Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:27-02-2016 Uruchomiony przez Tays (administrator) TAYS-KOMPUTER (29-03-2016 23:10:36) Uruchomiony z C:\Users\Tays\Desktop Załadowane profile: Tays & UpdatusUser (Dostępne profile: Tays & UpdatusUser) Platform: Windows 7 Ultimate (X64) Język: Polski (Polska) Internet Explorer Wersja 8 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe (FastStone Soft) C:\Program Files (x86)\FastStone Capture\FSCapture.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe (C. Ghisler & Co.) C:\Program Files (x86)\TC PowerPack 2\TOTALCMD.EXE (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11780712 2011-03-04] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-01] (Realtek Semiconductor) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2587944 2010-12-13] (ELAN Microelectronics Corp.) HKLM\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [415680 2012-02-05] (Autodesk, Inc.) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [TC PowerPack 2] => C:\Program Files (x86)\TC PowerPack 2\TCPowerPack.exe [56832 2009-05-24] (BuKoX) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-3919403963-3147837309-3499571233-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23260000 2016-02-24] (Google) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [226920 2011-02-08] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [192616 2011-02-08] (NVIDIA Corporation) ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-02-24] (Google) Startup: C:\Users\Tays\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FastStone Capture.lnk [2014-07-20] ShortcutTarget: FastStone Capture.lnk -> C:\Program Files (x86)\FastStone Capture\FSCapture.exe (FastStone Soft) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip\..\Interfaces\{AEF2D5CD-B28B-407E-BC3A-8999426CE1D7}: [DhcpNameServer] 192.168.1.1 192.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-3919403963-3147837309-3499571233-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-09] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-09] (Oracle Corporation) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-09-08] (Microsoft Corporation) Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-09-08] (Microsoft Corporation) Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-09-08] (Microsoft Corporation) Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-09-08] (Microsoft Corporation) FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_197.dll [2016-03-23] () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-03-23] () FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-02-09] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-02-09] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll [2014-02-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-02-09] (Adobe Systems Inc.) Chrome: ======= CHR HomePage: Default -> hxxps://www.google.pl/ CHR StartupUrls: Default -> "hxxps://www.google.pl/","hxxp://www.delta-homes.com/?type=hp&ts=1432123317&z=281102cd6445afa98837607gaz9c9o7g6oacdc8gfc&from=wpm05203&uid=ST3500418AS_Z2A410Y5XXXXZ2A410Y5","hxxp://www.istartsurf.com/?type=hp&ts=1435159825&z=1d00d7122d33d3c70a2509dg4zbc5w8gfw2tcb4o4g&from=cor&uid=ST3500418AS_Z2A410Y5XXXXZ2A410Y5","hxxp://www.mystartsearch.com/?type=hp&ts=1435297137&z=e464845d738508094240d07gdzdc7weo9tfm9g1o3w&from=cornl&uid=ST3500418AS_Z2A410Y5XXXXZ2A410Y5","hxxp://www.istartsurf.com/?type=hp&ts=1448280821&z=4a9ef563b9b85d681ffb215g4z9z2bbodbee3wdeaw&from=cor&uid=SPCCXSolidXStateXDisk_E7CB0759080B00255289" CHR DefaultSearchURL: Default -> hxxps://mail.google.com/mail/u/0/#drafts CHR Session Restore: Default -> [funkcja włączona] CHR Profile: C:\Users\Tays\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Tłumacz Google) - C:\Users\Tays\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2016-02-29] CHR Extension: (Prezentacje Google) - C:\Users\Tays\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-29] CHR Extension: (Dokumenty Google) - C:\Users\Tays\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-29] CHR Extension: (Dysk Google) - C:\Users\Tays\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-29] CHR Extension: (YouTube) - C:\Users\Tays\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-29] CHR Extension: (Google Search) - C:\Users\Tays\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-29] CHR Extension: (Infinity Nowa karta) - C:\Users\Tays\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbfmnekepjoapopniengjbcpnbljalfg [2016-03-10] CHR Extension: (Szybkie wyszukiwanie) - C:\Users\Tays\AppData\Local\Google\Chrome\User Data\Default\Extensions\eipoppoadgjpjilajgmlkceakffokhkd [2016-02-29] CHR Extension: (Arkusze Google) - C:\Users\Tays\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-29] CHR Extension: (Dokumenty Google offline) - C:\Users\Tays\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15] CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Tays\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-02-29] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Tays\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-29] CHR Extension: (Gmail) - C:\Users\Tays\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-29] CHR HKU\S-1-5-21-3919403963-3147837309-3499571233-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Tays\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2015-03-30] CHR HKU\S-1-5-21-3919403963-3147837309-3499571233-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.) S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [604144 2016-03-02] (AVG Technologies CZ, s.r.o.) R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3934184 2016-03-02] (AVG Technologies CZ, s.r.o.) R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1045928 2016-02-18] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [561104 2016-03-02] (AVG Technologies CZ, s.r.o.) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [1215560 2016-02-22] () ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [184240 2015-11-06] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [315312 2016-01-26] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378288 2016-02-03] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [269232 2016-03-02] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-12-04] (AVG Technologies CZ, s.r.o.) R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [302000 2015-10-08] (AVG Technologies CZ, s.r.o.) R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [23472 2016-01-08] (AVG Technologies CZ, s.r.o.) S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [394296 2016-03-12] (Duplex Secure Ltd.) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-03-29 23:10 - 2016-03-29 23:10 - 00015180 _____ C:\Users\Tays\Desktop\FRST.txt 2016-03-29 00:04 - 2016-03-29 00:06 - 00008859 _____ C:\Users\Tays\Desktop\Fixlog.txt 2016-03-23 17:55 - 2016-03-23 17:55 - 00000000 ____D C:\Users\Tays\Downloads\[ELECTRO-TORRENT.PL] Apartament-(2015)[DVDRip] [Xvid-torentup] [DD5.1] [Lektor PL] 2016-03-23 01:21 - 2016-03-23 01:22 - 00112907 _____ C:\Users\Tays\Downloads\Apartament 2015 [DVDRip] [Xvid-torentup] [DD5 1] [Lektor PL][Torrenty.org].torrent 2016-03-21 23:08 - 2016-03-21 23:09 - 00000000 ____D C:\Users\Tays\Downloads\[ Darmowe-ToRenty.pl ] Przetrwać w Nowym Jorku - (1995) 2016-03-21 22:06 - 2016-03-24 00:30 - 1468205056 _____ C:\Users\Tays\Downloads\Magnolia - (1999).avi 2016-03-21 22:03 - 2016-03-21 22:34 - 00000000 ____D C:\Users\Tays\Downloads\The.Lovely.Bones.2009.PL.AC3.HQDVDRip.XviD-TLRG [TnT24.Info] 2016-03-21 21:54 - 2016-03-21 21:56 - 00000000 ____D C:\Users\Tays\Downloads\[AgusiQ-TorrentS.pl] Body.Cialo.2015.PL.HQ-J25 [AgusiQ] 2016-03-21 21:46 - 2016-03-21 21:47 - 00000000 ____D C:\Users\Tays\Downloads\The.Grand.Budapest.Hotel.2014 [TnT24.Info] 2016-03-21 21:39 - 2016-03-21 21:39 - 00030487 _____ C:\Users\Tays\Downloads\The_Grand_Budapest_Hotel_ 2014 _[720p BRRip XviD AC3-WiZARDS]_[Lektor_PL]_[Ekipa_TnT][Torrenty.org].torrent 2016-03-21 21:37 - 2016-03-21 21:39 - 00000000 ____D C:\Users\Tays\Downloads\What.Maisie.Knew.2012 [TnT24.Info] 2016-03-21 21:36 - 2016-03-21 21:36 - 00027268 _____ C:\Users\Tays\Downloads\O_Czym_Wiedziala_Maisie_-_What_Maisie_Knew_ 2012 _[720p BRRip XviD AC3-WiZARDS]_[Lektor_PL]_[Ekipa_TnT][Torrenty.org].torrent 2016-03-21 21:32 - 2016-03-21 21:32 - 00014464 _____ C:\Users\Tays\Downloads\Magnolia_ 1999 _[DVDRip_XviD]_[Lektor_PL][Torrenty.org].torrent 2016-03-21 21:27 - 2016-03-22 22:48 - 1559695360 _____ C:\Users\Tays\Downloads\Motyl Still Alice (2014) [480p] [BRRip] [XviD-KiT] [Lektor PL].avi 2016-03-12 13:30 - 2016-03-12 13:32 - 00000000 ____D C:\Users\Tays\AppData\Roaming\DVDVideoSoft 2016-03-12 13:25 - 2016-03-12 13:27 - 00000124 _____ C:\Users\Tays\Documents\ax_files.xml 2016-03-12 13:24 - 2016-03-12 13:24 - 00000000 ____D C:\Users\Tays\Documents\Alcohol 120% 2016-03-12 13:22 - 2016-03-12 13:32 - 00000000 ____D C:\Program Files (x86)\Alcohol Soft 2016-03-12 13:10 - 2016-03-12 13:10 - 00394296 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys 2016-03-12 13:09 - 2016-03-12 13:09 - 07973872 _____ (Alcohol Soft Development Team) C:\Users\Tays\Downloads\Alcohol120_FE_2.0.3.8703.exe 2016-03-10 22:35 - 2016-03-10 22:35 - 00000627 _____ C:\Users\Tays\Desktop\ANIA — skrót.lnk 2016-03-08 08:23 - 2016-03-23 17:51 - 00000000 ____D C:\Users\Tays\AppData\LocalLow\uTorrent 2016-03-02 11:21 - 2016-03-02 11:21 - 00269232 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys 2016-02-29 18:51 - 2016-02-29 18:51 - 00000000 ____D C:\Users\Tays\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome 2016-02-29 18:50 - 2016-03-15 01:34 - 00002167 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-02-29 18:41 - 2016-02-29 18:41 - 00000844 _____ C:\Users\Public\Desktop\Light.lnk 2016-02-29 18:36 - 2016-03-29 23:10 - 00000000 ____D C:\FRST 2016-02-29 18:36 - 2016-02-29 18:36 - 02371072 _____ (Farbar) C:\Users\Tays\Desktop\FRST64.exe 2016-02-29 17:57 - 2016-02-29 19:59 - 00000000 ____D C:\AdwCleaner 2016-02-29 17:45 - 2016-02-29 17:45 - 00000000 _____ C:\autoexec.bat ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-03-29 22:33 - 2014-03-02 23:18 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-03-29 22:20 - 2015-02-22 22:29 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-03-29 21:59 - 2009-07-14 06:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-03-29 21:59 - 2009-07-14 06:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-03-29 21:56 - 2014-02-25 23:11 - 00000000 ____D C:\ProgramData\MFAData 2016-03-29 21:56 - 2009-07-14 19:55 - 00737980 _____ C:\Windows\system32\perfh015.dat 2016-03-29 21:56 - 2009-07-14 19:55 - 00154636 _____ C:\Windows\system32\perfc015.dat 2016-03-29 21:56 - 2009-07-14 07:13 - 01662556 _____ C:\Windows\system32\PerfStringBackup.INI 2016-03-29 21:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-03-29 21:51 - 2014-03-02 23:18 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-03-29 21:51 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-03-29 00:04 - 2015-12-27 23:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SonyEditor 2016-03-29 00:04 - 2014-03-02 22:28 - 00000000 ____D C:\Users\Tays\AppData\Roaming\AIMP3 2016-03-29 00:04 - 2014-03-02 19:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype & Opera 2016-03-28 23:55 - 2014-03-31 17:09 - 00000000 ____D C:\Users\Tays\AppData\Roaming\vlc 2016-03-25 22:41 - 2015-04-04 21:19 - 00000000 ____D C:\Users\Tays\Documents\Pliki programu Outlook 2016-03-24 00:30 - 2014-07-20 14:10 - 00000000 ____D C:\Users\Tays\AppData\Roaming\uTorrent 2016-03-23 22:23 - 2015-02-22 22:29 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-03-23 22:23 - 2014-02-25 22:31 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-03-23 22:23 - 2014-02-25 22:31 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-03-22 01:08 - 2015-05-22 20:56 - 00019499 _____ C:\Users\Tays\Desktop\Kredyt lista.xlsx 2016-03-13 17:38 - 2015-03-30 18:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2016-03-12 01:06 - 2016-02-19 21:26 - 00000000 ____D C:\Users\Tays\Downloads\Michael W. Smith - Decades of Worship (2012) 2016-03-11 23:46 - 2014-03-31 18:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2016-03-11 22:30 - 2016-02-24 23:12 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-02-29 18:50 - 2014-03-02 23:18 - 00000000 ____D C:\Users\Tays\AppData\Local\Google 2016-02-29 18:49 - 2014-03-02 23:18 - 00000000 ____D C:\Program Files (x86)\Google 2016-02-29 17:45 - 2014-02-25 21:38 - 00000000 ____D C:\Users\Tays ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2016-03-29 22:09 ==================== Koniec FRST.txt ============================