Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 30-09-2016
Uruchomiony przez kagera (administrator)  RANCZO (02-10-2016 09:17:03)
Uruchomiony z C:\Users\kagera.RANCZO\Desktop
Załadowane profile: kagera (Dostępne profile: RENATA & fiflek & kagera & aaaaaaaaa & Gość)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: IE)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\perfhost.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
(Microsoft Corporation) C:\Windows\System32\Locator.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Microsoft Corporation) C:\Windows\System32\snmptrap.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe
(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Xerox) C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmdb.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Xerox) C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmpl.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Malware Hunter\mhtray.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(Xerox) C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmW.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Malware Hunter\MalwareHunter.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Windows\ehome\ehrec.exe
(Microsoft Corporation) C:\Windows\ehome\ehprivjob.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_21_0_0_242_ActiveX.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe


==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Toshiba TEMPRO] => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710040 2010-12-08] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba Registration] => C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-08-03] (Toshiba Europe GmbH)
HKLM-x32\...\Run: [StatusAutoRun3010] => C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmpl.exe [4277760 2013-07-30] (Xerox)
HKLM-x32\...\Run: [MalTray] => C:\Program Files (x86)\Glarysoft\Malware Hunter\mhtray.exe [896976 2016-09-19] (Glarysoft Ltd)
HKLM-x32\...\Run: [QHSafeTray] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe [1153448 2016-08-10] ()
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [109824 2016-08-05] (Panda Security, S.L.)
HKLM-x32\...\Run: [3010 RUN] => C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmRun.exe [355840 2013-07-30] (Xerox)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1294712 2010-11-29] (TOSHIBA Corporation)
HKLM\...\Winlogon: [Userinit] C:\windows\SysWOW64\userinit.exe,
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
HKU\S-1-5-20\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
HKU\S-1-5-21-2221224638-1648861996-2806633592-1005\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [43984 2016-09-05] (Glarysoft Ltd)
HKU\S-1-5-18\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  Brak pliku
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  Brak pliku
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} =>  Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} =>  Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} =>  Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} =>  Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  Brak pliku
Startup: C:\Users\aaaaaaaaa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-08-03]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-08-03]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Toshiba Places Icon Utility.lnk [2012-07-15]
ShortcutTarget: Toshiba Places Icon Utility.lnk -> C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (Toshiba)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-08-03]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-08-03]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\kagera.RANCZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2016-10-02]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\kagera.RANCZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2016-10-02]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
BootExecute: autocheck autochk *  

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{83423EC0-D833-4E39-8286-BB0D60BD0458}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2221224638-1648861996-2806633592-1005\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google/
URLSearchHook: HKLM-x32 -> Domyślne = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon64.dll [2016-08-10] (Qihu 360 Software Co., Ltd.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-18] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon.dll [2016-08-10] (Qihu 360 Software Co., Ltd.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-18] (Oracle Corporation)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} -  Brak pliku
Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} -  Brak pliku
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} -  Brak pliku

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_21_0_0_182.dll [2016-03-15] ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [Brak pliku]
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_182.dll [2016-03-15] ()
FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll [2012-07-25] ( )
FF Plugin-x32: @ganymede/MARBLES,version=1.0 -> C:\Program Files (x86)\Ganymede\Plugins\MARBLES\NPMARBLES.dll [2011-07-15] (Ganymede Technologies)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-18] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2014-01-20] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2014-01-20] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-06-27] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-09-30]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-30]
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore => nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor => nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => nie znaleziono

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx <nie znaleziono>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1097488 2016-08-18] (AVG Technologies CZ, s.r.o.)
S3 cmcore; c:\program files (x86)\cmcm\Clean Master\cmcore.exe [315208 2016-09-30] (Kingsoft Corporation)
S3 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2542216 2016-06-10] (ESET)
S3 Everything; C:\Program Files\SecureAge\Everything\Everything.exe [1441792 2014-08-06] () [Brak podpisu cyfrowego]
S3 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [145920 2011-01-21] (HP) [Brak podpisu cyfrowego]
S3 HPSIService; C:\windows\system32\HPSIsvc.exe [124536 2012-12-25] (HP) [Brak podpisu cyfrowego]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Brak podpisu cyfrowego]
S2 KMService; C:\windows\SysWOW64\srvany.exe [8192 2014-08-19] () [Brak podpisu cyfrowego]
S3 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [116632 2012-07-17] ()
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [153096 2016-08-05] (Panda Security, S.L.)
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [86104 2016-07-19] (Panda Security, S.L.)
S3 PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola) [Brak podpisu cyfrowego]
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [48584 2016-08-05] (Panda Security, S.L.)
S2 QHActiveDefense; C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [914344 2016-08-10] (QIHU 360 SOFTWARE CO. LIMITED)
S3 saappsvc; C:\Program Files\SecureAge\Whitelist\saappsvc.exe [957480 2016-09-13] (SecureAge Technology)
S3 SAEverythingServer; C:\Program Files\SecureAge\Everything\EverythingServer.exe [213320 2016-09-13] (SecureAge Technology)
S3 sascansvc; C:\Program Files\SecureAge\AntiVirus\sascansvc.exe [1107360 2016-09-13] (SecureAge Technology)
S3 SAUAVSvc; C:\Program Files\SecureAge\UniversalAV\UniversalAVService.exe [1208800 2016-09-13] (SecureAge Technology)
S3 SecureAPlusService; C:\Program Files\SecureAge\Whitelist\SecureAPlusService.exe [1051216 2016-09-13] (SecureAge Technology)
S3 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 XRNADB; C:\Program Files (x86)\Xerox Office Printing\WorkCentre SSW\PrintingScout\xrksmdb.exe [141824 2013-07-30] (Xerox) [Brak podpisu cyfrowego]
S3 ICM_UpdaterService; C:\Program Files (x86)\SAMSUNG\Samsung Networking Wizard\ICM_Service.exe [X]

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [151784 2016-08-10] (360.cn)
S3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [86248 2016-08-10] (360.cn)
R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [330472 2016-08-10] (360.cn)
S3 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [40520 2016-08-10] (360.cn)
R1 360FsFlt; C:\Windows\System32\DRIVERS\360FsFlt.sys [391392 2016-08-10] (360.cn)
R0 A6DAD69D; C:\Windows\System32\drivers\A6DAD69D.sys [478392 2016-09-29] (Kaspersky Lab ZAO)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [310016 2016-08-23] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [260352 2016-06-01] (AVG Technologies CZ, s.r.o.)
S0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
R1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV64.sys [190696 2016-08-10] (360.cn)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [263336 2016-06-28] (ESET)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [197288 2016-06-28] (ESET)
R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [153248 2016-06-28] (ESET)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [208552 2016-06-28] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [61608 2016-06-28] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [84640 2016-06-28] (ESET)
R1 epp; C:\EEK\bin64\epp.sys [116944 2016-06-30] (Emsisoft Ltd)
S3 FlashUSB; C:\Windows\System32\DRIVERS\FlashUSB.sys [19968 2014-10-13] (Intel Mobile Communications)
R1 GUBootStartup; C:\windows\System32\drivers\GUBootStartup.sys [20160 2016-09-30] (Glarysoft Ltd)
S3 GUMHFilters; C:\Program Files (x86)\Glarysoft\Malware Hunter\Native\winxp_x64\GUMHFilter.sys [25152 2016-09-18] (GlarySoft Ltd)
R1 GUSBootStartup; C:\windows\System32\drivers\GUSBootStartup.sys [20160 2016-09-30] (Glarysoft Ltd)
S3 ksapi64; C:\windows\system32\drivers\ksapi64.sys [56680 2016-09-30] (Kingsoft Corporation)
S3 lskgxrsu; Brak ImagePath
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-11-28] (Marvell Semiconductor, Inc.)
R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [94456 2015-12-04] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [201464 2015-12-04] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [110840 2015-12-04] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [110840 2015-12-04] (Panda Security, S.L.)
R1 NNSNAHSL; C:\Windows\System32\DRIVERS\NNSNAHSL.sys [48912 2015-04-27] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [103160 2015-12-04] (Panda Security, S.L.)
R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [80592 2016-03-14] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [124152 2015-12-04] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [300280 2015-12-04] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [177424 2016-02-17] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [113400 2015-12-04] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [264976 2016-02-17] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [106232 2015-12-04] (Panda Security, S.L.)
R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [171792 2016-08-05] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [127248 2016-08-05] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [205072 2016-08-05] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [131344 2016-08-05] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [144656 2016-08-05] (Panda Security, S.L.)
R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [114960 2016-08-05] (Panda Security, S.L.)
R3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [70360 2016-08-08] (Panda Security, S.L.)
S3 qqusbvid; C:\Windows\System32\Drivers\qqusbvid.sys [73776 2013-11-21] ()
R0 SAAppCtl; C:\Windows\System32\DRIVERS\saappctl.sys [275112 2016-08-25] (SecureAge Technology)
R0 sascan; C:\Windows\System32\DRIVERS\sascan.sys [97488 2016-07-29] (SecureAge Technology)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-10-13] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 TosRfSnd; C:\Windows\System32\drivers\tosrfsnd.sys [63488 2010-04-26] (TOSHIBA Corporation) [Brak podpisu cyfrowego]
S4 AVGIDSHA; system32\DRIVERS\avgidsha.sys [X]
S4 Avgmfx64; system32\DRIVERS\avgmfx64.sys [X]
S4 Avgrkx64; system32\DRIVERS\avgrkx64.sys [X]
S4 Avgtdia; system32\DRIVERS\avgtdia.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-10-02 09:17 - 2016-10-02 09:17 - 00026801 _____ C:\Users\kagera.RANCZO\Desktop\FRST.txt
2016-10-02 09:16 - 2016-10-02 09:17 - 00000000 ____D C:\FRST
2016-10-02 09:12 - 2016-10-02 09:12 - 00380928 _____ C:\Users\kagera.RANCZO\Desktop\jgm7t012.exe
2016-10-02 09:11 - 2016-10-02 09:11 - 02404352 _____ (Farbar) C:\Users\kagera.RANCZO\Desktop\FRST64.exe
2016-10-02 09:02 - 2016-10-02 09:02 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Roaming\PC Suite
2016-10-02 08:36 - 2016-10-02 08:36 - 00117344 _____ C:\Users\fiflek\AppData\Local\GDIPFONTCACHEV1.DAT
2016-10-02 08:35 - 2016-10-02 08:35 - 00487384 _____ C:\windows\system32\FNTCACHE.DAT
2016-10-01 23:45 - 2016-10-01 23:47 - 00000000 ____D C:\Users\fiflek\AppData\Roaming\The Bat! Pwd
2016-10-01 23:45 - 2016-10-01 23:45 - 00001842 _____ C:\Users\fiflek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Bat!.LNK
2016-10-01 23:44 - 2016-10-02 00:13 - 00000980 _____ C:\Users\fiflek\Desktop\The Bat! Pro.lnk
2016-10-01 23:44 - 2016-10-01 23:45 - 00000000 ____D C:\Program Files\The Bat!
2016-10-01 23:44 - 2016-10-01 23:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Bat! Pro
2016-10-01 23:41 - 2016-10-01 23:59 - 00087770 _____ C:\windows\ntbtlog.txt
2016-10-01 23:39 - 2016-10-01 23:39 - 00000020 ___SH C:\Users\Administrator\ntuser.ini
2016-10-01 23:39 - 2016-10-01 23:39 - 00000000 _SHDL C:\Users\Administrator\Ustawienia lokalne
2016-10-01 23:39 - 2016-10-01 23:39 - 00000000 _SHDL C:\Users\Administrator\Szablony
2016-10-01 23:39 - 2016-10-01 23:39 - 00000000 _SHDL C:\Users\Administrator\Moje dokumenty
2016-10-01 23:39 - 2016-10-01 23:39 - 00000000 _SHDL C:\Users\Administrator\Menu Start
2016-10-01 23:39 - 2016-10-01 23:39 - 00000000 _SHDL C:\Users\Administrator\Documents\Moje wideo
2016-10-01 23:39 - 2016-10-01 23:39 - 00000000 _SHDL C:\Users\Administrator\Documents\Moje obrazy
2016-10-01 23:39 - 2016-10-01 23:39 - 00000000 _SHDL C:\Users\Administrator\Documents\Moja muzyka
2016-10-01 23:39 - 2016-10-01 23:39 - 00000000 _SHDL C:\Users\Administrator\Dane aplikacji
2016-10-01 23:39 - 2016-10-01 23:39 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-10-01 23:39 - 2016-10-01 23:39 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Historia
2016-10-01 23:39 - 2016-10-01 23:39 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Dane aplikacji
2016-10-01 23:39 - 2016-10-01 23:39 - 00000000 ____D C:\Users\Administrator
2016-10-01 23:39 - 2014-08-14 23:14 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\TuneUp Software
2016-10-01 23:39 - 2012-07-24 03:03 - 00000000 ____D C:\Users\Administrator\AppData\Local\Microsoft Help
2016-10-01 23:39 - 2010-11-21 09:16 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Media Center Programs
2016-10-01 21:29 - 2016-10-01 23:45 - 00000000 ____D C:\Users\fiflek\Desktop\{ T.h.e B.a.t! P.r.o } 7.1.18 ( PL )(ZAREJESTROWANY )
2016-10-01 21:07 - 2016-10-01 21:07 - 00000000 ____D C:\Users\RENATA\AppData\Roaming\Macromedia
2016-10-01 21:02 - 2016-10-01 21:02 - 00117344 _____ C:\Users\RENATA\AppData\Local\GDIPFONTCACHEV1.DAT
2016-10-01 21:02 - 2016-10-01 21:02 - 00000017 _____ C:\Users\RENATA\AppData\Local\resmon.resmoncfg
2016-10-01 20:55 - 2016-10-01 20:55 - 00000000 ____D C:\Users\RENATA\AppData\Roaming\Panda Security
2016-10-01 20:53 - 2016-10-01 20:53 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Roaming\Panda Security
2016-10-01 20:47 - 2016-10-01 20:50 - 31370624 _____ C:\Users\fiflek\Desktop\{ T.h.e B.a.t! P.r.o } 7.1.18 ( PL )(ZAREJESTROWANY ).rar
2016-10-01 17:54 - 2016-10-01 17:54 - 00000000 _RSHD C:\360SANDBOX
2016-10-01 04:24 - 2016-10-01 04:24 - 00001297 _____ C:\Users\Public\Desktop\Panda Cloud Cleaner.lnk
2016-10-01 04:23 - 2016-10-01 04:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security
2016-09-30 23:59 - 2016-09-30 23:59 - 00000000 ____D C:\Users\fiflek\AppData\Roaming\Panda Security
2016-09-30 23:58 - 2016-10-01 04:23 - 00000000 ____D C:\Program Files (x86)\Panda Security
2016-09-30 23:58 - 2016-10-01 00:00 - 00002204 _____ C:\Users\Public\Desktop\Panda Free Antivirus.lnk
2016-09-30 23:58 - 2016-09-30 23:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Free Antivirus
2016-09-30 22:57 - 2016-09-30 22:57 - 00000000 ____D C:\Users\fiflek\AppData\Roaming\360safe
2016-09-30 22:56 - 2016-10-01 17:53 - 00000000 ____D C:\ProgramData\360safe
2016-09-30 22:56 - 2016-10-01 16:11 - 00000000 ____D C:\Users\fiflek\AppData\LocalLow\360WD
2016-09-30 22:56 - 2016-09-30 22:56 - 00000000 ____D C:\ProgramData\360TotalSecurity
2016-09-30 22:54 - 2016-10-01 15:59 - 00001164 _____ C:\Users\Public\Desktop\360 Total Security.lnk
2016-09-30 22:54 - 2016-10-01 15:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center
2016-09-30 22:54 - 2016-08-10 12:54 - 00391392 _____ (360.cn) C:\windows\system32\Drivers\360fsflt.sys
2016-09-30 22:54 - 2016-08-10 12:54 - 00330472 _____ (360.cn) C:\windows\system32\Drivers\360Box64.sys
2016-09-30 22:54 - 2016-08-10 12:54 - 00190696 _____ (360.cn) C:\windows\system32\Drivers\BAPIDRV64.SYS
2016-09-30 22:54 - 2016-08-10 12:54 - 00151784 _____ (360.cn) C:\windows\system32\Drivers\360AntiHacker64.sys
2016-09-30 22:54 - 2016-08-10 12:54 - 00086248 _____ (360.cn) C:\windows\system32\Drivers\360AvFlt.sys
2016-09-30 22:54 - 2016-08-10 12:54 - 00040520 _____ (360.cn) C:\windows\system32\Drivers\360Camera64.sys
2016-09-30 22:51 - 2016-09-30 22:52 - 32599984 _____ C:\Users\fiflek\Desktop\360TSE_Setup_8.8.0.1020.exe
2016-09-30 22:44 - 2016-09-30 23:59 - 00000000 ____D C:\ProgramData\Panda Security
2016-09-30 22:42 - 2016-09-30 22:42 - 00002243 _____ C:\windows\epplauncher.mif
2016-09-30 22:38 - 2016-10-02 08:07 - 00000000 ____D C:\Users\fiflek\AppData\Local\CrashDumps
2016-09-30 22:26 - 2016-09-30 22:26 - 00000000 ____D C:\Users\fiflek\AppData\Roaming\Macromedia
2016-09-30 22:24 - 2016-09-30 22:24 - 00000330 ____H C:\windows\Tasks\User_Feed_Synchronization-{72E5A118-2F9C-4F6F-B3EC-21463E162991}.job
2016-09-30 21:18 - 2016-09-30 21:18 - 00028672 _____ C:\windows\system32\config\software.gu
2016-09-30 21:15 - 2016-09-18 10:59 - 00035792 _____ (Glarysoft Ltd) C:\windows\system32\RegBootDefrag.exe
2016-09-30 21:03 - 2016-10-01 20:53 - 00117344 _____ C:\Users\kagera.RANCZO\AppData\Local\GDIPFONTCACHEV1.DAT
2016-09-30 20:57 - 2016-09-30 06:49 - 00969184 _____ (AVAST Software) C:\windows\system32\Drivers\asw175C.tmp
2016-09-30 20:57 - 2016-09-30 06:49 - 00513632 _____ (AVAST Software) C:\windows\system32\Drivers\asw1D2B.tmp
2016-09-30 20:57 - 2016-09-29 12:43 - 00037144 _____ (AVAST Software) C:\windows\system32\Drivers\asw1642.tmp
2016-09-30 20:57 - 2016-09-29 11:58 - 00292704 _____ (AVAST Software) C:\windows\system32\Drivers\asw1DC8.tmp
2016-09-30 20:57 - 2016-09-29 11:58 - 00163416 _____ (AVAST Software) C:\windows\system32\Drivers\asw200A.tmp
2016-09-30 20:57 - 2016-09-29 11:58 - 00108816 _____ (AVAST Software) C:\windows\system32\Drivers\asw1C2F.tmp
2016-09-30 20:57 - 2016-09-29 11:58 - 00103064 _____ (AVAST Software) C:\windows\system32\Drivers\asw18F3.tmp
2016-09-30 20:57 - 2016-09-29 11:58 - 00074544 _____ (AVAST Software) C:\windows\system32\Drivers\asw1CAD.tmp
2016-09-30 20:57 - 2016-09-29 11:58 - 00037656 _____ (AVAST Software) C:\windows\system32\Drivers\asw1BC1.tmp
2016-09-30 20:42 - 2016-09-30 20:43 - 00000000 ___HD C:\$GlaryQuarantine
2016-09-30 10:58 - 2016-09-30 10:58 - 00000000 ____D C:\Users\RENATA\AppData\Local\CEF
2016-09-30 10:54 - 2016-09-30 06:34 - 00082936 _____ (AVAST Software) C:\windows\system32\Drivers\aswHdsKe.sys
2016-09-30 10:50 - 2016-09-30 16:49 - 00000000 ____D C:\Users\RENATA\AppData\Roaming\GlarySoft
2016-09-30 10:50 - 2016-09-30 10:50 - 00000000 ____D C:\Users\RENATA\AppData\Roaming\SecureAge Technology
2016-09-30 10:50 - 2016-09-30 10:50 - 00000000 ____D C:\Users\RENATA\AppData\Roaming\AVAST Software
2016-09-30 10:50 - 2016-09-30 10:50 - 00000000 ____D C:\Users\RENATA\AppData\Local\{46749922-1A74-464D-AA86-9FDBD20748DA}
2016-09-30 10:21 - 2016-09-30 10:21 - 00000000 ____D C:\Users\fiflek\AppData\Roaming\SecureAge Technology
2016-09-30 10:19 - 2016-09-30 10:19 - 00000000 ____D C:\Users\fiflek\AppData\Local\ESET
2016-09-30 07:16 - 2016-09-30 07:16 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Roaming\SecureAge Technology
2016-09-30 06:57 - 2016-09-30 21:20 - 00000000 ____D C:\Users\fiflek\AppData\Roaming\GlarySoft
2016-09-30 06:56 - 2016-10-02 09:12 - 07195134 _____ C:\windows\system32\Drivers\whitelist2.sa
2016-09-30 06:51 - 2016-09-30 06:51 - 00001933 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-09-30 06:51 - 2016-09-30 06:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-09-30 06:48 - 2016-09-30 06:48 - 00044952 _____ () C:\windows\system32\Drivers\staport.sys
2016-09-30 06:45 - 2016-09-30 06:45 - 17408375 _____ C:\windows\system32\scan.db
2016-09-30 06:39 - 2016-09-30 06:39 - 00081768 _____ (Kingsoft Corporation) C:\windows\system32\Drivers\ksapi.sys
2016-09-30 06:39 - 2016-09-30 06:39 - 00056680 _____ (Kingsoft Corporation) C:\windows\system32\Drivers\ksapi64.sys
2016-09-30 06:39 - 2016-09-30 06:39 - 00001081 _____ C:\Users\Public\Desktop\Clean Master.lnk
2016-09-30 06:39 - 2016-09-30 06:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clean Master
2016-09-30 06:39 - 2016-09-30 06:39 - 00000000 ____D C:\ProgramData\Kingsoft
2016-09-30 06:39 - 2016-09-30 06:39 - 00000000 ____D C:\ProgramData\cmcm
2016-09-30 06:39 - 2016-09-30 06:39 - 00000000 ____D C:\Program Files (x86)\cmcm
2016-09-30 06:34 - 2016-09-30 06:34 - 00000000 ____D C:\Program Files (x86)\GUM46C.tmp
2016-09-30 06:34 - 2016-09-29 11:58 - 00391496 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2016-09-30 06:27 - 2016-09-30 06:27 - 00000000 ____D C:\ProgramData\Shared Space
2016-09-30 06:27 - 2016-09-30 06:27 - 00000000 ____D C:\ProgramData\Comodo
2016-09-30 06:25 - 2016-09-30 06:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SecureAge
2016-09-30 06:25 - 2016-09-30 06:25 - 00000000 ____D C:\ProgramData\SecureAge Technology
2016-09-30 06:25 - 2016-09-30 06:25 - 00000000 ____D C:\ProgramData\ClamAV
2016-09-30 06:25 - 2016-09-30 06:25 - 00000000 ____D C:\Program Files\SecureAge
2016-09-30 06:21 - 2016-10-01 15:51 - 00000000 __SHD C:\ProgramData\360Quarant
2016-09-30 06:21 - 2016-09-30 06:21 - 00000000 __SHD C:\$360Section
2016-09-30 06:10 - 2016-09-30 06:10 - 00000000 ____D C:\Program Files (x86)\360
2016-09-30 05:48 - 2016-09-30 05:55 - 00000000 ____D C:\ProgramData\Glarysoft
2016-09-30 05:48 - 2016-09-30 05:48 - 00020160 _____ (Glarysoft Ltd) C:\windows\system32\Drivers\GUSBootStartup.sys
2016-09-30 05:48 - 2016-09-30 05:48 - 00002221 _____ C:\GUDownLoaddebug.txt
2016-09-30 05:48 - 2016-09-30 05:48 - 00001239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malware Hunter.lnk
2016-09-30 05:48 - 2016-09-30 05:48 - 00001227 _____ C:\Users\Public\Desktop\Malware Hunter.lnk
2016-09-30 05:48 - 2016-09-30 05:48 - 00001107 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2016-09-30 05:48 - 2016-09-30 05:48 - 00001095 _____ C:\Users\Public\Desktop\Glary Utilities 5.lnk
2016-09-30 05:48 - 2016-09-30 05:48 - 00000270 _____ C:\windows\Tasks\GMHSkipUAC.job
2016-09-30 05:48 - 2016-09-30 05:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glarysoft
2016-09-30 05:48 - 2016-09-30 05:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2016-09-30 05:48 - 2016-09-30 05:48 - 00000000 ____D C:\Program Files (x86)\Glarysoft
2016-09-30 05:47 - 2016-10-01 23:17 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 5
2016-09-30 05:47 - 2016-09-30 07:16 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Roaming\GlarySoft
2016-09-30 05:47 - 2016-09-30 05:47 - 00020160 _____ (Glarysoft Ltd) C:\windows\system32\Drivers\GUBootStartup.sys
2016-09-30 05:47 - 2016-09-30 05:47 - 00000346 _____ C:\windows\Tasks\GlaryInitialize 5.job
2016-09-30 05:47 - 2016-09-30 05:47 - 00000250 _____ C:\windows\Tasks\GU5SkipUAC.job
2016-09-30 05:47 - 2016-09-30 05:47 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Roaming\DiskDefrag
2016-09-30 05:45 - 2016-09-30 05:50 - 193726640 _____ (SecureAge Technology) C:\Users\kagera.RANCZO\Downloads\SecureAPlusSetup_v4.3.2.exe
2016-09-30 05:41 - 2016-09-30 05:42 - 32599984 _____ C:\Users\kagera.RANCZO\Downloads\360TSE_Setup_8.8.0.1020.exe
2016-09-30 05:37 - 2016-09-30 05:37 - 04443608 _____ (Avira Operations GmbH & Co. KG) C:\Users\kagera.RANCZO\Downloads\avira_en_av_57edddda4734a__ws.exe
2016-09-30 05:36 - 2016-09-30 05:37 - 71955456 _____ (COMODO) C:\Users\kagera.RANCZO\Downloads\cispremium_only_installer.exe
2016-09-30 05:34 - 2016-09-30 05:34 - 06253648 _____ (AVAST Software) C:\Users\kagera.RANCZO\Downloads\avast_free_antivirus_setup_online.exe
2016-09-30 05:27 - 2016-09-30 05:27 - 16412192 _____ C:\Users\kagera.RANCZO\Downloads\gu5setup.exe
2016-09-30 05:27 - 2016-09-30 05:27 - 05767600 _____ (Kingsoft Corporation) C:\Users\kagera.RANCZO\Downloads\cleanmaster_12_1.exe
2016-09-30 05:09 - 2016-09-30 05:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-09-30 05:07 - 2016-09-30 05:08 - 22851472 _____ (Malwarebytes ) C:\Users\kagera.RANCZO\Downloads\mbam-setup-2.2.1.1043.exe
2016-09-30 05:06 - 2016-09-30 05:06 - 00524248 _____ (F-Secure Corporation) C:\Users\kagera.RANCZO\Downloads\F-SecureOnlineScanner (1).exe
2016-09-30 05:04 - 2016-09-30 05:04 - 00000833 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-09-30 05:04 - 2016-09-30 05:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-09-30 05:04 - 2016-09-30 05:04 - 00000000 ____D C:\Program Files\CCleaner
2016-09-30 04:58 - 2016-09-30 04:58 - 08244656 _____ (Piriform Ltd) C:\Users\kagera.RANCZO\Downloads\ccsetup522.exe
2016-09-30 04:58 - 2016-09-30 04:58 - 00000000 ____D C:\Program Files (x86)\GUMA7CA.tmp
2016-09-30 04:54 - 2016-09-30 07:13 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Local\FSDART
2016-09-30 04:54 - 2016-09-30 04:54 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Local\F-Secure
2016-09-30 04:51 - 2016-09-30 04:51 - 00524248 _____ (F-Secure Corporation) C:\Users\kagera.RANCZO\Downloads\F-SecureOnlineScanner.exe
2016-09-29 22:12 - 2016-09-29 22:22 - 141783048 _____ C:\Users\kagera.RANCZO\Downloads\drweb-cureit.exe
2016-09-29 22:01 - 2016-09-29 22:01 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Local\ESET
2016-09-29 22:00 - 2016-09-29 22:01 - 06766720 _____ (ESET spol. s r.o.) C:\Users\kagera.RANCZO\Downloads\ESETOnlineScanner_PLK.exe
2016-09-29 21:45 - 2016-09-29 21:45 - 00000000 ____D C:\Users\aaaaaaaaa\AppData\Roaming\Adobe
2016-09-29 21:27 - 2016-09-30 22:12 - 00000000 ____D C:\Users\aaaaaaaaa\Doctor Web
2016-09-29 21:27 - 2016-09-29 21:27 - 00000000 ____D C:\Users\aaaaaaaaa\AppData\Local\Avg
2016-09-29 21:26 - 2016-09-29 21:26 - 00000000 ____D C:\Users\aaaaaaaaa\AppData\Local\ElevatedDiagnostics
2016-09-29 21:24 - 2016-09-29 21:54 - 00000000 ____D C:\Users\aaaaaaaaa
2016-09-29 21:24 - 2016-09-29 21:24 - 00000020 ___SH C:\Users\aaaaaaaaa\ntuser.ini
2016-09-29 21:24 - 2016-09-29 21:24 - 00000000 _SHDL C:\Users\aaaaaaaaa\Ustawienia lokalne
2016-09-29 21:24 - 2016-09-29 21:24 - 00000000 _SHDL C:\Users\aaaaaaaaa\Szablony
2016-09-29 21:24 - 2016-09-29 21:24 - 00000000 _SHDL C:\Users\aaaaaaaaa\Moje dokumenty
2016-09-29 21:24 - 2016-09-29 21:24 - 00000000 _SHDL C:\Users\aaaaaaaaa\Menu Start
2016-09-29 21:24 - 2016-09-29 21:24 - 00000000 _SHDL C:\Users\aaaaaaaaa\Documents\Moje wideo
2016-09-29 21:24 - 2016-09-29 21:24 - 00000000 _SHDL C:\Users\aaaaaaaaa\Documents\Moje obrazy
2016-09-29 21:24 - 2016-09-29 21:24 - 00000000 _SHDL C:\Users\aaaaaaaaa\Documents\Moja muzyka
2016-09-29 21:24 - 2016-09-29 21:24 - 00000000 _SHDL C:\Users\aaaaaaaaa\Dane aplikacji
2016-09-29 21:24 - 2016-09-29 21:24 - 00000000 _SHDL C:\Users\aaaaaaaaa\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-09-29 21:24 - 2016-09-29 21:24 - 00000000 _SHDL C:\Users\aaaaaaaaa\AppData\Local\Historia
2016-09-29 21:24 - 2016-09-29 21:24 - 00000000 _SHDL C:\Users\aaaaaaaaa\AppData\Local\Dane aplikacji
2016-09-29 21:24 - 2014-08-14 23:14 - 00000000 ____D C:\Users\aaaaaaaaa\AppData\Roaming\TuneUp Software
2016-09-29 21:24 - 2012-07-24 03:03 - 00000000 ____D C:\Users\aaaaaaaaa\AppData\Local\Microsoft Help
2016-09-29 21:24 - 2010-11-21 09:16 - 00000000 ____D C:\Users\aaaaaaaaa\AppData\Roaming\Media Center Programs
2016-09-29 20:37 - 2016-09-30 22:12 - 00000000 ____D C:\Users\RENATA\Doctor Web
2016-09-29 20:28 - 2016-09-30 22:31 - 00000000 ____D C:\Users\fiflek\Doctor Web
2016-09-29 20:00 - 2016-09-29 20:24 - 00000175 _____ C:\windows\system32\avgrep.txt
2016-09-29 19:31 - 2016-09-30 22:24 - 00000000 ____D C:\EEK
2016-09-29 19:17 - 2016-09-29 16:04 - 258014008 _____ C:\Users\kagera.RANCZO\Desktop\EmsisoftEmergencyKit.exe
2016-09-29 19:17 - 2016-09-29 15:37 - 141761336 _____ C:\Users\kagera.RANCZO\Desktop\s08p8pf6.exe
2016-09-29 19:16 - 2016-09-30 22:12 - 00000000 ____D C:\Users\kagera.RANCZO\Doctor Web
2016-09-29 19:03 - 2016-09-29 19:03 - 00001098 _____ C:\Users\kagera.RANCZO\Desktop\Odkurzacz.lnk
2016-09-29 19:03 - 2016-09-29 19:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Odkurzacz
2016-09-29 18:55 - 2016-09-29 11:58 - 00969560 _____ (AVAST Software) C:\windows\system32\Drivers\aswsnx.sys.147521094156607
2016-09-29 18:55 - 2016-09-29 11:58 - 00513496 _____ (AVAST Software) C:\windows\system32\Drivers\aswsp.sys.147521094228410
2016-09-29 16:44 - 2016-09-29 16:44 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Roaming\Motorola Mobility
2016-09-29 15:58 - 2016-09-29 15:58 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Local\MFAData
2016-09-29 15:57 - 2016-09-29 15:58 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Local\AvgSetupLog
2016-09-29 15:27 - 2016-09-29 15:27 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Roaming\AVG
2016-09-29 15:27 - 2016-09-29 15:27 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Local\CEF
2016-09-29 15:24 - 2016-09-29 19:03 - 00000000 ____D C:\Program Files (x86)\Odkurzacz
2016-09-29 15:24 - 2016-09-29 15:24 - 06085821 _____ (FranmoSoftware ) C:\Users\kagera.RANCZO\Downloads\odk14.2.0.4492setup.exe
2016-09-29 15:19 - 2016-09-29 15:19 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Roaming\Macromedia
2016-09-29 15:17 - 2016-09-29 15:17 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Roaming\AVAST Software
2016-09-29 15:15 - 2016-09-30 05:59 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Local\Google
2016-09-29 15:15 - 2016-09-29 20:00 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Local\Avg
2016-09-29 15:15 - 2016-09-29 18:50 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Local\TOSHIBA
2016-09-29 15:15 - 2016-09-29 15:16 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Roaming\Toshiba
2016-09-29 15:15 - 2016-09-29 15:15 - 00002270 _____ C:\Users\kagera.RANCZO\Desktop\Google Chrome.lnk
2016-09-29 15:15 - 2016-09-29 15:15 - 00001436 _____ C:\Users\kagera.RANCZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-09-29 15:15 - 2016-09-29 15:15 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Roaming\Adobe
2016-09-29 15:14 - 2016-09-30 21:18 - 00000000 ____D C:\Users\kagera.RANCZO
2016-09-29 15:14 - 2016-09-29 16:44 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Local\VirtualStore
2016-09-29 15:14 - 2016-09-29 15:14 - 00000020 ___SH C:\Users\kagera.RANCZO\ntuser.ini
2016-09-29 15:14 - 2016-09-29 15:14 - 00000000 _SHDL C:\Users\kagera.RANCZO\Ustawienia lokalne
2016-09-29 15:14 - 2016-09-29 15:14 - 00000000 _SHDL C:\Users\kagera.RANCZO\Szablony
2016-09-29 15:14 - 2016-09-29 15:14 - 00000000 _SHDL C:\Users\kagera.RANCZO\Moje dokumenty
2016-09-29 15:14 - 2016-09-29 15:14 - 00000000 _SHDL C:\Users\kagera.RANCZO\Menu Start
2016-09-29 15:14 - 2016-09-29 15:14 - 00000000 _SHDL C:\Users\kagera.RANCZO\Documents\Moje wideo
2016-09-29 15:14 - 2016-09-29 15:14 - 00000000 _SHDL C:\Users\kagera.RANCZO\Documents\Moje obrazy
2016-09-29 15:14 - 2016-09-29 15:14 - 00000000 _SHDL C:\Users\kagera.RANCZO\Documents\Moja muzyka
2016-09-29 15:14 - 2016-09-29 15:14 - 00000000 _SHDL C:\Users\kagera.RANCZO\Dane aplikacji
2016-09-29 15:14 - 2016-09-29 15:14 - 00000000 _SHDL C:\Users\kagera.RANCZO\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-09-29 15:14 - 2016-09-29 15:14 - 00000000 _SHDL C:\Users\kagera.RANCZO\AppData\Local\Historia
2016-09-29 15:14 - 2016-09-29 15:14 - 00000000 _SHDL C:\Users\kagera.RANCZO\AppData\Local\Dane aplikacji
2016-09-29 15:14 - 2014-08-14 23:14 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Roaming\TuneUp Software
2016-09-29 15:14 - 2012-07-24 03:03 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Local\Microsoft Help
2016-09-29 15:14 - 2010-11-21 09:16 - 00000000 ____D C:\Users\kagera.RANCZO\AppData\Roaming\Media Center Programs
2016-09-29 13:59 - 2016-09-29 14:00 - 00000000 ____D C:\KVRT_Data
2016-09-29 13:59 - 2016-09-29 13:59 - 00478392 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\A6DAD69D.sys
2016-09-29 13:49 - 2016-09-29 13:49 - 00002038 _____ C:\Users\Public\Desktop\ESET Ochrona bankowości internetowej.lnk
2016-09-29 13:49 - 2016-09-29 13:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2016-09-29 13:49 - 2016-09-29 13:49 - 00000000 ____D C:\ProgramData\ESET
2016-09-29 13:49 - 2016-09-29 13:49 - 00000000 ____D C:\Program Files\ESET
2016-09-29 13:42 - 2016-09-30 04:56 - 00000000 ____D C:\ProgramData\F-Secure
2016-09-29 13:24 - 2016-09-29 13:24 - 00000000 ____D C:\Users\fiflek\AppData\Local\CEF
2016-09-29 13:15 - 2016-09-29 13:15 - 00000000 ____D C:\Program Files (x86)\GUMBB52.tmp
2016-09-29 13:14 - 2016-09-29 13:14 - 00000000 ____D C:\Users\fiflek\AppData\Roaming\AVAST Software
2016-09-29 12:44 - 2016-09-30 07:13 - 00000000 ____D C:\Program Files\Google
2016-09-29 12:43 - 2016-09-29 12:43 - 00000000 ____D C:\Program Files (x86)\GUMC570.tmp
2016-09-29 11:58 - 2016-09-29 11:58 - 00053208 _____ (AVAST Software) C:\windows\avastSS.scr
2016-09-29 11:56 - 2016-09-29 12:43 - 00000000 ____D C:\ProgramData\AVAST Software
2016-09-29 11:56 - 2016-09-29 12:43 - 00000000 ____D C:\Program Files\AVAST Software
2016-09-29 07:19 - 2016-09-29 07:19 - 00000000 ____D C:\Users\Gość\AppData\Roaming\AVG
2016-09-29 07:10 - 2016-09-29 07:10 - 00000000 ____D C:\Users\Gość\AppData\Roaming\Macromedia
2016-09-29 07:06 - 2016-09-29 07:06 - 00000000 ____D C:\Users\Gość\AppData\Roaming\Adobe
2016-09-23 14:50 - 2016-09-26 20:38 - 00000000 ____D C:\Users\fiflek\Desktop\Nowy folder (3)
2016-09-17 18:12 - 2016-09-29 13:00 - 00000000 ____D C:\Program Files (x86)\ipla
2016-09-17 18:12 - 2016-09-17 18:12 - 01700352 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdiplus.dll
2016-09-17 18:12 - 2016-09-17 18:12 - 01060864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfc71.dll
2016-09-17 18:12 - 2016-09-17 18:12 - 00000000 ____D C:\ProgramData\RDRM
2016-09-04 12:44 - 2016-09-29 15:08 - 00000000 ____D C:\Users\kagera
2016-09-04 10:34 - 2016-09-04 10:34 - 06085821 _____ (FranmoSoftware ) C:\Users\fiflek\Downloads\odk14.2.0.4492setup.exe
2016-09-04 10:28 - 2016-09-04 10:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-09-04 00:36 - 2016-09-04 01:32 - 00000729 _____ C:\Users\fiflek\Desktop\avgrep.txt
2016-09-04 00:26 - 2016-09-04 00:26 - 00000000 ____D C:\Users\fiflek\AppData\Local\Opera Software
2016-09-03 17:31 - 2016-09-29 21:14 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy.BackupBySpybotPortable
2016-09-03 17:31 - 2016-09-03 17:31 - 00000000 ____D C:\Users\RENATA\Documents\ProcAlyzer Dumps
2016-09-02 17:13 - 2016-09-02 17:13 - 00000000 ____D C:\Users\fiflek\AppData\Local\CNT
2016-09-02 17:07 - 2016-09-04 10:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\nawigacja
2016-09-02 16:58 - 2016-09-30 06:26 - 00000000 ____D C:\ProgramData\Package Cache
2016-09-02 16:48 - 2016-09-02 16:48 - 00000000 ____D C:\Program Files (x86)\CNT

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-10-02 09:13 - 2009-07-14 06:45 - 00025120 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-10-02 09:13 - 2009-07-14 06:45 - 00025120 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-10-02 09:07 - 2011-02-14 11:01 - 12723902 _____ C:\windows\system32\perfh015.dat
2016-10-02 09:07 - 2011-02-14 11:01 - 04397056 _____ C:\windows\system32\perfc015.dat
2016-10-02 09:07 - 2009-07-14 07:13 - 00006268 _____ C:\windows\system32\PerfStringBackup.INI
2016-10-02 09:02 - 2012-07-07 12:06 - 00065536 _____ C:\windows\system32\Ikeext.etl
2016-10-02 09:02 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2016-10-02 09:02 - 2009-07-14 05:20 - 00000000 ____D C:\windows\registration
2016-10-02 08:07 - 2009-07-14 05:20 - 00000000 ____D C:\windows\inf
2016-10-02 08:04 - 2010-11-21 09:16 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-10-02 00:15 - 2009-07-14 05:20 - 00000000 ____D C:\windows\tracing
2016-10-02 00:09 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\Msdtc
2016-10-01 23:47 - 2014-07-26 21:49 - 00000000 ____D C:\Users\fiflek\AppData\Local\ElevatedDiagnostics
2016-10-01 20:58 - 2014-04-24 04:19 - 00000000 __SHD C:\Users\RENATA\AppData\LocalLow\EmieUserList
2016-10-01 20:58 - 2014-04-24 04:18 - 00000000 __SHD C:\Users\RENATA\AppData\LocalLow\EmieSiteList
2016-10-01 15:51 - 2016-04-27 15:58 - 00000000 ___RD C:\Users\fiflek\Desktop\skróty
2016-09-30 22:38 - 2015-05-14 17:51 - 00000000 ____D C:\Program Files (x86)\Opera
2016-09-30 22:36 - 2016-05-02 01:39 - 00000000 _____ C:\Users\fiflek\Desktop\2_Engine_www_file4u_pl_pdf.dpph1z1.partial
2016-09-30 21:18 - 2012-07-03 18:24 - 00000000 ____D C:\Users\RENATA
2016-09-30 21:18 - 2009-07-14 04:34 - 23592960 _____ C:\windows\system32\config\system.gu.bak
2016-09-30 21:18 - 2009-07-14 04:34 - 102760448 _____ C:\windows\system32\config\software.gu.bak
2016-09-30 21:18 - 2009-07-14 04:34 - 00262144 _____ C:\windows\system32\config\security.gu.bak
2016-09-30 21:02 - 2009-07-14 04:34 - 00262144 _____ C:\windows\system32\config\sam.gu.bak
2016-09-30 20:42 - 2014-11-30 09:43 - 00000000 ____D C:\Users\RENATA\AppData\Local\Avg
2016-09-30 20:42 - 2014-10-01 18:29 - 00000000 ____D C:\Users\fiflek\Desktop\marcina
2016-09-30 16:58 - 2013-02-26 21:55 - 00000000 ____D C:\Users\RENATA\AppData\Roaming\TeamViewer
2016-09-30 16:56 - 2014-04-24 04:19 - 00000000 __SHD C:\Users\RENATA\AppData\Local\EmieUserList
2016-09-30 16:56 - 2014-04-24 04:19 - 00000000 __SHD C:\Users\RENATA\AppData\Local\EmieSiteList
2016-09-30 16:56 - 2009-07-14 04:34 - 00524288 _____ C:\windows\system32\config\default.gu.bak
2016-09-30 16:48 - 2013-03-30 00:54 - 00000000 ___DC C:\Users\RENATA\AppData\Local\MigWiz
2016-09-30 11:09 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
2016-09-30 11:03 - 2015-04-26 15:37 - 00000000 ____D C:\Temp
2016-09-30 10:49 - 2012-07-22 21:43 - 00000000 ____D C:\Users\RENATA\Tracing
2016-09-30 07:13 - 2011-08-03 14:01 - 00000000 ____D C:\Program Files (x86)\Google
2016-09-30 07:11 - 2014-07-27 14:48 - 00000000 ___HD C:\$AVG
2016-09-30 07:09 - 2014-07-24 15:39 - 00000000 ____D C:\Users\fiflek\AppData\Local\Google
2016-09-30 07:09 - 2011-08-03 14:01 - 00000000 ____D C:\ProgramData\Google
2016-09-30 07:02 - 2014-07-27 01:41 - 00000000 ____D C:\ProgramData\MFAData
2016-09-30 07:01 - 2015-11-21 17:44 - 00000000 ____D C:\Users\fiflek\AppData\Local\AvgSetupLog
2016-09-30 06:48 - 2015-06-18 12:04 - 00000000 ____D C:\Program Files\Common Files\AV
2016-09-30 06:40 - 2011-08-03 11:12 - 00000000 ____D C:\windows\Panther
2016-09-30 06:40 - 2009-07-14 07:32 - 00000000 ____D C:\windows\Downloaded Program Files
2016-09-30 06:13 - 2009-07-14 05:20 - 00000000 ___HD C:\windows\system32\GroupPolicy
2016-09-30 06:13 - 2009-07-14 05:20 - 00000000 ____D C:\windows\SysWOW64\GroupPolicy
2016-09-30 05:57 - 2013-11-29 15:14 - 00000000 ____D C:\Users\RENATA\Desktop\program do kasy
2016-09-30 05:05 - 2012-07-09 16:35 - 00000000 ____D C:\windows\Minidump
2016-09-30 05:05 - 2009-07-14 05:20 - 00000000 ____D C:\windows\ModemLogs
2016-09-29 20:28 - 2014-07-24 15:20 - 00000000 ____D C:\Users\fiflek
2016-09-29 19:27 - 2016-04-20 01:57 - 00000000 ____D C:\Users\fiflek\AppData\Roaming\Media Player Classic
2016-09-29 12:23 - 2011-08-03 13:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-09-29 09:39 - 2015-05-31 11:24 - 00000000 ____D C:\Users\Gość\AppData\Local\Avg
2016-09-29 06:58 - 2016-01-12 00:23 - 00000000 ____D C:\Users\fiflek\Desktop\renata
2016-09-24 23:09 - 2012-07-12 08:50 - 00000000 ____D C:\Users\fiflek\Desktop\allegro wystawki
2016-09-14 16:41 - 2016-08-03 22:51 - 00000984 _____ C:\Users\Public\Desktop\AVG.lnk
2016-09-14 16:41 - 2015-11-21 17:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-09-04 12:53 - 2012-07-03 18:33 - 00000000 ____D C:\windows\System32\Tasks\Games
2016-09-04 10:19 - 2014-07-28 12:35 - 00001436 _____ C:\Users\fiflek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-09-04 10:07 - 2012-07-22 19:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

==================== Pliki w katalogu głównym wybranych folderów =======

2016-04-03 12:22 - 2016-04-03 12:23 - 0043473 _____ () C:\Program Files (x86)\CMS Setup Log.txt
2013-09-12 10:15 - 2013-09-12 10:15 - 0000057 _____ () C:\ProgramData\Ament.ini

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\windows\explorer.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\windows\system32\services.exe => Plik podpisany cyfrowo
C:\windows\system32\User32.dll => Plik podpisany cyfrowo
C:\windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-10-01 18:39

==================== Koniec  FRST.txt ============================