Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:21-02-2016 01 Uruchomiony przez Gibbon (administrator) GS_G580 (23-02-2016 21:23:47) Uruchomiony z C:\Users\pomyk_000\Desktop\Nowy folder (2) Załadowane profile: Gibbon (Dostępne profile: Gibbon) Platform: Windows 10 Pro (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Bitdefender) C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Comodo) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (BlackBerry Limited) C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (BlackBerry Limited) C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe (Bitdefender) C:\Program Files\Bitdefender\Antivirus Free Edition\gziface.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Users\pomyk_000\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Flux Software LLC) C:\Users\pomyk_000\AppData\Local\FluxSoftware\Flux\flux.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE (BlackBerry Limited) C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17079376 2014-03-29] (Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191568 2014-03-29] (Lenovo(beijing) Limited) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2787264 2016-01-12] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [14601160 2015-07-02] (Logitech Inc.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-06-03] (Synaptics Incorporated) HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [561672 2015-06-12] (Vimicro) HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [377368 2014-03-11] (Power Software Ltd) HKLM-x32\...\Run: [RIMBBLaunchAgent.exe] => C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [443640 2014-10-31] (BlackBerry Limited) HKLM-x32\...\Run: [RIM PeerManager] => C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe [4861688 2015-03-19] (BlackBerry Limited) HKLM\...\Policies\Explorer: [NoInternetOpenWith] 1 HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\...\Run: [Akamai NetSession Interface] => "C:\Users\pomyk_000\AppData\Local\Akamai\netsession_win.exe" HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\...\Run: [f.lux] => C:\Users\pomyk_000\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC) HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3014224 2016-02-04] (Valve Corporation) HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\...\RunOnce: [Uninstall C:\Users\pomyk_000\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\pomyk_000\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64" HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\...\RunOnce: [Uninstall C:\Users\pomyk_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\pomyk_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64" HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\...\RunOnce: [Uninstall C:\Users\pomyk_000\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\pomyk_000\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64" HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\...\MountPoints2: {9cd38f58-42fc-11e5-82c7-201a0694bb1c} - "D:\HTC_Sync_Manager_PC.exe" AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [175368 2016-02-09] (NVIDIA Corporation) AppInit_DLLs: , C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [175368 2016-02-09] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [153392 2016-02-09] (NVIDIA Corporation) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 217.113.224.134 217.113.224.35 Tcpip\..\Interfaces\{179b6c8e-bc63-4aff-a0ce-b142aa7198db}: [DhcpNameServer] 217.113.224.134 217.113.224.35 Tcpip\..\Interfaces\{e0e50b59-9146-4bee-aa5b-898a27c8a139}: [DhcpNameServer] 217.113.224.135 217.113.224.36 Internet Explorer: ================== HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-08-12] (Microsoft Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-08-12] (Microsoft Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-03-12] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\pomyk_000\AppData\Roaming\Mozilla\Firefox\Profiles\4zy9m59s.default FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation) FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll [2015-03-19] () FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.) Chrome: ======= CHR HomePage: Default -> hxxp://www.google.pl/ CHR StartupUrls: Default -> "hxxp://widzewtomy.net/" CHR NewTab: Default -> "chrome-extension://laookkfknpbbblfpciffpaejjkokdgca/dashboard.html" CHR Session Restore: Default -> [funkcja włączona] CHR Profile: C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Przelewy24) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiicmmpkicnndkhlnnloilpgncbpkbjj [2015-10-03] CHR Extension: (Dokumenty Google) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-15] [UpdateUrl: hxxps://mynamedomain.koko//0service/update2/crx] <==== UWAGA CHR Extension: (Dysk Google) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-18] [UpdateUrl: hxxps://mynamedomain.koko//0service/update2/crx] <==== UWAGA CHR Extension: (YouTube) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-26] CHR Extension: (Ban Checker for Steam) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\canbadmphamemnmdfngmcabnjmjgaiki [2016-02-23] CHR Extension: (Steam inventory helper) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2016-02-21] CHR Extension: (Google Search) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Tampermonkey) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2016-02-10] CHR Extension: (Zegar dla Google Chrome ™) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\emakkfldeggiinnfcdjkakdfcppbfhdg [2016-01-27] CHR Extension: (Stylish) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2015-12-21] CHR Extension: (LoungeDestroyer) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2016-01-31] CHR Extension: (Dokumenty Google offline) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18] CHR Extension: (AdBlock) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-16] CHR Extension: (YouTube To MP3!) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgdohmjplligggendhbmghhmpphabopi [2016-02-18] CHR Extension: (Emoji Input by EmojiStuff.com) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\immhpnclomdloikkpcefncmfgjbkojmh [2016-02-10] CHR Extension: (AutooDDealsAopp) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmjjiclfahidnokijacmlapcjinjimip [2016-01-18] CHR Extension: (Momentum) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\laookkfknpbbblfpciffpaejjkokdgca [2016-01-26] CHR Extension: (Ghostery) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2016-02-21] CHR Extension: (Awesome Screenshot: Screen capture, Annotate) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlipoenfbbikpbjkfpfillcgkoblgpmj [2015-12-14] CHR Extension: (Twitch Now) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2016-02-02] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-18] [UpdateUrl: hxxps://mynamedomain.koko//0service/update2/crx] <==== UWAGA CHR Extension: (Hover Zoom+) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pccckmaobkjjboncdfnnofkonhgpceea [2016-02-18] CHR Extension: (Gmail) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.) R3 BlackBerry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [588024 2014-10-31] (BlackBerry Limited) R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2057072 2016-02-04] (Comodo) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-01-12] (NVIDIA Corporation) R2 gzserv; C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe [69368 2013-10-23] (Bitdefender) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [328608 2015-07-30] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-10-16] () R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-01-12] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6308288 2016-01-12] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4812736 2016-01-12] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-12-09] (Electronic Arts) R2 RIM MDNS; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [396024 2015-03-19] (Apple Inc.) R2 RIM Tunnel Service; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [1354488 2015-03-19] (BlackBerry Limited) S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [21536 2016-01-13] () R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [249032 2015-06-03] (Synaptics Incorporated) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [718840 2013-04-17] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [593144 2013-04-17] (BitDefender) R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [173312 2015-03-27] (Broadcom Corporation.) R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7593176 2015-07-10] (Broadcom Corporation) S1 bdfwfpf; C:\Program Files\Bitdefender\Antivirus Free Edition\bdfwfpf.sys [121928 2013-07-02] (Bitdefender SRL) S3 blackberryncm; C:\Windows\System32\drivers\blackberryncm6_AMD64.sys [25088 2014-09-08] (BlackBerry) R1 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [148696 2013-04-22] (BitDefender LLC) R3 i8042HDR; C:\Windows\system32\DRIVERS\i8042HDR.sys [15920 2009-08-14] (Windows (R) Codename Longhorn DDK provider) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.) S3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) S3 LGSUsbFilt; C:\Windows\system32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-01-12] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation) S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [79872 2014-05-06] (BlackBerry Limited) R3 rimvndis; C:\Windows\System32\Drivers\rimvndis6_AMD64.sys [18432 2015-03-19] (BlackBerry Limited) R3 RimVSerPort; C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd) R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402960 2015-05-14] (Realsil Semiconductor Corporation) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-06-03] (Synaptics Incorporated) R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [382536 2013-05-28] (BitDefender S.R.L.) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [802312 2015-06-12] (Vimicro Corporation) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-02-23 21:23 - 2016-02-23 21:23 - 00000000 ____D C:\Users\pomyk_000\Desktop\Nowy folder (2) 2016-02-23 21:18 - 2016-02-23 21:18 - 00016148 _____ C:\WINDOWS\system32\GS_G580_Gibbon_HistoryPrediction.bin 2016-02-23 21:15 - 2016-02-23 21:15 - 00000000 ____D C:\Users\pomyk_000\Desktop\FRST-OlderVersion 2016-02-23 19:16 - 2016-02-23 19:16 - 00000000 ____D C:\WINDOWS\SysWOW64\NV 2016-02-23 19:16 - 2016-02-23 19:16 - 00000000 ____D C:\WINDOWS\system32\NV 2016-02-23 19:14 - 2016-02-10 07:28 - 00047040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2016-02-23 19:14 - 2016-02-09 09:25 - 42983480 _____ C:\WINDOWS\system32\nvcompiler.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 37616184 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 31119296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 24944064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 21201784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 20741880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 19779648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 17631304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 17224664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 17175248 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 17116936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 02541504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 02187712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 01924152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436191.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 01573432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436191.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 00950328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 00882232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 00745408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 00689600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 00151368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2016-02-23 19:14 - 2016-02-09 09:25 - 00128696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2016-02-23 18:42 - 2016-01-12 05:40 - 00112032 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll 2016-02-23 18:42 - 2015-12-18 07:10 - 00099472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll 2016-02-23 18:42 - 2015-12-18 07:10 - 00090768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll 2016-02-23 18:25 - 2016-02-23 18:26 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-02-23 17:31 - 2016-02-23 17:31 - 00000143 _____ C:\WINDOWS\NGIControl.KTL 2016-02-22 19:46 - 2016-02-23 17:31 - 00007659 _____ C:\WINDOWS\SentOSPackets.KTL 2016-02-14 19:57 - 2016-02-14 19:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools 2016-02-14 19:57 - 2016-02-14 19:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2016-02-12 22:58 - 2016-02-12 22:58 - 00034915 _____ C:\Users\pomyk_000\Desktop\Shortcut.txt 2016-02-12 22:57 - 2016-02-12 22:58 - 00040601 _____ C:\Users\pomyk_000\Desktop\Addition.txt 2016-02-12 22:57 - 2016-02-12 22:58 - 00033977 _____ C:\Users\pomyk_000\Desktop\FRST.txt 2016-02-12 22:51 - 2016-02-12 22:52 - 00000000 ____D C:\Users\pomyk_000\Desktop\Nowy folder 2016-02-05 04:18 - 2016-02-05 04:18 - 00003606 _____ C:\Users\pomyk_000\AppData\Local\recently-used.xbel 2016-02-05 03:27 - 2016-02-05 03:27 - 00000000 ____D C:\Program Files (x86)\Comodo ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-02-23 21:23 - 2016-01-15 14:07 - 00000000 ____D C:\FRST 2016-02-23 21:23 - 2015-07-31 14:19 - 01836310 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-02-23 21:23 - 2015-07-10 17:30 - 00813762 _____ C:\WINDOWS\system32\perfh015.dat 2016-02-23 21:23 - 2015-07-10 17:30 - 00156260 _____ C:\WINDOWS\system32\perfc015.dat 2016-02-23 21:23 - 2015-07-10 12:02 - 00000000 ____D C:\WINDOWS\INF 2016-02-23 21:19 - 2014-12-22 18:53 - 00000000 ____D C:\Program Files (x86)\Steam 2016-02-23 21:18 - 2014-10-19 22:10 - 00001068 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cfebe112891a2b.job 2016-02-23 21:17 - 2015-08-04 17:13 - 00000436 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics 2016-02-23 21:17 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-02-23 21:16 - 2015-07-10 10:05 - 00786432 ___SH C:\WINDOWS\system32\config\BBI 2016-02-23 21:16 - 2015-05-24 03:38 - 00000000 ____D C:\Users\pomyk_000\AppData\LocalLow\Temp 2016-02-23 21:16 - 2015-04-15 18:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-02-23 21:16 - 2014-05-16 21:07 - 00000000 ____D C:\Users\pomyk_000\Documents\Euro Truck Simulator 2 2016-02-23 21:16 - 2014-03-30 01:34 - 00000000 ____D C:\Users\pomyk_000\AppData\Local\CrashDumps 2016-02-23 21:16 - 2014-03-29 19:21 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo 2016-02-23 19:16 - 2015-07-31 14:09 - 00000000 ____D C:\ProgramData\NVIDIA 2016-02-23 19:15 - 2015-07-31 14:09 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2016-02-23 18:43 - 2015-07-31 14:09 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-02-23 18:43 - 2014-03-29 00:26 - 00000000 ____D C:\Users\pomyk_000\AppData\Local\NVIDIA 2016-02-23 18:42 - 2015-10-08 21:00 - 00000000 ____D C:\WINDOWS\LastGood 2016-02-23 18:26 - 2015-05-20 03:45 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-02-23 18:25 - 2014-03-29 19:36 - 00000000 ____D C:\ProgramData\Adobe 2016-02-23 18:25 - 2014-03-29 19:36 - 00000000 ____D C:\Program Files (x86)\Adobe 2016-02-23 17:31 - 2015-12-18 00:11 - 01333622 _____ C:\WINDOWS\ProcessedPackets.KTL 2016-02-23 17:31 - 2015-12-18 00:11 - 00140018 _____ C:\WINDOWS\Packet.KTL 2016-02-23 17:31 - 2015-08-04 23:52 - 00018012 _____ C:\WINDOWS\Control.KTL 2016-02-23 17:28 - 2014-03-28 23:55 - 00004218 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5FBE86C3-CC31-4744-A711-F97DE2494D1D} 2016-02-23 01:50 - 2014-07-02 18:09 - 00000000 ____D C:\Users\pomyk_000\AppData\Roaming\TS3Client 2016-02-21 21:02 - 2014-07-30 19:14 - 00000000 ____D C:\Users\pomyk_000\AppData\Roaming\Audacity 2016-02-20 15:06 - 2014-03-29 01:55 - 00002284 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-02-16 01:45 - 2014-05-27 01:54 - 00000000 ____D C:\Users\pomyk_000\AppData\Roaming\Tropico 5 2016-02-14 19:57 - 2014-03-29 19:21 - 00000000 ____D C:\WINDOWS\System32\Tasks\TVT 2016-02-14 19:57 - 2014-03-29 19:21 - 00000000 ____D C:\ProgramData\lenovo 2016-02-14 19:57 - 2014-03-29 00:12 - 00000000 ____D C:\Program Files (x86)\Lenovo 2016-02-11 13:58 - 2014-04-01 20:43 - 00000000 ____D C:\Users\pomyk_000\Documents\Anki 2016-02-10 20:02 - 2014-03-28 23:49 - 00000000 ____D C:\Users\pomyk_000\AppData\Local\Packages 2016-02-10 07:27 - 2015-07-23 03:02 - 12478528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2016-02-09 13:33 - 2014-12-09 23:55 - 00000000 ____D C:\Program Files\KMSpico 2016-02-09 09:25 - 2015-10-08 21:00 - 14115136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2016-02-09 09:25 - 2015-10-08 18:08 - 03231544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2016-02-09 09:25 - 2015-07-23 03:02 - 03649576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2016-02-09 09:25 - 2015-07-23 03:02 - 00541000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll 2016-02-09 09:25 - 2015-07-23 03:02 - 00445728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll 2016-02-09 09:25 - 2015-07-23 03:02 - 00175368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2016-02-09 09:25 - 2015-07-23 03:02 - 00153392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2016-02-09 09:25 - 2015-07-23 03:02 - 00035832 _____ C:\WINDOWS\system32\nvinfo.pb 2016-02-09 06:29 - 2015-07-31 14:09 - 06368824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2016-02-09 06:29 - 2015-07-31 14:09 - 02992064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2016-02-09 06:29 - 2015-07-31 14:09 - 02561472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2016-02-09 06:29 - 2015-07-31 14:09 - 01263040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2016-02-09 06:29 - 2015-07-31 14:09 - 00530368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2016-02-09 06:29 - 2015-07-31 14:09 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2016-02-09 06:29 - 2015-07-31 14:09 - 00123448 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll 2016-02-09 06:29 - 2015-07-31 14:09 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2016-02-09 06:29 - 2015-07-31 14:09 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2016-02-09 02:19 - 2015-07-31 14:13 - 00000000 ____D C:\Users\pomyk_000 2016-02-08 14:59 - 2015-07-10 13:20 - 05010072 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-02-08 09:00 - 2014-03-29 23:43 - 00000000 ____D C:\Users\pomyk_000\AppData\Roaming\BitTorrent 2016-02-07 05:58 - 2015-07-31 14:29 - 00002468 _____ C:\Users\pomyk_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-02-07 05:58 - 2015-07-31 14:29 - 00000000 ___RD C:\Users\pomyk_000\OneDrive 2016-02-06 15:58 - 2015-07-31 14:09 - 06154909 _____ C:\WINDOWS\system32\nvcoproc.bin 2016-02-05 04:29 - 2014-04-09 19:11 - 00000000 ____D C:\Users\pomyk_000\.gimp-2.8 2016-02-05 04:18 - 2014-04-09 19:22 - 00000000 ____D C:\Users\pomyk_000\AppData\Local\gtk-2.0 2016-02-03 01:32 - 2014-10-19 22:10 - 00004160 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1cfebe113b6ce75 2016-02-03 01:32 - 2014-10-19 22:10 - 00003928 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore1cfebe112891a2b 2016-02-03 01:32 - 2014-10-19 22:10 - 00001072 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cfebe113b6ce75.job 2016-01-28 20:33 - 2015-04-13 19:45 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client ==================== Pliki w katalogu głównym wybranych folderów ======= 2014-03-31 13:13 - 2012-07-04 18:43 - 24084840 _____ () C:\Program Files\ubisoftlauncher.exe 2014-06-02 19:33 - 2014-05-23 10:21 - 0000224 _____ () C:\Program Files\update-watchdogs.bat 2014-06-02 19:33 - 2013-10-12 19:47 - 0000732 _____ () C:\Program Files\visit-www.nosteam.ro.html 2013-02-26 07:28 - 2013-02-26 07:28 - 0027762 _____ () C:\Program Files (x86)\changes.txt 2013-02-26 07:56 - 2013-02-26 07:56 - 2391736 _____ (Beepa P/L) C:\Program Files (x86)\fraps.exe 2013-02-26 07:34 - 2013-02-26 07:34 - 0234168 _____ (Beepa P/L) C:\Program Files (x86)\fraps32.dll 2013-02-26 07:56 - 2013-02-26 07:56 - 0068792 _____ (Beepa P/L) C:\Program Files (x86)\fraps64.dat 2013-02-26 07:34 - 2013-02-26 07:34 - 0186552 _____ (Beepa P/L) C:\Program Files (x86)\fraps64.dll 2013-02-26 07:54 - 2013-02-26 07:54 - 0139776 _____ (Beepa P/L) C:\Program Files (x86)\frapslcd.dll 2015-09-03 03:47 - 2015-09-03 03:47 - 0000189 _____ () C:\Program Files (x86)\FRAPSLOG.TXT 2013-02-26 07:27 - 2013-02-26 07:27 - 0001894 _____ () C:\Program Files (x86)\README.HTM 2015-09-03 03:46 - 2015-09-03 03:46 - 0036079 _____ (Beepa Pty Ltd) C:\Program Files (x86)\uninstall.exe 2014-11-20 23:09 - 2014-11-20 23:09 - 0000385 _____ () C:\Program Files\Common Files\TrackerSoftwareInstallerPDFT4.log 2014-05-23 17:25 - 2014-05-23 17:25 - 0000001 _____ () C:\Users\pomyk_000\AppData\Local\llftool.4.30.agreement 2014-04-13 23:25 - 2014-04-13 23:25 - 0000001 _____ () C:\Users\pomyk_000\AppData\Local\llftool.4.40.agreement 2016-02-05 04:18 - 2016-02-05 04:18 - 0003606 _____ () C:\Users\pomyk_000\AppData\Local\recently-used.xbel 2014-03-29 02:19 - 2014-03-31 03:13 - 0007600 _____ () C:\Users\pomyk_000\AppData\Local\resmon.resmoncfg 2014-10-23 20:54 - 2014-10-23 20:54 - 0017408 _____ () C:\Users\pomyk_000\AppData\Local\WebpageIcons.db 2014-06-28 21:38 - 2014-06-28 21:38 - 0048082 _____ () C:\ProgramData\1403987877.bdinstall.bin 2014-06-28 21:46 - 2014-06-28 21:46 - 0103487 _____ () C:\ProgramData\1403988339.bdinstall.bin 2014-06-28 21:49 - 2014-06-28 21:49 - 0107163 _____ () C:\ProgramData\1403988517.bdinstall.bin 2014-06-28 21:55 - 2014-06-28 21:55 - 0202561 _____ () C:\ProgramData\1403988883.bdinstall.bin 2014-11-16 01:34 - 2014-11-16 01:34 - 0037479 _____ () C:\ProgramData\1416098052.bdinstall.bin 2014-11-16 01:35 - 2014-11-16 01:35 - 0178577 _____ () C:\ProgramData\1416098053.bdinstall.bin 2015-07-31 14:09 - 2015-07-31 14:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2014-03-30 01:32 - 2014-03-30 01:43 - 0427840 _____ (ForensiT Limited) C:\ProgramData\UserProfileMigrationService.exe Pliki do przeniesienia lub usunięcia: ==================== C:\ProgramData\UserProfileMigrationService.exe ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2016-02-14 19:34 ==================== Koniec FRST.txt ============================