Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 16-09-2016 Uruchomiony przez Meeshoo (administrator) MEESHOOPC (17-09-2016 09:54:54) Uruchomiony z C:\Users\Meeshoo\Desktop Załadowane profile: Meeshoo (Dostępne profile: Meeshoo) Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe (Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Creative Technology Ltd) C:\Windows\SysWOW64\CtHelper.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Samsung Electronics.) C:\Program Files (x86)\Samsung Magician\Samsung Magician.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5581888 2014-02-24] (ESET) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13636824 2013-07-26] (Realtek Semiconductor) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1841088 2016-09-02] (NVIDIA Corporation) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-03] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation) HKLM-x32\...\Run: [CTHelper] => CTHELPER.EXE HKLM-x32\...\Run: [TP-LINK USB Printer Controller] => C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe [4226048 2012-09-21] () HKU\S-1-5-21-597796690-3441084848-545195656-1000\...\MountPoints2: {16327b54-f017-11e3-8ae9-806e6f6e6963} - G:\ASRSetup.exe HKU\S-1-5-21-597796690-3441084848-545195656-1000\...\MountPoints2: {f5253eeb-f559-11e3-9115-d050990576a2} - H:\iStudio.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0 Tcpip\..\Interfaces\{39AF424D-8690-413B-AFBA-483D1C7089CC}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{70327B69-4943-4320-8140-154516C0A09A}: [DhcpNameServer] 192.168.1.1 0.0.0.0 Internet Explorer: ================== HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Meeshoo\AppData\Roaming\Mozilla\Firefox\Profiles\flepjn2h.default FF Homepage: www.google.pl FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-14] () FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-14] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-03] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-03] (Intel Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-03-22] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-03-22] (NVIDIA Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-06-23] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-06-23] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2011-12-09] (Nullsoft, Inc.) FF Extension: (Classic Theme Restorer) - C:\Users\Meeshoo\AppData\Roaming\Mozilla\Firefox\Profiles\flepjn2h.default\extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2016-08-25] FF Extension: (Firefox Hotfix) - C:\Users\Meeshoo\AppData\Roaming\Mozilla\Firefox\Profiles\flepjn2h.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-09-09] FF Extension: (Adblock Plus) - C:\Users\Meeshoo\AppData\Roaming\Mozilla\Firefox\Profiles\flepjn2h.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-29] FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird FF Extension: (ESET Smart Security Extension) - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2014-06-09] [Brak podpisu cyfrowego] FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird Chrome: ======= CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - E:\Programy\IDM\IDMGCExt.crx ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2014-06-09] (Creative Labs) [Brak podpisu cyfrowego] S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-10-20] (Creative Labs) [Brak podpisu cyfrowego] S3 Creative Dolby Digital Live Pack Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\DDLLicensing.exe [79360 2014-06-09] (Creative Labs) [Brak podpisu cyfrowego] R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-12] (Creative Technology Ltd) [Brak podpisu cyfrowego] R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [1343408 2014-02-24] (ESET) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Brak podpisu cyfrowego] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-03] (Intel Corporation) S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [275752 2008-01-22] (Nero AG) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [457152 2016-09-02] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [457152 2016-09-02] (NVIDIA Corporation) R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-09-02] (NVIDIA Corporation) R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [Brak podpisu cyfrowego] R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2015-12-26] () S2 SkypeUpdate; E:\Programy\Skype\Updater\Updater.exe [315496 2014-12-11] (Skype Technologies) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S3 aspnet_state; %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [X] ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [495376 2013-05-30] (Intel Corporation) R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET) R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [157432 2013-09-17] (ESET) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation) R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-03-14] () S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [164864 2014-06-11] (ITE ) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-03] (Intel Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46016 2016-09-02] (NVIDIA Corporation) R3 RtkBtFilter; C:\Windows\System32\DRIVERS\RtkBtfilter.sys [578264 2014-08-05] (Realtek Semiconductor Corporation) S3 RTL2832UBDA; C:\Windows\SysWOW64\drivers\RTL2832UBDA.sys [238096 2012-05-21] (REALTEK SEMICONDUCTOR Corp.) S3 RTL2832UUSB; C:\Windows\SysWOW64\Drivers\RTL2832UUSB.sys [39016 2011-12-29] (REALTEK SEMICONDUCTOR Corp.) S3 RTL2832U_IRHID; C:\Windows\SysWOW64\DRIVERS\RTL2832U_IRHID.sys [48488 2011-06-13] (Realtek) S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2013-03-12] (Realtek Semiconductor Corporation ) R3 TPLINKUDSMBus; C:\Windows\System32\drivers\TplinkUDSMBus.sys [102688 2012-09-21] (Windows (R) Codename Longhorn DDK provider) S3 TplinkUDSTcpBus; C:\Windows\System32\drivers\TplinkUDSTcpBus.sys [181024 2012-09-21] (Windows (R) Codename Longhorn DDK provider) S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X] S3 ctgame; system32\DRIVERS\ctgame.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-09-17 09:54 - 2016-09-17 09:55 - 00013865 _____ C:\Users\Meeshoo\Desktop\FRST.txt 2016-09-17 01:24 - 2016-09-17 01:24 - 00000000 ____D C:\Users\Public\Documents\Monolith Productions 2016-09-17 00:08 - 2016-09-17 09:54 - 00000000 ____D C:\FRST 2016-09-17 00:07 - 2016-09-17 00:07 - 02399232 _____ (Farbar) C:\Users\Meeshoo\Desktop\FRST64.exe 2016-09-16 21:27 - 2016-09-17 00:31 - 00000000 ____D C:\Users\Meeshoo\Desktop\Cyber Tarcza Orange infekcja 2016-09-15 18:18 - 2016-09-15 18:18 - 00003838 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2016-09-15 18:18 - 2016-09-15 18:18 - 00003838 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2016-09-15 18:18 - 2016-09-15 18:18 - 00003788 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2016-09-15 18:18 - 2016-09-15 18:18 - 00003776 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2016-09-15 18:18 - 2016-09-15 18:18 - 00003540 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2016-09-15 18:18 - 2016-09-02 13:13 - 01841088 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2016-09-15 18:18 - 2016-09-02 13:13 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2016-09-15 18:18 - 2016-09-02 13:13 - 01448384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2016-09-15 18:18 - 2016-09-02 13:13 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2016-09-15 18:18 - 2016-09-02 13:13 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll 2016-09-15 18:18 - 2016-09-02 13:13 - 00104384 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2016-09-15 18:18 - 2016-09-02 13:13 - 00094144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2016-09-15 18:18 - 2016-09-02 13:13 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2016-09-15 18:18 - 2016-09-02 13:03 - 00001951 _____ C:\Windows\NvContainerRecovery.bat 2016-09-15 16:46 - 2016-09-15 16:46 - 00000005 _____ C:\Users\Meeshoo\Desktop\caprica.txt 2016-09-13 21:44 - 2016-09-13 21:44 - 00019104 _____ C:\Users\Meeshoo\Desktop\gate gate.nri 2016-09-13 20:12 - 2016-02-09 15:42 - 00051132 _____ C:\Users\Meeshoo\Desktop\Houdini.2014.Part2.HDTV.x264-TLA.srt 2016-09-13 18:57 - 2016-09-13 19:26 - 00000000 ____D C:\Users\Meeshoo\AppData\Roaming\dvdcss 2016-09-13 18:54 - 2016-09-13 18:54 - 00000000 ____D C:\Users\Meeshoo\Documents\Any Video Converter 2016-09-13 18:54 - 2016-09-13 18:54 - 00000000 ____D C:\Users\Meeshoo\AppData\Roaming\Anvsoft 2016-09-11 12:13 - 2016-09-15 12:48 - 00000000 ____D C:\Users\Meeshoo\Desktop\lol 09.2016 2016-09-10 23:02 - 2016-09-10 23:02 - 00034911 _____ C:\Users\Meeshoo\Documents\Warrenowie i ich sprawy.odt 2016-09-10 13:26 - 2016-09-13 19:59 - 00000000 ____D C:\Users\Meeshoo\Desktop\UZUPEŁNIENIA SERIALOWE 2016-09-09 11:10 - 2016-09-09 11:10 - 00000000 ____D C:\Users\Meeshoo\Dieta 2016-09-08 16:38 - 2016-09-08 17:11 - 00001123 _____ C:\Users\Meeshoo\CDRW.txt 2016-09-08 14:30 - 2016-09-08 14:32 - 00014105 _____ C:\Users\Meeshoo\Desktop\Mount&Blade Warband CENY.ods 2016-09-07 17:51 - 2016-09-07 17:51 - 00067055 _____ C:\Users\Meeshoo\worms armageddon weapons unlocker.zip 2016-09-07 14:04 - 2016-09-13 21:00 - 00028434 _____ C:\Users\Meeshoo\Desktop\Archer.2009.S07E10.HDTV.x264-FLEET[eztv].txt 2016-09-06 23:27 - 2016-09-06 23:44 - 00000000 ____D C:\Users\Meeshoo\Documents\Mount&Blade Warband Savegames 2016-09-06 23:25 - 2016-09-06 23:42 - 00000000 ____D C:\Users\Meeshoo\Documents\Mount&Blade Warband 2016-09-06 23:25 - 2016-09-06 23:27 - 00000000 ____D C:\Users\Meeshoo\AppData\Roaming\Mount&Blade Warband 2016-09-06 16:53 - 2016-09-06 16:50 - 00027106 _____ C:\Users\Meeshoo\Archer.2009.S07E09.HDTV.x264-FLEET.txt 2016-08-28 22:19 - 2016-08-28 23:28 - 00000000 ____D C:\Users\Meeshoo\Documents\Mount&Blade Savegames 2016-08-28 22:18 - 2016-08-29 04:25 - 00000000 ____D C:\Users\Meeshoo\AppData\Roaming\Mount&Blade 2016-08-26 16:27 - 2016-08-26 16:27 - 00000000 ____D C:\ProgramData\Firefly Studios 2016-08-26 16:25 - 2016-08-26 16:28 - 00000000 ____D C:\Users\Meeshoo\Documents\CivCity Rome 2016-08-25 10:32 - 2016-08-25 18:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-08-20 14:39 - 2016-09-10 19:19 - 00000000 ____D C:\Users\Meeshoo\Documents\Dieta Dukana 2016-08-19 10:16 - 2016-08-19 10:16 - 00061277 _____ C:\Users\Meeshoo\Documents\Konspiracyjny szpiegowski mail heh.odt ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-09-17 09:54 - 2014-06-09 18:19 - 00000000 ____D C:\ProgramData\NVIDIA 2016-09-17 09:51 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-09-17 01:22 - 2014-09-01 18:03 - 00576512 ___SH C:\Users\Meeshoo\Documents\Thumbs.db 2016-09-17 01:20 - 2015-12-24 19:35 - 00012968 _____ C:\Users\Meeshoo\Documents\Projektor godziny.ods 2016-09-16 23:04 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2016-09-16 23:02 - 2014-06-09 18:46 - 00000000 ____D C:\Users\Meeshoo\Desktop\Gry 2016-09-16 21:27 - 2014-06-09 18:46 - 00000000 ___RD C:\Users\Meeshoo\Desktop\Programy 2016-09-16 21:15 - 2009-07-14 06:45 - 00022080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-09-16 21:15 - 2009-07-14 06:45 - 00022080 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-09-16 21:13 - 2011-04-12 15:21 - 00751216 _____ C:\Windows\system32\perfh015.dat 2016-09-16 21:13 - 2011-04-12 15:21 - 00162192 _____ C:\Windows\system32\perfc015.dat 2016-09-16 21:13 - 2009-07-14 07:13 - 01703232 _____ C:\Windows\system32\PerfStringBackup.INI 2016-09-16 21:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-09-16 13:22 - 2014-06-15 13:40 - 00000000 ____D C:\Users\Meeshoo\Html 2016-09-15 18:27 - 2015-12-22 18:03 - 00000000 ____D C:\Users\Meeshoo\AppData\LocalLow\uTorrent 2016-09-15 18:27 - 2014-06-09 21:02 - 00000000 ____D C:\Users\Meeshoo\AppData\Roaming\uTorrent 2016-09-15 18:18 - 2014-06-09 18:19 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-09-15 18:18 - 2014-06-09 18:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2016-09-15 18:18 - 2014-06-09 18:19 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2016-09-15 18:18 - 2014-06-09 18:09 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2016-09-15 16:38 - 2015-11-09 21:16 - 00000000 ____D C:\Users\Meeshoo\Desktop\do sortu 2016-09-15 16:37 - 2014-06-10 21:02 - 01292288 ___SH C:\Users\Meeshoo\Thumbs.db 2016-09-15 15:49 - 2015-02-23 12:48 - 00000000 ____D C:\Users\Meeshoo\PDF 2016-09-15 10:12 - 2014-06-10 17:40 - 00000000 ____D C:\Users\Meeshoo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2016-09-14 00:11 - 2014-12-25 13:18 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2016-09-13 14:47 - 2016-01-27 23:36 - 00000000 ____D C:\Users\Meeshoo\Documents\Euro Truck Simulator 2 2016-09-11 15:55 - 2014-09-18 15:15 - 00000083 _____ C:\Windows\wa.INI 2016-09-10 19:19 - 2016-06-16 13:15 - 00000000 ____D C:\Users\Meeshoo\Desktop\mp3 do sprawdzenia 2016-09-10 19:18 - 2014-06-09 17:50 - 00000000 ____D C:\Users\Meeshoo 2016-09-10 12:14 - 2015-10-27 19:20 - 00000000 ____D C:\Users\Meeshoo\ZAKUPY 2016-09-08 09:44 - 2014-06-09 22:57 - 00000000 ____D C:\Program Files (x86)\Battle.net 2016-09-04 11:47 - 2014-06-16 18:51 - 00000000 ____D C:\Users\Meeshoo\AppData\Roaming\Intelli-studio 2016-09-03 23:43 - 2014-10-08 15:22 - 00021504 _____ C:\Users\Meeshoo\Documents\URODZINY.xls 2016-09-02 20:41 - 2016-02-13 15:03 - 00000099 _____ C:\Users\Meeshoo\Ładowanie baterii akumulatorka do mychy.txt 2016-09-01 22:24 - 2014-09-08 17:11 - 00003700 _____ C:\Users\Meeshoo\wstrząsy.txt 2016-08-28 16:52 - 2014-06-11 18:26 - 00000000 ____D C:\Users\Meeshoo\Documents\My Games 2016-08-25 22:06 - 2014-06-10 20:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service ==================== Pliki w katalogu głównym wybranych folderów ======= 2014-07-10 22:29 - 2016-09-13 13:31 - 0151552 _____ () C:\Users\Meeshoo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-06-14 14:04 - 2015-06-14 14:04 - 0007605 _____ () C:\Users\Meeshoo\AppData\Local\Resmon.ResmonCfg 2014-11-22 16:51 - 2014-11-22 16:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Pliki do przeniesienia lub usunięcia: ==================== C:\Users\Meeshoo\kmp ustawienia.reg C:\Users\Meeshoo\kmp.reg ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2016-09-15 12:07 ==================== Koniec FRST.txt ============================