Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:05-03-2016 01
Uruchomiony przez mcm (administrator)  MCM-KOMPUTER (04-04-2016 20:44:14)
Uruchomiony z C:\Users\mcm\Desktop\farbar
Załadowane profile: mcm (Dostępne profile: mcm & Gość & DefaultAppPool)
Platform: Windows 10 Pro Wersja 1511 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Amazon Inc.) C:\Program Files (x86)\Amazon\Amazon1ButtonApp\Amazon1ButtonService64.Exe
() C:\ProgramData\Holdtam\Holdtam.exe
() C:\ProgramData\CloudPrinter\CloudPrinter.exe
() C:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRManager.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRFeature.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRServer.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(© 2015 Microsoft Corporation) C:\Users\mcm\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Creative Technology Ltd.) C:\Windows\V0420Mon.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_21_0_0_197.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_21_0_0_197.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
HKLM\...\Run: [V0420Pin.dll] => RunDLL32.exe V0420Pin.dll,RunDLL32EP 514,/d:4
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-09-23] (Apple Inc.)
HKLM-x32\...\Run: [V0420Mon.exe] => C:\WINDOWS\V0420Mon.exe
HKLM-x32\...\Run: [CTxfiHlp] => CTXFIHLP.EXE
HKLM-x32\...\Run: [StartCCC] => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [408888 2014-10-08] (Power Software Ltd)
HKLM-x32\...\Run: [APSDaemon] => c:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60688 2015-09-23] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595480 2016-03-20] (Oracle Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-2182520945-4177100033-1416620387-1002\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1081224 2013-02-05] (Autodesk, Inc.)
HKU\S-1-5-21-2182520945-4177100033-1416620387-1002\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-2182520945-4177100033-1416620387-1002\...\Run: [BingSvc] => C:\Users\mcm\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2016-02-17] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-2182520945-4177100033-1416620387-1002\...\Policies\Explorer: [] 
AppInit_DLLs: C:\ProgramData\Holdtam\Nimron.dll => Brak pliku
AppInit_DLLs-x32: C:\ProgramData\Holdtam\Cofity.dll => Brak pliku
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2013-02-08] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\DMX 6fire 2496 ControlPanel.lnk [2015-08-08]
ShortcutTarget: DMX 6fire 2496 ControlPanel.lnk -> C:\Program Files (x86)\TerraTec\DMX 6fire\DMX6Fire.exe (TerraTec Electronic GmbH)
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
CHR HKU\S-1-5-21-2182520945-4177100033-1416620387-1002\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1a66aaa1-e99e-49e1-b8a1-97e31f966972}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{644229ef-6497-45da-9e3f-1c8ba8f637c4}: [NameServer] 82.163.143.177,82.163.142.179
Tcpip\..\Interfaces\{644229ef-6497-45da-9e3f-1c8ba8f637c4}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{955916f3-9158-405e-855b-ad7e5b348048}: [NameServer] 82.163.143.177,82.163.142.179

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2182520945-4177100033-1416620387-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBVRmzv2pJwNObeR_98Utx3C8ptVFDTPaLAPHimnpsI3BAvY_ZzuqPE3EaKb9R02g2jbYEW06vGPh6TSTRx5dxPJecqbum3nCo7jmOCGZtWSvJnmyzX-k0SJiPPzttNWLP5P8D6LbdmH7YbO7tE2gPEVrh0ikQc39q6iuf2-EsmGN-BZfFTz6eE&q={searchTerms}
HKU\S-1-5-21-2182520945-4177100033-1416620387-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBVRmzv2pJwNObeR_98Utx3C8ptVFDTPaLAPHimnpsI3BAvY_ZzuqPE3EaKb9R02g2jbYEW06vGPh6TSTRx5dxPJecqYrGozg4jIXxrOtcH1gpHwwv4l3NsJdrvmWP1HDmacmcLRJqOGxtZ0FhOLYa-SLdxKzpsChO4Ii64g_7MpIOTdKJB0Oum
HKU\S-1-5-21-2182520945-4177100033-1416620387-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.msn.com/?pc=SL5M&ocid=SL5MDHP&osmkt=pl-pl
HKU\S-1-5-21-2182520945-4177100033-1416620387-1002\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBVRmzv2pJwNObeR_98Utx3C8ptVFDTPaLAPHimnpsI3BAvY_ZzuqPE3EaKb9R02g2jbYEW06vGPh6TSTRx5dxPJecqbum3nCo7jmOCGZtWSvJnmyzX-k0SJiPPzttNWLP5P8D6LbdmH7YbO7tE2gPEVrh0ikQc39q6iuf2-EsmGN-BZfFTz6eE&q={searchTerms}
HKU\S-1-5-21-2182520945-4177100033-1416620387-1002\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBVRmzv2pJwNObeR_98Utx3C8ptVFDTPaLAPHimnpsI3BAvY_ZzuqPE3EaKb9R02g2jbYEW06vGPh6TSTRx5dxPJecqbum3nCo7jmOCGZtWSvJnmyzX-k0SJiPPzttNWLP5P8D6LbdmH7YbO7tE2gPEVrh0ikQc39q6iuf2-EsmGN-BZfFTz6eE&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL = 
SearchScopes: HKLM-x32 -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBVRmzv2pJwNObeR_98Utx3C8ptVFDTPaLAPHimnpsI3BAvY_ZzuqPE3EaKb9R02g2jbYEW06vGPh6TSTRx5dxPJecqbum3nCo7jmOCGZtWSvJnmyzX-k0SJiPPzttNWLP5P8D6LbdmH7YbO7tE2gPEVrh0ikQc39q6iuf2-EsmGN-BZfFTz6eE&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2182520945-4177100033-1416620387-1002 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBVRmzv2pJwNObeR_98Utx3C8ptVFDTPaLAPHimnpsI3BAvY_ZzuqPE3EaKb9R02g2jbYEW06vGPh6TSTRx5dxPJecqbum3nCo7jmOCGZtWSvJnmyzX-k0SJiPPzttNWLP5P8D6LbdmH7YbO7tE2gPEVrh0ikQc39q6iuf2-EsmGN-BZfFTz6eE&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2182520945-4177100033-1416620387-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-2182520945-4177100033-1416620387-1002 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBVRmzv2pJwNObeR_98Utx3C8ptVFDTPaLAPHimnpsI3BAvY_ZzuqPE3EaKb9R02g2jbYEW06vGPh6TSTRx5dxPJecqbum3nCo7jmOCGZtWSvJnmyzX-k0SJiPPzttNWLP5P8D6LbdmH7YbO7tE2gPEVrh0ikQc39q6iuf2-EsmGN-BZfFTz6eE&q={searchTerms}
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\ssv.dll [2016-04-03] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-04-03] (Oracle Corporation)
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab

FireFox:
========
FF ProfilePath: C:\Users\mcm\AppData\Roaming\Mozilla\Firefox\Profiles\1t83qg09.default-1459791399264
FF Homepage: hxxp://www.google.pl/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_21_0_0_197.dll [2016-03-23] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-03-23] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-04-03] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-04-03] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2182520945-4177100033-1416620387-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\mcm\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-19] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-03-06] [Brak podpisu cyfrowego]

Chrome: 
=======
CHR dev: Chrome dev build wykryto! <======= UWAGA

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 Amazon 1Button App Service; C:\Program Files (x86)\Amazon\Amazon1ButtonApp\Amazon1ButtonService64.Exe [436032 2016-02-17] (Amazon Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-09-02] (Apple Inc.)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [Brak podpisu cyfrowego]
R2 CloudPrinter; C:\ProgramData\\CloudPrinter\\CloudPrinter.exe [1067520 2016-04-04] () [Brak podpisu cyfrowego]
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2014-10-31] (Creative Labs) [Brak podpisu cyfrowego]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-10-30] (Creative Labs) [Brak podpisu cyfrowego]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-12] (Creative Technology Ltd) [Brak podpisu cyfrowego]
R2 Holdtam; C:\ProgramData\\Holdtam\\Holdtam.exe [1067520 2016-04-04] () [Brak podpisu cyfrowego]
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 mi-raysat_3dsmax2013_64; C:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe [86016 2011-09-15] () [Brak podpisu cyfrowego]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [40720 2015-07-28] (Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-09-18] (Advanced Micro Devices)
S3 ggsomc; C:\Windows\System32\drivers\ggsomc.sys [30424 2015-10-04] (Sony Mobile Communications)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23152 2011-12-10] (Malwarebytes Corporation) [Brak podpisu cyfrowego]
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-09-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek                                            )
R3 sthid; C:\Windows\System32\drivers\sthid.sys [21216 2015-03-04] (Splashtop Inc.)
R3 V0420VID; C:\Windows\system32\DRIVERS\V0420Vid.sys [107072 2007-05-31] (Creative Technology Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-04-04 20:33 - 2016-04-04 20:44 - 00000000 ____D C:\Users\mcm\Desktop\farbar
2016-04-04 20:30 - 2016-04-04 20:44 - 00000000 ____D C:\FRST
2016-04-04 20:30 - 2016-04-04 20:31 - 00053074 _____ C:\Users\mcm\Downloads\Addition.txt
2016-04-04 20:30 - 2016-04-04 20:31 - 00049533 _____ C:\Users\mcm\Downloads\FRST.txt
2016-04-04 20:29 - 2016-04-04 20:30 - 02374144 _____ (Farbar) C:\Users\mcm\Downloads\FRST64.exe
2016-04-04 20:28 - 2016-04-04 20:28 - 00001575 _____ C:\Users\mcm\Desktop\firefox.exe — skrót .lnk
2016-04-04 20:13 - 2016-04-04 20:13 - 00709968 _____ C:\WINDOWS\isRS-000.tmp
2016-04-04 20:13 - 2016-04-04 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
2016-04-04 20:13 - 2016-04-04 20:13 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2016-04-04 20:13 - 2011-12-10 15:24 - 00023152 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2016-04-04 20:12 - 2016-04-04 20:12 - 00208216 _____ (Kaspersky Lab, GERT) C:\WINDOWS\system32\Drivers\09171449.sys
2016-04-04 20:12 - 2016-04-04 20:12 - 00181242 _____ C:\TDSSKiller.2.8.15.0_04.04.2016_20.12.12_log.txt
2016-04-04 20:12 - 2016-04-04 20:12 - 00000000 ____D C:\ProgramData\HitmanPro
2016-04-04 19:45 - 2016-04-04 19:45 - 05658312 _____ (Swearware) C:\Users\mcm\Downloads\ComboFix.exe
2016-04-04 19:43 - 2016-04-04 19:43 - 00000000 ____D C:\ProgramData\Holdtams
2016-04-04 19:33 - 2016-04-04 19:33 - 00000000 ____D C:\Users\mcm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage
2016-04-04 19:33 - 2016-04-04 19:33 - 00000000 ____D C:\Users\mcm\AppData\Roaming\ASPackage
2016-04-04 19:33 - 2016-04-04 19:33 - 00000000 ____D C:\Program Files (x86)\1F00D960-1459791190-0100-963E-20CF3039C9E7
2016-04-04 19:31 - 2016-04-04 20:14 - 00000000 ____D C:\ProgramData\Holdtam
2016-04-04 19:31 - 2016-04-04 19:31 - 06504960 _____ C:\Users\mcm\AppData\Roaming\agent.dat
2016-04-04 19:31 - 2016-04-04 19:31 - 01626416 _____ C:\Users\mcm\AppData\Roaming\Volcof.tst
2016-04-04 19:31 - 2016-04-04 19:31 - 01067520 _____ C:\Users\mcm\AppData\Roaming\Volcof.exe
2016-04-04 19:31 - 2016-04-04 19:31 - 01067520 _____ C:\Users\mcm\AppData\Roaming\Dalt-Dex.exe
2016-04-04 19:31 - 2016-04-04 19:31 - 00848437 _____ C:\Users\mcm\AppData\Roaming\Conity.bin
2016-04-04 19:31 - 2016-04-04 19:31 - 00168546 _____ C:\Users\mcm\AppData\Roaming\inst.lat
2016-04-04 19:31 - 2016-04-04 19:31 - 00127488 _____ C:\Users\mcm\AppData\Roaming\Installer.dat
2016-04-04 19:31 - 2016-04-04 19:31 - 00126464 _____ C:\Users\mcm\AppData\Roaming\noah.dat
2016-04-04 19:31 - 2016-04-04 19:31 - 00126464 _____ C:\Users\mcm\AppData\Roaming\lobby.dat
2016-04-04 19:31 - 2016-04-04 19:31 - 00072699 _____ C:\Users\mcm\AppData\Roaming\Dalt-Dex.tst
2016-04-04 19:31 - 2016-04-04 19:31 - 00065424 _____ C:\Users\mcm\AppData\Roaming\Config.xml
2016-04-04 19:31 - 2016-04-04 19:31 - 00054272 _____ C:\Users\mcm\AppData\Roaming\ApplicationHosting.dat
2016-04-04 19:31 - 2016-04-04 19:31 - 00018432 _____ C:\Users\mcm\AppData\Roaming\Main.dat
2016-04-04 19:31 - 2016-04-04 19:31 - 00015840 _____ C:\Users\mcm\AppData\Roaming\InstallationConfiguration.xml
2016-04-04 19:31 - 2016-04-04 19:31 - 00005568 _____ C:\Users\mcm\AppData\Roaming\md.xml
2016-04-04 19:31 - 2016-04-04 19:31 - 00002393 _____ C:\WINDOWS\SysWOW64\findit.xml
2016-04-04 19:31 - 2016-04-04 19:31 - 00000000 ____D C:\ProgramData\CloudPrinter
2016-04-04 19:31 - 2016-04-04 19:31 - 00000000 ____D C:\ProgramData\9b250fd3-7067-1
2016-04-04 19:31 - 2016-04-04 19:31 - 00000000 ____D C:\ProgramData\9b250fd3-0027-0
2016-04-04 19:30 - 2016-04-04 19:30 - 04263936 _____ C:\Users\mcm\Downloads\the_cult_choice_of_weapon_deluxe_torrent.iso
2016-04-04 19:30 - 2016-04-04 19:30 - 00000000 ____D C:\Users\mcm\Desktop\Nowy folder (12)
2016-04-03 18:07 - 2016-04-04 20:14 - 00004708 _____ C:\WINDOWS\System32\Tasks\DistromaticSearchProtect-hourly
2016-04-03 18:07 - 2016-04-03 18:07 - 00004576 _____ C:\WINDOWS\System32\Tasks\DistromaticUpdater-periodic
2016-04-03 18:07 - 2016-04-03 18:07 - 00004184 _____ C:\WINDOWS\System32\Tasks\DistromaticSearchProtect-logon
2016-04-03 18:07 - 2016-04-03 18:07 - 00004046 _____ C:\WINDOWS\System32\Tasks\DistromaticUpdater-logon
2016-04-03 18:07 - 2016-04-03 18:07 - 00000000 ____D C:\Users\mcm\AppData\Local\Amazon Browser Settings
2016-04-03 18:07 - 2016-04-03 18:07 - 00000000 ____D C:\Program Files (x86)\Amazon Browser Settings
2016-04-03 18:07 - 2016-04-03 18:07 - 00000000 ____D C:\Program Files (x86)\Amazon
2016-03-19 18:07 - 2016-03-24 20:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-03-14 22:01 - 2016-03-14 22:01 - 00035106 _____ C:\Users\mcm\Downloads\status_wniosku_1465138_2016_2676859_01.pdf
2016-03-09 20:17 - 2016-03-01 07:31 - 00848168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-03-09 20:17 - 2016-03-01 07:22 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-03-09 20:17 - 2016-02-24 11:52 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-03-09 20:17 - 2016-02-24 11:51 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-03-09 20:17 - 2016-02-24 11:48 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-03-09 20:17 - 2016-02-24 11:47 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-03-09 20:17 - 2016-02-24 11:40 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-03-09 20:17 - 2016-02-24 11:34 - 01613664 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-03-09 20:17 - 2016-02-24 11:28 - 03449168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2016-03-09 20:17 - 2016-02-24 11:15 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-03-09 20:17 - 2016-02-24 10:58 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-03-09 20:17 - 2016-02-24 10:54 - 00127840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2016-03-09 20:17 - 2016-02-24 10:51 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-03-09 20:17 - 2016-02-24 10:50 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-03-09 20:17 - 2016-02-24 10:46 - 06607080 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-03-09 20:17 - 2016-02-24 10:43 - 00625000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2016-03-09 20:17 - 2016-02-24 10:39 - 00358752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-03-09 20:17 - 2016-02-24 10:39 - 00141560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2016-03-09 20:17 - 2016-02-24 10:19 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-03-09 20:17 - 2016-02-24 10:14 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-03-09 20:17 - 2016-02-24 10:11 - 01997152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-03-09 20:17 - 2016-02-24 10:11 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-03-09 20:17 - 2016-02-24 10:11 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-03-09 20:17 - 2016-02-24 10:11 - 00652392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-03-09 20:17 - 2016-02-24 10:11 - 00394080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-03-09 20:17 - 2016-02-24 10:11 - 00258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2016-03-09 20:17 - 2016-02-24 10:10 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-03-09 20:17 - 2016-02-24 10:10 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-03-09 20:17 - 2016-02-24 10:09 - 00640472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-03-09 20:17 - 2016-02-24 10:09 - 00147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2016-03-09 20:17 - 2016-02-24 10:06 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-03-09 20:17 - 2016-02-24 09:59 - 00294752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-03-09 20:17 - 2016-02-24 09:39 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-03-09 20:17 - 2016-02-24 09:39 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-03-09 20:17 - 2016-02-24 09:38 - 00187744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-03-09 20:17 - 2016-02-24 09:38 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-03-09 20:17 - 2016-02-24 09:37 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-03-09 20:17 - 2016-02-24 09:36 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2016-03-09 20:17 - 2016-02-24 09:35 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-03-09 20:17 - 2016-02-24 09:35 - 00523752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-03-09 20:17 - 2016-02-24 09:35 - 00220064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll
2016-03-09 20:17 - 2016-02-24 09:35 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-03-09 20:17 - 2016-02-24 09:33 - 00538736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-03-09 20:17 - 2016-02-24 09:33 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2016-03-09 20:17 - 2016-02-24 09:31 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-03-09 20:17 - 2016-02-24 09:30 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2016-03-09 20:17 - 2016-02-24 09:28 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll
2016-03-09 20:17 - 2016-02-24 09:23 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-03-09 20:17 - 2016-02-24 09:23 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-03-09 20:17 - 2016-02-24 09:23 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-03-09 20:17 - 2016-02-24 09:22 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2016-03-09 20:17 - 2016-02-24 09:20 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2016-03-09 20:17 - 2016-02-24 09:20 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2016-03-09 20:17 - 2016-02-24 09:20 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2016-03-09 20:17 - 2016-02-24 09:19 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2016-03-09 20:17 - 2016-02-24 09:19 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2016-03-09 20:17 - 2016-02-24 09:15 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-03-09 20:17 - 2016-02-24 09:14 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2016-03-09 20:17 - 2016-02-24 09:13 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2016-03-09 20:17 - 2016-02-24 09:12 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cemapi.dll
2016-03-09 20:17 - 2016-02-24 09:12 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2016-03-09 20:17 - 2016-02-24 09:10 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2016-03-09 20:17 - 2016-02-24 09:09 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2016-03-09 20:17 - 2016-02-24 09:09 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2016-03-09 20:17 - 2016-02-24 09:07 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-03-09 20:17 - 2016-02-24 09:05 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-03-09 20:17 - 2016-02-24 09:03 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-03-09 20:17 - 2016-02-24 09:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll
2016-03-09 20:17 - 2016-02-24 09:01 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-03-09 20:17 - 2016-02-24 09:01 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2016-03-09 20:17 - 2016-02-24 09:01 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2016-03-09 20:17 - 2016-02-24 09:00 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-03-09 20:17 - 2016-02-24 08:59 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-03-09 20:17 - 2016-02-24 08:59 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2016-03-09 20:17 - 2016-02-24 08:59 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-03-09 20:17 - 2016-02-24 08:58 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2016-03-09 20:17 - 2016-02-24 08:55 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2016-03-09 20:17 - 2016-02-24 08:55 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2016-03-09 20:17 - 2016-02-24 08:55 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
2016-03-09 20:17 - 2016-02-24 08:54 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2016-03-09 20:17 - 2016-02-24 08:54 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2016-03-09 20:17 - 2016-02-24 08:54 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2016-03-09 20:17 - 2016-02-24 08:54 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
2016-03-09 20:17 - 2016-02-24 08:53 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2016-03-09 20:17 - 2016-02-24 08:53 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
2016-03-09 20:17 - 2016-02-24 08:52 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2016-03-09 20:17 - 2016-02-24 08:52 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PimIndexMaintenanceClient.dll
2016-03-09 20:17 - 2016-02-24 08:51 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-03-09 20:17 - 2016-02-24 08:49 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2016-03-09 20:17 - 2016-02-24 08:47 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2016-03-09 20:17 - 2016-02-24 08:46 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2016-03-09 20:17 - 2016-02-24 08:44 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-03-09 20:17 - 2016-02-24 08:44 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2016-03-09 20:17 - 2016-02-24 08:44 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2016-03-09 20:17 - 2016-02-24 08:44 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll
2016-03-09 20:17 - 2016-02-24 08:43 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-03-09 20:17 - 2016-02-24 08:43 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-03-09 20:17 - 2016-02-24 08:42 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-03-09 20:17 - 2016-02-24 08:42 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-03-09 20:17 - 2016-02-24 08:41 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-03-09 20:17 - 2016-02-24 08:41 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-03-09 20:17 - 2016-02-24 08:40 - 01224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-03-09 20:17 - 2016-02-24 08:40 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-03-09 20:17 - 2016-02-24 08:40 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
2016-03-09 20:17 - 2016-02-24 08:39 - 01390592 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-03-09 20:17 - 2016-02-24 08:39 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2016-03-09 20:17 - 2016-02-24 08:38 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2016-03-09 20:17 - 2016-02-24 08:36 - 01847808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-03-09 20:17 - 2016-02-24 08:34 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2016-03-09 20:17 - 2016-02-24 08:34 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-03-09 20:17 - 2016-02-24 08:32 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2016-03-09 20:17 - 2016-02-24 08:32 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2016-03-09 20:17 - 2016-02-24 08:31 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cemapi.dll
2016-03-09 20:17 - 2016-02-24 08:31 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2016-03-09 20:17 - 2016-02-24 08:28 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2016-03-09 20:17 - 2016-02-24 08:28 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2016-03-09 20:17 - 2016-02-24 08:28 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll
2016-03-09 20:17 - 2016-02-24 08:25 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2016-03-09 20:17 - 2016-02-24 08:23 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll
2016-03-09 20:17 - 2016-02-24 08:22 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2016-03-09 20:17 - 2016-02-24 08:21 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-03-09 20:17 - 2016-02-24 08:21 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2016-03-09 20:17 - 2016-02-24 08:18 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2016-03-09 20:17 - 2016-02-24 08:18 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2016-03-09 20:17 - 2016-02-24 08:18 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2016-03-09 20:17 - 2016-02-24 08:17 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2016-03-09 20:17 - 2016-02-24 08:16 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2016-03-09 20:17 - 2016-02-24 08:13 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2016-03-09 20:17 - 2016-02-24 08:11 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-03-09 20:17 - 2016-02-24 08:09 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-03-09 20:17 - 2016-02-24 08:09 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2016-03-09 20:17 - 2016-02-24 08:09 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-03-09 20:17 - 2016-02-24 08:09 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-03-09 20:17 - 2016-02-24 08:07 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-03-09 20:17 - 2016-02-24 08:07 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-03-09 20:17 - 2016-02-24 08:07 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-03-09 20:17 - 2016-02-24 08:04 - 01497088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-03-09 20:17 - 2016-02-24 08:03 - 00769536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2016-03-09 20:17 - 2016-02-24 08:01 - 01831936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-03-09 20:17 - 2016-02-24 08:00 - 02273792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-03-09 20:17 - 2016-02-24 08:00 - 01098752 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-03-09 20:17 - 2016-02-24 07:57 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-03-09 20:17 - 2016-02-24 07:55 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-03-09 20:17 - 2016-02-24 07:43 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll
2016-03-09 20:17 - 2016-02-24 07:34 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-03-09 20:17 - 2016-02-24 07:22 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwbase.dll
2016-03-09 20:17 - 2016-02-24 07:20 - 22376960 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-03-09 20:17 - 2016-02-24 07:18 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-03-09 20:17 - 2016-02-24 07:12 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-03-09 20:17 - 2016-02-24 07:12 - 05321728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-03-09 20:17 - 2016-02-24 07:10 - 24600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-03-09 20:17 - 2016-02-24 07:09 - 06972416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-09 20:17 - 2016-02-24 07:05 - 12586496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-03-09 20:17 - 2016-02-24 07:03 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-03-09 20:17 - 2016-02-24 06:59 - 05661696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-03-09 20:17 - 2016-02-24 06:55 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-03-08 22:04 - 2016-03-08 22:04 - 00000000 ____D C:\Users\mcm\AppData\Local\CEF
2016-03-08 22:03 - 2016-03-08 22:03 - 00272360 _____ C:\Users\mcm\Downloads\TOMASZ_TWAROWSKI_Wniosek_o_wydanie_dowodu_osobistego

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-04-04 20:20 - 2015-12-12 14:43 - 02126096 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-04-04 20:20 - 2015-10-30 21:19 - 00920650 _____ C:\WINDOWS\system32\perfh015.dat
2016-04-04 20:20 - 2015-10-30 21:19 - 00203292 _____ C:\WINDOWS\system32\perfc015.dat
2016-04-04 20:20 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-04-04 20:14 - 2015-12-12 14:50 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-04-04 20:14 - 2015-12-12 14:42 - 00061080 _____ C:\WINDOWS\system32\BMXStateBkp-{00000007-00000000-00000000-00001102-00000005-00231102}.rfx
2016-04-04 20:14 - 2015-12-12 14:42 - 00061080 _____ C:\WINDOWS\system32\BMXState-{00000007-00000000-00000000-00001102-00000005-00231102}.rfx
2016-04-04 20:14 - 2015-12-12 14:42 - 00000788 _____ C:\WINDOWS\system32\DVCState-{00000007-00000000-00000000-00001102-00000005-00231102}.rfx
2016-04-04 20:13 - 2015-12-12 14:42 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2016-04-04 20:13 - 2015-10-30 08:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-04-04 20:13 - 2015-07-17 02:02 - 00001182 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-04-04 20:13 - 2015-07-17 02:02 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-04-04 20:06 - 2014-11-03 00:10 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-04-04 19:36 - 2015-07-21 23:47 - 00000000 ____D C:\Users\mcm\Desktop\Stare dane programu Firefox
2016-04-04 19:31 - 2014-11-25 21:09 - 00001317 _____ C:\Users\Public\Desktop\WarThunder.lnk
2016-04-04 19:31 - 2014-10-30 00:45 - 00001185 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-04-04 19:14 - 2014-11-03 19:58 - 00000000 ____D C:\Users\mcm\Documents\Addictive Drums 2 Logs
2016-04-04 19:09 - 2016-02-10 12:32 - 00004216 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{ABF86E9D-B789-4AAA-BAA5-3AD4FCE99931}
2016-04-04 04:59 - 2015-11-03 09:54 - 00001080 _____ C:\WINDOWS\system32\settingsbkup.sfm
2016-04-04 04:59 - 2015-11-03 09:54 - 00001080 _____ C:\WINDOWS\system32\settings.sfm
2016-04-03 18:07 - 2014-10-30 18:48 - 00000000 ____D C:\Users\mcm\AppData\Roaming\GG
2016-04-03 18:06 - 2016-02-10 12:32 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-04-03 18:06 - 2016-02-10 12:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-04-03 18:06 - 2016-02-10 12:32 - 00000000 ____D C:\Program Files (x86)\Java
2016-04-03 18:06 - 2015-10-04 09:32 - 00000000 ____D C:\Users\mcm\.oracle_jre_usage
2016-04-02 19:32 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-04-01 18:51 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-31 22:57 - 2015-12-21 22:32 - 00000000 ____D C:\Users\mcm\Desktop\dowod
2016-03-29 19:14 - 2015-10-31 01:56 - 00000000 ____D C:\Users\mcm\AppData\Local\Packages
2016-03-24 20:22 - 2014-10-30 00:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-03-22 20:55 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-13 23:03 - 2015-12-12 14:41 - 00295496 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-13 01:27 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-03-13 01:27 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-03-13 01:27 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-03-13 01:27 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-03-09 22:38 - 2016-02-11 12:42 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-03-09 21:39 - 2014-09-10 13:13 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-03-09 21:36 - 2014-11-10 02:37 - 143659408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-03-08 23:59 - 2014-11-11 18:37 - 00000000 ____D C:\Users\mcm\AppData\Roaming\Skype
2016-03-08 09:12 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-03-08 09:12 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-06 23:13 - 2015-12-12 14:44 - 00000000 ____D C:\Users\mcm
2016-03-06 23:12 - 2015-12-12 14:42 - 00000000 ____D C:\Program Files\AMD
2016-03-06 23:12 - 2015-11-29 15:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2016-03-06 23:12 - 2014-12-10 21:28 - 00000000 ____D C:\Program Files (x86)\AMD
2016-03-06 21:53 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache

==================== Pliki w katalogu głównym wybranych folderów =======

2016-04-04 19:31 - 2016-04-04 19:31 - 6504960 _____ () C:\Users\mcm\AppData\Roaming\agent.dat
2016-04-04 19:31 - 2016-04-04 19:31 - 0054272 _____ () C:\Users\mcm\AppData\Roaming\ApplicationHosting.dat
2016-04-04 19:31 - 2016-04-04 19:31 - 0065424 _____ () C:\Users\mcm\AppData\Roaming\Config.xml
2016-04-04 19:31 - 2016-04-04 19:31 - 0848437 _____ () C:\Users\mcm\AppData\Roaming\Conity.bin
2016-04-04 19:31 - 2016-04-04 19:31 - 1067520 _____ () C:\Users\mcm\AppData\Roaming\Dalt-Dex.exe
2016-04-04 19:31 - 2016-04-04 19:31 - 0072699 _____ () C:\Users\mcm\AppData\Roaming\Dalt-Dex.tst
2016-04-04 19:31 - 2016-04-04 19:31 - 0168546 _____ () C:\Users\mcm\AppData\Roaming\inst.lat
2016-04-04 19:31 - 2016-04-04 19:31 - 0015840 _____ () C:\Users\mcm\AppData\Roaming\InstallationConfiguration.xml
2016-04-04 19:31 - 2016-04-04 19:31 - 0127488 _____ () C:\Users\mcm\AppData\Roaming\Installer.dat
2016-04-04 19:31 - 2016-04-04 19:31 - 0126464 _____ () C:\Users\mcm\AppData\Roaming\lobby.dat
2016-04-04 19:31 - 2016-04-04 19:31 - 0018432 _____ () C:\Users\mcm\AppData\Roaming\Main.dat
2016-04-04 19:31 - 2016-04-04 19:31 - 0005568 _____ () C:\Users\mcm\AppData\Roaming\md.xml
2016-04-04 19:31 - 2016-04-04 19:31 - 0126464 _____ () C:\Users\mcm\AppData\Roaming\noah.dat
2016-04-04 19:31 - 2016-04-04 19:31 - 0032038 _____ () C:\Users\mcm\AppData\Roaming\uninstall_temp.ico
2016-04-04 19:31 - 2016-04-04 19:31 - 1067520 _____ () C:\Users\mcm\AppData\Roaming\Volcof.exe
2016-04-04 19:31 - 2016-04-04 19:31 - 1626416 _____ () C:\Users\mcm\AppData\Roaming\Volcof.tst
2015-03-29 18:09 - 2015-03-29 18:11 - 0004608 _____ () C:\Users\mcm\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-03-17 23:11 - 2015-03-17 23:11 - 0001722 _____ () C:\Users\mcm\AppData\Local\recently-used.xbel
2015-11-02 23:24 - 2015-11-02 23:24 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-11-06 20:54 - 2014-11-06 20:54 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Niektóre pliki w TEMP:
====================
C:\Users\mcm\AppData\Local\Temp\AcDeltree.exe
C:\Users\mcm\AppData\Local\Temp\BingSvc.exe
C:\Users\mcm\AppData\Local\Temp\bIZPeFDohN.exe
C:\Users\mcm\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\mcm\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\mcm\AppData\Local\Temp\CCP11s.dll
C:\Users\mcm\AppData\Local\Temp\CsDP9kzlPi.exe
C:\Users\mcm\AppData\Local\Temp\DefaultPack.EXE
C:\Users\mcm\AppData\Local\Temp\explorer.exe
C:\Users\mcm\AppData\Local\Temp\ggdrive-menu.exe
C:\Users\mcm\AppData\Local\Temp\ggdrive-overlay.exe
C:\Users\mcm\AppData\Local\Temp\installstats.exe
C:\Users\mcm\AppData\Local\Temp\jre-8u77-windows-au.exe
C:\Users\mcm\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\mcm\AppData\Local\Temp\pkcs11wrapper2722687949041027618.dll
C:\Users\mcm\AppData\Local\Temp\pkcs11wrapper5219364624219791627.dll
C:\Users\mcm\AppData\Local\Temp\pkcs11wrapper7560488164932641412.dll
C:\Users\mcm\AppData\Local\Temp\pkcs11wrapper7588889844267148828.dll
C:\Users\mcm\AppData\Local\Temp\SB7JaPeKjt.exe
C:\Users\mcm\AppData\Local\Temp\vIRqc40yg0.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-03-31 20:35

==================== Koniec  FRST.txt ============================