Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 29-08-2016
Uruchomiony przez Aga (administrator)  AGA-KOMPUTER (30-08-2016 11:31:11)
Uruchomiony z C:\Users\Aga\Desktop
Załadowane profile: Aga (Dostępne profile: Aga)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Nero TuneItUp\ServiceProvider.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
() C:\Program Files (x86)\screenSHU\screenSHU.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(www.BitComet.com) C:\Program Files\BitComet\BitComet.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(www.BitComet.com) C:\Program Files\BitComet\tools\BitCometService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
() C:\Users\Aga\Desktop\zbxp3q0q.exe
(Adobe Systems, Incorporated) C:\Program Files\Adobe\Adobe Photoshop CS6 (64 Bit)\Photoshop.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-19] (Intel Corporation)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [win_en_77] => "C:\Program Files (x86)\win_en_77\win_en_77.exe"
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [204560 2016-08-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [6709008 2016-07-28] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-1974247447-322449879-1910664948-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23375200 2016-07-29] (Google)
HKU\S-1-5-21-1974247447-322449879-1910664948-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1974247447-322449879-1910664948-1000\...\Run: [screenSHU] => C:\Program Files (x86)\screenSHU\screenSHU.exe [2112000 2013-09-04] ()
HKU\S-1-5-21-1974247447-322449879-1910664948-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4289728 2016-04-04] (Disc Soft Ltd)
HKU\S-1-5-21-1974247447-322449879-1910664948-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8894680 2016-08-05] (Piriform Ltd)
HKU\S-1-5-21-1974247447-322449879-1910664948-1000\...\Run: [BitComet] => C:\Program Files\BitComet\BitComet.exe [17553528 2016-07-04] (www.BitComet.com)
HKU\S-1-5-21-1974247447-322449879-1910664948-1000\...\MountPoints2: {5d13c14a-b792-11e5-9091-94de806e4ae5} - G:\SETUP.EXE
HKU\S-1-5-21-1974247447-322449879-1910664948-1000\...\MountPoints2: {5d13c157-b792-11e5-9091-94de806e4ae5} - G:\SETUP.EXE
HKU\S-1-5-21-1974247447-322449879-1910664948-1000\...\MountPoints2: {6476f526-047c-11e6-90cc-94de806e4ae5} - H:\Autorun.exe
HKU\S-1-5-21-1974247447-322449879-1910664948-1000\...\MountPoints2: {6d0c69ef-21a6-11e6-8d89-94de806e4ae5} - F:\Autorun.exe
HKU\S-1-5-21-1974247447-322449879-1910664948-1000\...\MountPoints2: {6d0c69f6-21a6-11e6-8d89-94de806e4ae5} - H:\Autorun.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-01-08] (Microsoft Corporation)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Brak pliku
ShellIconOverlayIdentifiers: [JzShlobj] -> {7B286609-DA97-47E1-AC6B-33B8B4732C95} =>  Brak pliku

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4DE86521-3E65-4DDF-B85C-39592719F10E}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1974247447-322449879-1910664948-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}
HKU\S-1-5-21-1974247447-322449879-1910664948-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com/search?q={searchTerms}
HKU\S-1-5-21-1974247447-322449879-1910664948-1000\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://www.bing.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-28] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-28] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2016-02-29] (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: Profile 1 -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpGlvlf8aTfPGwNZXT-a9p5E7z7oUBD-7Sun3jut6PlOi6hvnCIL9AvxaAHynoknkGyHmhMFJQfDcFDZRfcDVGHeTvoxAiTxb05Evf4_jTr-UDfpIWIptBtr8QulZklyv0Gc5VSv0YBfctRR
CHR StartupUrls: Profile 1 -> "hxxps://www.google.com/"
CHR Plugin: (Shockwave Flash) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\PepperFlash\22.0.0.209\pepflashplayer.dll => Brak pliku
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.903\_platform_specific\win_x86\widevinecdmadapter.dll => Brak pliku
CHR Profile: C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Prezentacje Google) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-06]
CHR Extension: (Dokumenty Google) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-06]
CHR Extension: (Dysk Google) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-06]
CHR Extension: (YouTube) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-06]
CHR Extension: (Adblock Plus) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-08-23]
CHR Extension: (Zaproś Facebooka All Friends Automatycznie) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cjmhellgomfgjiogcglfnbkkmdieacki [2016-07-04]
CHR Extension: (Google Search) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-06]
CHR Extension: (NoFollow) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dfogidghaigoomjdeacndafapdijmiid [2016-08-06]
CHR Extension: (Arkusze Google) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-06]
CHR Extension: (Dokumenty Google offline) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-14]
CHR Extension: (Mogicons.com) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hkdlcejbjnnmjgajjjfenejacioiimpp [2016-08-18]
CHR Extension: (Who Dumped Me?) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hkgeaeoklapomofpcppeiahpnjadbkim [2016-07-04]
CHR Extension: (We Heart It) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\iblenkmcolcdonmlfknbpbgjebabcoae [2016-08-21]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-01-06]
CHR Extension: (Save to Pocket) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2016-08-16]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-01]
CHR Extension: (Gmail) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-06]
CHR Extension: (Chrome Media Router) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-30]
CHR Profile: C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Extension: (Prezentacje Google) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-08-21]
CHR Extension: (Dokumenty Google) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-08-21]
CHR Extension: (Dysk Google) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-08-21]
CHR Extension: (Bitmoji) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bfgdeiadkckfbkeigkoncpdieiiefpig [2016-08-21]
CHR Extension: (YouTube) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-08-21]
CHR Extension: (Archive Poster) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ceakpicibkmdilicebgddflnfbpmcpgd [2016-08-21]
CHR Extension: (Adblock Plus) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-08-21]
CHR Extension: (Arkusze Google) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-08-21]
CHR Extension: (Stylish) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2016-08-21]
CHR Extension: (XKit) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fpfgeeomkfdefkckijiabdbogjkdaecd [2016-08-21]
CHR Extension: (Dokumenty Google offline) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-21]
CHR Extension: (We Heart It) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\iblenkmcolcdonmlfknbpbgjebabcoae [2016-08-21]
CHR Extension: (Tumblr Optimiser) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ilaebdchnmobmcalandfmfmlneeghoag [2016-08-21]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-08-21]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-08-21]
CHR Extension: (Gmail) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-08-21]
CHR Extension: (Chrome Media Router) - C:\Users\Aga\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-21]
CHR HKU\S-1-5-21-1974247447-322449879-1910664948-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [674552 2016-07-28] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5267456 2016-07-28] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1097488 2016-08-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [760024 2016-07-28] (AVG Technologies CZ, s.r.o.)
R3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1443520 2016-04-04] (Disc Soft Ltd)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-05] (Intel Corporation)
R2 PSI_SVC_2_x64; C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2013-09-13] (arvato digital services llc)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 Citdhwa; "C:\Users\Aga\AppData\Roaming\AzigcWig\Geeswu.exe" -cms [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [314112 2016-06-30] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [261376 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [260352 2016-06-01] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [261888 2016-07-19] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [298752 2016-07-12] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-04-17] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-04-17] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-08-18] ()
R2 WinisoCDBus; C:\Windows\System32\drivers\WinisoCDBus.sys [204032 2014-02-26] (WinISO.com)
U0 aswVmm; Brak ImagePath
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
U3 uxriapow; \??\C:\Users\Aga\AppData\Local\Temp\uxriapow.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-08-30 11:30 - 2016-08-30 11:30 - 00000000 ____D C:\Users\Aga\Desktop\FRST-OlderVersion
2016-08-30 11:29 - 2016-08-30 11:29 - 00189108 _____ C:\Users\Aga\Desktop\gmer.txt
2016-08-30 11:10 - 2016-08-30 11:19 - 21838608 _____ C:\Users\Aga\Desktop\20160710_112848.psd
2016-08-30 10:53 - 2016-08-30 10:53 - 00380928 _____ C:\Users\Aga\Desktop\zbxp3q0q.exe
2016-08-30 10:19 - 2016-08-30 10:19 - 01065376 _____ (Google Inc.) C:\Users\Aga\Downloads\ChromeSetup(1).exe
2016-08-29 09:51 - 2016-08-30 11:17 - 00002958 _____ C:\Users\Aga\Desktop\Zaproś Facebooka All Friends Automatycznie.lnk
2016-08-29 09:51 - 2016-08-29 09:51 - 00000000 ____D C:\Users\Aga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome
2016-08-24 15:56 - 2016-08-24 15:56 - 00000000 ____D C:\Windows\System32\Tasks\Nero
2016-08-24 15:55 - 2016-08-24 15:55 - 00002913 _____ C:\Users\Public\Desktop\Nero 2016.lnk
2016-08-24 15:52 - 2016-08-24 15:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2016
2016-08-24 15:50 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2016-08-24 15:49 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2016-08-24 15:49 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2016-08-24 15:48 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2016-08-24 15:48 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2016-08-24 15:42 - 2016-08-30 10:15 - 00000410 _____ C:\Windows\Tasks\Nero TuneItUp PRO (Tray).job
2016-08-24 15:42 - 2016-08-24 15:42 - 00002798 _____ C:\Windows\System32\Tasks\Nero TuneItUp PRO (Tray)
2016-08-24 15:41 - 2016-08-25 17:34 - 00000358 _____ C:\Windows\Tasks\Nero TuneItUp PRO.job
2016-08-24 15:41 - 2016-08-24 15:56 - 00000000 ____D C:\ProgramData\Nero
2016-08-24 15:41 - 2016-08-24 15:56 - 00000000 ____D C:\Program Files (x86)\Nero
2016-08-24 15:41 - 2016-08-24 15:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2016-08-24 15:41 - 2016-08-24 15:41 - 00002742 _____ C:\Windows\System32\Tasks\Nero TuneItUp PRO
2016-08-24 15:41 - 2016-08-24 15:41 - 00001316 _____ C:\Users\Public\Desktop\Optymalizacja 1 kliknięciem.lnk
2016-08-24 15:41 - 2016-08-24 15:41 - 00001270 _____ C:\Users\Public\Desktop\Nero TuneItUp.lnk
2016-08-24 15:41 - 2016-08-24 15:41 - 00000000 ____D C:\ProgramData\simplitec
2016-08-24 15:31 - 2016-08-24 15:31 - 02563536 _____ (Nero AG) C:\Users\Aga\Desktop\Nero2016-03.03.2016_stub_trial.exe
2016-08-24 15:31 - 2016-08-24 15:31 - 00000000 ____D C:\Users\Aga\AppData\Roaming\Nero
2016-08-24 12:17 - 2016-08-30 11:31 - 00022070 _____ C:\Users\Aga\Desktop\FRST.txt
2016-08-24 12:14 - 2016-08-30 11:31 - 00000000 ____D C:\FRST
2016-08-24 12:14 - 2016-08-30 11:30 - 02397696 _____ (Farbar) C:\Users\Aga\Desktop\FRST64.exe
2016-08-22 19:41 - 2016-08-30 11:17 - 00001185 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-08-22 19:41 - 2016-08-22 19:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-08-22 19:39 - 2016-08-22 19:39 - 00242328 _____ C:\Users\Aga\Desktop\Firefox Setup Stub 48.0.1.exe
2016-08-22 19:34 - 2016-08-22 19:34 - 00000812 _____ C:\Users\Public\Desktop\BitComet.lnk
2016-08-22 19:34 - 2016-08-22 19:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)
2016-08-22 19:34 - 2016-08-22 19:34 - 00000000 ____D C:\Program Files\BitComet
2016-08-22 19:33 - 2016-08-22 19:34 - 16187624 ____R C:\Users\Aga\Downloads\BitComet_1.42_setup.exe
2016-08-21 18:00 - 2016-08-30 11:17 - 00002535 _____ C:\Users\Aga\Desktop\Agnes - Chrome.lnk
2016-08-21 17:55 - 2016-08-30 11:17 - 00002535 _____ C:\Users\Aga\Desktop\JAY - Chrome.lnk
2016-08-21 11:50 - 2016-08-21 11:50 - 03784256 _____ C:\Users\Aga\Desktop\adwcleaner.pl 6.000.exe
2016-08-20 13:38 - 2016-08-20 13:43 - 00003644 _____ C:\Windows\system32\ASOROSet.bin
2016-08-20 13:38 - 2016-08-20 13:38 - 00000000 ____D C:\Windows\system32\config\RCCBakup
2016-08-20 12:39 - 2016-08-30 11:17 - 00002471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-08-20 12:39 - 2016-08-30 11:17 - 00002459 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-08-20 12:38 - 2016-08-20 12:38 - 00987728 _____ (Google Inc.) C:\Users\Aga\Downloads\ChromeSetup.exe
2016-08-20 12:37 - 2016-08-30 11:17 - 00001197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-08-20 11:45 - 2016-08-20 11:45 - 00000000 ____D C:\ProgramData\Bitstream
2016-08-19 22:50 - 2016-08-30 10:41 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-08-19 22:50 - 2016-08-19 22:50 - 00001102 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-08-19 22:50 - 2016-08-19 22:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-08-19 22:49 - 2016-08-19 22:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-08-19 22:49 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-08-19 22:49 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-08-19 22:49 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-08-19 14:41 - 2016-08-19 14:41 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-08-18 21:46 - 2016-08-18 21:46 - 00000000 ____D C:\Quarantine
2016-08-18 21:43 - 2016-08-19 14:41 - 00000000 ____D C:\Program Files\Common Files\AV
2016-08-18 21:42 - 2016-08-18 21:42 - 00000000 ____D C:\Users\Aga\AppData\Roaming\TuneUp Software
2016-08-18 21:42 - 2016-08-18 21:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-08-18 21:41 - 2016-08-18 21:41 - 00000000 ___HD C:\$AVG
2016-08-18 21:38 - 2016-08-30 10:17 - 00000000 ____D C:\ProgramData\MFAData
2016-08-18 21:38 - 2016-08-18 21:38 - 00000984 _____ C:\Users\Public\Desktop\AVG.lnk
2016-08-18 21:38 - 2016-08-18 21:38 - 00000000 ____D C:\Users\Aga\AppData\Local\MFAData
2016-08-18 21:38 - 2016-08-18 21:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-08-18 20:58 - 2016-08-18 20:58 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2016-08-18 10:57 - 2016-08-18 10:57 - 00002794 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-08-18 10:57 - 2016-08-18 10:57 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-08-18 10:57 - 2016-08-18 10:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-08-18 10:57 - 2016-08-18 10:57 - 00000000 ____D C:\Program Files\CCleaner
2016-08-18 10:37 - 2016-08-30 10:47 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-08-18 10:37 - 2016-08-30 10:47 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-08-18 10:37 - 2016-08-18 10:42 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-08-18 10:37 - 2016-08-18 10:42 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-08-18 10:20 - 2016-08-18 10:20 - 00000000 ____D C:\Windows\system32\henk
2016-08-18 10:18 - 2016-08-18 10:23 - 07616340 _____ C:\Users\Aga\AppData\Roaming\setup.apk
2016-08-18 10:15 - 2016-02-18 10:10 - 05267952 _____ () C:\Users\Aga\AppData\Roaming\ziptool_wc-9015_setup.exe
2016-08-18 10:14 - 2016-08-20 10:31 - 00000000 ____D C:\Users\Aga\AppData\LocalLow\Company
2016-08-18 10:14 - 2016-08-19 15:00 - 00000000 ____D C:\Users\Aga\AppData\Roaming\Hemkajdoa
2016-08-18 10:14 - 2016-08-18 10:14 - 00000000 ____D C:\Users\Aga\AppData\Local\Tempfolder
2016-08-18 10:14 - 2016-06-30 09:59 - 05267952 _____ () C:\Users\Aga\AppData\Roaming\ziptool_wc-9025_setup.exe
2016-08-18 10:11 - 2016-08-18 10:22 - 00000000 ____D C:\Users\Aga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UC浏览器
2016-08-18 10:11 - 2016-08-18 10:11 - 00000000 ____D C:\Users\Aga\AppData\Local\UCBrowser
2016-08-18 10:10 - 2016-08-18 10:08 - 00001188 _____ C:\Windows\system32\Drivers\etc\hp.bak
2016-08-18 10:08 - 2016-08-30 10:22 - 00000000 ___HD C:\Program Files (x86)\h0jD94E
2016-08-18 10:08 - 2016-08-21 17:57 - 00000000 ____D C:\ProgramData\AVAST Software
2016-08-18 10:08 - 2016-08-18 10:16 - 00001623 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ｇooｇle Ｃhroｍe.lnk
2016-08-18 10:08 - 2016-08-18 10:16 - 00001619 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ｍozilla Ｆireｆox.lnk
2016-08-18 10:07 - 2016-08-18 10:08 - 00000000 ____D C:\Users\Aga\AppData\Local\gapaphsherfiedthozgh
2016-08-17 16:39 - 2016-07-08 17:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-08-17 16:39 - 2016-07-08 17:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-08-15 20:45 - 2016-08-15 20:45 - 00001219 _____ C:\Users\Aga\AppData\Local\recently-used.xbel
2016-08-13 18:04 - 2016-08-13 18:04 - 00000000 ____D C:\Users\Aga\AppData\Local\fontconfig
2016-08-13 18:03 - 2016-08-13 18:03 - 00000000 ____D C:\Users\Aga\AppData\Roaming\inkscape
2016-08-13 18:02 - 2016-08-13 18:02 - 00000895 _____ C:\Users\Public\Desktop\Inkscape 0.91.lnk
2016-08-13 18:01 - 2016-08-13 18:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inkscape 0.91
2016-08-13 18:01 - 2016-08-13 18:02 - 00000000 ____D C:\Program Files\Inkscape
2016-08-10 19:42 - 2016-08-10 19:42 - 00000000 ____D C:\Users\Aga\AppData\Local\Macromedia
2016-08-10 19:12 - 2016-08-10 19:18 - 00000000 ____D C:\Users\Aga\AppData\Local\Mozilla
2016-08-10 19:11 - 2016-08-22 19:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-08-10 12:54 - 2016-08-02 16:54 - 00394440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-08-10 12:54 - 2016-08-02 16:08 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-08-10 12:54 - 2016-08-02 08:54 - 25808384 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-08-10 12:54 - 2016-08-02 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-08-10 12:54 - 2016-08-02 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-08-10 12:54 - 2016-08-02 08:32 - 02894336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-08-10 12:54 - 2016-08-02 08:32 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-08-10 12:54 - 2016-08-02 08:31 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-08-10 12:54 - 2016-08-02 08:31 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-08-10 12:54 - 2016-08-02 08:31 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-08-10 12:54 - 2016-08-02 08:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-08-10 12:54 - 2016-08-02 08:24 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-08-10 12:54 - 2016-08-02 08:23 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-08-10 12:54 - 2016-08-02 08:20 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-08-10 12:54 - 2016-08-02 08:19 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-08-10 12:54 - 2016-08-02 08:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-08-10 12:54 - 2016-08-02 08:18 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-08-10 12:54 - 2016-08-02 08:18 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-08-10 12:54 - 2016-08-02 08:18 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-08-10 12:54 - 2016-08-02 08:11 - 00969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-08-10 12:54 - 2016-08-02 08:08 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-08-10 12:54 - 2016-08-02 08:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-08-10 12:54 - 2016-08-02 08:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-08-10 12:54 - 2016-08-02 07:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-08-10 12:54 - 2016-08-02 07:56 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-08-10 12:54 - 2016-08-02 07:55 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-08-10 12:54 - 2016-08-02 07:54 - 20343808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-08-10 12:54 - 2016-08-02 07:53 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-08-10 12:54 - 2016-08-02 07:51 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-08-10 12:54 - 2016-08-02 07:51 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-08-10 12:54 - 2016-08-02 07:51 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-08-10 12:54 - 2016-08-02 07:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-08-10 12:54 - 2016-08-02 07:51 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-08-10 12:54 - 2016-08-02 07:50 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-08-10 12:54 - 2016-08-02 07:47 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-08-10 12:54 - 2016-08-02 07:45 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-08-10 12:54 - 2016-08-02 07:44 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-08-10 12:54 - 2016-08-02 07:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-08-10 12:54 - 2016-08-02 07:41 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-08-10 12:54 - 2016-08-02 07:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-08-10 12:54 - 2016-08-02 07:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-08-10 12:54 - 2016-08-02 07:40 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-08-10 12:54 - 2016-08-02 07:38 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-08-10 12:54 - 2016-08-02 07:38 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-08-10 12:54 - 2016-08-02 07:37 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-08-10 12:54 - 2016-08-02 07:36 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-08-10 12:54 - 2016-08-02 07:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-08-10 12:54 - 2016-08-02 07:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-08-10 12:54 - 2016-08-02 07:28 - 15412224 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-08-10 12:54 - 2016-08-02 07:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-08-10 12:54 - 2016-08-02 07:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-08-10 12:54 - 2016-08-02 07:25 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-08-10 12:54 - 2016-08-02 07:24 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-08-10 12:54 - 2016-08-02 07:23 - 02868224 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-08-10 12:54 - 2016-08-02 07:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-08-10 12:54 - 2016-08-02 07:21 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-08-10 12:54 - 2016-08-02 07:16 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-08-10 12:54 - 2016-08-02 07:15 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-08-10 12:54 - 2016-08-02 07:14 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-08-10 12:54 - 2016-08-02 07:14 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-08-10 12:54 - 2016-08-02 07:11 - 13808128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-08-10 12:54 - 2016-08-02 07:10 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-08-10 12:54 - 2016-08-02 06:59 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-08-10 12:54 - 2016-08-02 06:56 - 02393088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-08-10 12:54 - 2016-08-02 06:53 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-08-10 12:54 - 2016-08-02 06:51 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-08-10 12:54 - 2016-07-08 17:37 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-08-10 12:54 - 2016-07-08 17:37 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-08-10 12:54 - 2016-07-08 17:32 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-08-10 12:54 - 2016-07-08 17:32 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-08-10 12:54 - 2016-07-08 17:17 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-08-10 12:54 - 2016-07-08 17:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-08-10 12:54 - 2016-07-08 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-08-10 12:54 - 2016-07-08 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-08-10 12:54 - 2016-07-08 17:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-08-10 12:54 - 2016-07-08 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-08-10 12:54 - 2016-07-08 17:16 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-08-10 12:54 - 2016-07-08 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-08-10 12:54 - 2016-07-08 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-08-10 12:54 - 2016-07-08 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-08-10 12:54 - 2016-07-08 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-08-10 12:54 - 2016-07-08 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-08-10 12:54 - 2016-07-08 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-08-10 12:54 - 2016-07-08 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-08-10 12:54 - 2016-07-08 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-08-10 12:54 - 2016-07-08 17:03 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-08-10 12:54 - 2016-07-08 16:57 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-08-10 12:54 - 2016-07-08 16:56 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-08-10 12:54 - 2016-07-08 16:56 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-08-10 12:54 - 2016-07-08 16:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-08-10 12:54 - 2016-07-08 16:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-08-10 12:54 - 2016-07-08 16:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-08-10 12:52 - 2016-07-08 17:01 - 03218944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-07-31 11:21 - 2016-07-31 11:21 - 00000000 ____D C:\Program Files\Common Files\Intel

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-08-30 11:27 - 2016-01-24 21:51 - 00000000 ____D C:\Users\Aga\AppData\Roaming\BitComet
2016-08-30 11:17 - 2016-01-06 14:52 - 00001459 _____ C:\Users\Aga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-08-30 11:01 - 2016-01-25 17:29 - 00000000 ____D C:\Users\Aga\AppData\Local\screenSHU
2016-08-30 10:46 - 2016-07-28 09:57 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-08-30 10:15 - 2016-01-06 15:29 - 00000000 ____D C:\ProgramData\NVIDIA
2016-08-30 10:15 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-08-29 22:03 - 2009-07-14 06:45 - 00010560 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-08-29 22:03 - 2009-07-14 06:45 - 00010560 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-08-29 19:05 - 2016-07-19 17:04 - 00000000 ____D C:\Users\Aga\Desktop\arty
2016-08-29 10:20 - 2016-07-19 15:05 - 00000000 ____D C:\Users\Aga\Desktop\1
2016-08-29 09:37 - 2016-01-06 16:56 - 00000000 ____D C:\Users\Aga\Desktop\aga
2016-08-27 21:28 - 2016-07-28 09:57 - 00000992 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-08-27 11:34 - 2016-07-28 19:47 - 00000000 ____D C:\Users\Aga\Desktop\blog
2016-08-25 17:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-08-25 17:34 - 2009-07-14 06:45 - 05146528 _____ C:\Windows\system32\FNTCACHE.DAT
2016-08-24 15:47 - 2016-01-06 15:28 - 00000000 ____D C:\ProgramData\Package Cache
2016-08-24 15:41 - 2016-01-06 15:02 - 00143360 _____ C:\Users\Aga\AppData\Local\GDIPFONTCACHEV1.DAT
2016-08-21 13:02 - 2016-01-08 23:15 - 00000000 ____D C:\Users\Aga\AppData\Local\ElevatedDiagnostics
2016-08-21 13:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-08-21 11:59 - 2016-01-10 15:47 - 00000000 ____D C:\AdwCleaner
2016-08-20 13:44 - 2016-01-06 14:50 - 00000000 ____D C:\Users\Aga
2016-08-20 12:39 - 2016-01-06 15:11 - 00000000 ____D C:\Program Files (x86)\Google
2016-08-20 12:34 - 2016-01-06 18:05 - 00000000 ____D C:\Users\Aga\Desktop\projekty
2016-08-20 12:31 - 2016-04-17 13:10 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2016-08-20 12:31 - 2016-01-06 14:58 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-08-20 12:31 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-08-20 12:25 - 2016-01-24 22:18 - 00000000 ____D C:\Users\Aga\Desktop\muzyka
2016-08-20 11:13 - 2016-01-06 18:06 - 00000000 ____D C:\Users\Aga\Desktop\książki
2016-08-20 10:46 - 2016-07-20 22:47 - 00000000 ____D C:\Users\Aga\AppData\Roaming\PhotoScape
2016-08-20 10:46 - 2016-04-17 13:05 - 00000000 ____D C:\Users\Aga\AppData\Roaming\DAEMON Tools Lite
2016-08-20 10:46 - 2016-01-06 14:42 - 00000000 ____D C:\Windows\Panther
2016-08-20 10:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\security
2016-08-19 14:49 - 2016-02-07 22:02 - 00000000 ____D C:\Users\Aga\AppData\Local\AvgSetupLog
2016-08-18 21:52 - 2016-01-10 16:43 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-08-18 21:50 - 2016-02-07 22:02 - 00000000 ____D C:\Users\Aga\AppData\Local\Avg
2016-08-18 21:49 - 2016-01-10 16:43 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-08-18 21:43 - 2016-02-07 22:06 - 00000000 ____D C:\Users\Aga\AppData\Roaming\AVG
2016-08-18 21:41 - 2016-02-07 22:03 - 00000000 ____D C:\ProgramData\Avg
2016-08-18 21:41 - 2016-02-07 22:03 - 00000000 ____D C:\Program Files (x86)\AVG
2016-08-18 20:44 - 2016-01-06 18:17 - 00002042 _____ C:\Users\Public\Desktop\Google Slides.lnk
2016-08-18 20:44 - 2016-01-06 18:17 - 00002040 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2016-08-18 20:44 - 2016-01-06 18:17 - 00002030 _____ C:\Users\Public\Desktop\Google Docs.lnk
2016-08-18 20:44 - 2016-01-06 18:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2016-08-18 12:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-08-18 10:35 - 2016-07-28 10:08 - 00000000 ____D C:\Program Files\Common Files\McAfee
2016-08-18 10:35 - 2016-01-06 15:02 - 00000000 ____D C:\Program Files\Intel
2016-08-18 10:19 - 2016-01-06 15:11 - 00000000 ____D C:\Users\Aga\AppData\Local\Apps\2.0
2016-08-15 10:30 - 2016-07-28 10:08 - 00000000 ____D C:\Program Files (x86)\McAfee
2016-08-14 11:51 - 2009-07-14 07:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-08-13 10:06 - 2016-01-06 15:05 - 01696292 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-08-13 10:06 - 2009-07-14 19:55 - 00743808 _____ C:\Windows\system32\perfh015.dat
2016-08-13 10:06 - 2009-07-14 19:55 - 00157290 _____ C:\Windows\system32\perfc015.dat
2016-08-10 21:39 - 2016-01-07 22:28 - 00000000 ____D C:\Windows\system32\MRT
2016-08-10 21:34 - 2016-01-07 22:28 - 147640136 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-08-10 19:12 - 2016-01-06 17:54 - 00000000 ____D C:\Users\Aga\AppData\Roaming\Mozilla
2016-08-05 14:22 - 2016-01-06 18:11 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

==================== Pliki w katalogu głównym wybranych folderów =======

2010-08-28 22:43 - 2010-08-28 22:43 - 0096256 ____N (Google, inc) C:\Users\Aga\AppData\Roaming\AdbWinApi.dll
2010-08-28 22:43 - 2010-08-28 22:43 - 0060928 ____N (Google, inc) C:\Users\Aga\AppData\Roaming\AdbWinUsbApi.dll
2016-05-29 13:30 - 2016-07-14 10:33 - 0000132 _____ () C:\Users\Aga\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
2016-08-18 10:18 - 2016-08-18 10:23 - 7616340 _____ () C:\Users\Aga\AppData\Roaming\setup.apk
2016-01-06 18:54 - 2016-01-10 13:51 - 0000064 _____ () C:\Users\Aga\AppData\Roaming\WB.CFG
2016-08-18 10:15 - 2016-02-18 10:10 - 5267952 _____ () C:\Users\Aga\AppData\Roaming\ziptool_wc-9015_setup.exe
2016-08-18 10:14 - 2016-06-30 09:59 - 5267952 _____ () C:\Users\Aga\AppData\Roaming\ziptool_wc-9025_setup.exe
2016-08-15 20:45 - 2016-08-15 20:45 - 0001219 _____ () C:\Users\Aga\AppData\Local\recently-used.xbel

Niektóre pliki w TEMP:
====================
C:\Users\Aga\AppData\Local\Temp\avguirn_08868555606.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-08-27 11:53

==================== Koniec  FRST.txt ============================