Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:05-03-2016 01 Uruchomiony przez MM (administrator) MM-KOMPUTER (13-03-2016 21:32:46) Uruchomiony z C:\Users\MM\Downloads Załadowane profile: MM (Dostępne profile: MM) Platform: Microsoft Windows 7 Ultimate (X86) Język: Polski (Polska) Internet Explorer Wersja 8 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Program Files\Intel\Bluetooth\devmonsrv.exe (Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (AVG Technologies) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe (Intel Corporation) C:\Program Files\Intel\Bluetooth\obexsrv.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (Cyfrowy Polsat S.A.) C:\Program Files\ipla\ipla.exe (AVG Technologies) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe (Intel Corporation) C:\Program Files\Intel\Bluetooth\mediasrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Intel Corporation) C:\Program Files\Intel\Bluetooth\btplayerctrl.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Redefine Sp z o.o.) C:\Program Files\ipla\iplabrowser.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (AVG Technologies) C:\Program Files\AVG\AVG PC TuneUp\Integrator.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\mspaint.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files\Intel\Bluetooth\btmshell.dll",TrayApp HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-02-18] (Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-17] (Adobe Systems Incorporated) HKU\S-1-5-21-1987687338-1427185053-578574233-1000\...\Run: [IPLA!] => C:\Program Files\ipla\ipla.exe [21406496 2015-12-03] (Cyfrowy Polsat S.A.) HKU\S-1-5-21-1987687338-1427185053-578574233-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6490904 2015-08-20] (Piriform Ltd) HKU\S-1-5-21-1987687338-1427185053-578574233-1000\...\Run: [uTorrent] => C:\Users\MM\AppData\Roaming\uTorrent\uTorrent.exe [1953792 2016-02-27] (BitTorrent Inc.) HKU\S-1-5-21-1987687338-1427185053-578574233-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [50599552 2016-02-10] (Skype Technologies S.A.) AppInit_DLLs: C:\Windows\System32\nvinit.dll => C:\Windows\System32\nvinit.dll [155464 2015-07-23] (NVIDIA Corporation) AppInit_DLLs: C:\Windows\System32\nvinit.dll => C:\Windows\System32\nvinit.dll [155464 2015-07-23] (NVIDIA Corporation) AppInit_DLLs: ,C:\Windows\system32\nvinit.dll => C:\Windows\system32\nvinit.dll [155464 2015-07-23] (NVIDIA Corporation) GroupPolicy: Ograniczenia - Chrome <======= UWAGA CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) ProxyServer: [S-1-5-21-1987687338-1427185053-578574233-1000] => 127.0.0.1:8118 AutoConfigURL: [S-1-5-21-1987687338-1427185053-578574233-1000] => 127.0.0.1:8118 Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{B22BF607-A245-42A6-8E75-218B5607ED56}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA HKU\S-1-5-21-1987687338-1427185053-578574233-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-1987687338-1427185053-578574233-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKU\S-1-5-21-1987687338-1427185053-578574233-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation) FireFox: ======== FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-09] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-09] (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-12-17] (Adobe Systems Inc.) Chrome: ======= CHR Profile: C:\Users\MM\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Dysk Google) - C:\Users\MM\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-09] CHR Extension: (YouTube) - C:\Users\MM\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-09] CHR Extension: (Dokumenty Google offline) - C:\Users\MM\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-09] CHR Extension: (Skype) - C:\Users\MM\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-03-09] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\MM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-09] CHR Extension: (Gmail) - C:\Users\MM\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-09] CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 Bluetooth Device Monitor; C:\Program Files\Intel\Bluetooth\devmonsrv.exe [936272 2011-10-18] (Intel Corporation) R3 Bluetooth Media Service; C:\Program Files\Intel\Bluetooth\mediasrv.exe [1354064 2011-10-18] (Intel Corporation) R2 Bluetooth OBEX Service; C:\Program Files\Intel\Bluetooth\obexsrv.exe [1001808 2011-10-18] (Intel Corporation) R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [921232 2015-07-24] (NVIDIA Corporation) S2 MustangService_2015_10_10; C:\ProgramData\TempMoudleSet\MustangSer1017.exe [236816 2015-10-09] (MustangService) R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-24] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4305040 2015-07-24] (NVIDIA Corporation) R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [2449624 2015-08-04] (AVG Technologies) R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [36568 2015-08-04] (AVG Technologies) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 btmaudio; C:\Windows\System32\drivers\btmaud.sys [42496 2011-05-19] (Intel Corporation) R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [43008 2011-08-29] (Intel Corporation) R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [230912 2011-10-10] (Intel Corporation) S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [19984 2015-12-26] () R3 iBtFltCoex; C:\Windows\System32\DRIVERS\iBtFltCoex.sys [47104 2011-10-11] (Intel Corporation) S3 intaud_WaveExtensible; C:\Windows\System32\drivers\intelaud.sys [29080 2011-05-17] (Intel Corporation) R3 iwdbus; C:\Windows\System32\DRIVERS\iwdbus.sys [22424 2011-05-17] (Intel Corporation) R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-20] (Intel Corporation) R3 NETwNs32; C:\Windows\System32\DRIVERS\Netwsn00.sys [10339840 2012-03-12] (Intel Corporation) R0 nvpciflt; C:\Windows\System32\DRIVERS\nvpciflt.sys [26952 2015-07-23] (NVIDIA Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18576 2015-07-24] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [42344 2015-07-03] (NVIDIA Corporation) R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [30632 2015-06-25] (TuneUp Software) S3 catchme; \??\C:\Users\MM\AppData\Local\Temp\catchme.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-03-13 21:32 - 2016-03-13 21:32 - 00012221 _____ C:\Users\MM\Downloads\FRST.txt 2016-03-13 21:32 - 2016-03-13 21:32 - 00000000 ___SD C:\ComboFix 2016-03-13 21:32 - 2016-03-13 21:32 - 00000000 ____D C:\Users\MM\Downloads\FRST-OlderVersion 2016-03-09 11:20 - 2016-03-09 11:20 - 02870984 _____ (ESET) C:\Users\MM\Downloads\esetsmartinstaller_plk.exe 2016-03-09 11:03 - 2016-03-09 11:03 - 00002219 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-03-09 11:03 - 2016-03-09 11:03 - 00002207 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-03-09 11:02 - 2016-03-13 21:07 - 00001028 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-03-09 11:02 - 2016-03-13 20:39 - 00001024 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-03-09 11:02 - 2016-03-09 11:03 - 00000000 ____D C:\Program Files\Google 2016-03-02 17:14 - 2016-03-04 16:37 - 00000000 ____D C:\Users\MM\AppData\LocalLow\uTorrent ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-03-13 21:32 - 2015-12-26 20:27 - 00000000 ____D C:\FRST 2016-03-13 21:32 - 2015-12-26 19:11 - 01725440 _____ (Farbar) C:\Users\MM\Downloads\FRST.exe 2016-03-13 21:32 - 2015-07-06 19:57 - 00000000 ____D C:\Qoobox 2016-03-13 21:28 - 2015-07-07 22:15 - 00000000 ____D C:\Users\MM\AppData\Roaming\uTorrent 2016-03-13 21:13 - 2009-07-14 05:34 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-03-13 21:13 - 2009-07-14 05:34 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-03-13 20:48 - 2015-10-22 21:05 - 00000000 ____D C:\Users\MM\AppData\Roaming\Skype 2016-03-09 14:35 - 2016-01-18 19:14 - 00000000 ____D C:\Users\MM\Desktop\Nowy folder (4) 2016-03-09 14:33 - 2015-11-29 19:16 - 00022528 ____H C:\Users\MM\Desktop\photothumb.db 2016-03-09 14:32 - 2009-07-14 09:28 - 00000000 ___RD C:\Users\Public\Recorded TV 2016-03-09 11:02 - 2015-06-27 16:16 - 00000000 ____D C:\Users\MM\AppData\Local\Apps\2.0 2016-03-09 11:00 - 2015-07-05 20:26 - 00000000 ____D C:\Users\MM\AppData\LocalLow\Temp 2016-03-09 10:59 - 2015-06-20 22:25 - 00001421 _____ C:\Users\MM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-03-04 16:38 - 2015-10-22 21:05 - 00000000 ____D C:\ProgramData\Skype 2016-03-04 16:36 - 2016-01-24 16:22 - 00001514 __RSH C:\ProgramData\ntuser.pol 2016-03-04 16:36 - 2015-09-09 19:07 - 00000000 ____D C:\Users\MM\AppData\Roaming\ipla 2016-03-04 16:36 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-07-08 20:35 - 2015-07-08 20:35 - 0000044 _____ () C:\Users\MM\AppData\Roaming\WB.CFG 2015-06-27 16:56 - 2015-06-27 16:56 - 0017955 _____ () C:\Users\MM\AppData\Local\IWDAudHelper.20150627.175635.txt 2015-07-01 21:28 - 2015-07-01 21:28 - 0002209 _____ () C:\Users\MM\AppData\Local\IWDAudHelper.20150701.222836.txt 2015-07-01 21:30 - 2015-07-01 21:31 - 0015438 _____ () C:\Users\MM\AppData\Local\IWDAudHelper.20150701.223049.txt 2015-07-01 21:38 - 2015-07-01 21:38 - 0002209 _____ () C:\Users\MM\AppData\Local\IWDAudHelper.20150701.223802.txt 2015-07-01 21:41 - 2015-07-01 21:42 - 0017436 _____ () C:\Users\MM\AppData\Local\IWDAudHelper.20150701.224145.txt 2015-06-27 16:55 - 2015-06-27 16:55 - 0001571 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150627.175552.txt 2015-06-27 16:56 - 2015-06-27 16:56 - 0000673 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150627.175625.txt 2015-06-27 16:56 - 2015-06-27 16:56 - 0001597 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150627.175627.txt 2015-06-27 16:56 - 2015-06-27 16:56 - 0001235 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150627.175630.txt 2015-06-27 16:56 - 2015-06-27 16:56 - 0001233 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150627.175656.txt 2015-07-01 21:19 - 2015-07-01 21:19 - 0001509 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.221949.txt 2015-07-01 21:19 - 2015-07-01 21:20 - 0001510 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.221958.txt 2015-07-01 21:28 - 2015-07-01 21:28 - 0000661 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.222832.txt 2015-07-01 21:28 - 2015-07-01 21:28 - 0001215 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.222836.txt 2015-07-01 21:30 - 2015-07-01 21:30 - 0001571 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.223005.txt 2015-07-01 21:30 - 2015-07-01 21:30 - 0000661 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.223035.txt 2015-07-01 21:30 - 2015-07-01 21:30 - 0001547 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.223037.txt 2015-07-01 21:30 - 2015-07-01 21:30 - 0001215 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.223041.txt 2015-07-01 21:31 - 2015-07-01 21:31 - 0001215 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.223113.txt 2015-07-01 21:31 - 2015-07-01 21:31 - 0001510 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.223139.txt 2015-07-01 21:34 - 2015-07-01 21:34 - 0001510 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.223403.txt 2015-07-01 21:37 - 2015-07-01 21:37 - 0000661 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.223758.txt 2015-07-01 21:38 - 2015-07-01 21:38 - 0001215 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.223802.txt 2015-07-01 21:40 - 2015-07-01 21:41 - 0001570 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.224059.txt 2015-07-01 21:41 - 2015-07-01 21:41 - 0000661 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.224131.txt 2015-07-01 21:41 - 2015-07-01 21:41 - 0001571 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.224134.txt 2015-07-01 21:41 - 2015-07-01 21:41 - 0001215 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.224137.txt 2015-07-01 21:42 - 2015-07-01 21:42 - 0001215 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.224210.txt 2015-07-01 22:05 - 2015-07-01 22:05 - 0001510 _____ () C:\Users\MM\AppData\Local\PDLSetup.20150701.230525.txt 2015-11-29 19:11 - 2015-12-14 21:00 - 0000074 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat Pliki do przeniesienia lub usunięcia: ==================== C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2016-03-09 13:50 ==================== Koniec FRST.txt ============================