Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 13-10-2016
Uruchomiony przez LOCKERZ (administrator)  BET-MLB (14-10-2016 10:04:15)
Uruchomiony z C:\Users\LOCKERZ\Desktop\Angielski
Załadowane profile: LOCKERZ (Dostępne profile: LOCKERZ & mama & ADMIN & Classic .NET AppPool & DefaultAppPool)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka nie została wykryta!)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

() D:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
() C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe
(Reason Software Company Inc.) C:\Program Files\Reason\Security\rsEngineSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Tunngle.net GmbH) D:\Program Files (x86)\Tunngle\TnglCtrl.exe
(LogMeIn Inc.) D:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(LogMeIn, Inc.) D:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(O&O Software GmbH) D:\Program Files\OO Software\CleverCache\ooccag.exe
() C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_bg.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(O&O Software GmbH) D:\Program Files\OO Software\CleverCache\ooccctrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Tonec Inc.) D:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Thong Nguyen) D:\Program Files (x86)\PowerMenu\PowerMenu.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) D:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(IObit) D:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe
(Panda Security) D:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera_crashreporter.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe
(Reason Software Company Inc.) C:\Program Files\Reason\Security\rsUI.exe
(Opera Software) D:\Program Files (x86)\Opera\40.0.2308.81\opera.exe


==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [ooccctrl.exe] => D:\Program Files\OO Software\CleverCache\ooccctrl.exe [4314440 2009-12-09] (O&O Software GmbH)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565960 2016-09-13] (LogMeIn Inc.)
HKLM\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-3693199113-3486577660-3927935120-1000\...\Run: [Akamai NetSession Interface] => "C:\Users\LOCKERZ\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-3693199113-3486577660-3927935120-1000\...\Run: [IDMan] => D:\Program Files (x86)\Internet Download Manager\IDMan.exe [3903056 2015-05-20] (Tonec Inc.)
HKU\S-1-5-21-3693199113-3486577660-3927935120-1000\...\Run: [DAEMON Tools Lite] => D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-3693199113-3486577660-3927935120-1000\...\Run: [CCleaner Monitoring] => D:\Program Files\CCleaner\CCleaner64.exe [8590760 2015-12-08] (Piriform Ltd)
HKU\S-1-5-21-3693199113-3486577660-3927935120-1000\...\Run: [SHU] => D:\Program Files (x86)\SHU\SHU.exe [1007272 2016-08-09] ()
HKU\S-1-5-21-3693199113-3486577660-3927935120-1000\...\Run: [ChomikBox] => D:\Program Files (x86)\ChomikBox\chomikbox.exe [3939840 2015-12-10] ( )
HKU\S-1-5-21-3693199113-3486577660-3927935120-1000\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-3693199113-3486577660-3927935120-1000\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-3693199113-3486577660-3927935120-1000\...\Policies\Explorer: [NoResolveSearch] 1
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => D:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2014-04-21] (Tonec Inc.)
Startup: C:\Users\LOCKERZ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerMenu.lnk [2015-02-16]
ShortcutTarget: PowerMenu.lnk -> D:\Program Files (x86)\PowerMenu\PowerMenu.exe (Thong Nguyen)
Startup: C:\Users\LOCKERZ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SHU.lnk [2016-07-15]
ShortcutTarget: SHU.lnk -> D:\Program Files (x86)\SHU\SHU.exe ()
GroupPolicy\User: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1AB29958-5B9E-4F92-82B2-81AC839C935E}: [DhcpNameServer] 7.254.254.254
Tcpip\..\Interfaces\{3034573A-783B-49B6-8D7A-48EE9F9A257C}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{32E603AE-AFED-449F-B083-76B94D755143}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{32E603AE-AFED-449F-B083-76B94D755143}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{3C7B7E74-8062-47EE-A6E5-18728C5D5994}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{81B8215F-F9FC-49D6-A0BC-6BD4AA788ACE}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{81B8215F-F9FC-49D6-A0BC-6BD4AA788ACE}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> D:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-05-20] (Internet Download Manager, Tonec Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-07-20] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-20] (Oracle Corporation)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> D:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-05-20] (Internet Download Manager, Tonec Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-20] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-20] (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2012-10-02] (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-10-02] (Skype Technologies S.A.)

FireFox:
========
FF ProfilePath: C:\Users\LOCKERZ\AppData\Roaming\Mozilla\Firefox\Profiles\beeyhxpf.default [2016-10-14]
FF Extension: (Check4Change) - C:\Users\LOCKERZ\AppData\Roaming\Mozilla\Firefox\Profiles\beeyhxpf.default\Extensions\check4change-owner@mozdev.org.xpi [2016-04-09]
FF Extension: (Firefox Hotfix) - C:\Users\LOCKERZ\AppData\Roaming\Mozilla\Firefox\Profiles\beeyhxpf.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-10-02]
FF Extension: (MEGA) - C:\Users\LOCKERZ\AppData\Roaming\Mozilla\Firefox\Profiles\beeyhxpf.default\Extensions\firefox@mega.co.nz.xpi [2016-10-11]
FF Extension: (Test Pilot) - C:\Users\LOCKERZ\AppData\Roaming\Mozilla\Firefox\Profiles\beeyhxpf.default\Extensions\testpilot@labs.mozilla.com.xpi [2016-09-02]
FF Extension: (uBlock Origin) - C:\Users\LOCKERZ\AppData\Roaming\Mozilla\Firefox\Profiles\beeyhxpf.default\Extensions\uBlock0@raymondhill.net.xpi [2016-10-14]
FF Extension: (Flashblock) - C:\Users\LOCKERZ\AppData\Roaming\Mozilla\Firefox\Profiles\beeyhxpf.default\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2016-02-17]
FF Extension: (Cookies Manager+) - C:\Users\LOCKERZ\AppData\Roaming\Mozilla\Firefox\Profiles\beeyhxpf.default\Extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d} [2016-10-02]
FF Extension: (Greasemonkey) - C:\Users\LOCKERZ\AppData\Roaming\Mozilla\Firefox\Profiles\beeyhxpf.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-08-22]
FF HKU\S-1-5-21-3693199113-3486577660-3927935120-1000\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\LOCKERZ\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\LOCKERZ\AppData\Roaming\IDM\idmmzcc5 [2016-10-14] [Brak podpisu cyfrowego]
FF HKU\S-1-5-21-3693199113-3486577660-3927935120-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\LOCKERZ\AppData\Roaming\IDM\idmmzcc5
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_185.dll [2016-10-11] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-20] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-05] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_185.dll [2016-10-11] ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> D:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2012-07-31] (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-20] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-05] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> D:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> D:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2013-12-28] (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-12-19] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-12-19] (NVIDIA Corporation)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer -> D:\Program Files (x86)\TVUPlayer\npTVUAx.dll [Brak pliku]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-26] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-26] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin HKU\S-1-5-21-3693199113-3486577660-3927935120-1000: @acestream.net/acestreamplugin,version=2.2.2-next -> C:\Users\LOCKERZ\AppData\Roaming\ACEStream\player\npace_plugin.dll [Brak pliku]
FF Plugin HKU\S-1-5-21-3693199113-3486577660-3927935120-1000: @citrixonline.com/appdetectorplugin -> C:\Users\LOCKERZ\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2015-02-25] (Citrix Online)
FF Plugin HKU\S-1-5-21-3693199113-3486577660-3927935120-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\LOCKERZ\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3693199113-3486577660-3927935120-1000: tdameritrade.com/thinkorswim -> D:\Program Files (x86)\thinkorswim\npthinkorswim.dll [2015-06-03] (TD Ameritrade)
FF Plugin HKU\S-1-5-21-3693199113-3486577660-3927935120-1000: tdameritrade.com/tossc -> D:\Program Files (x86)\thinkorswim\nptossc.dll [2015-06-03] (TD Ameritrade)
FF Plugin HKU\S-1-5-21-3693199113-3486577660-3927935120-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-05-05] (Ubisoft)
StartMenuInternet: FIREFOX.EXE - D:\Program Files\Mozilla Firefox\firefox.exe

Chrome: 
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://search.babylon.com/?affID=117023&tt=5212_7&babsrc=HP_ss&mntrId=a88b6385000000000000000000000000","hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3374"
CHR Session Restore: Default -> [funkcja włączona]
CHR Profile: C:\Users\LOCKERZ\AppData\Local\Google\Chrome\User Data\Default [2016-10-14]
CHR Extension: (uBlock Origin) - C:\Users\LOCKERZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-10-14]
CHR Extension: (Flamite) - C:\Users\LOCKERZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgobopgcnapcnblkpelgjjblnjjpgejk [2016-10-14]
CHR Extension: (Skype Click to Call) - C:\Users\LOCKERZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-10-14]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\LOCKERZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-10-14]
CHR Extension: (IDM Integration Module) - C:\Users\LOCKERZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2016-10-14]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\LOCKERZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-14]
CHR Extension: (Personal Blocklist (by Google)) - C:\Users\LOCKERZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\nolijncfnkgaikbjbdaogikpmpbdcdef [2016-10-14]
CHR Extension: (Chrome Media Router) - C:\Users\LOCKERZ\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-14]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - D:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-05-20]
CHR HKU\S-1-5-21-3693199113-3486577660-3927935120-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - D:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-05-20]

Opera: 
=======
OPR Extension: (YouTube Center) - C:\Users\LOCKERZ\AppData\Roaming\Opera Software\Opera Stable\Extensions\cdcifocibecgcgigbanojipblimlaoij [2016-09-10]
OPR Extension: (Page Reloader) - C:\Users\LOCKERZ\AppData\Roaming\Opera Software\Opera Stable\Extensions\ihgmkjndkcpofmdijpingloiacjlklco [2014-03-27]
OPR Extension: (uBlock Origin) - C:\Users\LOCKERZ\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2016-10-14]
StartMenuInternet: (HKLM) OperaStable - D:\Program Files (x86)\Opera\Launcher.exe

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-05-04] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego]
R2 DirMngr; D:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] () [Brak podpisu cyfrowego]
S4 FabricHostSvc; C:\Program Files\Windows Fabric\bin\FabricHost.exe [127592 2012-08-31] (Microsoft Corporation)
R2 Hamachi2Svc; D:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [2621448 2016-09-13] (LogMeIn Inc.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4573336 2013-04-07] (INCA Internet Co., Ltd.)
S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 O&O CleverCache; D:\Program Files\OO Software\CleverCache\ooccag.exe [844616 2009-12-09] (O&O Software GmbH)
S3 Origin Client Service; D:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2016-08-24] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2013-08-18] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [103736 2013-08-18] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 rscp; C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe [254232 2016-10-07] ()
R2 rsEngineSvc; C:\Program Files\Reason\Security\rsEngineSvc.exe [89880 2016-09-30] (Reason Software Company Inc.)
S3 st330service; C:\Program Files (x86)/Thomson/ST330/service/st330service.exe [389215 2012-10-09] (THOMSON Telecom Belgium) [Brak podpisu cyfrowego]
S3 SystemExplorerHelpService; D:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [820960 2014-12-20] (Mister Group)
S4 Themes; C:\Windows\system32\themeservice.dll [44544 2012-10-09] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 TunngleService; D:\Program Files (x86)\Tunngle\TnglCtrl.exe [872432 2016-06-23] (Tunngle.net GmbH)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 athrusb; C:\Windows\System32\DRIVERS\athrxusb.sys [559104 2006-12-22] (Atheros Communications, Inc.)
S3 CAM1690; C:\Windows\System32\Drivers\cam1690.sys [211840 2007-11-29] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-11-08] (DT Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [49584 2016-02-17] ()
S3 HWHandSet; C:\Windows\System32\DRIVERS\hw_quusbmdm.sys [223232 2011-10-24] (Huawei Technologies Co., Ltd.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2011-10-24] (Huawei Technologies Co., Ltd.)
R3 leaslayr; C:\Windows\System32\DRIVERS\leaslayr.sys [367104 2012-07-31] (Microsoft Corporation)
S3 massfilter_hs; C:\Windows\system32\drivers\massfilter_hs.sys [20232 2012-06-20] (HandSet Incorporated)
S3 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 NTIOLib_1_0_4; D:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
S3 OSFMount; D:\Program Files\OSFMount\OSFMount.sys [1299384 2014-02-07] (PassMark Software)
S1 prodrv06; C:\Windows\SysWOW64\drivers\prodrv06.sys [51744 2003-09-06] (Protection Technology) [Brak podpisu cyfrowego]
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [62656 2003-09-06] (Protection Technology) [Brak podpisu cyfrowego]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [Brak podpisu cyfrowego]
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2013-07-01] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2013-07-01] ()
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-09-06] (Protection Technology) [Brak podpisu cyfrowego]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-11-08] (Duplex Secure Ltd.)
S3 ssudobex; C:\Windows\System32\DRIVERS\ssudobex.sys [203672 2013-05-02] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [203672 2013-05-02] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ST330; C:\Windows\System32\DRIVERS\st330.sys [47616 2012-10-09] (THOMSON Telecom Belgium)
S3 STBUS; C:\Windows\System32\DRIVERS\stbus.sys [24576 2012-10-09] (THOMSON Telecom Belgium)
S3 STETH; C:\Windows\System32\DRIVERS\steth.sys [58880 2012-10-09] (THOMSON Telecom Belgium)
S3 stppp; C:\Windows\System32\DRIVERS\stppp.sys [54272 2012-10-09] (THOMSON Telecom Belgium)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [39464 2016-04-27] (Tunngle.net GmbH)
U5 UnlockerDriver5; D:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [Brak podpisu cyfrowego]
S3 vncmirror; C:\Windows\System32\DRIVERS\vncmirror.sys [4608 2013-12-06] (RealVNC Ltd.) [Brak podpisu cyfrowego]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
R3 WinRing0_1_2_0; D:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
U3 a4tesldq; C:\Windows\System32\Drivers\a4tesldq.sys [0 ] (Advanced Micro Devices) <==== UWAGA (zerobajtowy plik/folder)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-10-14 09:45 - 2016-10-14 09:45 - 00000000 ____D C:\Users\LOCKERZ\AppData\Roaming\tor
2016-10-14 09:43 - 2016-10-14 09:43 - 00003082 _____ C:\Windows\System32\Tasks\{EC495FB6-A04D-8085-07E5-4A678EBE46D6}
2016-10-14 09:34 - 2016-10-14 09:34 - 03351566 _____ C:\Users\LOCKERZ\AppData\Roaming\tor.exe
2016-10-14 09:29 - 2016-10-14 09:51 - 00000022 _____ C:\Windows\S.dirmngr
2016-10-13 21:15 - 2016-10-14 10:04 - 00000000 ____D C:\FRST
2016-10-07 17:15 - 2016-10-07 17:15 - 00003536 _____ C:\Windows\System32\Tasks\ReasonSecurityScheduledScan
2016-10-07 17:15 - 2016-10-07 17:15 - 00003404 _____ C:\Windows\System32\Tasks\ReasonSecurityStart
2016-10-07 17:15 - 2016-10-07 17:15 - 00000000 ____D C:\ProgramData\Reason
2016-10-07 17:13 - 2016-10-07 17:13 - 06406240 _____ (Reason Software Company Inc.) C:\Users\LOCKERZ\Desktop\reason-core-security-setup.exe
2016-10-07 17:13 - 2016-10-07 17:13 - 00000938 _____ C:\Users\Public\Desktop\Reason Core Security.lnk
2016-10-07 17:13 - 2016-10-07 17:13 - 00000938 _____ C:\ProgramData\Desktop\Reason Core Security.lnk
2016-10-07 17:13 - 2016-10-07 17:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reason Core Security
2016-10-07 17:13 - 2016-10-07 17:13 - 00000000 ____D C:\Program Files\Reason
2016-10-07 17:04 - 2016-10-07 17:06 - 00000000 ____D C:\ProgramData\SystemExplorer
2016-10-07 17:04 - 2016-10-07 17:04 - 00000765 _____ C:\Users\Public\Desktop\System Explorer.lnk
2016-10-07 17:04 - 2016-10-07 17:04 - 00000765 _____ C:\ProgramData\Desktop\System Explorer.lnk
2016-10-07 17:04 - 2016-10-07 17:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Explorer
2016-10-07 17:00 - 2016-10-07 17:01 - 01917528 _____ (Mister Group ) C:\Users\LOCKERZ\Desktop\SystemExplorerSetup.exe
2016-10-07 10:13 - 2016-10-07 10:13 - 00089259 _____ C:\Users\LOCKERZ\Desktop\wydruk (1).pdf
2016-10-03 17:51 - 2016-10-03 17:51 - 00000857 _____ C:\Users\Public\Desktop\Switch to Gaming Mode.lnk
2016-10-03 17:51 - 2016-10-03 17:51 - 00000857 _____ C:\ProgramData\Desktop\Switch to Gaming Mode.lnk
2016-10-03 17:51 - 2016-10-03 17:51 - 00000845 _____ C:\Users\Public\Desktop\Game Booster 3.lnk
2016-10-03 17:51 - 2016-10-03 17:51 - 00000845 _____ C:\ProgramData\Desktop\Game Booster 3.lnk
2016-10-03 17:51 - 2016-10-03 17:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Booster 3
2016-09-30 14:10 - 2016-10-09 09:39 - 00000000 ____D C:\Users\LOCKERZ\Desktop\VFL
2016-09-29 21:31 - 2016-09-30 12:38 - 00002166 _____ C:\Users\LOCKERZ\Desktop\Nowy dokument tekstowy (4).txt
2016-09-25 09:21 - 2016-09-25 09:26 - 00000000 ____D C:\Users\LOCKERZ\Desktop\Fyber
2016-09-25 00:45 - 2016-09-25 00:49 - 143194272 _____ C:\Users\LOCKERZ\Downloads\ff7fj8mo.exe
2016-09-24 20:28 - 2016-09-24 20:28 - 00072272 _____ C:\Users\LOCKERZ\Downloads\WE_plan zajec_Adm I_stac_III_2016_zima.pdf
2016-09-23 21:08 - 2016-09-23 21:09 - 00015783 _____ C:\Users\LOCKERZ\Downloads\power_3x04_3x4_n24_pl_97259.zip
2016-09-23 00:06 - 2016-10-03 23:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Andy
2016-09-22 23:46 - 2016-09-24 23:21 - 00000000 ____D C:\Users\LOCKERZ\AppData\Roaming\Andy
2016-09-22 23:46 - 2016-09-23 01:22 - 00000000 ____D C:\Users\LOCKERZ\Andy
2016-09-21 10:32 - 2016-09-21 10:32 - 01154811 _____ C:\Users\LOCKERZ\Downloads\Scan 2016-09-21 10.31.17.pdf
2016-09-21 10:32 - 2016-09-21 10:32 - 01034047 _____ C:\Users\LOCKERZ\Downloads\Scan 2016-09-21 10.31.38.pdf
2016-09-21 10:28 - 2016-09-21 10:28 - 01571111 _____ C:\Users\LOCKERZ\Downloads\Scan 2016-09-21 10.22.21.pdf
2016-09-17 22:46 - 2016-09-17 22:47 - 01885577 _____ C:\Users\LOCKERZ\Downloads\RussellHobbsIllumina2023056.pdf
2016-09-15 14:51 - 2016-09-15 14:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-10-14 10:04 - 2016-05-11 22:26 - 00000000 ____D C:\Users\LOCKERZ\Desktop\Angielski
2016-10-14 09:59 - 2009-07-14 06:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-10-14 09:59 - 2009-07-14 06:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-10-14 09:53 - 2016-07-01 11:28 - 00000000 ____D C:\Users\LOCKERZ\AppData\Local\SHU
2016-10-14 09:53 - 2015-09-29 12:45 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d08dc890d74bb8.job
2016-10-14 09:52 - 2016-01-01 21:27 - 00000000 ____D C:\Users\LOCKERZ\AppData\Local\LogMeIn Hamachi
2016-10-14 09:52 - 2012-11-29 00:31 - 00000000 ____D C:\Users\LOCKERZ\.gstreamer-0.10
2016-10-14 09:51 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-10-14 09:48 - 2012-10-11 19:57 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-10-14 09:46 - 2012-10-09 22:15 - 00000000 ____D C:\Users\LOCKERZ\AppData\LocalLow\Temp
2016-10-14 09:44 - 2012-11-14 18:57 - 00000000 ____D C:\Windows\pss
2016-10-14 09:38 - 2014-01-09 22:14 - 00000000 ____D C:\Users\LOCKERZ\AppData\Roaming\Massive Media
2016-10-14 09:33 - 2012-11-29 00:31 - 00000000 ____D C:\Users\LOCKERZ\AppData\Local\ChomikBox
2016-10-14 09:31 - 2012-10-10 11:25 - 00000000 ____D C:\Users\LOCKERZ\AppData\Roaming\DMCache
2016-10-14 09:28 - 2015-12-28 15:15 - 00000000 _____ C:\Windows\SysWOW64\Access.dat
2016-10-14 09:25 - 2015-09-29 12:45 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-10-14 09:21 - 2016-04-27 22:13 - 00000000 ____D C:\Users\LOCKERZ\AppData\Roaming\ACEStream
2016-10-14 09:21 - 2013-12-07 01:10 - 00000000 ____D C:\Users\LOCKERZ\AppData\Local\Akamai
2016-10-14 09:19 - 2012-11-08 14:13 - 00000000 ____D C:\Users\LOCKERZ\AppData\LocalLow\Adobe
2016-10-14 09:19 - 2012-10-09 18:39 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2016-10-14 09:18 - 2016-04-27 22:15 - 00000000 ____D C:\Users\LOCKERZ\AppData\Roaming\.ACEStream
2016-10-13 23:57 - 2016-09-10 15:29 - 00000000 ____D C:\Users\LOCKERZ\AppData\Roaming\Telegram Desktop
2016-10-12 15:40 - 2016-02-12 03:43 - 00000992 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-10-11 19:48 - 2016-02-12 03:43 - 00003988 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-10-11 19:48 - 2012-10-11 19:57 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-10-11 19:48 - 2012-10-11 19:57 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-10-11 19:48 - 2012-10-09 18:40 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-10-11 19:48 - 2012-10-09 18:40 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-10-11 19:48 - 2012-10-09 18:40 - 00000000 ____D C:\Windows\system32\Macromed
2016-10-07 17:43 - 2015-07-03 18:26 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-10-07 17:37 - 2013-02-17 02:22 - 00000000 ____D C:\Windows\SysWOW64\FFSJ
2016-10-07 17:37 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Downloaded Program Files
2016-10-06 15:50 - 2015-07-15 10:04 - 00003886 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1385907974
2016-10-04 06:03 - 2016-08-23 10:02 - 00000000 ____D C:\Program Files (x86)\Razer
2016-10-04 02:28 - 2012-10-10 18:53 - 00002254 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-10-03 23:23 - 2015-09-02 19:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SnadBoy's Revelation v2
2016-10-03 23:23 - 2013-01-02 00:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2016-10-03 23:23 - 2012-10-09 22:11 - 00000000 ____D C:\Users\LOCKERZ\AppData\Roaming\uTorrent
2016-10-03 23:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-10-03 23:22 - 2012-11-19 19:18 - 00000000 ____D C:\Users\LOCKERZ\AppData\Local\CrashDumps
2016-10-03 21:09 - 2016-08-23 10:05 - 00000000 ____D C:\Users\LOCKERZ\AppData\Local\Razer
2016-10-03 21:09 - 2016-08-23 10:02 - 00000000 ____D C:\ProgramData\Razer
2016-10-03 17:51 - 2012-10-09 22:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow
2016-10-03 17:51 - 2012-10-09 22:33 - 00000000 ____D C:\Program Files (x86)\ffdshow
2016-10-03 17:30 - 2016-06-01 14:35 - 00000000 ____D C:\Users\LOCKERZ\Desktop\prawo adm
2016-10-01 19:34 - 2013-10-26 14:47 - 00000000 ___RD C:\Users\LOCKERZ\Dysk Google
2016-09-25 15:26 - 2016-06-12 19:05 - 00000000 ____D C:\Users\LOCKERZ\Desktop\GmailNotifierPro
2016-09-25 15:26 - 2012-12-30 15:29 - 00000000 ____D C:\Users\LOCKERZ\Doctor Web
2016-09-25 15:16 - 2016-05-13 16:48 - 00000000 ____D C:\Users\LOCKERZ\AppData\Roaming\Thinstall
2016-09-25 15:00 - 2012-10-09 18:39 - 00000000 ____D C:\Users\LOCKERZ
2016-09-24 23:24 - 2015-07-03 18:26 - 00000838 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-09-24 23:24 - 2015-07-03 18:26 - 00000838 _____ C:\ProgramData\Desktop\Malwarebytes Anti-Malware.lnk
2016-09-24 23:24 - 2015-07-03 18:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-09-24 23:09 - 2010-11-21 14:53 - 01063018 _____ C:\Windows\system32\perfh015.dat
2016-09-24 23:09 - 2010-11-21 14:53 - 00241472 _____ C:\Windows\system32\perfc015.dat
2016-09-24 23:05 - 2013-08-07 14:10 - 00000000 ____D C:\Program Files\Java
2016-09-22 23:58 - 2012-10-22 22:38 - 02509132 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-09-18 11:07 - 2013-02-02 01:11 - 00000000 ____D C:\Users\LOCKERZ\AppData\Roaming\vlc
2016-09-16 06:37 - 2016-07-19 15:56 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi
2016-09-16 06:37 - 2016-07-19 15:56 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi
2016-09-15 14:51 - 2016-04-07 10:41 - 00000681 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2016-09-15 14:51 - 2016-04-07 10:41 - 00000681 _____ C:\ProgramData\Desktop\LogMeIn Hamachi.lnk

==================== Pliki w katalogu głównym wybranych folderów =======

2016-10-14 09:34 - 2016-10-14 09:34 - 3351566 _____ () C:\Users\LOCKERZ\AppData\Roaming\tor.exe
2015-04-26 12:53 - 2015-05-11 14:32 - 0004096 ____H () C:\Users\LOCKERZ\AppData\Local\keyfile3.drm
2016-07-13 20:10 - 2016-07-13 20:10 - 0003634 _____ () C:\Users\LOCKERZ\AppData\Local\recently-used.xbel
2014-03-05 14:56 - 2015-09-08 23:21 - 0007606 _____ () C:\Users\LOCKERZ\AppData\Local\Resmon.ResmonCfg
2014-01-28 01:45 - 2014-01-28 01:45 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-08-14 22:51 - 2016-08-14 22:51 - 0000040 _____ () C:\ProgramData\ra3.ini

Niektóre pliki w TEMP:
====================
C:\Users\LOCKERZ\AppData\Local\temp\odk_setup.exe


==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe
[2011-10-04 17:12] - [2011-10-05 19:31] - 2871808 ____A (Microsoft Corporation) 2534C3A34AC5E2AC122ED5FFED391888

C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-07-16 13:02

==================== Koniec  FRST.txt ============================