Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:07-02-2016
Uruchomiony przez Elajza (administrator)  ELIZA (13-02-2016 16:58:49)
Uruchomiony z C:\Users\Elajza\Downloads
Załadowane profile: Elajza (Dostępne profile: Elajza)
Platform: Windows 8.1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
() C:\Windows\SysWOW64\srvany.exe
() C:\Windows\KMService.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\Teco\TecoService.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\Hotkey\TCrdMain_Win8.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\Teco\TecoResident.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\HDD Accelerator\THAccelSvc.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\TOSHIBA Service Station\ToshibaServiceStation.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\TOSHIBA Service Station\TMachInfo.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_306.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_20_0_0_306.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13196432 2012-09-26] (Realtek Semiconductor)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2608040 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)
HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-04] ()
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-07-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ToshibaAppPlace] => C:\Program Files (x86)\Toshiba\Toshiba App Place\ToshibaAppPlace.exe [552960 2010-09-23] (Toshiba)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [179624 2016-01-12] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-1115837104-4238194641-737760799-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd)
HKU\S-1-5-21-1115837104-4238194641-737760799-1001\...\Run: [GG] => C:\Users\Elajza\AppData\Local\GG\Application\gghub.exe [4078144 2015-04-02] (GG Network S.A.)
HKU\S-1-5-21-1115837104-4238194641-737760799-1001\...\MountPoints2: {7c6ad382-b42d-11e4-beaf-008cfa3f8fca} - "H:\LG_PC_Programs.exe" 
HKU\S-1-5-21-1115837104-4238194641-737760799-1001\...\MountPoints2: {a4f135ef-2b40-11e3-be73-008cfa3f8fca} - "F:\SETUP.EXE" 
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  Brak pliku
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  Brak pliku
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  Brak pliku
ShellIconOverlayIdentifiers: [Uchwyt nakładania ikony podpisu cyfrowego] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2009-02-09] (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  Brak pliku
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  Brak pliku
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  Brak pliku

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{F35D2A8C-623C-45A8-A542-080F946BF1CE}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://toshiba13.msn.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com
HKU\S-1-5-21-1115837104-4238194641-737760799-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com
URLSearchHook: HKLM-x32 - Free Lunch Design TB Toolbar - {a5ae8924-4036-420f-b7f6-a47e4b8f692e} - C:\Users\Elajza\AppData\LocalLow\Free_Lunch_Design_TB\prxtbFree.dll Brak pliku
URLSearchHook: HKU\S-1-5-21-1115837104-4238194641-737760799-1001 - Free Lunch Design TB Toolbar - {a5ae8924-4036-420f-b7f6-a47e4b8f692e} - C:\Users\Elajza\AppData\LocalLow\Free_Lunch_Design_TB\prxtbFree.dll Brak pliku
SearchScopes: HKLM-x32 -> DefaultScope {17E1DCF2-E248-412C-BB98-7FA664B2705B} URL = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1115837104-4238194641-737760799-1001 -> {72E1588E-551C-4259-8C8B-F38193E31DD5} URL = 
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2013-11-28] (CANON INC.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2011-02-11] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04] (Adobe Systems Incorporated)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2013-11-28] (CANON INC.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-04-14] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-04-14] (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2013-11-28] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2013-11-28] (CANON INC.)

FireFox:
========
FF ProfilePath: C:\Users\Elajza\AppData\Roaming\Mozilla\Firefox\Profiles\8w0xi2pt.default
FF Homepage: hxxp://www.google.pl/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll [2014-02-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-09] ()
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-04-14] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-04-14] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll [2014-02-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-25] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-28] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2012-04-04] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1115837104-4238194641-737760799-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Elajza\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-08] (Unity Technologies ApS)
FF Extension: YouTube Video and Audio Downloader - C:\Users\Elajza\AppData\Roaming\Mozilla\Firefox\Profiles\8w0xi2pt.default\Extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi [2016-01-02]
FF Extension: NetVideoHunter - C:\Users\Elajza\AppData\Roaming\Mozilla\Firefox\Profiles\8w0xi2pt.default\Extensions\netvideohunter@netvideohunter.com [2015-11-11]
FF Extension: Youtube MP3 Podcaster - C:\Users\Elajza\AppData\Roaming\Mozilla\Firefox\Profiles\8w0xi2pt.default\Extensions\youtubemp3podcaster@jeremy.d.gregorio.com [2015-12-29]
FF Extension: uBlock - C:\Users\Elajza\AppData\Roaming\Mozilla\Firefox\Profiles\8w0xi2pt.default\Extensions\{2b10c1c8-a11f-4bad-fe9c-1c11e82cac42}.xpi [2015-12-07]
FF Extension: Video DownloadHelper - C:\Users\Elajza\AppData\Roaming\Mozilla\Firefox\Profiles\8w0xi2pt.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-10-30]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki
CHR Profile: C:\Users\Elajza\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Elajza\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-05]
CHR Extension: (Dokumenty Google) - C:\Users\Elajza\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]
CHR Extension: (Dysk Google) - C:\Users\Elajza\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Elajza\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-26]
CHR Extension: (uBlock Origin) - C:\Users\Elajza\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-01-12]
CHR Extension: (Google Search) - C:\Users\Elajza\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-01]
CHR Extension: (Arkusze Google) - C:\Users\Elajza\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-05]
CHR Extension: (Dokumenty Google offline) - C:\Users\Elajza\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-20]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Elajza\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-05]
CHR Extension: (Gmail) - C:\Users\Elajza\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-07-04] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego]
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1048488 2016-01-12] (AVG Technologies CZ, s.r.o.)
S3 FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [1030600 2013-11-11] (Macrovision Europe Ltd.) [Brak podpisu cyfrowego]
R2 KMService; C:\WINDOWS\SysWOW64\srvany.exe [8192 2015-05-22] () [Brak podpisu cyfrowego]
R2 THAccelSvc; C:\Program Files\TOSHIBA\HDD Accelerator\THAccelSvc.exe [214928 2013-10-17] (TOSHIBA CORPORATION)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2013-10-03] (Disc Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (EZB Systems, Inc.)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )
R0 THAccel; C:\Windows\System32\DRIVERS\THAccel.sys [111488 2013-10-15] (TOSHIBA Corporation)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [32624 2013-08-19] (Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44024 2015-02-04] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [264000 2015-02-04] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-02-13 16:58 - 2016-02-13 16:59 - 00016604 _____ C:\Users\Elajza\Downloads\FRST.txt
2016-02-13 16:56 - 2016-02-13 16:58 - 00000000 ____D C:\FRST
2016-02-13 16:56 - 2016-02-13 16:56 - 00380416 _____ C:\Users\Elajza\Downloads\gyz13j85.exe
2016-02-13 16:51 - 2016-02-13 16:51 - 02370560 _____ (Farbar) C:\Users\Elajza\Downloads\FRST64.exe
2016-02-09 15:51 - 2016-02-09 15:51 - 00046896 _____ C:\Users\Elajza\Downloads\przelew.pdf
2016-02-07 11:56 - 2016-02-07 11:56 - 01508352 _____ C:\Users\Elajza\Downloads\adwcleaner.pl 5.032.exe
2016-02-04 17:03 - 2016-02-04 17:03 - 00002760 _____ C:\WINDOWS\System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance
2016-02-04 16:49 - 2016-02-07 11:49 - 00000072 _____ C:\Users\Elajza\AppData\Roaming\WB.CFG
2016-02-04 15:57 - 2016-02-04 15:57 - 00000000 ____D C:\Users\Elajza\AppData\Roaming\AVG
2016-02-04 15:54 - 2016-02-04 15:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-02-04 15:51 - 2016-02-04 15:59 - 00000000 ____D C:\ProgramData\Avg
2016-02-04 15:50 - 2016-02-12 18:36 - 00000000 ____D C:\Users\Elajza\AppData\Local\AvgSetupLog
2016-02-04 15:50 - 2016-02-04 15:57 - 00000000 ____D C:\Users\Elajza\AppData\Local\Avg
2016-02-04 15:49 - 2016-02-04 15:49 - 00003454 _____ C:\WINDOWS\System32\Tasks\ElajzaSeptumAssimilativeV2
2016-02-04 15:49 - 2016-02-04 15:49 - 00002019 _____ C:\Users\Elajza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aliexpress .lnk
2016-02-04 15:49 - 2016-02-04 15:49 - 00000000 ____D C:\Users\Elajza\AppData\Local\SeptumAssimilative
2016-02-04 15:49 - 2016-02-04 15:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Lunch Design
2016-02-04 15:49 - 2016-02-04 15:49 - 00000000 ____D C:\games
2016-01-27 18:45 - 2016-01-27 18:45 - 00637788 _____ C:\Users\Elajza\Downloads\OWU Mieszkaniowe Proama.pdf
2016-01-27 18:41 - 2016-01-27 18:41 - 00291405 _____ C:\Users\Elajza\Downloads\Oferta.pdf

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-02-13 16:38 - 2015-01-22 14:37 - 00001064 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-13 16:37 - 2014-11-15 20:28 - 00000000 ____D C:\Users\Elajza
2016-02-13 16:37 - 2014-05-18 09:07 - 00000214 _____ C:\WINDOWS\Tasks\AutoKMS.job
2016-02-13 16:37 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-02-13 16:18 - 2014-12-22 20:12 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-02-13 15:31 - 2015-01-22 14:38 - 00001068 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-13 12:42 - 2013-10-02 12:00 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1115837104-4238194641-737760799-1001
2016-02-12 18:36 - 2015-07-17 18:37 - 00003106 _____ C:\WINDOWS\System32\Tasks\{76973A3E-BEDE-44E5-A3CE-082667CADDA9}
2016-02-12 18:36 - 2015-01-22 14:38 - 00004040 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-12 18:36 - 2015-01-22 14:37 - 00003804 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-12 14:52 - 2015-05-26 09:45 - 00000000 ____D C:\Users\Elajza\Desktop\książki
2016-02-12 10:34 - 2014-05-18 09:07 - 00000222 _____ C:\WINDOWS\Tasks\AutoKMSDaily.job
2016-02-10 20:00 - 2013-10-04 03:03 - 00000000 ____D C:\Users\Elajza\AppData\Roaming\foobar2000
2016-02-10 19:35 - 2015-01-22 14:39 - 00002249 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-09 19:27 - 2014-11-14 17:30 - 00000000 ____D C:\Users\Elajza\AppData\Roaming\GG
2016-02-09 19:18 - 2014-12-22 20:12 - 00003818 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-02-09 11:00 - 2015-05-22 19:49 - 00000000 ____D C:\Users\Elajza\Desktop\Studia
2016-02-07 13:09 - 2015-03-22 13:15 - 00000000 ____D C:\AdwCleaner
2016-02-07 11:59 - 2013-08-22 14:25 - 01048576 ___SH C:\WINDOWS\system32\config\BBI
2016-02-07 11:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-02-06 19:20 - 2015-05-22 19:49 - 00000000 ___RD C:\Users\Elajza\Desktop\Gry
2016-02-06 11:30 - 2014-11-14 17:30 - 00000000 ____D C:\Users\Elajza\AppData\Local\GG
2016-02-06 11:20 - 2015-05-22 19:49 - 00000000 ___RD C:\Users\Elajza\Desktop\Programy
2016-02-06 11:17 - 2015-01-11 12:43 - 00000000 ____D C:\Users\Elajza\Documents\Pliki programu Outlook
2016-02-04 16:18 - 2013-10-02 09:59 - 00000000 ____D C:\Users\Elajza\AppData\Local\VirtualStore
2016-02-04 15:59 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf
2016-02-04 15:57 - 2013-11-19 12:13 - 00000000 ____D C:\Program Files (x86)\AVG
2016-02-04 15:52 - 2014-09-24 16:08 - 01825074 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-04 15:52 - 2014-09-24 15:35 - 00807160 _____ C:\WINDOWS\system32\perfh015.dat
2016-02-04 15:52 - 2014-09-24 15:35 - 00163478 _____ C:\WINDOWS\system32\perfc015.dat
2016-01-28 13:30 - 2015-05-22 19:49 - 00000000 ____D C:\Users\Elajza\Desktop\Foto
2016-01-18 14:20 - 2015-05-22 19:49 - 00000000 ___RD C:\Users\Elajza\Desktop\Muzyka

==================== Pliki w katalogu głównym wybranych folderów =======

2014-03-11 14:33 - 2014-03-11 15:14 - 0000496 _____ () C:\Users\Elajza\AppData\Roaming\burnaware.ini
2016-02-04 16:49 - 2016-02-07 11:49 - 0000072 _____ () C:\Users\Elajza\AppData\Roaming\WB.CFG
2014-09-20 17:53 - 2014-09-20 17:53 - 0004653 _____ () C:\Users\Elajza\AppData\Local\recently-used.xbel
2015-04-30 08:57 - 2015-04-30 08:57 - 0003256 _____ () C:\Users\Elajza\AppData\Local\unins000.dat
2015-04-30 08:57 - 2015-04-30 08:57 - 0707744 _____ () C:\Users\Elajza\AppData\Local\unins000.exe
2015-04-30 08:57 - 2015-04-30 08:57 - 0011761 _____ () C:\Users\Elajza\AppData\Local\unins000.msg

Niektóre pliki w TEMP:
====================
C:\Users\Elajza\AppData\Local\Temp\bitool.dll
C:\Users\Elajza\AppData\Local\Temp\CarpelPreassemble.dll
C:\Users\Elajza\AppData\Local\Temp\ggdrive-menu.exe
C:\Users\Elajza\AppData\Local\Temp\ggdrive-overlay.exe
C:\Users\Elajza\AppData\Local\Temp\ICReinstall_setup.exe
C:\Users\Elajza\AppData\Local\Temp\installstats.exe
C:\Users\Elajza\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-02-12 11:06

==================== Koniec  FRST.txt ============================