Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 02-07-2016
Uruchomiony przez JOANNA (administrator)  JOANNA-KOMPUTER (02-07-2016 18:12:54)
Uruchomiony z C:\Users\JOANNA\Downloads
Załadowane profile: JOANNA (Dostępne profile: JOANNA)
Platform: Microsoft Windows 7 Starter  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: "D:\MOZILIA-przeglądarka\firefox.exe" -osint -url "%1")
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Khannies) C:\Users\Public\AppData\svchost_guardian.exe
(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Glarysoft Ltd) D:\Glary Utilities 5\Integrator.exe
(Microsoft Corporation) C:\Windows10Upgrade\Windows10UpgraderApp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
(Mozilla Corporation) D:\MOZILIA-przeglądarka\firefox.exe
(CPUID) C:\Program Files\CPUID\CPU-Z\cpuz.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-21-1621258585-2021914392-2710669034-1000\...\Run: [GUDelayStartup] => D:\Glary Utilities 5\StartupManager.exe [43984 2016-05-16] (Glarysoft Ltd)
HKU\S-1-5-21-1621258585-2021914392-2710669034-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-1621258585-2021914392-2710669034-1000\...\MountPoints2: {11fd3020-83b4-11e0-bebc-20cf3008b08a} - E:\AutoRun.exe
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Brak pliku
BootExecute: autocheck autochk *  Drive0D:㨀捻盐eﭐc


==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 37.8.214.2 31.11.202.254
Tcpip\..\Interfaces\{D4830719-D334-489D-86D3-384F2E4AA196}: [DhcpNameServer] 37.8.214.2 31.11.202.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-1621258585-2021914392-2710669034-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.wp.pl/
HKU\S-1-5-21-1621258585-2021914392-2710669034-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
HKU\S-1-5-21-1621258585-2021914392-2710669034-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://eeepc.asus.com
HKU\S-1-5-21-1621258585-2021914392-2710669034-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
HKU\S-1-5-21-1621258585-2021914392-2710669034-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1621258585-2021914392-2710669034-1000 -> DefaultScope {C677FCB8-6386-4876-B93B-7A0FF5FD0F47} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1621258585-2021914392-2710669034-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-1621258585-2021914392-2710669034-1000 -> {C677FCB8-6386-4876-B93B-7A0FF5FD0F47} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2014-12-16] (Adblock Plus)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\JOANNA\AppData\Roaming\Mozilla\Firefox\Profiles\zze87a47.default-1419761465028
FF Homepage: www.wp.pl
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> D:\PDF-PROGRAM\PDF Viewer\npPDFXCviewNPPlugin.dll [2011-04-12] (Tracker Software Products Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-10-19] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-10-19] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\windows\system32\Wat\npWatWeb.dll [2013-02-14] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll [2013-09-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2008-11-13] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> D:\PDF-PROGRAM\PDF Viewer\npPDFXCviewNPPlugin.dll [2011-04-12] (Tracker Software Products Ltd.)
FF Extension: Adblock Plus - C:\Users\JOANNA\AppData\Roaming\Mozilla\Firefox\Profiles\zze87a47.default-1419761465028\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-29]
FF HKLM\...\Thunderbird\Extensions: [te_7.0@nokia.com] - C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_7.0
FF Extension: Brak nazwy - C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_7.0 [2012-08-24] [Brak podpisu cyfrowego]
StartMenuInternet: FIREFOX.EXE - D:\MOZILIA-przeglądarka\firefox.exe

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S4 AsusService; C:\Windows\System32\AsusService.exe [219136 2009-08-19] () [Brak podpisu cyfrowego]
R2 guardian; C:\Users\Public\AppData\svchost_guardian.exe [24064 2012-05-15] (Khannies) [Brak podpisu cyfrowego]
S4 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-29] (IObit)
S4 Net Driver HPZ12; C:\windows\system32\HPZinw12.dll [44032 2009-05-15] (Hewlett-Packard) [Brak podpisu cyfrowego]
S4 Pml Driver HPZ12; C:\windows\system32\HPZipm12.dll [53760 2009-05-15] (Hewlett-Packard) [Brak podpisu cyfrowego]
S4 PuranDefrag; C:\windows\system32\PuranDefragS.exe [260992 2012-12-13] (Puran Software) [Brak podpisu cyfrowego]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [268032 2016-05-27] (Realtek Semiconductor)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S4 WiseBootAssistant; D:\Wise Care 365\BootTime.exe [580144 2015-08-06] (WiseCleaner.com)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 AsUpIO; C:\windows\System32\drivers\AsUpIO.sys [11448 2010-05-11] ()
R3 cpuz139; C:\Users\JOANNA\AppData\Local\Temp\cpuz139\cpuz139_x32.sys [43840 2016-07-02] (CPUID)
S3 DFX11_1; C:\windows\System32\drivers\dfx11_1.sys [24424 2012-12-13] (Windows (R) Win 7 DDK provider)
R2 giveio; C:\windows\system32\giveio.sys [5248 1996-04-03] () [Brak podpisu cyfrowego]
S3 GT72NDISIPXP; C:\windows\System32\DRIVERS\Gt51Ip.sys [95744 2009-08-04] (Option NV) [Brak podpisu cyfrowego]
S3 GT72UBUS; C:\windows\System32\DRIVERS\gt72ubus.sys [51968 2009-08-04] (Option N.V.) [Brak podpisu cyfrowego]
S3 GTPTSER; C:\windows\System32\DRIVERS\gtptser.sys [8064 2009-08-04] (Option N.V.)
R1 GUBootStartup; C:\windows\System32\drivers\GUBootStartup.sys [17472 2016-05-28] (Glarysoft Ltd)
R1 HWiNFO32; C:\windows\system32\drivers\HWiNFO32.SYS [23840 2015-08-16] (REALiX(tm))
R3 kbfiltr; C:\windows\System32\DRIVERS\kbfiltr.sys [13880 2010-04-13] ( )
R3 L1C; C:\windows\System32\DRIVERS\L1C62x86.sys [110280 2015-10-18] (Qualcomm Atheros Co., Ltd.)
R3 rtsuvc; C:\windows\System32\DRIVERS\rtsuvc.sys [7253208 2016-05-26] (Realtek Semiconductor Corp.)
R2 speedfan; C:\windows\system32\speedfan.sys [24184 2012-12-29] (Almico Software)
S3 WiseHDInfo; C:\windows\WiseHDInfo32.dll [13264 2015-10-31] (wisecleaner.com)
S3 AndnetBus; system32\DRIVERS\lgandnetbus.sys [X]
S3 AndNetDiag; system32\DRIVERS\lgandnetdiag.sys [X]
S3 ANDNetModem; system32\DRIVERS\lgandnetmodem.sys [X]
S3 btwaudio; system32\drivers\btwaudio.sys [X]
S3 btwavdt; \SystemRoot\system32\DRIVERS\btwavdt.sys [X]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [X]
S3 btwrchid; \SystemRoot\system32\DRIVERS\btwrchid.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [Brak podpisu cyfrowego]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnet; system32\DRIVERS\ZTEusbnet.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-07-02 18:12 - 2016-07-02 18:14 - 00010696 _____ C:\Users\JOANNA\Downloads\FRST.txt
2016-07-02 18:10 - 2016-07-02 18:12 - 00000000 ____D C:\FRST
2016-07-02 18:09 - 2016-07-02 18:09 - 01740288 _____ (Farbar) C:\Users\JOANNA\Downloads\FRST.exe
2016-07-02 18:07 - 2016-07-02 18:08 - 02031992 _____ (Microsoft Corporation) C:\Users\JOANNA\Downloads\MGADiag.exe
2016-07-02 17:23 - 2016-07-02 17:23 - 00000000 ___HD C:\$Windows.~WS
2016-07-02 12:30 - 2016-07-02 12:30 - 18277680 _____ (Microsoft Corporation) C:\Users\JOANNA\Downloads\Windows 10 - instalator [1].exe
2016-07-02 12:29 - 2016-07-02 12:29 - 00992280 _____ ( ) C:\Users\JOANNA\Downloads\Windows 10 - instalator.exe
2016-07-02 12:20 - 2016-07-02 12:20 - 03712064 _____ C:\Users\JOANNA\Downloads\adwcleaner_5.201.exe.part
2016-07-02 11:31 - 2016-07-02 11:31 - 00089016 _____ C:\Users\JOANNA\AppData\Local\GDIPFONTCACHEV1.DAT
2016-07-02 11:31 - 2016-07-02 11:31 - 00077824 _____ C:\Users\JOANNA\Downloads\deinstaller.exe
2016-07-02 11:23 - 2016-07-02 11:23 - 00377816 _____ C:\windows\system32\FNTCACHE.DAT
2016-07-01 23:44 - 2016-07-02 12:22 - 00007426 _____ C:\-MSI_netfx_Core_x86.msi.txt
2016-07-01 23:26 - 2015-01-09 01:44 - 00419936 _____ C:\windows\system32\locale.nls
2016-07-01 20:50 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\windows\system32\icardres.dll
2016-07-01 20:50 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
2016-07-01 20:50 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\windows\system32\icardagt.exe
2016-07-01 20:50 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\windows\system32\infocardapi.dll
2016-07-01 20:27 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-07-01 19:56 - 2016-07-01 19:56 - 05792848 _____ (Microsoft Corporation) C:\Users\JOANNA\Downloads\Windows10Upgrade9194.exe
2016-07-01 19:39 - 2016-07-01 19:39 - 05792848 _____ (Microsoft Corporation) C:\Users\JOANNA\Downloads\Windows10Upgrade9252(1).exe
2016-07-01 19:38 - 2016-07-01 19:38 - 18447464 _____ (Microsoft Corporation) C:\Users\JOANNA\Downloads\MediaCreationTool.exe
2016-07-01 18:45 - 2016-07-01 18:45 - 00000000 ___HD C:\$GetCurrent
2016-07-01 18:44 - 2016-07-02 17:31 - 00000000 ____D C:\Windows10Upgrade
2016-07-01 18:44 - 2016-07-01 22:59 - 00000694 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asystent uaktualnienia do systemu Windows 10.lnk
2016-07-01 18:44 - 2016-07-01 22:59 - 00000682 _____ C:\Users\JOANNA\Desktop\Asystent uaktualnienia do systemu Windows 10.lnk
2016-07-01 18:44 - 2016-07-01 18:44 - 05792848 _____ (Microsoft Corporation) C:\Users\JOANNA\Downloads\Windows10Upgrade9252.exe
2016-07-01 18:35 - 2015-07-29 10:27 - 18191960 _____ (Microsoft Corporation) C:\MediaCreationTool.exe
2016-07-01 18:03 - 2016-07-01 18:03 - 00000000 ____D C:\Users\JOANNA\Downloads\bios
2016-07-01 18:01 - 2016-07-01 18:01 - 00001026 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2016-07-01 18:01 - 2016-07-01 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2016-07-01 18:01 - 2016-07-01 18:01 - 00000000 ____D C:\Program Files\CPUID
2016-07-01 18:00 - 2016-07-01 18:00 - 01664456 _____ ( ) C:\Users\JOANNA\Downloads\cpu-z_1.76-en.exe
2016-06-12 00:36 - 2012-05-15 11:25 - 00024064 _____ (Khannies) C:\Users\Public\AppData\svchost_guardian.exe
2016-06-04 12:43 - 2016-07-02 11:58 - 00000000 ____D C:\windows\system32\MRT
2016-06-04 12:43 - 2016-07-02 11:50 - 139785240 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2016-06-04 11:33 - 2016-03-18 00:36 - 03998952 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2016-06-04 11:33 - 2016-03-18 00:36 - 03943144 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2016-06-04 11:33 - 2016-03-18 00:36 - 00137960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2016-06-04 11:33 - 2016-03-18 00:36 - 00067304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2016-06-04 11:33 - 2016-03-18 00:33 - 01310528 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2016-06-04 11:33 - 2016-03-18 00:30 - 00400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2016-06-04 11:33 - 2016-03-18 00:30 - 00171520 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2016-06-04 11:33 - 2016-03-18 00:30 - 00171008 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2016-06-04 11:33 - 2016-03-18 00:30 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2016-06-04 11:33 - 2016-03-18 00:30 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2016-06-04 11:33 - 2016-03-18 00:30 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2016-06-04 11:33 - 2016-03-18 00:29 - 00655360 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2016-06-04 11:33 - 2016-03-18 00:29 - 00251392 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2016-06-04 11:33 - 2016-03-18 00:29 - 00141312 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
2016-06-04 11:33 - 2016-03-18 00:29 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2016-06-04 11:33 - 2016-03-18 00:29 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2016-06-04 11:33 - 2016-03-18 00:28 - 01414144 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll
2016-06-04 11:33 - 2016-03-18 00:27 - 00260608 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2016-06-04 11:33 - 2016-03-18 00:27 - 00223232 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2016-06-04 11:33 - 2016-03-18 00:27 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2016-06-04 11:33 - 2016-03-18 00:27 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2016-06-04 11:33 - 2016-03-18 00:26 - 01062400 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2016-06-04 11:33 - 2016-03-18 00:26 - 00872448 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2016-06-04 11:33 - 2016-03-18 00:26 - 00553984 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2016-06-04 11:33 - 2016-03-18 00:26 - 00294400 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2016-06-04 11:33 - 2016-03-18 00:25 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2016-06-04 11:33 - 2016-03-18 00:25 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00644096 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-06-04 11:33 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-06-04 11:33 - 2016-03-17 23:42 - 00097792 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2016-06-04 11:33 - 2016-03-17 23:42 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2016-06-04 11:33 - 2016-03-17 23:42 - 00029696 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2016-06-04 11:33 - 2016-03-17 23:42 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2016-06-04 11:33 - 2016-03-17 23:41 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2016-06-04 11:33 - 2016-03-17 23:36 - 00271360 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2016-06-04 11:33 - 2016-03-17 23:35 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2016-06-04 11:33 - 2016-03-17 23:30 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2016-06-04 11:33 - 2016-03-17 23:30 - 00124416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2016-06-04 11:33 - 2016-03-17 23:30 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2016-06-04 11:33 - 2016-03-17 23:29 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2016-06-04 11:33 - 2016-03-17 23:29 - 00036352 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2016-06-04 11:33 - 2016-03-17 23:29 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2016-06-04 11:33 - 2016-03-17 23:29 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2016-06-04 11:33 - 2016-03-17 23:29 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-06-04 11:33 - 2016-03-17 23:29 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-06-04 11:33 - 2016-03-17 23:29 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-06-04 11:33 - 2016-03-17 23:29 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-07-02 17:37 - 2009-07-14 06:34 - 00009904 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-07-02 17:37 - 2009-07-14 06:34 - 00009904 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-07-02 17:30 - 2009-07-14 06:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2016-07-02 17:30 - 2009-07-14 04:37 - 00000000 ____D C:\windows\registration
2016-07-02 12:39 - 2016-05-26 23:22 - 00000000 ____D C:\Users\JOANNA\AppData\Local\ElevatedDiagnostics
2016-07-02 12:37 - 2011-05-21 15:36 - 00000000 ____D C:\Users\JOANNA
2016-07-02 11:33 - 2009-07-14 04:37 - 00000000 ____D C:\windows\inf
2016-07-02 11:20 - 2009-07-14 04:37 - 00000000 ____D C:\windows\rescache
2016-07-02 09:17 - 2016-02-12 19:30 - 00000000 ____D C:\Users\JOANNA\AppData\Roaming\Wise Care 365
2016-07-01 23:42 - 2009-07-26 20:46 - 00687828 _____ C:\windows\system32\perfh015.dat
2016-07-01 23:42 - 2009-07-26 20:46 - 00131382 _____ C:\windows\system32\perfc015.dat
2016-07-01 23:42 - 2009-07-25 09:50 - 01523412 _____ C:\windows\system32\PerfStringBackup.INI
2016-07-01 23:33 - 2009-07-14 04:37 - 00000000 ____D C:\windows\tracing
2016-06-13 23:28 - 2012-04-10 14:12 - 00000056 _____ C:\windows\system32\sysoption.dbf
2016-06-13 23:20 - 2009-07-14 06:53 - 00032608 _____ C:\windows\Tasks\SCHEDLGU.TXT
2016-06-12 00:52 - 2012-08-04 07:41 - 00000000 ____D C:\ProgramData\TuneUp Software
2016-06-12 00:47 - 2012-05-03 10:22 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

==================== Pliki w katalogu głównym wybranych folderów =======

2011-05-22 23:05 - 2016-05-27 09:21 - 0007612 _____ () C:\Users\JOANNA\AppData\Local\Resmon.ResmonCfg
2010-05-12 00:54 - 2010-03-03 00:59 - 0131984 _____ () C:\ProgramData\FullRemove.exe

Niektóre pliki w TEMP:
====================
C:\Users\JOANNA\AppData\Local\Temp\ICReinstall_Windows 10 - instalator.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\windows\explorer.exe => Plik podpisany cyfrowo
C:\windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\windows\system32\services.exe => Plik podpisany cyfrowo
C:\windows\system32\User32.dll => Plik podpisany cyfrowo
C:\windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-07-02 11:11

==================== Koniec  FRST.txt ============================