Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:05-03-2016 01
Uruchomiony przez Kasiarzynka (administrator)  VAIOMIO (09-04-2016 19:19:32)
Uruchomiony z C:\Users\Kasiarzynka\Desktop\FRST
Załadowane profile: Kasiarzynka & DefaultAppPool (Dostępne profile: Kasiarzynka & DefaultAppPool)
Platform: Windows 10 Home (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\WINDOWS\System32\atiesrxx.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\WINDOWS\System32\mqsvc.exe
(Nalpeiron Ltd.) C:\WINDOWS\SysWOW64\nlssrv32.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(AMD) C:\WINDOWS\System32\atieclxx.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Microsoft Corporation) C:\WINDOWS\System32\inetsrv\w3wp.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\WINDOWS\System32\InstallAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Adobe Systems, Incorporated) C:\Program Files\Adobe\Adobe Photoshop CS5 (64 Bit)\Photoshop.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_21_0_0_197.exe
(Adobe Systems, Inc.) C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_21_0_0_197.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775584 2010-05-31] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-05-31] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139256 2016-03-23] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-56604747-4067415843-783896686-1000\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [37152 2015-11-23] (Glarysoft Ltd)
HKU\S-1-5-21-56604747-4067415843-783896686-1000\...\Run: [Google Update] => C:\Users\Kasiarzynka\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-02-18] (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Kasiarzynka\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Kasiarzynka\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Kasiarzynka\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Kasiarzynka\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Kasiarzynka\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Kasiarzynka\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Kasiarzynka\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
Startup: C:\Users\Kasiarzynka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk [2015-12-29]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk *  

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{483de130-6d5e-479c-b2da-23476692a940}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{9e19c038-dd7b-4829-b255-edcc2483f5d9}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-02-18] (AVAST Software)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-18] (AVAST Software)

FireFox:
========
FF ProfilePath: C:\Users\Kasiarzynka\AppData\Roaming\Mozilla\Firefox\Profiles\8jlm6y2d.default-1457598726543
FF Homepage: hxxps://www.google.pl/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_21_0_0_197.dll [2016-04-04] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-04-04] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-56604747-4067415843-783896686-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Kasiarzynka\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-01-30] (Google Inc.)
FF Plugin HKU\S-1-5-21-56604747-4067415843-783896686-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Kasiarzynka\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-01-30] (Google Inc.)
FF Plugin HKU\S-1-5-21-56604747-4067415843-783896686-1000: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom)
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-19] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-02-18]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ABBYY.Licensing.FineReader.Professional.10.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe [814344 2009-11-25] (ABBYY)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-02-18] (AVAST Software)
S3 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-26] ()
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Brak podpisu cyfrowego]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 nlsX86cc; C:\Windows\SysWOW64\nlssrv32.exe [66560 2011-09-22] (Nalpeiron Ltd.) [Brak podpisu cyfrowego]
S2 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Brak podpisu cyfrowego]
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-26] ()
R3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [960160 2011-12-29] (Sony Corporation)
R2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [836608 2010-06-08] (Sony Corporation) [Brak podpisu cyfrowego]
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1653272 2015-07-31] (Sony Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [627992 2014-01-13] (Wacom Technology, Corp.)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-02-18] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-03-20] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-03-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-02-18] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-02-18] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-03-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-02-24] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-02-18] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-02-18] (AVAST Software)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2015-12-04] (Glarysoft Ltd)
S3 IntcDAud; C:\Windows\System32\DRIVERS\IntcDAud.sys [271872 2010-06-24] (Intel(R) Corporation) [Brak podpisu cyfrowego]
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
S3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [29352 2015-10-09] ()
S3 semav6thermal64ro; C:\Windows\system32\drivers\semav6thermal64ro.sys [13792 2015-08-05] ()
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
R3 ykinw8; C:\Windows\System32\drivers\ykinx64.sys [288768 2015-06-18] (Marvell)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-04-09 18:50 - 2016-04-09 18:50 - 00000000 ___DC C:\zoek_backup
2016-04-09 18:11 - 2016-04-09 18:11 - 00016148 _____ C:\WINDOWS\system32\VAIOMIO_Kasiarzynka_HistoryPrediction.bin
2016-04-09 08:52 - 2016-04-09 09:03 - 00000000 ____D C:\Users\Kasiarzynka\Desktop\inspiracje
2016-03-20 19:03 - 2016-03-20 19:03 - 00000000 ____D C:\ProgramData\ATI
2016-03-20 01:56 - 2016-03-20 01:56 - 00003230 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1458431754
2016-03-20 01:56 - 2016-03-20 01:56 - 00001082 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2016-03-20 01:56 - 2016-03-20 01:56 - 00001082 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-03-20 01:55 - 2016-03-20 01:55 - 00037144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2016-03-19 23:14 - 2016-03-19 23:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2016-03-19 23:14 - 2016-03-19 23:14 - 00000000 ____D C:\Program Files\ATI Technologies
2016-03-19 22:13 - 2016-03-19 22:15 - 00000000 ____D C:\WINDOWS\LastGood
2016-03-19 20:47 - 2016-03-19 20:48 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2016-03-19 10:05 - 2016-04-05 19:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-03-17 23:18 - 2016-03-17 23:18 - 00000000 ____D C:\Users\Kasiarzynka\AppData\Roaming\com.adobe.DC3Module.AdobeADC
2016-03-12 19:12 - 2016-03-12 19:13 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-10 11:06 - 2016-03-10 11:06 - 00001224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-03-10 11:06 - 2016-03-10 11:06 - 00001212 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-03-10 11:05 - 2016-03-19 21:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-03-10 11:03 - 2016-04-09 18:23 - 00004216 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{35F7D330-2DC3-4259-BE56-D2B4BB2A2380}

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-04-09 19:19 - 2015-12-28 22:37 - 00000000 ___DC C:\FRST
2016-04-09 19:16 - 2016-02-25 14:40 - 00000000 ____D C:\Users\Kasiarzynka\Desktop\FRST
2016-04-09 19:11 - 2012-09-22 11:10 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-04-09 18:51 - 2014-06-29 19:27 - 00001098 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-56604747-4067415843-783896686-1000UA.job
2016-04-09 18:48 - 2013-08-27 12:27 - 00000000 ____D C:\Users\Kasiarzynka\AppData\Roaming\DivX
2016-04-09 18:48 - 2013-08-27 12:24 - 00000000 ____D C:\ProgramData\DivX
2016-04-09 18:28 - 2015-07-31 00:42 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-04-09 18:25 - 2014-05-28 10:10 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 5
2016-04-09 18:11 - 2015-12-15 22:12 - 00000000 ____D C:\Users\DefaultAppPool
2016-04-09 14:19 - 2015-10-28 23:29 - 02127966 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-04-09 14:19 - 2015-09-10 07:09 - 00921738 _____ C:\WINDOWS\system32\perfh015.dat
2016-04-09 14:19 - 2015-09-10 07:09 - 00203522 _____ C:\WINDOWS\system32\perfc015.dat
2016-04-09 14:19 - 2015-07-31 00:40 - 00000000 ____D C:\WINDOWS\INF
2016-04-09 14:14 - 2015-07-30 23:52 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-04-09 14:13 - 2015-10-28 23:30 - 00000000 ____D C:\Users\Kasiarzynka
2016-04-09 14:13 - 2015-07-10 11:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-04-09 14:12 - 2016-02-17 23:08 - 00001914 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2016-04-09 14:12 - 2012-05-29 14:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-04-09 14:11 - 2012-05-29 14:52 - 00000000 ____D C:\Program Files (x86)\QuickTime
2016-04-09 09:03 - 2015-03-13 17:59 - 00000000 ____D C:\Users\Kasiarzynka\Desktop\Ułożyć
2016-04-08 16:30 - 2015-07-31 00:42 - 00000000 ___HD C:\Program Files\WindowsApps
2016-04-05 19:42 - 2012-07-14 10:02 - 00004280 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-04-05 19:33 - 2010-12-05 17:54 - 00000000 ____D C:\Users\Kasiarzynka\AppData\Local\Google
2016-04-05 19:29 - 2012-01-03 13:18 - 00000000 ____D C:\Users\Kasiarzynka\AppData\Local\Apple Computer
2016-04-05 19:23 - 2015-10-28 23:26 - 00000000 ____D C:\ProgramData\Package Cache
2016-04-03 20:55 - 2010-07-28 15:06 - 00000000 ____D C:\Program Files (x86)\Windows Live
2016-04-03 20:53 - 2012-10-18 22:42 - 00000000 ____D C:\Users\Kasiarzynka\Tracing
2016-04-03 20:44 - 2015-12-28 22:13 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-04-03 10:06 - 2014-12-03 11:44 - 00000000 ____D C:\Users\Kasiarzynka\Desktop\Fotoedukacja
2016-03-30 09:44 - 2015-07-31 00:42 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-03-24 00:17 - 2015-09-01 11:06 - 00000000 ____D C:\Users\Kasiarzynka\AppData\Local\ElevatedDiagnostics
2016-03-23 23:18 - 2015-10-29 00:15 - 00000000 ____D C:\Users\Kasiarzynka\AppData\Local\Packages
2016-03-20 23:51 - 2010-12-05 17:59 - 00000000 ____D C:\Users\Kasiarzynka\AppData\Roaming\Skype
2016-03-20 01:55 - 2011-10-30 19:33 - 00000000 ____D C:\ProgramData\AVAST Software
2016-03-20 01:55 - 2011-10-30 19:33 - 00000000 ____D C:\Program Files\AVAST Software
2016-03-19 23:14 - 2015-10-28 23:27 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2016-03-19 23:13 - 2015-10-28 23:26 - 00000000 ___DC C:\AMD
2016-03-19 23:13 - 2015-10-28 23:25 - 00000000 ____D C:\Program Files\AMD
2016-03-19 20:54 - 2010-12-05 16:52 - 00000000 ____D C:\Users\Kasiarzynka\AppData\Local\Adobe
2016-03-17 23:14 - 2010-12-05 16:52 - 00000000 ____D C:\Users\Kasiarzynka\AppData\Roaming\Adobe
2016-03-13 21:34 - 2015-09-10 07:55 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-03-13 21:32 - 2015-07-30 23:49 - 05080032 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-13 21:29 - 2015-07-31 00:42 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-03-13 21:29 - 2015-07-31 00:42 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-03-13 21:29 - 2015-07-31 00:42 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-03-13 21:29 - 2015-07-31 00:42 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-03-11 11:08 - 2015-07-31 00:25 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-10 11:03 - 2015-01-26 21:58 - 00000000 __SHD C:\Users\Kasiarzynka\AppData\LocalLow\EmieUserList
2016-03-10 11:03 - 2015-01-26 21:58 - 00000000 __SHD C:\Users\Kasiarzynka\AppData\LocalLow\EmieSiteList
2016-03-10 11:03 - 2015-01-21 00:49 - 00000000 __SHD C:\Users\Kasiarzynka\AppData\Local\EmieUserList
2016-03-10 11:03 - 2015-01-21 00:49 - 00000000 __SHD C:\Users\Kasiarzynka\AppData\Local\EmieSiteList

==================== Pliki w katalogu głównym wybranych folderów =======

2013-07-11 14:27 - 2014-02-19 12:48 - 0000132 _____ () C:\Users\Kasiarzynka\AppData\Roaming\Preferencje Adobe CS5 dla formatu GIF
2012-01-03 12:44 - 2014-02-19 20:28 - 0000132 _____ () C:\Users\Kasiarzynka\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG
2015-06-25 09:10 - 2015-06-25 09:10 - 0000268 ___RH () C:\Users\Kasiarzynka\AppData\Roaming\Vocals
2013-01-27 18:30 - 2014-06-16 00:57 - 0001496 _____ () C:\Users\Kasiarzynka\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs
2011-07-10 21:05 - 2011-07-10 21:05 - 0007648 _____ () C:\Users\Kasiarzynka\AppData\Local\Resmon.ResmonCfg
2011-12-14 23:47 - 2011-12-17 17:32 - 0000040 ___SH () C:\ProgramData\.zreglib
2012-02-20 11:57 - 2012-02-20 11:57 - 0000008 __RSH () C:\ProgramData\100C9BCA2A.sys
2011-05-09 18:42 - 2011-05-09 18:42 - 0000048 ____H () C:\ProgramData\ezsidmv.dat
2012-02-20 11:57 - 2012-02-20 11:59 - 0002828 ___SH () C:\ProgramData\KGyGaAvL.sys
2015-06-24 20:08 - 2015-06-25 09:18 - 0000020 ____H () C:\ProgramData\PKP_DLdy.DAT
2015-06-25 09:10 - 2015-06-25 09:10 - 0000268 ___RH () C:\ProgramData\Woodwinds

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-04-08 16:33

==================== Koniec  FRST.txt ============================