Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 18-07-2016
Uruchomiony przez Maciej (administrator)  DELL (20-07-2016 16:26:03)
Uruchomiony z C:\Users\Maciej\Downloads
Załadowane profile: Maciej & UpdatusUser (Dostępne profile: Maciej & UpdatusUser & Gość)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\STService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIGGE.EXE
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8306208 2009-10-21] (Realtek Semiconductor)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1427648 2015-08-05] (COMODO)
HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1427648 2015-08-05] (COMODO)
HKLM-x32\...\Run: [PDVDDXSrv] => C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe [140520 2009-12-29] (CyberLink Corp.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [281768 2010-11-04] (Avira GmbH)
HKLM-x32\...\Run: [Desktop Disc Tool] => C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe [498160 2009-12-15] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [413696 2008-09-06] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\RunOnce: [Launcher] => C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe [165184 2010-07-21] (Softthinks)
HKU\S-1-5-21-1006101309-3630502950-602766971-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4283256 2011-05-13] (Microsoft Corporation)
HKU\S-1-5-21-1006101309-3630502950-602766971-1000\...\Run: [EPSON S22 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGEE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1006101309-3630502950-602766971-1000\...\Run: [EPSON SX125 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGGE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1006101309-3630502950-602766971-1000\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [774144 2009-12-08] (Sony Ericsson Mobile Communications AB)
HKU\S-1-5-21-1006101309-3630502950-602766971-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53736048 2015-08-07] (Skype Technologies S.A.)
HKU\S-1-5-21-1006101309-3630502950-602766971-1000\...\MountPoints2: {75790146-7c03-11e1-a7c0-002564853c55} - I:\Startme.exe
HKU\S-1-5-21-1006101309-3630502950-602766971-1000\...\MountPoints2: {a7e55b10-6b29-11e3-ae7d-002564853c55} - I:\Startme.exe
AppInit_DLLs-x32: c:\windows\syswow64\guard32.dll => c:\windows\syswow64\guard32.dll [445472 2015-09-03] (COMODO)
Startup: C:\Users\Maciej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2011-05-14]
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{B17FE0F7-C196-43CA-80A7-68DBE94200E7}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mystartsearch.com/?type=hp&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mystartsearch.com/?type=hp&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hp&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hp&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9&q={searchTerms}
HKU\S-1-5-21-1006101309-3630502950-602766971-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mystartsearch.com/?type=hp&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9
HKU\S-1-5-21-1006101309-3630502950-602766971-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hp&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} URL = hxxp://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1006101309-3630502950-602766971-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1006101309-3630502950-602766971-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=112553&tt=4512_1&babsrc=SP_ss&mntrId=d1b10510000000000000000000000000
SearchScopes: HKU\S-1-5-21-1006101309-3630502950-602766971-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1006101309-3630502950-602766971-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} URL = hxxp://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll => Brak pliku
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-06] (Sun Microsystems, Inc.)
BHO-x32: MediaBar -> {0974BA1E-64EC-11DE-B2A5-E43756D89593} -> C:\PROGRA~2\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll => Brak pliku
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-01-28] (Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2011-05-13] (Microsoft Corporation)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-03-02] (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-01-28] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll Brak pliku
Toolbar: HKLM-x32 - MediaBar - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\PROGRA~2\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll Brak pliku
Toolbar: HKU\S-1-5-21-1006101309-3630502950-602766971-1000 -> Brak nazwy - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  Brak pliku
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-03-02] (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\syxpat3q.default
FF NewTab: hxxp://www.mystartsearch.com/newtab/?type=nt&ts=1444586953&z=78bf2b0ca889053580bc1c0gaz3zdzaw3bbq7t9w4c&from=cvs&uid=st3500418as_9vm9yak9xxxx9vm9yak9
FF SelectedSearchEngine: Ask Web Search
FF Homepage: hxxp://www.google.pl/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-18] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [Brak pliku]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-18] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [Brak pliku]
FF Plugin-x32: @java.com/DTPlugin,version=10.11.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-01-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.4.1 -> C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll [2012-04-04] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [Brak pliku]
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-08-09] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-08-09] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\syxpat3q.default\user.js [2012-11-11]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2012-04-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2012-04-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2012-04-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2012-04-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2012-04-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2012-04-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll [2012-04-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Maciej\AppData\Roaming\mozilla\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF SearchPlugin: C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\syxpat3q.default\searchplugins\ask-web-search.xml [2015-10-11]
FF SearchPlugin: C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\syxpat3q.default\searchplugins\BearShareWebSearch.xml [2010-09-14]
FF SearchPlugin: C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\syxpat3q.default\searchplugins\browsemngr.xml [2012-11-11]
FF SearchPlugin: C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\syxpat3q.default\searchplugins\mzk-gorzw.xml [2016-07-15]
FF SearchPlugin: C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\syxpat3q.default\searchplugins\pwn---sownik-jzyka-polskiego.xml [2010-09-11]
FF SearchPlugin: C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\syxpat3q.default\searchplugins\web-search.xml [2010-09-11]
FF SearchPlugin: C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\syxpat3q.default\searchplugins\wyszukiwarka-onetpl.xml [2010-09-01]
FF SearchPlugin: C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\syxpat3q.default\searchplugins\youtube.xml [2010-09-11]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mystartsearch.xml [2015-10-11]
FF Extension: Brak nazwy - C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\syxpat3q.default\Extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}chrome [2010-11-13] [Brak podpisu cyfrowego]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2016-07-16] [Brak podpisu cyfrowego]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} [2016-07-16] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Maciej\AppData\Roaming\Mozilla\Firefox\Profiles\syxpat3q.default\extensions\deskCutv2@gmail.com => nie znaleziono

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [136360 2011-06-30] (Avira GmbH)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [269480 2011-06-30] (Avira GmbH)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5542472 2015-09-03] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2265792 2015-08-05] (COMODO)
R2 OMSI download service; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [90112 2009-04-30] () [Brak podpisu cyfrowego]
S3 Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88288 2011-06-30] (Avira GmbH)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [123784 2011-06-30] (Avira GmbH)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [806032 2015-08-05] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [45856 2015-08-05] (COMODO)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105096 2015-08-05] (COMODO)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19936 2010-08-16] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [13280 2010-08-16] ()
S3 s1029bus; C:\Windows\System32\DRIVERS\s1029bus.sys [113704 2009-05-25] (MCCI Corporation)
S3 s1029mdfl; C:\Windows\System32\DRIVERS\s1029mdfl.sys [19496 2009-05-25] (MCCI Corporation)
S3 s1029mdm; C:\Windows\System32\DRIVERS\s1029mdm.sys [152616 2009-05-25] (MCCI Corporation)
S3 s1029mgmt; C:\Windows\System32\DRIVERS\s1029mgmt.sys [132648 2009-05-25] (MCCI Corporation)
S3 s1029nd5; C:\Windows\System32\DRIVERS\s1029nd5.sys [34856 2009-05-25] (MCCI Corporation)
S3 s1029obex; C:\Windows\System32\DRIVERS\s1029obex.sys [128552 2009-05-25] (MCCI Corporation)
S3 s1029unic; C:\Windows\System32\DRIVERS\s1029unic.sys [145960 2009-05-25] (MCCI Corporation)
R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2008-01-09] (Sony Ericsson Mobile Communications)
S3 HWiNFO32; \??\C:\Users\Maciej\AppData\Local\Temp\HWiNFO64A.SYS [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-07-20 16:26 - 2016-07-20 16:27 - 00022749 _____ C:\Users\Maciej\Downloads\FRST.txt
2016-07-20 15:59 - 2016-07-20 16:26 - 00000000 ____D C:\FRST
2016-07-20 15:59 - 2016-07-20 15:59 - 02391552 _____ (Farbar) C:\Users\Maciej\Downloads\FRST64.exe
2016-07-20 14:09 - 2016-07-20 14:10 - 00000000 ____D C:\Users\Maciej\AppData\Local\{B7E1119B-6C01-4BEE-BB32-73A5A3CC5F1B}
2016-07-20 14:07 - 2016-07-20 14:07 - 00003528 ____N C:\bootsqm.dat
2016-07-19 21:53 - 2016-07-19 21:53 - 00000000 ____D C:\Users\Maciej\AppData\Local\{6B5EBC94-BC28-4E31-8B50-EAD87918BE39}
2016-07-19 09:52 - 2016-07-19 09:52 - 00000000 ____D C:\Users\Maciej\AppData\Local\{E201F1D4-895D-4B8E-A2E5-E408B543FFBF}
2016-07-18 18:12 - 2016-07-18 18:12 - 01125921 _____ C:\Users\Maciej\Downloads\dmde-3.0.6.648-win32-gui.zip
2016-07-18 18:12 - 2016-07-18 18:12 - 00000000 ____D C:\Users\Maciej\Downloads\dmde-3.0.6.648-win32-gui
2016-07-18 18:09 - 2016-07-18 18:09 - 00000000 ____D C:\Users\Maciej\AppData\Local\{BE3C58D1-705E-40B3-9E1D-0B3AF776AF79}
2016-07-16 15:36 - 2016-07-19 09:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-07-16 12:46 - 2016-07-16 12:46 - 02463371 _____ C:\Users\Maciej\Downloads\hw64_532.zip
2016-07-16 12:46 - 2016-07-16 12:46 - 00000000 ____D C:\Users\Maciej\Downloads\hw64_532
2016-07-16 11:53 - 2016-07-16 11:58 - 00000000 ____D C:\Windows\rescache
2016-07-16 11:18 - 2016-07-16 11:18 - 00000000 ____D C:\Users\Maciej\AppData\Local\{7BEC9D0F-BA1C-4BED-961B-842E903D0DCC}
2016-07-15 15:33 - 2016-07-15 15:33 - 00000000 ____D C:\Users\Maciej\AppData\Local\{07833BAC-1C3E-4EF9-B6C7-223B6DBDC7D0}
2016-06-27 20:26 - 2016-06-27 20:26 - 00000000 ____D C:\Users\Maciej\AppData\Local\{E5C1F5E0-B00A-481E-8252-74D5523EAB1D}

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-07-20 16:13 - 2009-07-14 06:45 - 00022464 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-07-20 16:13 - 2009-07-14 06:45 - 00022464 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-07-20 16:10 - 2009-07-14 19:55 - 00161752 _____ C:\Windows\system32\perfh015.dat
2016-07-20 16:10 - 2009-07-14 19:55 - 00080164 _____ C:\Windows\system32\perfc015.dat
2016-07-20 16:10 - 2009-07-14 07:13 - 00234950 _____ C:\Windows\system32\PerfStringBackup.INI
2016-07-20 16:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-07-20 16:07 - 2010-08-16 00:09 - 00000000 ____D C:\Users\Maciej\AppData\Roaming\Skype
2016-07-20 16:06 - 2010-08-25 19:54 - 00000000 ____D C:\Users\Maciej\Tracing
2016-07-20 16:05 - 2010-08-13 03:07 - 00000000 ____D C:\Users\Maciej\AppData\Local\SoftThinks
2016-07-20 16:04 - 2010-05-06 00:34 - 00000000 ____D C:\ProgramData\NVIDIA
2016-07-20 16:04 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-07-20 14:50 - 2012-05-29 23:42 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-07-20 00:27 - 2010-09-24 20:54 - 00000000 ____D C:\Users\Maciej\AppData\Roaming\uTorrent
2016-07-19 09:50 - 2013-01-28 01:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-07-18 19:50 - 2012-05-29 23:42 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-07-18 19:50 - 2012-05-29 23:42 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-07-18 19:50 - 2011-09-23 19:44 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-07-18 18:50 - 2012-05-29 23:42 - 00000000 ____D C:\Windows\system32\Macromed
2016-07-18 18:50 - 2010-05-06 00:38 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-07-16 12:35 - 2013-11-21 00:11 - 00000000 ____D C:\Users\UpdatusUser
2016-07-16 12:28 - 2010-08-13 03:14 - 00000000 ____D C:\Windows\System32\Tasks\Games
2016-07-16 11:54 - 2010-08-14 23:30 - 00000000 ____D C:\Users\Maciej\AppData\Local\ElevatedDiagnostics
2016-07-15 17:30 - 2010-08-22 01:34 - 00001109 _____ C:\Windows\PWCMDLST.BAK
2016-07-15 17:12 - 2012-04-01 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2016-07-15 17:12 - 2012-04-01 16:13 - 00000000 ____D C:\Program Files (x86)\Sony
2016-07-15 16:13 - 2010-08-13 03:07 - 00000000 ____D C:\Users\Maciej
2016-07-15 15:35 - 2010-05-06 00:44 - 00000000 ____D C:\ProgramData\Skype

==================== Pliki w katalogu głównym wybranych folderów =======

2010-08-14 10:24 - 2015-10-11 20:35 - 0006516 _____ () C:\Users\Maciej\AppData\Roaming\wklnhst.dat
2010-08-23 22:58 - 2010-11-07 01:10 - 0007599 _____ () C:\Users\Maciej\AppData\Local\Resmon.ResmonCfg
2012-06-04 22:31 - 2012-06-04 22:31 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2012-04-01 16:16 - 2012-04-01 16:16 - 0148736 _____ (Avanquest Software) C:\ProgramData\hpeDA18.dll

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\hpeDA18.dll


Niektóre pliki w TEMP:
====================
C:\Users\Maciej\AppData\Local\Temp\detectionapi_rd.dll
C:\Users\Maciej\AppData\Local\Temp\detectionui_r.exe
C:\Users\Maciej\AppData\Local\Temp\directx10tests_rd.dll
C:\Users\Maciej\AppData\Local\Temp\directx11tests_rd.dll
C:\Users\Maciej\AppData\Local\Temp\directx9tests_rd.dll
C:\Users\Maciej\AppData\Local\Temp\firefoxjre_exe-1.exe
C:\Users\Maciej\AppData\Local\Temp\firefoxjre_exe-2.exe
C:\Users\Maciej\AppData\Local\Temp\firefoxjre_exe-3.exe
C:\Users\Maciej\AppData\Local\Temp\firefoxjre_exe-4.exe
C:\Users\Maciej\AppData\Local\Temp\firefoxjre_exe-5.exe
C:\Users\Maciej\AppData\Local\Temp\firefoxjre_exe-6.exe
C:\Users\Maciej\AppData\Local\Temp\firefoxjre_exe.exe
C:\Users\Maciej\AppData\Local\Temp\jre-6u38-windows-i586-iftw.exe
C:\Users\Maciej\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Maciej\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Maciej\AppData\Local\Temp\local.dll
C:\Users\Maciej\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Maciej\AppData\Local\Temp\uninst1.exe
C:\Users\Maciej\AppData\Local\Temp\_is85B7.exe
C:\Users\Maciej\AppData\Local\Temp\_is9E81.exe
C:\Users\Maciej\AppData\Local\Temp\_isC419.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-07-18 20:01

==================== Koniec  FRST.txt ============================