Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:05-03-2016 01
Uruchomiony przez Daryjka (administrator)  DARYJKALENOVO (05-03-2016 18:10:28)
Uruchomiony z D:\Pobrane
Załadowane profile: Daryjka (Dostępne profile: Daryjka)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Lenovo (Beijing) Limited) C:\Program Files\Lenovo\Energy Management\Energy Management.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Program Files\Winamp\winampa.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD Security\WDDriveAutoUnlock.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Advanced Micro Devices Inc.) C:\Program Files\AMD\ATI.ACE\Core-Static\MOM.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Validity Sensors, Inc.) C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(Validity Sensors, Inc.) C:\Program Files\Lenovo Fingerprint Reader\SwipeMonitor.exe
(Synaptics Incorporated) C:\Windows\System32\valWbioSyncSvc.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe
(Advanced Micro Devices Inc.) C:\Program Files\AMD\ATI.ACE\Core-Static\CCC.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Motorola Solutions, Inc.) C:\Program Files\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files\Intel\Bluetooth\obexsrv.exe
(Motorola Solutions, Inc.) C:\Program Files\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\ProgramData\wget.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [USB3MON] => C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [296208 2014-11-04] (Intel Corporation)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2685768 2014-06-18] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12111576 2014-10-23] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1013616 2014-11-07] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1013616 2014-11-07] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1013616 2014-11-07] (Realtek Semiconductor)
HKLM\...\Run: [Energy Management] => C:\Program Files\Lenovo\Energy Management\Energy Management.exe [8000560 2012-03-28] (Lenovo (Beijing) Limited)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [RtsFT] => C:\Windows\RTFTrack.exe [4904664 2014-01-21] (Realtek semiconductor)
HKLM\...\Run: [WinampAgent] => C:\Program Files\Winamp\Winampa.exe [12288 2003-04-02] ()
HKLM\...\Run: [WD Drive Unlocker] => C:\Program Files\Western Digital\WD Security\WDDriveAutoUnlock.exe [1694080 2013-07-10] (Western Digital Technologies, Inc.)
HKLM\...\Run: [StartCCC] => C:\Program Files\AMD\ATI.ACE\Core-Static\x86\CLIStart.exe [748744 2015-08-21] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139768 2016-03-05] (AVAST Software)
HKU\S-1-5-21-3933339568-756590566-4204709515-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6638296 2016-02-12] (Piriform Ltd)
HKU\S-1-5-21-3933339568-756590566-4204709515-1000\...\Policies\Explorer: [] 
HKU\S-1-5-21-3933339568-756590566-4204709515-1000\...\MountPoints2: I - "I:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-21-3933339568-756590566-4204709515-1000\...\MountPoints2: {15d720ac-6048-11e5-84f0-d05349e64cea} - H:\Launch.exe
HKU\S-1-5-21-3933339568-756590566-4204709515-1000\...\MountPoints2: {cab058ff-7811-11e5-b610-d05349e64cea} - F:\setup.exe
HKU\S-1-5-21-3933339568-756590566-4204709515-1000\...\MountPoints2: {fd143e02-603a-11e5-88d4-d05349e64cea} - "I:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [894344 2013-02-05] (Autodesk, Inc.)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2016-03-05] (AVAST Software)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2013-02-08] (Autodesk, Inc.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{526EF4CB-3F05-4853-8E7F-44609EB245D3}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{A144195C-DC58-4B3F-8DE4-F8A1FC484471}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-05] (AVAST Software)

FireFox:
========
FF ProfilePath: C:\Users\Daryjka\AppData\Roaming\Mozilla\Firefox\Profiles\h7yw7a0n.default
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> D:\Nowy folder\Picasa3\npPicasa3.dll [2015-10-09] (Google, Inc.)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-10-10] (Intel Corporation)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-10-10] (Intel Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-06] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-06] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-05]

Chrome: 
=======
CHR Profile: C:\Users\Daryjka\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Daryjka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-21]
CHR Extension: (Dokumenty Google) - C:\Users\Daryjka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-21]
CHR Extension: (Dysk Google) - C:\Users\Daryjka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-28]
CHR Extension: (YouTube) - C:\Users\Daryjka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-19]
CHR Extension: (Google Search) - C:\Users\Daryjka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Arkusze Google) - C:\Users\Daryjka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-21]
CHR Extension: (Dokumenty Google offline) - C:\Users\Daryjka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-27]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Daryjka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-21]
CHR Extension: (Gmail) - C:\Users\Daryjka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-21]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-03-05]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [Brak podpisu cyfrowego]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-03-05] (AVAST Software)
R2 Bluetooth Device Monitor; C:\Program Files\Intel\Bluetooth\devmonsrv.exe [1206648 2014-03-26] (Motorola Solutions, Inc.)
R2 Bluetooth Media Service; C:\Program Files\Intel\Bluetooth\mediasrv.exe [1710456 2014-03-26] (Motorola Solutions, Inc.)
R2 Bluetooth OBEX Service; C:\Program Files\Intel\Bluetooth\obexsrv.exe [1161592 2014-03-26] (Motorola Solutions, Inc.)
S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [279144 2014-11-21] (Intel Corporation)
S3 FlexNet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1064312 2015-09-21] (Flexera Software LLC)
S3 ICCS; C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [169752 2012-04-24] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [285288 2014-11-21] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [686552 2014-05-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [132896 2014-10-10] (Intel Corporation)
S3 iumsvc; C:\Program Files\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation)
R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2014-10-10] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [250064 2014-08-18] ()
S2 SwOffScheduler; C:\Program Files\Airytec\Switch Off\swoff.exe [135168 2014-09-23] (Airytec) [Brak podpisu cyfrowego]
S2 SwOffWeb; C:\Program Files\Airytec\Switch Off\swoff.exe [135168 2014-09-23] (Airytec) [Brak podpisu cyfrowego]
R2 ValBioService; C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe [23288 2014-11-05] (Validity Sensors, Inc.)
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [38192 2014-11-05] (Synaptics Incorporated)
R2 valWbioSyncSvc; C:\Windows\system32\valWbioSyncSvc.exe [28160 2014-11-05] (Synaptics Incorporated)
R2 WDDriveService; C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe [270704 2013-07-10] (Western Digital Technologies, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2014-09-10] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3033296 2014-08-18] (Intel® Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 ACPIVPC; C:\Windows\System32\DRIVERS\AcpiVpc.sys [24672 2011-12-15] (Lenovo Corporation)
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [42720 2015-04-23] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [32792 2016-03-05] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [91168 2016-03-05] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [91232 2016-03-05] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [58776 2016-03-05] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [812720 2016-03-05] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447848 2016-03-05] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [127432 2016-03-05] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [221240 2016-03-05] (AVAST Software)
R3 athr; C:\Windows\System32\DRIVERS\athr.sys [3307008 2014-09-08] (Qualcomm Atheros Communications, Inc.)
R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [115000 2014-03-26] (Motorola Solutions, Inc.)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [25016 2015-09-21] (Disc Soft Ltd)
R3 ETD; C:\Windows\System32\DRIVERS\ETD.sys [353096 2014-06-18] (ELAN Microelectronics Corp.)
R0 iusb3hcs; C:\Windows\System32\DRIVERS\iusb3hcs.sys [19216 2014-11-04] (Intel Corporation)
R3 iusb3hub; C:\Windows\System32\DRIVERS\iusb3hub.sys [384272 2014-11-04] (Intel Corporation)
R3 iusb3xhc; C:\Windows\System32\DRIVERS\iusb3xhc.sys [805648 2014-11-04] (Intel Corporation)
R0 LHDmgr; C:\Windows\System32\DRIVERS\LhdX86.sys [32352 2010-01-15] (Lenovo.)
R3 MEI; C:\Windows\System32\DRIVERS\TeeDriver.sys [111904 2014-10-10] (Intel Corporation)
R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [219352 2013-09-24] (Realtek Semiconductor Corp.)
R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [7176408 2014-01-21] (Realtek Semiconductor Corp.)
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-03-05 18:07 - 2016-03-05 18:10 - 00000000 ____D C:\FRST
2016-03-05 16:06 - 2016-03-05 15:59 - 00334280 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-03-05 16:00 - 2016-03-05 16:00 - 00447848 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2016-03-05 16:00 - 2016-03-05 16:00 - 00221240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-03-05 16:00 - 2016-03-05 16:00 - 00000000 ____D C:\Users\Daryjka\AppData\Roaming\AVAST Software
2016-03-05 16:00 - 2016-03-05 16:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-03-05 16:00 - 2016-03-05 15:59 - 00812720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-03-05 16:00 - 2016-03-05 15:59 - 00127432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-03-05 16:00 - 2016-03-05 15:59 - 00091232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-03-05 16:00 - 2016-03-05 15:59 - 00091168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-03-05 16:00 - 2016-03-05 15:59 - 00058776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-03-05 16:00 - 2016-03-05 15:59 - 00032792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-03-05 15:59 - 2016-03-05 15:59 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-03-05 15:55 - 2016-03-05 15:55 - 00000000 ____D C:\Program Files\AVAST Software
2016-03-05 15:50 - 2016-03-05 15:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-03-05 15:50 - 2016-03-05 15:50 - 00000000 ____D C:\Program Files\CCleaner
2016-03-05 15:24 - 2016-03-05 15:24 - 00000000 ____D C:\ProgramData\ATI
2016-03-05 15:23 - 2016-03-05 15:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2016-03-05 15:21 - 2016-03-05 15:22 - 00000000 ____D C:\Program Files\AMD
2016-03-05 15:21 - 2016-03-05 15:21 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2016-02-16 21:53 - 2016-02-16 21:53 - 00000000 ___RD C:\Program Files\Skype
2016-02-16 21:53 - 2016-02-16 21:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-02-16 21:53 - 2016-02-16 21:53 - 00000000 ____D C:\Program Files\Common Files\Skype

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-03-05 18:06 - 2015-10-29 11:16 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-03-05 18:06 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2016-03-05 17:44 - 2009-07-14 05:34 - 00031088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-05 17:44 - 2009-07-14 05:34 - 00031088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-05 17:22 - 2015-09-21 11:06 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-05 17:18 - 2015-09-21 11:14 - 00000000 _____ C:\ProgramData\dat.bmp
2016-03-05 17:08 - 2015-09-21 10:16 - 00000000 ____D C:\ProgramData\Validity
2016-03-05 17:08 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-05 16:13 - 2015-09-21 17:19 - 00000000 ____D C:\Users\Daryjka\AppData\Roaming\MPC-HC
2016-03-05 16:13 - 2015-09-21 10:58 - 00000000 ____D C:\Users\Daryjka\AppData\Roaming\DAEMON Tools Lite
2016-03-05 16:12 - 2014-09-10 21:51 - 00000000 ____D C:\Windows\Panther
2016-03-05 15:55 - 2015-09-21 11:01 - 00000000 ____D C:\ProgramData\AVAST Software
2016-02-21 18:18 - 2015-09-21 11:07 - 00002168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-16 23:55 - 2015-11-01 15:40 - 00000000 ____D C:\Users\Daryjka\AppData\Roaming\Skype
2016-02-16 21:53 - 2015-11-01 15:40 - 00000000 ____D C:\Users\Daryjka\AppData\Local\Skype
2016-02-16 21:53 - 2015-11-01 15:40 - 00000000 ____D C:\ProgramData\Skype
2016-02-15 11:12 - 2009-07-14 05:53 - 00032522 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-02-06 09:17 - 2015-09-21 11:06 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

==================== Pliki w katalogu głównym wybranych folderów =======

2015-12-05 23:45 - 2015-12-05 23:45 - 6420480 _____ () C:\Program Files\GUT22CE.tmp
2015-09-21 11:14 - 2016-03-05 17:18 - 0000000 _____ () C:\ProgramData\dat.bmp
2015-09-21 09:57 - 2015-09-21 09:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-09-21 11:43 - 2015-09-21 11:43 - 0000147 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2015-09-21 10:46 - 2015-09-21 10:46 - 0332800 _____ () C:\ProgramData\wget.exe

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\wget.exe


Niektóre pliki w TEMP:
====================
C:\Users\Daryjka\AppData\Local\Temp\AMDCleanupUtility.exe
C:\Users\Daryjka\AppData\Local\Temp\Cleanup.dll
C:\Users\Daryjka\AppData\Local\Temp\ddu.exe
C:\Users\Daryjka\AppData\Local\Temp\difxapi.dll
C:\Users\Daryjka\AppData\Local\Temp\msvcm80.dll
C:\Users\Daryjka\AppData\Local\Temp\msvcp80.dll
C:\Users\Daryjka\AppData\Local\Temp\msvcr80.dll
C:\Users\Daryjka\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-02-08 21:52

==================== Koniec  FRST.txt ============================