Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 31-08-2016
Uruchomiony przez Tomek (administrator)  TOMEK-KOMPUTER (11-09-2016 12:32:19)
Uruchomiony z C:\Users\Tomek\Downloads
Załadowane profile: Tomek (Dostępne profile: Tomek)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.1.361.0\BBSvc.EXE
(Skype Technologies) C:\Program Files\Skype\Updater\Updater.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Solvusoft Corporation) C:\Program Files\WinThruster\WinThruster.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [NeroCheck] => C:\Windows\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKU\S-1-5-21-1186718744-3189103823-2131972119-1001\...\Run: [Google Update] => C:\Users\Tomek\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc.)
HKU\S-1-5-21-1186718744-3189103823-2131972119-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [3369664 2016-03-01] (Disc Soft Ltd)
HKU\S-1-5-21-1186718744-3189103823-2131972119-1001\...\MountPoints2: G - G:\Setup.exe
HKU\S-1-5-21-1186718744-3189103823-2131972119-1001\...\MountPoints2: H - H:\autorun.exe
HKU\S-1-5-21-1186718744-3189103823-2131972119-1001\...\MountPoints2: {239d72b0-e762-11e5-b653-001b38e370e3} - G:\Setup.exe
HKU\S-1-5-21-1186718744-3189103823-2131972119-1001\...\MountPoints2: {239d72b6-e762-11e5-b653-001b38e370e3} - F:\autorun.exe
HKU\S-1-5-21-1186718744-3189103823-2131972119-1001\...\MountPoints2: {239d7411-e762-11e5-b653-001b38e370e3} - F:\autorun.exe
HKU\S-1-5-21-1186718744-3189103823-2131972119-1001\...\MountPoints2: {26819b7a-b471-11e5-8026-001b38e370e3} - H:\autorun.exe
HKU\S-1-5-21-1186718744-3189103823-2131972119-1001\...\MountPoints2: {4382a8e8-6865-11e6-88c6-001b38e370e3} - F:\autorun.exe
HKU\S-1-5-21-1186718744-3189103823-2131972119-1001\...\MountPoints2: {bb6f7f11-1c31-11e6-b5dc-001b38e370e3} - H:\autorun.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Brak pliku

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 213.241.79.38 192.168.1.248
Tcpip\..\Interfaces\{7626F0B2-A199-4BE9-B53C-D8A41929F739}: [DhcpNameServer] 10.8.0.3 8.8.8.8
Tcpip\..\Interfaces\{C63F2A9D-A811-4FE5-BB3E-88DAB6368EBD}: [DhcpNameServer] 8.8.8.8 213.241.79.38 192.168.1.248

Internet Explorer:
==================
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2016-02-01] (Skype Technologies)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-13] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-07-28] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1186718744-3189103823-2131972119-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Tomek\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-17] (Google Inc.)
FF Plugin HKU\S-1-5-21-1186718744-3189103823-2131972119-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Tomek\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-17] (Google Inc.)

Chrome: 
=======
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.6.703\_platform_specific\win_x86\widevinecdmadapter.dll => Brak pliku
CHR Plugin: (Shockwave Flash) - C:\Users\Tomek\AppData\Local\Google\Chrome\Application\52.0.2743.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Tomek\AppData\Local\Google\Chrome\Application\52.0.2743.116\pdf.dll => Brak pliku
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL => Brak pliku
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL => Brak pliku
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll => Brak pliku
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll => Brak pliku
CHR Plugin: (Google Update) - C:\Users\Tomek\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll => Brak pliku
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll => Brak pliku
CHR Profile: C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-13]
CHR Extension: (Dysk Google) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-16]
CHR Extension: (YouTube) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-13]
CHR Extension: (Google Search) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-16]
CHR Extension: (Avast SafePrice) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-08-17]
CHR Extension: (Dokumenty Google offline) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-08-17]
CHR Extension: (Avast Online Security) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-06-16]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-04]
CHR Extension: (Gmail) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-13]
CHR Extension: (Chrome Media Router) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-17]
CHR Extension: (MP3 Downloader) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pldidnmickidalpaoejffbkgkjfhohoe [2016-05-26]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]
StartMenuInternet: Google Chrome - C:\Users\Tomek\AppData\Local\Google\Chrome\Application\chrome.exe

Opera: 
=======
OPR Extension: (Adblock Plus) - C:\Users\Tomek\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-03-19]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1126080 2016-03-01] (Disc Soft Ltd)
U2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S3 WsAppService; C:\Program Files\Wondershare\WAF\WsAppService.exe [252816 2015-04-30] (Wondershare)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [26168 2016-03-09] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [40504 2016-03-09] (Disc Soft Ltd)
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [Brak podpisu cyfrowego]
S1 qutmipc; C:\Windows\system32\drivers\qutmipc.sys [64872 2016-05-18] (360.cn)
R0 speedfan; C:\Windows\System32\speedfan.sys [24184 2012-12-29] (Almico Software)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [324152 2016-03-09] (Duplex Secure Ltd.)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-09-11 12:32 - 2016-09-11 12:32 - 00010256 _____ C:\Users\Tomek\Downloads\FRST.txt
2016-09-11 12:13 - 2016-09-11 12:32 - 00000000 ____D C:\FRST
2016-09-11 12:13 - 2016-09-11 12:14 - 00000000 ____D C:\Users\Tomek\Downloads\FRST-OlderVersion
2016-08-30 13:46 - 2016-08-30 13:47 - 00000000 ____D C:\Windows\rescache
2016-08-28 22:21 - 2016-07-08 17:22 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-08-28 22:21 - 2016-07-08 17:22 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-08-28 22:21 - 2016-07-08 17:16 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-08-28 22:21 - 2016-07-08 17:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-08-28 22:21 - 2016-07-08 16:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-08-28 22:21 - 2016-07-08 16:53 - 02399232 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-08-28 22:21 - 2016-07-08 16:51 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-08-28 22:21 - 2016-07-08 16:51 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-08-28 22:21 - 2016-07-08 16:51 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-08-28 22:21 - 2016-07-08 16:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-08-28 22:21 - 2016-07-08 16:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-08-28 22:21 - 2016-07-08 16:50 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-08-28 22:21 - 2016-06-25 21:54 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-08-28 22:21 - 2016-06-25 21:53 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-08-28 22:21 - 2016-06-25 21:53 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2016-08-28 22:21 - 2016-06-25 21:53 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2016-08-28 22:21 - 2016-06-25 21:42 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2016-08-28 22:21 - 2016-06-25 21:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2016-08-28 22:21 - 2016-06-25 21:41 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2016-08-28 22:20 - 2016-08-02 16:08 - 00346312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-08-28 22:20 - 2016-08-02 08:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-08-28 22:20 - 2016-08-02 08:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-08-28 22:20 - 2016-08-02 07:54 - 20343808 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-08-28 22:20 - 2016-08-02 07:51 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-08-28 22:20 - 2016-08-02 07:51 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-08-28 22:20 - 2016-08-02 07:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-08-28 22:20 - 2016-08-02 07:51 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-08-28 22:20 - 2016-08-02 07:50 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-08-28 22:20 - 2016-08-02 07:47 - 02286592 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-08-28 22:20 - 2016-08-02 07:45 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-08-28 22:20 - 2016-08-02 07:44 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-08-28 22:20 - 2016-08-02 07:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-08-28 22:20 - 2016-08-02 07:41 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-08-28 22:20 - 2016-08-02 07:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-08-28 22:20 - 2016-08-02 07:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-08-28 22:20 - 2016-08-02 07:41 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-08-28 22:20 - 2016-08-02 07:36 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-08-28 22:20 - 2016-08-02 07:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-08-28 22:20 - 2016-08-02 07:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-08-28 22:20 - 2016-08-02 07:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-08-28 22:20 - 2016-08-02 07:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-08-28 22:20 - 2016-08-02 07:25 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-08-28 22:20 - 2016-08-02 07:24 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-08-28 22:20 - 2016-08-02 07:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-08-28 22:20 - 2016-08-02 07:21 - 04608000 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-08-28 22:20 - 2016-08-02 07:16 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-08-28 22:20 - 2016-08-02 07:15 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-08-28 22:20 - 2016-08-02 07:14 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-08-28 22:20 - 2016-08-02 07:14 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-08-28 22:20 - 2016-08-02 07:14 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-08-28 22:20 - 2016-08-02 07:11 - 13808128 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-08-28 22:20 - 2016-08-02 06:56 - 02393088 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-08-28 22:20 - 2016-08-02 06:53 - 01316352 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-08-28 22:20 - 2016-08-02 06:51 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-08-28 22:20 - 2016-06-25 22:01 - 00037096 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-08-28 22:20 - 2016-06-25 21:53 - 01004544 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-08-28 22:20 - 2016-06-22 15:06 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2016-08-28 22:20 - 2016-06-17 20:23 - 01288192 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-08-28 22:20 - 2016-06-17 20:23 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-08-28 22:20 - 2016-06-17 20:23 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-08-28 22:20 - 2016-06-17 20:23 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-08-28 22:20 - 2016-06-17 20:23 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-08-28 22:20 - 2016-06-17 20:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-08-21 22:18 - 2016-09-11 12:13 - 01747968 _____ (Farbar) C:\Users\Tomek\Downloads\FRST.exe
2016-08-21 22:11 - 2016-08-21 22:12 - 00380928 _____ C:\Users\Tomek\Downloads\ht45ofdr.exe
2016-08-21 21:21 - 2016-08-21 21:21 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\IsolatedStorage
2016-08-21 21:21 - 2016-08-21 21:21 - 00000000 ____D C:\ProgramData\IsolatedStorage
2016-08-21 21:19 - 2016-08-21 21:19 - 00000000 ____D C:\Users\Tomek\AppData\Local\FileViewPro
2016-08-21 21:18 - 2016-08-21 21:18 - 00001005 _____ C:\Users\Public\Desktop\FileViewPro.lnk
2016-08-21 21:17 - 2016-09-11 12:06 - 00000262 _____ C:\Windows\Tasks\WinThruster_DEFAULT.job
2016-08-21 21:17 - 2016-09-02 14:30 - 00000270 _____ C:\Windows\Tasks\WinThruster_UPDATES.job
2016-08-21 21:17 - 2016-08-21 21:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileViewPro
2016-08-21 21:17 - 2016-08-21 21:18 - 00000000 ____D C:\Program Files\FileViewPro
2016-08-21 21:16 - 2016-08-21 21:16 - 00001005 _____ C:\Users\Public\Desktop\WinThruster.lnk
2016-08-21 21:16 - 2016-08-21 21:16 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Solvusoft
2016-08-21 21:16 - 2016-08-21 21:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinThruster
2016-08-21 21:16 - 2016-08-21 21:16 - 00000000 ____D C:\Program Files\WinThruster
2016-08-21 21:16 - 2015-11-25 13:01 - 00019576 _____ (solvusoft) C:\Windows\system32\roboot.exe
2016-08-21 21:14 - 2016-08-21 21:14 - 00000000 ____D C:\Spacekace
2016-08-21 20:30 - 2016-08-21 20:30 - 00001852 _____ C:\Users\Tomek\Desktop\IrfanView Thumbnails.lnk
2016-08-21 20:30 - 2016-08-21 20:30 - 00000972 _____ C:\Users\Tomek\Desktop\IrfanView.lnk
2016-08-21 20:30 - 2016-08-21 20:30 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2016-08-21 20:30 - 2016-08-21 20:30 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\IrfanView
2016-08-21 20:30 - 2016-08-21 20:30 - 00000000 ____D C:\Program Files\IrfanView

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-09-11 12:30 - 2016-06-16 15:24 - 00000000 ____D C:\ProgramData\AVAST Software
2016-09-11 12:30 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-11 12:16 - 2009-07-14 06:34 - 00020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-11 12:16 - 2009-07-14 06:34 - 00020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-11 12:12 - 2015-07-16 01:47 - 00001006 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1186718744-3189103823-2131972119-1001Core.job
2016-09-11 12:08 - 2014-11-13 17:41 - 00000000 ____D C:\Program Files\Opera
2016-09-11 12:07 - 2016-04-09 18:57 - 00000992 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-09-11 12:05 - 2011-11-05 00:34 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1186718744-3189103823-2131972119-1001UA.job
2016-09-11 12:04 - 2015-03-25 21:56 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-08-30 13:46 - 2011-12-04 10:15 - 00000000 ____D C:\Users\Tomek\AppData\Local\ElevatedDiagnostics
2016-08-30 11:51 - 2009-07-14 06:33 - 00404544 _____ C:\Windows\system32\FNTCACHE.DAT
2016-08-30 11:49 - 2014-12-12 12:25 - 00000000 ____D C:\Windows\system32\appraiser
2016-08-30 11:49 - 2009-07-14 10:28 - 00000000 ____D C:\Program Files\Windows Journal
2016-08-30 11:18 - 2013-08-16 07:59 - 00000000 ____D C:\Windows\system32\MRT
2016-08-30 11:17 - 2011-11-05 01:57 - 144884648 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-08-30 00:19 - 2011-11-05 18:52 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Skype
2016-08-30 00:18 - 2011-11-05 18:52 - 00000000 ___RD C:\Program Files\Skype
2016-08-30 00:18 - 2011-11-05 18:51 - 00000000 ____D C:\ProgramData\Skype
2016-08-22 14:39 - 2014-11-26 22:44 - 00000000 ____D C:\Program Files\360
2016-08-21 22:59 - 2016-06-02 13:00 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-08-21 22:54 - 2015-06-26 14:33 - 00000000 ____D C:\Program Files\Common Files\AV
2016-08-21 22:27 - 2011-11-05 01:13 - 00000000 ____D C:\Program Files\Microsoft Office
2016-08-21 22:27 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-08-21 22:22 - 2009-07-14 10:28 - 00000000 ____D C:\Windows\ShellNew
2016-08-21 22:22 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\MSBuild
2016-08-21 22:02 - 2011-11-05 00:33 - 00108816 _____ C:\Users\Tomek\AppData\Local\GDIPFONTCACHEV1.DAT
2016-08-21 21:59 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System
2016-08-21 21:59 - 2009-07-14 04:04 - 00000387 _____ C:\Windows\win.ini
2016-08-21 21:09 - 2011-11-05 00:35 - 00002388 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-08-21 21:09 - 2011-11-05 00:35 - 00002380 _____ C:\Users\Tomek\Desktop\Google Chrome.lnk
2016-08-17 15:59 - 2015-03-25 21:56 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-08-17 15:59 - 2015-03-25 21:56 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

==================== Pliki w katalogu głównym wybranych folderów =======

2013-08-04 13:48 - 2014-11-01 19:14 - 0000214 _____ () C:\Users\Tomek\AppData\Roaming\WB.CFG
2013-07-08 07:22 - 2013-07-08 07:22 - 0000005 _____ () C:\Users\Tomek\AppData\Roaming\WBPU-Q3-TTL.DAT
2013-07-14 08:29 - 2013-08-19 19:05 - 0000005 _____ () C:\Users\Tomek\AppData\Roaming\WBPU-Q5-TTL.DAT
2013-06-26 18:14 - 2013-12-20 10:25 - 0000006 _____ () C:\Users\Tomek\AppData\Roaming\WBPU-TTL.DAT
2012-02-15 22:40 - 2012-02-15 22:40 - 0003584 _____ () C:\Users\Tomek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-11-18 20:30 - 2012-11-18 20:30 - 0000057 _____ () C:\ProgramData\Ament.ini
2013-04-02 10:06 - 2013-04-02 10:10 - 0000655 _____ () C:\ProgramData\hpzinstall.log

Niektóre pliki w TEMP:
====================
C:\Users\Tomek\AppData\Local\Temp\AxSFADownloader.exe
C:\Users\Tomek\AppData\Local\Temp\bitool.dll
C:\Users\Tomek\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Tomek\AppData\Local\Temp\ggdrive-menu.exe
C:\Users\Tomek\AppData\Local\Temp\ggdrive-overlay.exe
C:\Users\Tomek\AppData\Local\Temp\installstats.exe
C:\Users\Tomek\AppData\Local\Temp\Quarantine.exe
C:\Users\Tomek\AppData\Local\Temp\RSSSynchronizer.exe
C:\Users\Tomek\AppData\Local\Temp\rss_chs.dll
C:\Users\Tomek\AppData\Local\Temp\rss_cht.dll
C:\Users\Tomek\AppData\Local\Temp\rss_deu.dll
C:\Users\Tomek\AppData\Local\Temp\rss_enu.dll
C:\Users\Tomek\AppData\Local\Temp\rss_esn.dll
C:\Users\Tomek\AppData\Local\Temp\rss_fra.dll
C:\Users\Tomek\AppData\Local\Temp\rss_ita.dll
C:\Users\Tomek\AppData\Local\Temp\rss_jpn.dll
C:\Users\Tomek\AppData\Local\Temp\rss_nld.dll
C:\Users\Tomek\AppData\Local\Temp\rss_ptb.dll
C:\Users\Tomek\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Tomek\AppData\Local\Temp\sfamcc00002.dll
C:\Users\Tomek\AppData\Local\Temp\sfamcc00003.dll
C:\Users\Tomek\AppData\Local\Temp\sfextra.dll
C:\Users\Tomek\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-08-29 12:12

==================== Koniec  FRST.txt ============================