Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 06-11-2016
Uruchomiony przez zby (administrator)  ZBY-PC (09-11-2016 14:29:46)
Uruchomiony z D:\
Załadowane profile: zby (Dostępne profile: zby)
Platform: Microsoft® Windows Vista™ Home Basic  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 7 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\Program Files\Canon\IJPLM\ijplmsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Windows\System32\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) D:\Hamachi3\hamachi-2.exe
(LogMeIn, Inc.) D:\Hamachi3\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) D:\Microsoft Office\Office12\GrooveMonitor.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(LogMeIn Inc.) D:\Hamachi3\hamachi-2-ui.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(LogMeIn, Inc.) D:\Hamachi3\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_23_0_0_207.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_23_0_0_207.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_23_0_0_207.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_23_0_0_207.exe
(Farbar) D:\FRST(1).exe
(Microsoft Corporation) C:\Windows\System32\conime.exe


==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-18] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2015-10-13] (NVIDIA Corporation)
HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [868352 2006-12-19] (Analog Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [595480 2016-03-20] (Oracle Corporation)
HKLM\...\Run: [GrooveMonitor] => D:\Microsoft Office\Office12\GrooveMonitor.exe [33648 2007-08-24] (Microsoft Corporation)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Microsoft Default Manager] => C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation)
HKLM\...\Run: [CanonQuickMenu] => C:\Program Files\Canon\Quick Menu\CNQMMAIN.EXE /logon
HKLM\...\Run: [LogMeIn Hamachi Ui] => D:\Hamachi3\hamachi-2-ui.exe [5565960 2016-09-13] (LogMeIn Inc.)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2008-01-18] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2008-01-18] (Microsoft Corporation)
HKU\S-1-5-21-571047133-459559818-1820910614-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [29645440 2016-09-12] (Skype Technologies S.A.)
HKU\S-1-5-21-571047133-459559818-1820910614-1000\...\MountPoints2: {469031a3-fbb4-11e5-83ae-001a9200eb2b} - F:\setup.exe
HKU\S-1-5-21-571047133-459559818-1820910614-1000\...\MountPoints2: {d9f0c2fb-3125-11e6-8e3f-001a9200eb2b} - G:\blank.exe
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => D:\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => D:\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => D:\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => D:\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => D:\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24] (Microsoft Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{24BC612C-AC7B-425E-8931-386ABFF46506}: [DhcpNameServer] 7.254.254.254
Tcpip\..\Interfaces\{B7D8930D-2DA6-4BF0-A8EB-FD16EE28A079}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll => Brak pliku
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27] (Microsoft Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> D:\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_77\bin\ssv.dll [2016-03-27] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Bing Bar BHO -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll => Brak pliku
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-03-27] (Oracle Corporation)
Toolbar: HKLM - @C:\Program Files\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll Brak pliku
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll Brak pliku
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Microsoft Office\Office12\GrooveSystemServices.dll [2007-08-24] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 8relejd6.default-1463243518533
FF ProfilePath: C:\Users\zby\AppData\Roaming\Mozilla\Firefox\Profiles\f2yj8yyk.default [nie znaleziono]
FF ProfilePath: C:\Users\zby\AppData\Roaming\Mozilla\Firefox\Profiles\8relejd6.default-1463243518533 [2016-11-09]
FF Extension: (Firefox Hotfix) - C:\Users\zby\AppData\Roaming\Mozilla\Firefox\Profiles\8relejd6.default-1463243518533\Extensions\firefox-hotfix@mozilla.org.xpi [2016-08-31]
FF Extension: (BetterTTV) - C:\Users\zby\AppData\Roaming\Mozilla\Firefox\Profiles\8relejd6.default-1463243518533\Extensions\firefox@betterttv.net.xpi [2016-09-30]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2016-03-31] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension
FF Extension: (Search Helper Extension) - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2016-04-08] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension
FF Extension: (Default Manager) - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2016-04-08] [Brak podpisu cyfrowego]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] ()
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [Brak pliku]
FF Plugin: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-03-27] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-03-27] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll [2012-04-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)

Chrome: 
=======
CHR Profile: C:\Users\zby\AppData\Local\Google\Chrome\User Data\Default [2016-11-07]
CHR Extension: (Prezentacje Google) - C:\Users\zby\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-04-22]
CHR Extension: (Dokumenty Google) - C:\Users\zby\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-22]
CHR Extension: (Dysk Google) - C:\Users\zby\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-22]
CHR Extension: (YouTube) - C:\Users\zby\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-22]
CHR Extension: (Tampermonkey) - C:\Users\zby\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2016-09-19]
CHR Extension: (Arkusze Google) - C:\Users\zby\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-22]
CHR Extension: (Dokumenty Google offline) - C:\Users\zby\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-06]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\zby\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-22]
CHR Extension: (Gmail) - C:\Users\zby\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-22]
CHR HKLM\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd] - hxxp://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-571047133-459559818-1820910614-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd] - hxxp://clients2.google.com/service/update2/crx

Opera: 
=======
StartMenuInternet: (HKLM) Opera - D:\Opera\Opera.exe

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [915600 2015-10-13] (NVIDIA Corporation)
R2 Hamachi2Svc; D:\Hamachi3\hamachi-2.exe [1958408 2016-09-13] (LogMeIn Inc.)
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [140936 2013-05-14] ()
S3 Microsoft Office Groove Audit Service; D:\Microsoft Office\Office12\GrooveAuditService.exe [68464 2007-08-24] (Microsoft Corporation)
S3 npggsvc; C:\Windows\system32\GameMon.des [4307704 2016-02-25] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-10-13] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2016-08-10] ()
S3 TunngleService; D:\Tunngle\TnglCtrl.exe [814064 2015-12-22] (Tunngle.net GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-18] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2016-04-06] (DT Soft Ltd)
R3 FETNDIS; C:\Windows\System32\DRIVERS\fetnd5.sys [45568 2006-11-02] (VIA Technologies, Inc.              )
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2015-11-12] (LogMeIn, Inc.)
S3 hid3331; C:\Windows\System32\drivers\hid3331.sys [41336 2008-05-19] ( )
S3 SNP325; C:\Windows\System32\DRIVERS\snp325.sys [10502784 2010-08-10] (Sonix Co. Ltd.)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [8701824 2005-10-13] ()
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [43568 2015-12-21] (Tunngle.net)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 h643331; system32\drivers\h643331.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-11-09 14:29 - 2016-11-09 14:29 - 00000000 ____D C:\FRST
2016-11-07 16:24 - 2016-11-07 16:24 - 00000439 _____ C:\Users\zby\Desktop\League client alpha.lnk
2016-11-07 16:24 - 2016-11-07 16:24 - 00000000 ____D C:\Users\zby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\League client alpha
2016-10-29 19:00 - 2016-10-29 19:11 - 00000000 ____D C:\Users\zby\AppData\Local\Microsoft Games
2016-10-29 11:44 - 2016-10-29 11:44 - 00000000 ____D C:\Users\zby\AppData\LocalLow\Red Dot Games
2016-10-29 11:43 - 2016-10-29 11:43 - 00000665 _____ C:\Users\Public\Desktop\Car Mechanic Simulator 2014 - Complete Edition.lnk
2016-10-29 11:43 - 2016-10-29 11:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Red Dot Games
2016-10-29 09:58 - 2016-10-29 09:58 - 00000000 ____D C:\Users\zby\AppData\Roaming\11bitstudios
2016-10-29 09:53 - 2016-10-29 09:53 - 00000560 _____ C:\Users\Public\Desktop\This War of Mine.lnk
2016-10-29 09:53 - 2016-10-29 09:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\This War of Mine
2016-10-26 18:28 - 2016-10-26 18:28 - 00000000 ____D C:\ProgramData\Steam
2016-10-26 18:10 - 2016-10-26 18:10 - 00000511 _____ C:\Users\Public\Desktop\Farming Simulator 17.lnk

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-11-09 14:27 - 2006-12-05 06:19 - 00726330 _____ C:\Windows\system32\perfh015.dat
2016-11-09 14:27 - 2006-12-05 06:19 - 00157410 _____ C:\Windows\system32\perfc015.dat
2016-11-09 14:27 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\inf
2016-11-09 14:27 - 2006-11-02 11:33 - 01649784 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-09 14:25 - 2016-04-22 23:07 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-09 14:25 - 2016-03-19 15:12 - 00000000 ____D C:\Users\zby\AppData\Roaming\Skype
2016-11-09 14:21 - 2016-04-22 23:07 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-09 14:21 - 2016-03-29 18:44 - 00000000 ____D C:\Users\zby\AppData\Local\LogMeIn Hamachi
2016-11-09 14:21 - 2006-11-02 13:58 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-09 14:21 - 2006-11-02 13:45 - 00004048 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-09 14:21 - 2006-11-02 13:45 - 00004048 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-08 22:24 - 2006-11-02 13:58 - 00032500 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-11-08 21:35 - 2016-03-19 17:17 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-11-08 20:35 - 2016-03-19 17:17 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-11-08 20:35 - 2016-03-19 17:17 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-11-08 20:35 - 2016-03-19 17:17 - 00000000 ____D C:\Windows\system32\Macromed
2016-11-07 22:04 - 2016-03-20 20:03 - 00000000 ____D C:\Users\zby\AppData\Roaming\Winamp
2016-10-29 19:50 - 2016-03-27 18:34 - 00000000 ____D C:\Users\zby\AppData\Roaming\uTorrent
2016-10-29 18:53 - 2016-03-19 16:56 - 00000000 ____D C:\Users\zby\AppData\Local\Battle.net
2016-10-26 18:28 - 2016-03-31 20:52 - 00000000 ____D C:\Users\zby\Documents\My Games
2016-10-26 18:09 - 2016-04-06 09:53 - 00000000 ____D C:\Users\zby\AppData\Roaming\DAEMON Tools Lite
2016-10-26 16:31 - 2016-03-27 18:36 - 00000000 ___SD C:\Users\zby\AppData\LocalLow\Temp
2016-10-20 16:06 - 2016-04-03 14:00 - 00003190 _____ C:\Users\zby\Desktop\Akademia.txt
2016-10-11 10:40 - 2016-08-11 19:27 - 00000000 ____D C:\ProgramData\CanonIJPLM

==================== Pliki w katalogu głównym wybranych folderów =======

2016-08-06 16:06 - 2016-08-06 16:33 - 0028117 _____ () C:\Users\zby\AppData\Roaming\OFMissionEditorConfig.xml
2016-08-10 19:48 - 2016-09-15 14:01 - 0022328 _____ () C:\Users\zby\AppData\Roaming\PnkBstrK.sys
2016-03-19 14:30 - 2016-03-19 15:12 - 0000680 _____ () C:\Users\zby\AppData\Local\d3d9caps.dat

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-11-09 14:28

==================== Koniec  FRST.txt ============================