 17:39 - 2015-09-28 08:38 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-01-14 17:29 - 2015-09-28 08:38 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-01-14 17:29 - 2009-07-14 03:34 - 00000499 _____ C:\WINDOWS\win.ini

==================== Pliki w katalogu głównym wybranych folderów =======

2015-11-27 23:05 - 2015-11-27 23:05 - 0000017 _____ () C:\Users\emilks\AppData\Local\resmon.resmoncfg

Niektóre pliki w TEMP:
====================
C:\Users\emilks\AppData\Local\Temp\13AA.tmp.exe
C:\Users\emilks\AppData\Local\Temp\16BB.tmp.exe
C:\Users\emilks\AppData\Local\Temp\1Czaj36veG.exe
C:\Users\emilks\AppData\Local\Temp\1F0E.tmp.exe
C:\Users\emilks\AppData\Local\Temp\3AA7.tmp.exe
C:\Users\emilks\AppData\Local\Temp\3C5D.tmp.exe
C:\Users\emilks\AppData\Local\Temp\4F2C.tmp.exe
C:\Users\emilks\AppData\Local\Temp\7E78.tmp.exe
C:\Users\emilks\AppData\Local\Temp\818.tmp.exe
C:\Users\emilks\AppData\Local\Temp\B3iLikiRUf.exe
C:\Users\emilks\AppData\Local\Temp\D228.tmp.exe
C:\Users\emilks\AppData\Local\Temp\E117.tmp.exe
C:\Users\emilks\AppData\Local\Temp\IKnTLaUpqS.exe
C:\Users\emilks\AppData\Local\Temp\Napisy24.exe
C:\Users\emilks\AppData\Local\Temp\P1L0qGNTN4.exe
C:\Users\emilks\AppData\Local\Temp\sqlite3.dll
C:\Users\emilks\AppData\Local\Temp\tmpC735.tmp.exe
C:\Users\emilks\AppData\Local\Temp\Uninstall.exe
C:\Users\emilks\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-02-08 12:44

==================== Koniec  FRST.txt ============================