Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:09-06-2016
Uruchomiony przez Jacek (administrator)  JACEK-PC (11-06-2016 02:23:12)
Uruchomiony z C:\Users\Jacek\Downloads
Załadowane profile: Jacek (Dostępne profile: Jacek & UpdatusUser)
Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\mHotkey.exe
(Chicony) C:\Windows\ChiFuncExt.exe
(Agere Systems) C:\Windows\System32\agr64svc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
() C:\Program Files\GATEWAY\Gateway Recovery Management\Service\ETService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Realtek Semiconductor) C:\Windows\RAVCpl64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(eRmail Company, s. r. o.) C:\Users\Jacek\AppData\Roaming\eRclient\eRclient.exe
(TomTom) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.ux.pl 3\program\soffice.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Chicony) C:\Windows\ModLEDKey.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.ux.pl 3\program\soffice.bin
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Opera Software) C:\Program Files\Opera x64\opera.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_21_0_0_242.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_21_0_0_242.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Microsoft Corporation) C:\Windows\System32\charmap.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RAVCpl64.exe [6455840 2008-08-04] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1833504 2008-08-04] (Realtek Semiconductor Corp.)
HKLM\...\Run: [IAAnotif] => C:\Program Files (X86)\Intel\Intel Matrix Storage Manager\Iaanotif.exe [174872 2007-03-21] (Intel Corporation)
HKLM-x32\...\Run: [LchDrvKey] => C:\Windows\LchDrvKey.exe [36864 2007-03-29] ()
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [186640 2016-05-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [6570256 2016-05-20] (AVG Technologies CZ, s.r.o.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2564329979-2589729149-3282739977-1000\...\Run: [eRclient] => C:\Users\Jacek\AppData\Roaming\eRclient\eRclient.exe [1269248 2013-07-15] (eRmail Company, s. r. o.)
HKU\S-1-5-21-2564329979-2589729149-3282739977-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2564329979-2589729149-3282739977-1000\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [1958248 2015-11-20] (TomTom)
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
Startup: C:\Users\Jacek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk [2014-09-23]
ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Jacek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.ux.pl 3.0.lnk [2014-10-15]
ShortcutTarget: OpenOffice.ux.pl 3.0.lnk -> C:\Program Files (x86)\OpenOffice.ux.pl 3\program\quickstart.exe ()

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{88726641-6C9F-43D6-A1EA-D8B41DDD1F1A}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2564329979-2589729149-3282739977-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2564329979-2589729149-3282739977-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACGW
SearchScopes: HKU\S-1-5-21-2564329979-2589729149-3282739977-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2564329979-2589729149-3282739977-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2564329979-2589729149-3282739977-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKU\S-1-5-21-2564329979-2589729149-3282739977-1000 -> {8F3EA15D-2317-4283-9F7F-E923E9AFAAB8} URL = hxxp://szukaj.gazeta.pl/internet/0,0.html?slowo={searchTerms}
SearchScopes: HKU\S-1-5-21-2564329979-2589729149-3282739977-1000 -> {szukaj.gazeta.pl} URL = hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_71\bin\ssv.dll [2016-01-23] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-23] (Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
Toolbar: HKU\S-1-5-21-2564329979-2589729149-3282739977-1000 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Brak pliku
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF ProfilePath: C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\08a8dws2.default-1410903345768
FF SearchEngineOrder.3: Bing 
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-20] ()
FF Plugin: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-01-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-01-23] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-20] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\08a8dws2.default-1410903345768\user.js [2016-06-07]
FF Extension: ADB Helper - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\08a8dws2.default-1410903345768\Extensions\adbhelper@mozilla(390).org [2015-11-15]
FF Extension: Valence - C:\Users\Jacek\AppData\Roaming\Mozilla\Firefox\Profiles\08a8dws2.default-1410903345768\Extensions\fxdevtools-adapters@mozilla.org [2016-06-09]
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-05-13] [Brak podpisu cyfrowego]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 appdrvrem01; C:\Windows\System32\appdrvrem01.exe [538000 2015-08-31] (Protection Technology)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5164800 2016-05-20] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1080592 2016-05-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [705528 2016-05-20] (AVG Technologies CZ, s.r.o.)
R2 ETService; C:\Program Files\GATEWAY\Gateway Recovery Management\Service\ETService.exe [24576 2008-06-11] () [Brak podpisu cyfrowego]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2015-09-27] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [4803344 2016-06-01] (AVG Technologies CZ, s.r.o.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [383544 2008-01-21] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 appdrv01; C:\Windows\System32\Drivers\appdrv01.sys [2639976 2015-08-31] (Protection Technology)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27648 2008-01-21] (Microsoft Corporation)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162592 2016-02-16] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [307456 2016-05-18] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [260352 2016-05-02] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [247040 2016-05-05] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [51968 2016-05-02] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [279296 2016-05-17] (AVG Technologies CZ, s.r.o.)
R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [71936 2016-05-05] (AVG Technologies CZ, s.r.o.)
S1 Beep; Brak ImagePath
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-05-11] (Disc Soft Ltd)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-05-09] (Duplex Secure Ltd.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2016-06-01] (AVG Netherlands B.V.)
U3 a209dmdx; Brak ImagePath
U3 a5t6qt57; C:\Windows\System32\Drivers\a5t6qt57.sys [0 ] (Microsoft Corporation) <==== UWAGA (zerobajtowy plik/folder)
U3 ugloypow; \??\C:\Users\Jacek\AppData\Local\Temp\ugloypow.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-06-11 02:20 - 2016-06-11 02:20 - 02385408 _____ (Farbar) C:\Users\Jacek\Downloads\FRST64(1).exe
2016-06-11 01:09 - 2016-06-11 01:09 - 00136777 _____ C:\Users\Jacek\Documents\Skan z GMER.txt
2016-06-11 00:25 - 2016-06-11 00:25 - 00380928 _____ C:\Users\Jacek\Downloads\6ju9prz5.exe
2016-06-10 21:56 - 2016-06-10 23:40 - 639691374 _____ C:\Users\Jacek\Downloads\Fear.the.Walking.Dead.S01E05.Cobalt.PL.480p.BRRip.AC3.2.0.XviD-Ralf.avi
2016-06-10 18:27 - 2016-06-10 18:27 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-06-10 18:24 - 2016-06-10 18:24 - 00009230 _____ C:\Users\Jacek\Downloads\Fixlog.txt
2016-06-10 18:15 - 2016-06-10 18:15 - 00003443 _____ C:\Users\Jacek\Documents\fixlist.txt
2016-06-10 00:34 - 2016-06-10 18:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-06-09 23:32 - 2016-06-09 23:32 - 00096698 _____ C:\Users\Jacek\Downloads\Shortcut.txt
2016-06-09 23:29 - 2016-06-09 23:32 - 00048118 _____ C:\Users\Jacek\Downloads\Addition.txt
2016-06-09 23:28 - 2016-06-11 02:23 - 00014974 _____ C:\Users\Jacek\Downloads\FRST.txt
2016-06-09 23:26 - 2016-06-11 02:23 - 00000000 ____D C:\FRST
2016-06-09 23:24 - 2016-06-09 23:24 - 02385408 _____ (Farbar) C:\Users\Jacek\Downloads\FRST64.exe
2016-06-09 23:02 - 2016-06-09 23:07 - 00000000 ____D C:\AdwCleaner
2016-06-09 23:00 - 2016-06-09 23:00 - 03677248 _____ C:\Users\Jacek\Downloads\adwcleaner_5.119.exe
2016-06-08 20:49 - 2016-06-08 20:49 - 00001890 _____ C:\Users\UpdatusUser\Desktop\HijackThis.lnk
2016-06-08 20:49 - 2016-06-08 20:49 - 00001890 _____ C:\Users\Jacek\Desktop\HijackThis.lnk
2016-06-08 20:49 - 2016-06-08 20:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis
2016-06-08 20:49 - 2016-06-08 20:49 - 00000000 ____D C:\Program Files (x86)\Trend Micro
2016-06-08 20:48 - 2016-06-08 20:48 - 00812344 _____ (Trend Micro Inc.) C:\Users\Jacek\Downloads\HJTInstall.exe
2016-06-08 20:17 - 2016-06-08 20:17 - 00003702 _____ C:\Windows\System32\Tasks\Java Platform SE Auto Updater
2016-06-08 20:03 - 2016-06-08 20:03 - 00001930 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk
2016-06-08 20:03 - 2016-06-08 20:03 - 00001918 _____ C:\Users\Public\Desktop\AVG PC TuneUp.lnk
2016-06-08 20:03 - 2016-06-08 20:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp
2016-06-08 20:03 - 2016-06-01 15:12 - 00053008 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\TURegOpt.exe
2016-06-08 20:03 - 2016-06-01 15:05 - 00044304 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\authuitu.dll
2016-06-08 20:03 - 2016-06-01 15:05 - 00039696 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\SysWOW64\authuitu.dll
2016-06-08 20:00 - 2016-06-08 20:00 - 03135696 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Jacek\Downloads\AVG_PCTuneUp_890.exe
2016-06-07 22:32 - 2016-06-07 22:32 - 00000000 _____ C:\Users\Jacek\FAPF05C.tmp
2016-06-07 22:32 - 2016-06-07 22:32 - 00000000 _____ C:\Users\Jacek\FAPD4B0.tmp
2016-06-07 22:32 - 2016-06-07 22:32 - 00000000 _____ C:\Users\Jacek\FAP1491.tmp
2016-06-07 21:59 - 2016-06-07 21:59 - 00000000 _____ C:\Users\Jacek\FAPE082.tmp
2016-06-07 21:50 - 2016-06-07 21:50 - 00015171 _____ C:\ComboFix.txt
2016-06-07 17:07 - 2016-06-09 05:49 - 00000000 ____D C:\ComboFix
2016-06-07 16:44 - 2016-06-07 18:55 - 00000000 ____D C:\Users\Jacek\AppData\Local\temp(73)
2016-06-05 01:31 - 2016-06-09 05:49 - 00000000 ____D C:\Windows\Left 4 Dead
2016-06-05 01:31 - 2016-06-05 20:29 - 00000000 ____D C:\Program Files (x86)\Left 4 Dead
2016-06-03 22:31 - 2016-06-04 00:19 - 659658208 _____ C:\Users\Jacek\Downloads\Fear.the.Walking.Dead.S01E04.Not.Fade.Away.PL.480p.BRRip.AC3.2.0.XviD-Ralf.avi
2016-05-27 19:31 - 2016-05-27 21:23 - 687570580 _____ C:\Users\Jacek\Downloads\Fear.the.Walking.Dead.S01E03.The.Dog.PL.480p.BRRip.AC3.2.0.XviD-Ralf.avi
2016-05-20 22:37 - 2016-05-21 00:16 - 609277562 _____ C:\Users\Jacek\Downloads\Fear.the.Walking.Dead.S01E02.So.Close.Yet.So.Far.PL.480p.BRRip.AC3.2.0.XviD-Ralf.avi
2016-05-20 00:11 - 2016-05-20 00:11 - 05995712 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-05-18 12:13 - 2016-05-18 12:13 - 00307456 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2016-05-17 10:50 - 2016-05-17 10:50 - 00279296 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdia.sys
2016-05-15 22:27 - 2016-05-15 23:38 - 914936824 _____ C:\Users\Jacek\Downloads\Fear.the.Walking.Dead.S01E01.Pilot.PL.480p.BRRip.AC3.2.0.XviD-Ralf.avi
2016-05-15 01:07 - 2016-05-15 21:18 - 00000000 ____D C:\Windows\SysWOW64\directx

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-06-11 02:11 - 2014-09-17 22:44 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-06-11 00:54 - 2013-03-16 22:03 - 00000000 ____D C:\ProgramData\MFAData
2016-06-11 00:27 - 2006-11-02 17:22 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2016-06-11 00:27 - 2006-11-02 17:22 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2016-06-10 18:34 - 2013-08-18 01:59 - 00161736 _____ C:\Windows\system32\perfh015.dat
2016-06-10 18:34 - 2013-08-18 01:59 - 00045282 _____ C:\Windows\system32\perfc015.dat
2016-06-10 18:34 - 2006-11-02 15:33 - 00000000 ____D C:\Windows\inf
2016-06-10 18:34 - 2006-11-02 14:46 - 00950564 _____ C:\Windows\system32\PerfStringBackup.INI
2016-06-10 18:27 - 2015-04-22 18:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-06-10 18:27 - 2012-06-06 11:12 - 00000000 _____ C:\Windows\system32\LogConfigTemp.xml
2016-06-10 18:27 - 2006-11-02 17:42 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-10 18:25 - 2006-11-02 17:42 - 00032546 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-06-10 18:24 - 2013-03-27 21:33 - 00000995 _____ C:\Users\Jacek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-06-10 18:24 - 2013-03-27 21:33 - 00000995 _____ C:\Users\Jacek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-06-10 18:24 - 2006-11-02 15:34 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-06-10 18:24 - 2006-11-02 15:34 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2016-06-09 23:08 - 2014-09-16 22:33 - 00000000 ____D C:\Windows\system32\log
2016-06-09 05:49 - 2016-04-30 22:27 - 00000000 ____D C:\Users\Jacek\AppData\Roaming\Steam
2016-06-09 05:49 - 2016-04-30 22:24 - 00000000 ____D C:\Program Files (x86)\The Walking Dead - Complete Second Season
2016-06-09 05:49 - 2016-04-09 02:36 - 00000000 ____D C:\Program Files (x86)\The Walking Dead - Complete First Season
2016-06-09 05:49 - 2016-03-20 18:04 - 00000000 ____D C:\PIT Format 2015
2016-06-09 05:49 - 2016-01-31 03:34 - 00000000 ____D C:\Users\Jacek\Documents\My Games
2016-06-09 05:49 - 2016-01-31 03:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\City Interactive
2016-06-09 05:49 - 2016-01-31 03:28 - 00000000 ____D C:\Program Files (x86)\City Interactive
2016-06-09 05:49 - 2016-01-07 04:12 - 00000000 ____D C:\Program Files (x86)\WB Games
2016-06-09 05:49 - 2016-01-07 00:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WB Games
2016-06-09 05:49 - 2015-11-16 02:30 - 00000000 ____D C:\Windows\erdnt
2016-06-09 05:49 - 2015-06-01 23:34 - 00000000 ____D C:\Program Files (x86)\MyDrive Connect
2016-06-09 05:49 - 2014-05-09 20:30 - 00000000 ____D C:\Users\UpdatusUser
2016-06-09 05:49 - 2013-03-28 00:54 - 00000000 ____D C:\Users\Jacek\AppData\Roaming\IrfanView
2016-06-09 05:49 - 2006-11-02 15:34 - 00000000 ____D C:\Windows\system32\spool
2016-06-09 05:49 - 2006-11-02 15:34 - 00000000 ____D C:\Windows\system32\Msdtc
2016-06-09 05:49 - 2006-11-02 15:33 - 00000000 ____D C:\Windows\servicing
2016-06-09 05:49 - 2006-11-02 15:33 - 00000000 ____D C:\Windows\registration
2016-06-09 05:49 - 2006-11-02 14:33 - 69730304 _____ C:\Windows\system32\config\software_previous
2016-06-09 05:49 - 2006-11-02 14:33 - 25952256 _____ C:\Windows\system32\config\system_previous
2016-06-09 05:44 - 2006-11-02 14:33 - 49807360 _____ C:\Windows\system32\config\components_previous
2016-06-09 05:44 - 2006-11-02 14:33 - 00262144 _____ C:\Windows\system32\config\sam_previous
2016-06-08 20:17 - 2013-03-30 16:53 - 00000000 ____D C:\Users\Jacek\AppData\Roaming\Skype
2016-06-08 20:03 - 2015-10-31 06:14 - 00000000 ____D C:\Users\Jacek\AppData\Local\AvgSetupLog
2016-06-08 20:03 - 2014-04-30 21:56 - 00000000 ____D C:\Users\Jacek\AppData\Local\AVG
2016-06-08 19:56 - 2013-03-28 00:53 - 00072192 _____ C:\Users\Jacek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-06-08 19:54 - 2013-03-27 21:33 - 00074872 _____ C:\Users\Jacek\AppData\Local\GDIPFONTCACHEV1.DAT
2016-06-08 19:52 - 2015-11-12 20:12 - 00000000 ____D C:\Users\Jacek\AppData\Local\Apps\2.0
2016-06-08 19:51 - 2013-03-27 21:33 - 00000000 ____D C:\Users\Jacek
2016-06-08 02:56 - 2006-11-02 14:33 - 00524288 _____ C:\Windows\system32\config\default_previous
2016-06-08 02:56 - 2006-11-02 14:33 - 00262144 _____ C:\Windows\system32\config\security_previous
2016-06-07 21:50 - 2015-11-15 20:59 - 00000000 ____D C:\Qoobox
2016-06-07 17:21 - 2006-11-02 14:34 - 00000215 _____ C:\Windows\system.ini
2016-06-06 21:46 - 2015-11-16 02:24 - 05659224 ____R (Swearware) C:\Users\Jacek\Downloads\ComboFix.exe
2016-06-06 19:56 - 2006-11-02 17:21 - 00316168 _____ C:\Windows\system32\FNTCACHE.DAT
2016-06-05 15:33 - 2013-03-28 01:02 - 00000000 ____D C:\Users\Jacek\AppData\Roaming\Media Player Classic
2016-06-05 03:11 - 2013-11-23 17:07 - 00000000 ____D C:\Users\Jacek\Downloads\Photo and Video
2016-06-05 02:48 - 2016-01-31 03:34 - 00000000 ____D C:\Users\Jacek\AppData\Roaming\NVIDIA
2016-06-02 20:33 - 2015-12-04 01:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-05-20 00:11 - 2014-09-17 22:44 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-05-20 00:11 - 2014-09-17 22:44 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-20 00:11 - 2014-09-17 22:44 - 00003782 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-05-18 20:41 - 2015-12-04 01:07 - 00000765 _____ C:\Users\Public\Desktop\AVG.lnk
2016-05-18 20:41 - 2015-12-04 01:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-05-15 01:20 - 2016-04-08 20:23 - 00000000 ____D C:\Users\Jacek\Downloads\Pack

==================== Pliki w katalogu głównym wybranych folderów =======

2013-07-31 16:21 - 2014-03-06 20:56 - 0000290 _____ () C:\Users\Jacek\AppData\Roaming\wklnhst.dat
2013-12-20 20:46 - 2014-02-02 17:03 - 0000680 _____ () C:\Users\Jacek\AppData\Local\d3d9caps.dat
2014-05-09 19:39 - 2015-11-19 22:25 - 0000732 _____ () C:\Users\Jacek\AppData\Local\d3d9caps64.dat
2013-03-28 00:53 - 2016-06-08 19:56 - 0072192 _____ () C:\Users\Jacek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-17 19:05 - 2015-01-26 19:27 - 0579983 _____ () C:\Users\Jacek\AppData\Local\dd_depcheck_NETFX_EXP_35.txt
2013-08-17 19:04 - 2013-08-17 19:20 - 0000544 _____ () C:\Users\Jacek\AppData\Local\dd_dotnetfx35error.txt
2013-08-17 19:10 - 2014-06-04 20:54 - 0001982 _____ () C:\Users\Jacek\AppData\Local\dd_dotnetfx35error_lp.txt
2013-08-17 19:04 - 2015-01-26 19:29 - 0697614 _____ () C:\Users\Jacek\AppData\Local\dd_dotnetfx35install.txt
2013-08-17 19:10 - 2015-01-26 19:27 - 0536470 _____ () C:\Users\Jacek\AppData\Local\dd_dotnetfx35install_lp.txt
2015-01-26 19:26 - 2015-01-26 19:26 - 2808550 _____ () C:\Users\Jacek\AppData\Local\dd_NET_Framework35_x64_MSI242C.txt
2013-08-17 19:09 - 2013-08-17 19:10 - 2525726 _____ () C:\Users\Jacek\AppData\Local\dd_NET_Framework35_x64_MSI3EF0.txt
2014-05-13 21:04 - 2014-05-13 21:05 - 0623758 _____ () C:\Users\Jacek\AppData\Local\dd_vcredistMSI3133.txt
2016-01-07 04:32 - 2016-01-07 04:32 - 0019476 _____ () C:\Users\Jacek\AppData\Local\dd_vcredistUI11E5.txt
2014-05-13 21:04 - 2014-05-13 21:05 - 0048170 _____ () C:\Users\Jacek\AppData\Local\dd_vcredistUI3133.txt
2013-08-17 19:20 - 2013-08-17 19:20 - 0002230 _____ () C:\Users\Jacek\AppData\Local\MAN310.tmp
2014-05-13 21:22 - 2014-05-13 21:22 - 0002340 _____ () C:\Users\Jacek\AppData\Local\MAN6162.tmp
2014-05-13 20:16 - 2014-05-13 20:16 - 0002340 _____ () C:\Users\Jacek\AppData\Local\MAN7638.tmp
2014-06-04 20:54 - 2014-06-04 20:54 - 0002340 _____ () C:\Users\Jacek\AppData\Local\MANA0E0.tmp
2014-05-13 19:39 - 2014-05-13 19:39 - 0002340 _____ () C:\Users\Jacek\AppData\Local\MANDD63.tmp
2013-08-17 19:20 - 2013-08-17 19:20 - 0002340 _____ () C:\Users\Jacek\AppData\Local\MANFBEB.tmp
2013-08-17 19:20 - 2008-07-29 23:15 - 0076356 _____ () C:\Users\Jacek\AppData\Local\SDB313.tmp
2014-05-13 21:22 - 2008-10-25 21:16 - 0028156 _____ () C:\Users\Jacek\AppData\Local\SDB62BC.tmp
2014-05-13 20:16 - 2008-10-25 21:16 - 0028156 _____ () C:\Users\Jacek\AppData\Local\SDB7698.tmp
2014-06-04 20:54 - 2008-10-25 21:16 - 0028156 _____ () C:\Users\Jacek\AppData\Local\SDBA112.tmp
2014-05-13 19:39 - 2008-10-25 21:16 - 0028156 _____ () C:\Users\Jacek\AppData\Local\SDBDD95.tmp
2013-08-17 19:20 - 2008-10-25 21:16 - 0028156 _____ () C:\Users\Jacek\AppData\Local\SDBFBFE.tmp
2013-08-17 19:04 - 2015-01-26 19:29 - 0061490 _____ () C:\Users\Jacek\AppData\Local\uxeventlog.txt
2013-08-17 19:20 - 2013-08-17 19:20 - 0001500 _____ () C:\Users\Jacek\AppData\Local\VWL311.tmp
2014-05-13 21:22 - 2014-05-13 21:22 - 0001488 _____ () C:\Users\Jacek\AppData\Local\VWL6182.tmp
2014-05-13 20:16 - 2014-05-13 20:16 - 0001488 _____ () C:\Users\Jacek\AppData\Local\VWL7668.tmp
2014-06-04 20:54 - 2014-06-04 20:54 - 0001488 _____ () C:\Users\Jacek\AppData\Local\VWLA0F1.tmp
2014-05-13 19:39 - 2014-05-13 19:39 - 0001488 _____ () C:\Users\Jacek\AppData\Local\VWLDD74.tmp
2013-08-17 19:20 - 2013-08-17 19:20 - 0001488 _____ () C:\Users\Jacek\AppData\Local\VWLFBFC.tmp
2013-08-17 19:20 - 2013-08-17 19:20 - 0204716 _____ () C:\Users\Jacek\AppData\Local\WLF312.tmp
2014-05-13 21:22 - 2014-05-13 21:22 - 0352080 _____ () C:\Users\Jacek\AppData\Local\WLF6183.tmp
2014-05-13 20:16 - 2014-05-13 20:16 - 0246940 _____ () C:\Users\Jacek\AppData\Local\WLF7669.tmp
2014-06-04 20:54 - 2014-06-04 20:54 - 0460884 _____ () C:\Users\Jacek\AppData\Local\WLFA101.tmp
2014-05-13 19:39 - 2014-05-13 19:39 - 0159050 _____ () C:\Users\Jacek\AppData\Local\WLFDD75.tmp
2013-08-17 19:20 - 2013-08-17 19:20 - 0064768 _____ () C:\Users\Jacek\AppData\Local\WLFFBFD.tmp
2015-01-26 21:14 - 2015-01-26 21:14 - 0000128 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-06-10 18:33

==================== Koniec  FRST.txt ============================