Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 11-08-2016 01 Uruchomiony przez pcc (administrator) PCC-KOMPUTER (12-08-2016 19:48:22) Uruchomiony z C:\Users\pcc\Downloads Załadowane profile: pcc (Dostępne profile: pcc) Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 10 (Domyślna przeglądarka: Opera) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (AMD) C:\Windows\System32\atiesrxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AMD) C:\Windows\System32\atieclxx.exe (Kingsoft Corporation) C:\Program Files (x86)\cmcm\Clean Master\cmcore.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Samsung) C:\Program Files (x86)\Samsung\Easy Software Manager\SWMAgent.exe (CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe (Samsung Electronics) C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (ALLPlayer Group Ltd.) C:\Program Files (x86)\ALLPlayer Remote\ALLPlayerRemoteControl.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Easy Support Center\SSCKbdHk.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Opera Software) C:\Program Files (x86)\Opera\39.0.2256.48\opera.exe (Opera Software) C:\Program Files (x86)\Opera\39.0.2256.48\opera_crashreporter.exe (Opera Software) C:\Program Files (x86)\Opera\39.0.2256.48\opera.exe (Opera Software) C:\Program Files (x86)\Opera\39.0.2256.48\opera.exe (Opera Software) C:\Program Files (x86)\Opera\39.0.2256.48\opera.exe (Opera Software) C:\Program Files (x86)\Opera\39.0.2256.48\opera.exe (Opera Software) C:\Program Files (x86)\Opera\39.0.2256.48\opera.exe (Opera Software) C:\Program Files (x86)\Opera\39.0.2256.48\opera.exe (Opera Software) C:\Program Files (x86)\Opera\39.0.2256.48\opera.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12666984 2011-08-09] (Realtek Semiconductor) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2776872 2011-08-31] (ELAN Microelectronics Corp.) HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [791200 2011-07-15] (Atheros Communications) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe [87336 2010-09-20] (CyberLink Corp.) HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [8900328 2016-08-08] (AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595480 2016-03-20] (Oracle Corporation) HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [718208 2010-03-16] (Microsoft Corporation) HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd) HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\Run: [ALLUpdate] => C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [3670472 2015-07-28] (ALLPlayer Group Ltd.) HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\Run: [ALLPlayer WiFi Remote] => C:\Program Files (x86)\ALLPlayer Remote\ALLPlayerRemoteControl.exe [5975264 2016-03-14] (ALLPlayer Group Ltd.) HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\Run: [Facebook Update] => C:\Users\pcc\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2016-06-10] (Facebook Inc.) HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\CurrentVersion\Windows: [Load] C:\Users\pcc\LOCALS~1\Temp\mstyxgcuo.pif <===== UWAGA HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\Policies\Explorer: [] HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: F - F:\AutoRun.exe /s HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: G - G:\AutoRun.exe /s HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: H - H:\AutoRun.exe /s HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: {1e9eb8b4-0b53-11e3-a2e3-e81132ef6681} - H:\AutoRun.exe /s HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: {26d450f3-c8cc-11e5-8965-e81132ef6681} - G:\AutoRun.exe /s HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: {26d45107-c8cc-11e5-8965-e81132ef6681} - G:\AutoRun.exe /s HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: {26d45112-c8cc-11e5-8965-e81132ef6681} - G:\AutoRun.exe /s HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: {26d4511b-c8cc-11e5-8965-e81132ef6681} - G:\AutoRun.exe /s HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: {550f060c-f278-11e4-ae45-e81132ef6681} - G:\AutoRun.exe /s HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: {5c0a11a7-ce7f-11e5-bac0-e81132ef6681} - H:\AutoRun.exe /s HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: {941fc881-a995-11e5-88e7-e81132ef6681} - F:\setup.exe HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: {acbb231f-390c-11e5-bd8d-00a0c6000000} - F:\AutoRun.exe /s HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: {efdbb582-b7cd-11e5-8ac1-e81132ef6681} - G:\AutoRun.exe /s HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: {efdbb5a5-b7cd-11e5-8ac1-e81132ef6681} - G:\AutoRun.exe /s HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: {efdbb5ad-b7cd-11e5-8ac1-e81132ef6681} - G:\AutoRun.exe /s HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\...\MountPoints2: {f7e2ef23-cda8-11e4-93b7-00a0c6000000} - G:\LG_PC_Programs.exe ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-07-11] (AVAST Software) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2013-02-08] (Autodesk, Inc.) GroupPolicy: Ograniczenia - Chrome <======= UWAGA CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA CHR HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{599C6F71-FC11-4E09-B729-51B3EBE023C8}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{7A2B8EA2-C23F-4D56-9799-DF9E2B5EAE92}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = www.bing.com HKU\S-1-5-21-1647462393-2480976863-1240803015-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.pl/ SearchScopes: HKLM -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKLM -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKU\.DEFAULT -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKU\.DEFAULT -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-19 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-19 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-20 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-20 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-1647462393-2480976863-1240803015-1000 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-1647462393-2480976863-1240803015-1000 -> {szukaj.gazeta.pl} URL = hxxp://szukaj.gazeta.pl/internet/0,0.html?slowo={searchTerms} BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2011-06-07] (Advanced Micro Devices) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_77\bin\ssv.dll [2016-04-01] (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-07-11] (AVAST Software) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-04-01] (Oracle Corporation) BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2011-06-07] (Advanced Micro Devices) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\ssv.dll [2016-04-01] (Oracle Corporation) BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-07-15] (Atheros Commnucations) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-07-11] (AVAST Software) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-04-01] (Oracle Corporation) BHO-x32: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll [2013-11-01] (ALLCinema Ltd.) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Brak pliku Toolbar: HKLM - Brak nazwy - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - Brak pliku Toolbar: HKU\S-1-5-21-1647462393-2480976863-1240803015-1000 -> Brak nazwy - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Brak pliku Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Brak pliku Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Brak pliku Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation) Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-07] (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-07] (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-07] (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-07] (Advanced Micro Devices) FireFox: ======== FF ProfilePath: C:\Users\pcc\AppData\Roaming\Mozilla\Firefox\Profiles\v0iybln5.default FF Homepage: www..google.pl FF Plugin: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-04-01] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-04-01] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-04-01] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-04-01] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll [2010-02-15] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll [2010-02-15] (RealNetworks, Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.) FF Plugin HKU\S-1-5-21-1647462393-2480976863-1240803015-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\pcc\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited) FF Plugin HKU\S-1-5-21-1647462393-2480976863-1240803015-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\pcc\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS) FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-07-13] FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-07-13] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF Chrome: ======= CHR StartupUrls: Default -> "hxxp://www.google.pl/" CHR Profile: C:\Users\pcc\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Dokumenty Google) - C:\Users\pcc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-04] CHR Extension: (Dysk Google) - C:\Users\pcc\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-24] CHR Extension: (YouTube) - C:\Users\pcc\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-24] CHR Extension: (Adblock Plus) - C:\Users\pcc\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-07-07] CHR Extension: (Google Search) - C:\Users\pcc\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-09-04] CHR Extension: (Avast SafePrice) - C:\Users\pcc\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-05-22] CHR Extension: (Dokumenty Google offline) - C:\Users\pcc\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-24] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\pcc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-24] CHR Extension: (Gmail) - C:\Users\pcc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-04] CHR Extension: (Chrome Media Router) - C:\Users\pcc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-05] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-09-04] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-09-04] Opera: ======= OPR Extension: (Tłumacz) - C:\Users\pcc\AppData\Roaming\Opera Software\Opera Stable\Extensions\ibnombjmjocaccigcefonnipcnlaeaed [2016-01-15] OPR Extension: (Adblock Plus) - C:\Users\pcc\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-07-01] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-07-15] (Atheros) [Brak podpisu cyfrowego] R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [91296 2011-07-15] (Atheros Commnucations) [Brak podpisu cyfrowego] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-07-11] (AVAST Software) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation) R2 cmcore; c:\program files (x86)\cmcm\Clean Master\cmcore.exe [315208 2015-10-13] (Kingsoft Corporation) R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] () [Brak podpisu cyfrowego] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-07-11] (AVAST Software) R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-07-11] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108304 2016-07-11] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-07-11] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-07-11] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-07-11] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [473592 2016-07-14] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [162904 2016-07-11] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-08-05] (AVAST Software) R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [50976 2014-08-15] (AVG Technologies) R3 BthMtpEnum; C:\Windows\System32\DRIVERS\BthMtpEnum.sys [64512 2009-07-14] (Microsoft Corporation) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-12-23] (Disc Soft Ltd) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R1 eusk2par; C:\windows\system32\Drivers\eusk2par-amd64.sys [32336 2008-12-18] (Aladdin Knowledge Systems Ltd.) U5 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [42856 2010-11-21] (Microsoft Corporation) R3 ksapi64; C:\windows\system32\drivers\ksapi64.sys [56680 2015-10-13] (Kingsoft Corporation) S3 massfilter_lte; C:\Windows\System32\DRIVERS\massfilter_LTE.sys [18456 2013-04-09] (HandSet Incorporated) S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2012-02-06] (Windows (R) 2003 DDK 3790 provider) R2 SGDrv; C:\Windows\System32\DRIVERS\SGdrv64.sys [7680 2011-04-11] (Phoenix Technologies Ltd.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-11-19] (Duplex Secure Ltd.) S3 zgdcat; C:\Windows\System32\DRIVERS\zgdcat.sys [130200 2013-04-09] (ZTE Incorporated) S3 zgdcdiag; C:\Windows\System32\DRIVERS\zgdcdiag.sys [130200 2013-04-09] (ZTE Incorporated) S3 zgdcmdm; C:\Windows\System32\DRIVERS\zgdcmdm.sys [130200 2013-04-09] (ZTE Incorporated) S3 zgdcnet; C:\Windows\System32\DRIVERS\zgdcnet.sys [169496 2013-04-09] (ZTE Incorporated) S3 zgdcnmea; C:\Windows\System32\DRIVERS\zgdcnmea.sys [130200 2013-04-09] (ZTE Incorporated) U3 ascf5gzg; C:\Windows\System32\Drivers\ascf5gzg.sys [0 ] (Advanced Micro Devices) <==== UWAGA (zerobajtowy plik/folder) S3 cpuz136; \??\C:\windows\TEMP\cpuz136\cpuz136_x64.sys [X] S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-08-12 19:48 - 2016-08-12 19:48 - 00026732 _____ C:\Users\pcc\Downloads\FRST.txt 2016-08-12 19:19 - 2016-08-12 19:19 - 02393600 _____ (Farbar) C:\Users\pcc\Downloads\FRST64.exe 2016-08-12 19:16 - 2016-08-12 19:16 - 00114192 _____ C:\Users\pcc\AppData\Local\GDIPFONTCACHEV1.DAT 2016-08-12 19:14 - 2016-08-12 19:14 - 00424944 _____ C:\windows\system32\FNTCACHE.DAT 2016-08-11 17:41 - 2016-08-11 18:02 - 00000000 ____D C:\Program Files (x86)\DLL Suite 2016-08-11 17:30 - 2016-08-11 17:30 - 00000000 ____D C:\Log 2016-08-11 17:06 - 2016-08-11 17:06 - 00000000 ____D C:\_OTL 2016-08-11 16:23 - 2016-08-12 19:48 - 00000000 ____D C:\FRST 2016-08-11 15:15 - 2016-08-11 15:15 - 00000000 ____D C:\Users\pcc\AppData\Roaming\KSafe 2016-08-11 15:15 - 2016-08-11 15:15 - 00000000 ____D C:\ProgramData\KSafe 2016-08-11 15:14 - 2016-08-11 15:14 - 00000000 ____D C:\Program Files (x86)\DllTool 2016-08-11 14:50 - 2016-08-11 14:58 - 00001652 _____ C:\windows\system32\ASOROSet.bin 2016-08-11 14:50 - 2016-08-11 14:50 - 00000000 ____D C:\windows\system32\config\RCCBakup 2016-08-09 15:14 - 2016-08-09 15:14 - 00000000 ____D C:\Users\pcc\Documents\My Games 2016-08-09 15:11 - 2016-08-09 15:11 - 00000793 _____ C:\Users\pcc\Desktop\Farming Simulator 15 Gold Edition.lnk 2016-08-09 15:11 - 2016-08-09 15:11 - 00000000 ____D C:\windows\SysWOW64\directx 2016-08-08 23:04 - 2016-08-08 23:04 - 00000992 _____ C:\Users\pcc\Desktop\NFS13.exe — skrót.lnk 2016-08-08 21:50 - 2016-04-17 11:05 - 00262144 _____ (AHMED CORPORATION) C:\windows\Sys32V.exe 2016-08-08 21:39 - 2016-08-08 21:39 - 00000000 ____D C:\Users\pcc\Documents\Criterion Games 2016-08-08 21:38 - 2016-08-08 21:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Games 2016-08-08 21:17 - 2016-08-08 21:17 - 00000000 ____D C:\Users\pcc\Documents\Inventor Server SDK ACAD 2014 2016-08-08 21:12 - 2016-08-08 21:12 - 00000000 ____D C:\Program Files (x86)\VID_0e8f&PID_0003 2016-08-07 11:54 - 2016-08-12 19:26 - 00000930 _____ C:\windows\Tasks\Adobe Flash Player Updater.job 2016-08-07 11:54 - 2016-08-07 12:26 - 00003868 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater 2016-08-06 21:15 - 2016-08-06 21:15 - 00000000 ____D C:\windows\system32\DVD2 2016-08-06 21:15 - 2016-08-06 21:15 - 00000000 ____D C:\windows\system32\DVD1 2016-07-13 10:15 - 2016-07-11 18:57 - 00390984 _____ (AVAST Software) C:\windows\system32\aswBoot.exe ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-08-12 19:26 - 2013-11-24 18:18 - 00123904 ___SH C:\Users\pcc\Thumbs.db 2016-08-12 19:22 - 2009-07-14 06:45 - 00021200 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-08-12 19:22 - 2009-07-14 06:45 - 00021200 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-08-12 19:16 - 2014-12-06 14:57 - 00000000 ___RD C:\Users\pcc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2016-08-12 19:15 - 2016-05-22 21:33 - 00001044 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-08-12 19:14 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT 2016-08-12 17:32 - 2009-07-14 05:20 - 00000000 ____D C:\windows\inf 2016-08-12 16:54 - 2016-05-22 21:33 - 00001048 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-08-12 16:37 - 2012-07-30 17:53 - 00000000 ____D C:\Program Files (x86)\Opera 2016-08-11 20:51 - 2012-08-01 00:52 - 00000000 ____D C:\Users\pcc\AppData\Local\CrashDumps 2016-08-11 19:21 - 2012-01-12 00:43 - 00740672 _____ C:\windows\system32\perfh015.dat 2016-08-11 19:21 - 2012-01-12 00:43 - 00156214 _____ C:\windows\system32\perfc015.dat 2016-08-11 19:21 - 2009-07-14 07:13 - 01670518 _____ C:\windows\system32\PerfStringBackup.INI 2016-08-11 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\windows\ModemLogs 2016-08-11 19:09 - 2013-10-10 12:56 - 00000920 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1647462393-2480976863-1240803015-1000UA.job 2016-08-11 19:09 - 2013-10-10 12:56 - 00000898 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1647462393-2480976863-1240803015-1000Core.job 2016-08-11 16:08 - 2016-06-10 19:03 - 00000000 ____D C:\Users\pcc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder 2016-08-11 15:58 - 2014-11-25 20:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2016-08-11 14:58 - 2012-07-30 17:34 - 00000000 ____D C:\Users\pcc 2016-08-09 19:59 - 2014-12-07 22:26 - 00000000 ____D C:\windows\pss 2016-08-09 07:56 - 2015-06-09 20:30 - 00000000 ____D C:\Users\pcc\AppData\Roaming\uTorrent 2016-08-08 21:12 - 2012-01-11 09:24 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-08-07 13:37 - 2015-09-05 21:41 - 00000992 _____ C:\windows\Tasks\Adobe Flash Player PPAPI Notifier.job 2016-08-07 12:26 - 2015-09-05 21:41 - 00796352 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2016-08-07 12:26 - 2015-09-05 21:41 - 00142528 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-08-07 11:55 - 2014-10-14 13:46 - 00000000 ____D C:\Users\pcc\AppData\Local\Adobe 2016-08-07 11:54 - 2015-09-05 21:41 - 00003990 _____ C:\windows\System32\Tasks\Adobe Flash Player PPAPI Notifier 2016-08-07 11:54 - 2013-01-11 17:36 - 00000000 ____D C:\windows\system32\Macromed 2016-08-07 11:54 - 2012-01-11 09:39 - 00000000 ____D C:\windows\SysWOW64\Macromed 2016-08-06 19:31 - 2015-09-04 22:18 - 00004180 _____ C:\windows\System32\Tasks\avast! Emergency Update 2016-08-05 22:06 - 2012-08-17 19:29 - 00000000 ____D C:\Users\pcc\kinga 2016-08-05 17:27 - 2016-05-22 21:35 - 00002201 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-08-05 11:52 - 2015-09-04 22:17 - 00292704 _____ (AVAST Software) C:\windows\system32\Drivers\aswvmm.sys 2016-08-05 11:49 - 2015-09-05 15:33 - 00003896 _____ C:\windows\System32\Tasks\Opera scheduled Autoupdate 1441460031 2016-08-01 20:40 - 2012-08-12 20:50 - 00000000 ____D C:\Users\pcc\AppData\Roaming\Media Player Classic 2016-07-29 08:49 - 2016-05-22 21:33 - 00004044 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-07-29 08:49 - 2016-05-22 21:33 - 00003792 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-07-14 10:06 - 2015-09-04 22:17 - 00473592 _____ (AVAST Software) C:\windows\system32\Drivers\aswsp.sys 2016-07-13 10:17 - 2016-07-12 08:20 - 00003966 _____ C:\windows\System32\Tasks\SafeZone scheduled Autoupdate 1468304439 2016-07-13 10:17 - 2015-09-18 19:41 - 00001882 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-04-15 17:36 - 2015-04-15 17:36 - 0000001 _____ () C:\Users\pcc\AppData\Local\llftool.4.40.agreement 2013-01-01 18:04 - 2013-12-06 21:28 - 0007601 _____ () C:\Users\pcc\AppData\Local\Resmon.ResmonCfg 2015-09-04 21:19 - 2015-09-04 21:19 - 0216017 _____ () C:\ProgramData\1441394140.bdinstall.bin 2015-09-04 21:19 - 2015-09-04 21:19 - 0037825 _____ () C:\ProgramData\1441394392.bdinstall.bin 2015-09-04 21:20 - 2015-09-04 21:20 - 0097726 _____ () C:\ProgramData\1441394395.bdinstall.bin 2013-08-22 20:34 - 2013-08-22 20:34 - 0000057 _____ () C:\ProgramData\Ament.ini 2014-11-25 20:40 - 2014-11-25 20:40 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc 2014-12-07 22:54 - 2014-12-07 22:59 - 0000193 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc 2012-01-11 10:52 - 2012-01-11 10:53 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log 2012-01-11 10:45 - 2012-01-11 10:45 - 0000113 _____ () C:\ProgramData\{34FBC7C4-CD31-4D93-A428-0E524EAC4586}.log 2012-01-11 10:49 - 2012-01-11 10:50 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log 2012-01-11 10:46 - 2012-01-11 10:49 - 0000106 _____ () C:\ProgramData\{80E158EA-7181-40FE-A701-301CE6BE64AB}.log 2012-01-11 10:50 - 2012-01-11 10:52 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\windows\system32\wininit.exe => Plik podpisany cyfrowo C:\windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\windows\explorer.exe => Plik podpisany cyfrowo C:\windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\windows\system32\svchost.exe => Plik podpisany cyfrowo C:\windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\windows\system32\services.exe => Plik podpisany cyfrowo C:\windows\system32\User32.dll => Plik podpisany cyfrowo C:\windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\windows\system32\userinit.exe => Plik podpisany cyfrowo C:\windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2014-12-05 19:33 ==================== Koniec FRST.txt ============================