Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 20-11-2016
Uruchomiony przez Stefcio (administrator)  KOMP_STEFCIA (20-11-2016 14:56:57)
Uruchomiony z C:\Users\Stefcio\Downloads\Aplications
Załadowane profile: Stefcio (Dostępne profile: Stefcio)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfemms.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe
() C:\Program Files (x86)\Real\RealPlayer\UpdateService\RealPlayerUpdateSvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Creative Technology Ltd) C:\Program Files\Creative\ZEN Media Explorer\CTCheck.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\MediaSource5\MtdAcqu.exe
() C:\Program Files (x86)\Creative\Sync Manager Unicode\CTSyncU.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Alcor Micro Corp.) C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
() C:\Program Files (x86)\Real\RealPlayer\RealDownloader\downloader2.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.427\SSScheduler.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Program Files (x86)\Dell\Stage Remote\DMR.exe
(Intel Security) C:\Program Files\Common Files\mcafee\ClientAnalytics\McClientAnalytics.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.9.829.0\McCSPServiceHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RunDLLEntry_THXCfg] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [RunDLLEntry_EptMon] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\EptMon64.dll,RunDLLEntry EptMon64
HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2034752 2011-08-08] ()
HKLM\...\Run: [CTCheck] => C:\Program Files\Creative\ZEN Media Explorer\CTCheck.exe [397312 2007-11-06] (Creative Technology Ltd)
HKLM-x32\...\Run: [VolPanel] => C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [237693 2009-02-03] (Creative Technology Ltd)
HKLM-x32\...\Run: [SPIRunE] => Rundll32 SPIRunE.dll,RunDLLEntry
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [ShwiconXP9106] => C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe [237568 2010-03-10] (Alcor Micro Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-01-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [THX Audio Control Panel] => C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe [963584 2009-12-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [852720 2016-09-23] (McAfee, Inc.)
HKLM-x32\...\Run: [AccuWeatherWidget] => C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [968048 2012-02-01] ()
HKLM-x32\...\Run: [RealDownloader] => C:\program files (x86)\real\realplayer\RealDownloader\downloader2.exe [708336 2016-09-03] ()
HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [352648 2016-09-27] (RealNetworks, Inc.)
HKU\S-1-5-21-3387017229-3060277641-4225327561-1000\...\Run: [MtdAcqu] => C:\Program Files (x86)\Creative\MediaSource5\MtdAcqu.exe [278528 2009-04-29] (Creative Technology Ltd)
HKU\S-1-5-21-3387017229-3060277641-4225327561-1000\...\Run: [CTSyncU.exe] => C:\Program Files (x86)\Creative\Sync Manager Unicode\CTSyncU.exe [868352 2007-07-17] ()
HKU\S-1-5-21-3387017229-3060277641-4225327561-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8944344 2016-09-28] (Piriform Ltd)
HKU\S-1-5-21-3387017229-3060277641-4225327561-1000\...\MountPoints2: {00c447b8-ef30-11e5-80e7-001f1f8774b9} - E:\Autorun.exe
HKU\S-1-5-21-3387017229-3060277641-4225327561-1000\...\MountPoints2: {b9b2f137-4514-11e1-b424-d4bed98fa32f} - I:\macmillan.exe
HKU\S-1-5-18\...\Run: [KSS] => "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe" autorun
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2016-11-01]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.427\SSScheduler.exe (McAfee, Inc.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{C498495B-A9B2-4DD6-9AAD-4F5DE13E63ED}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3387017229-3060277641-4225327561-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> {49606DC7-976D-4030-A74E-9FB5C842FA68} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {49606DC7-976D-4030-A74E-9FB5C842FA68} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\program files (x86)\real\realplayer\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2016-09-03] (RealDownloader)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\program files (x86)\real\realplayer\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2016-09-03] (RealDownloader)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2016-10-03] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2016-10-03] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2016-10-03] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2016-10-03] (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll [2016-09-23] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2016-09-23] (McAfee, Inc.)

FireFox:
========
FF ProfilePath: C:\Users\Stefcio\AppData\Roaming\TomTom\HOME\Profiles\qtdoawr2.default [2016-06-04]
FF Extension: (Emulator) - C:\Users\Stefcio\AppData\Roaming\TomTom\HOME\Profiles\qtdoawr2.default\Extensions\Navcore.9.510.1234792@tomtom.com [2016-06-04] [Brak podpisu cyfrowego]
FF Extension: (Brak nazwy) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [nie znaleziono]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2016-10-07]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext => nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => nie znaleziono
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: (McAfee Anti-Spam Thunderbird Extension) - C:\Program Files\McAfee\MSK [2016-07-25] [Brak podpisu cyfrowego]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2016-09-23] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] ()
FF Plugin-x32: @Cabrilog.com/Cabri 3D -> C:\Program Files (x86)\Cabri\Cabri 3D Plug-in 2.1\bin\npcabri3d.dll [2007-11-30] ()
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2016-09-23] ()
FF Plugin-x32: @mcafee.com/MVT -> C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll [2014-01-22] (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=18.1.5.699 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2016-09-27] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=18.1.5.699 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2016-09-27] (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @wolfram.com/Mathematica -> C:\Program Files (x86)\Common Files\Wolfram Research\Browser\8.0.0.1802959\npmathplugin.dll [2010-11-07] (Wolfram Research, Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.pl/
CHR Profile: C:\Users\Stefcio\AppData\Local\Google\Chrome\User Data\Default [2016-11-20]
CHR Extension: (Dysk Google) - C:\Users\Stefcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]
CHR Extension: (YouTube) - C:\Users\Stefcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-28]
CHR Extension: (Google Search) - C:\Users\Stefcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Block site) - C:\Users\Stefcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\eiimnmioipafcokbfikbljfdeojpcgbh [2016-10-23]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Stefcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2016-11-09]
CHR Extension: (Dokumenty Google offline) - C:\Users\Stefcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Stefcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-11-08]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Stefcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-04]
CHR Extension: (e-pity 2015 - dodatek) - C:\Users\Stefcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofoeigeaodhbjogdigckajfhjbonaofg [2016-04-17]
CHR Extension: (Gmail) - C:\Users\Stefcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
CHR Extension: (Chrome Media Router) - C:\Users\Stefcio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-23]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-06-20]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-06-20]
CHR HKLM-x32\...\Chrome\Extension: [ofoeigeaodhbjogdigckajfhjbonaofg] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S4 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2014-09-10] (Creative Labs) [Brak podpisu cyfrowego]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2012-01-10] (Creative Labs) [Brak podpisu cyfrowego]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2009-07-27] (Creative Technology Ltd) [Brak podpisu cyfrowego]
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-08-29] (Disc Soft Ltd)
U2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [166152 2016-10-03] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [993824 2016-09-23] (McAfee, Inc.)
R2 McBootDelayStartSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.427\McCHSvc.exe [329480 2016-10-13] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.9.829.0\\McCSPServiceHost.exe [1910000 2016-05-31] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [816128 2016-06-21] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232688 2016-04-26] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [382456 2016-06-23] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [277744 2016-04-26] (McAfee, Inc.)
S2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1454216 2016-09-13] (McAfee, Inc.)
S3 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [596768 2016-07-07] (McAfee, Inc.)
R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [1045336 2016-05-25] (Intel Security, Inc.)
R2 RealPlayerUpdateSvc; C:\program files (x86)\real\realplayer\UpdateService\RealPlayerUpdateSvc.exe [35104 2016-09-03] ()
R2 RealTimes Desktop Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [987408 2016-09-27] (RealNetworks, Inc.)
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 0090281479649521mcinstcleanup; C:\Windows\TEMP\009028~1.EXE -cleanup -nolog [X]

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [78632 2016-04-27] (McAfee, Inc.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-03-21] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-03-21] (Disc Soft Ltd)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [216704 2016-08-02] (McAfee, Inc.)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [419616 2016-04-27] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [349480 2016-04-27] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [493352 2016-04-27] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [843048 2016-04-27] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [519456 2016-08-01] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [100136 2016-08-01] (McAfee, Inc.)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [46240 2016-06-06] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [243488 2016-04-27] (McAfee, Inc.)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2010-07-16] (CACE Technologies, Inc.)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-11-19 22:30 - 2016-11-19 22:30 - 00004020 _____ C:\Windows\System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse
2016-11-18 22:29 - 2016-11-18 22:29 - 02426291 _____ C:\Users\Stefcio\AppData\Local\recently-used.xbel
2016-11-18 15:38 - 2016-11-18 15:38 - 00000000 ____D C:\Users\Stefcio\Downloads\x-art_caprice_francesca_midnight_experience_1080
2016-11-16 23:34 - 2016-11-16 23:34 - 26687140 _____ C:\Users\Stefcio\Downloads\Rodzice pozwolili jej przeżyć pierwszy raz z nimi - CHŁOPAK JĄ ZASKOCZYŁ - POLECAM.flv
2016-11-16 23:22 - 2016-11-16 23:23 - 25444411 _____ C:\Users\Stefcio\Downloads\Overfuck7.mp4
2016-11-16 21:18 - 2016-11-20 14:56 - 00000000 ____D C:\FRST
2016-11-16 20:00 - 2016-11-16 20:21 - 305467676 _____ C:\Users\Stefcio\Downloads\pericolo in rete.flv
2016-11-14 22:08 - 2016-11-14 22:08 - 00016514 _____ C:\Users\Stefcio\Documents\Ostrosłup prawidłowy.nb
2016-11-10 19:55 - 2016-11-10 19:56 - 00000000 ____D C:\Users\Stefcio\Downloads\Jack Bruce at Rockpalast
2016-11-08 22:45 - 2016-11-08 22:45 - 00000000 ____D C:\KVRT_Data
2016-11-08 22:33 - 2016-11-12 15:25 - 00000000 ____D C:\ProgramData\Oracle
2016-11-08 22:33 - 2016-11-08 22:33 - 00000000 ____D C:\Users\Stefcio\AppData\Roaming\Sun
2016-11-08 22:11 - 2016-11-17 18:26 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2016-11-08 20:43 - 2016-11-08 20:43 - 03070733 _____ C:\Users\Stefcio\Documents\without_a_penis 1.xcf
2016-11-07 20:12 - 2016-11-07 20:12 - 00000000 ____D C:\Users\Stefcio\Downloads\TeraPatrick.09.11.21.Tera.Promo.Shoots.XXX.WMV-OHRLY[rarbg]
2016-11-04 19:22 - 2016-11-04 19:57 - 00051409 _____ C:\Users\Stefcio\Documents\Klasówka z r.p. druga dla 4a.nb
2016-11-04 19:19 - 2016-11-04 19:19 - 00049212 _____ C:\Users\Stefcio\Documents\Klasówka z r.p. druga dla 4c.nb
2016-11-02 20:14 - 2016-11-02 20:14 - 00000000 ____D C:\Users\Stefcio\Downloads\Victoria Zdrok - DDGirls
2016-11-01 22:38 - 2016-11-08 17:40 - 00000000 ____D C:\Users\Stefcio\Downloads\Victoria Zdrok
2016-11-01 17:54 - 2016-11-01 17:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2016-10-31 20:40 - 2016-10-31 20:40 - 00136164 _____ C:\Users\Stefcio\Documents\Matura 2016.nb
2016-10-30 20:09 - 2016-10-30 20:09 - 05253208 _____ C:\Users\Stefcio\Documents\takes_a_licking-01.xcf
2016-10-30 14:35 - 2016-10-30 18:12 - 00000000 ____D C:\Users\Stefcio\Downloads\Alison Star - MonstersofCock
2016-10-28 18:47 - 2016-10-28 18:47 - 00000000 ____D C:\Users\Stefcio\Downloads\Sacro.e.Profano.Mario.Salieri.XXX.DVDRip
2016-10-26 17:45 - 2016-11-04 21:53 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-10-25 20:04 - 2016-11-20 14:53 - 00000000 ____D C:\Users\Stefcio\Downloads\Aplications
2016-10-23 19:48 - 2016-10-23 19:48 - 03910208 _____ C:\Users\Stefcio\Desktop\adwcleaner_6.030.exe
2016-10-23 17:28 - 2016-11-20 14:48 - 00003846 _____ C:\Windows\System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse
2016-10-23 17:19 - 2016-11-19 22:31 - 00003068 _____ C:\Windows\System32\Tasks\McAfeeLogon
2016-10-21 16:32 - 2016-10-21 16:32 - 00000000 ____D C:\Users\Stefcio\Documents\EVEREST Reports
2016-10-21 16:30 - 2016-10-21 16:30 - 00000000 ____D C:\Program Files (x86)\Lavalys

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-11-20 14:55 - 2014-08-10 14:54 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-11-20 14:55 - 2012-01-11 00:21 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2016-11-20 14:55 - 2012-01-11 00:21 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2016-11-20 14:55 - 2012-01-10 23:55 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2016-11-20 14:54 - 2014-10-28 20:32 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-20 14:54 - 2012-04-06 13:06 - 00000506 _____ C:\Windows\Tasks\SystemToolsDailyTest.job
2016-11-20 14:54 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-20 14:54 - 2009-07-14 05:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-20 14:54 - 2009-07-14 05:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-20 14:53 - 2012-05-21 19:44 - 00000000 ____D C:\Users\Stefcio\AppData\LocalLow\Temp
2016-11-20 14:53 - 2009-07-14 04:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-11-20 14:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2016-11-20 14:49 - 2012-04-06 13:06 - 00003544 _____ C:\Windows\System32\Tasks\SystemToolsDailyTest
2016-11-20 14:49 - 2012-03-06 20:45 - 00000000 ____D C:\Users\Stefcio\AppData\Roaming\uTorrent
2016-11-20 14:42 - 2013-10-13 13:35 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-11-19 22:51 - 2016-09-06 18:47 - 00000992 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-11-19 22:48 - 2016-06-15 20:07 - 00000000 ____D C:\Users\Stefcio\Documents\888poker
2016-11-19 22:35 - 2012-08-31 08:25 - 00003990 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{093DC4BA-770A-40B3-9F07-53E3862E0A6A}
2016-11-19 22:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-11-19 22:29 - 2014-10-28 20:32 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-18 22:32 - 2015-04-07 09:43 - 00000000 ____D C:\Users\Stefcio\.gimp-2.8
2016-11-18 22:29 - 2015-04-07 09:46 - 00000000 ____D C:\Users\Stefcio\AppData\Local\gtk-2.0
2016-11-18 20:16 - 2012-02-29 21:39 - 00000000 ____D C:\Users\Stefcio\AppData\Local\PokerStars.EU
2016-11-18 15:32 - 2012-01-22 21:24 - 00000000 ____D C:\Users\Stefcio\AppData\Roaming\Media Player Classic
2016-11-16 23:38 - 2012-02-13 21:18 - 00000000 ____D C:\Users\Stefcio\AppData\Local\ChomikBox
2016-11-16 23:12 - 2016-10-13 20:05 - 00000000 ____D C:\Users\Stefcio\Downloads\ChomikBox
2016-11-16 23:12 - 2012-02-13 21:19 - 00000000 ____D C:\Users\Stefcio\.gstreamer-0.10
2016-11-16 22:55 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2016-11-16 22:25 - 2012-03-07 11:45 - 00000000 ____D C:\Users\Stefcio\AppData\Local\ElevatedDiagnostics
2016-11-16 19:42 - 2012-10-31 12:13 - 00000000 ___HD C:\FFOutput
2016-11-15 22:40 - 2016-10-13 19:48 - 00000000 ___HD C:\Users\Stefcio\Downloads\Hid
2016-11-15 20:38 - 2016-05-23 19:56 - 00000000 ____D C:\Users\Stefcio\AppData\Local\FullTilt.EU
2016-11-13 18:53 - 2014-01-06 23:27 - 00000000 ____D C:\Users\Stefcio\AppData\Local\GHISLER
2016-11-11 22:04 - 2016-10-20 18:45 - 00000000 ____D C:\AdwCleaner
2016-11-10 19:48 - 2016-06-15 20:05 - 00000000 ____D C:\Program Files (x86)\PacificPoker
2016-11-10 19:38 - 2014-10-28 20:34 - 00002279 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-09 22:07 - 2012-01-22 17:28 - 00000000 ____D C:\Program Files (x86)\PokerStars
2016-11-09 21:08 - 2015-05-13 13:05 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-11-09 21:04 - 2012-02-16 22:06 - 00000000 ____D C:\Program Files\McAfee
2016-11-09 20:57 - 2012-04-04 07:05 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-11-08 22:59 - 2014-07-22 17:54 - 00000000 ____D C:\Windows\pss
2016-11-08 22:55 - 2012-01-22 19:12 - 00000000 ____D C:\Users\Stefcio\AppData\Roaming\DAEMON Tools Lite
2016-11-08 22:36 - 2012-04-04 07:05 - 00003870 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-11-08 22:35 - 2016-09-06 18:47 - 00003998 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-11-08 22:35 - 2012-04-04 07:05 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-11-08 22:35 - 2012-01-10 23:35 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-08 22:35 - 2012-01-10 23:35 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-11-08 22:35 - 2012-01-10 23:35 - 00000000 ____D C:\Windows\system32\Macromed
2016-11-08 22:29 - 2012-10-29 18:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-11-08 22:29 - 2012-01-22 19:19 - 00000000 ____D C:\Users\Stefcio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-11-08 22:29 - 2012-01-22 19:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-11-08 22:29 - 2012-01-22 19:19 - 00000000 ____D C:\Program Files\WinRAR
2016-11-06 14:56 - 2014-02-11 20:31 - 00000000 ____D C:\Users\Stefcio\Documents\Word
2016-11-01 21:31 - 2012-02-29 19:51 - 00000000 ____D C:\Users\Stefcio\Documents\GeoGebra
2016-11-01 17:54 - 2015-11-10 20:11 - 00000000 ____D C:\Program Files\McAfee Security Scan
2016-11-01 17:54 - 2015-08-04 19:49 - 00001926 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2016-10-31 12:32 - 2009-07-14 06:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-10-30 18:21 - 2012-01-20 12:37 - 00000000 ____D C:\Users\Stefcio\AppData\Local\Adobe
2016-10-30 16:09 - 2012-04-17 21:00 - 00000000 ____D C:\Users\Stefcio\AppData\Local\Google
2016-10-26 17:45 - 2012-01-11 00:09 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-10-26 17:44 - 2012-01-11 00:09 - 00000000 ____D C:\ProgramData\Adobe
2016-10-23 17:38 - 2012-01-10 23:49 - 00000000 ____D C:\Program Files (x86)\Creative
2016-10-23 17:34 - 2012-01-10 23:49 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-10-23 17:31 - 2014-04-07 18:42 - 00000000 ____D C:\Users\Stefcio\AppData\Roaming\ArcSoft
2016-10-23 17:25 - 2013-05-01 20:46 - 00000000 ____D C:\Program Files (x86)\URUSoft
2016-10-23 17:22 - 2012-01-10 23:51 - 00000000 ___HD C:\Program Files (x86)\Creative Installation Information
2016-10-23 17:22 - 2012-01-10 23:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2016-10-23 17:22 - 2012-01-10 23:50 - 00000000 ____D C:\ProgramData\Creative
2016-10-23 17:08 - 2012-01-18 19:45 - 00000000 ____D C:\Users\Stefcio
2016-10-23 17:05 - 2016-06-15 20:06 - 00000000 ____D C:\Users\Stefcio\AppData\Roaming\PacificPoker
2016-10-23 17:05 - 2015-06-15 13:59 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2016-10-23 17:05 - 2015-04-26 23:05 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-10-23 17:05 - 2015-04-26 23:05 - 00000000 ___SD C:\Windows\system32\GWX
2016-10-23 17:05 - 2014-12-10 15:29 - 00000000 ____D C:\Windows\system32\appraiser
2016-10-23 17:05 - 2014-07-10 22:24 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-10-23 17:05 - 2014-03-09 18:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2016-10-23 17:05 - 2013-03-23 23:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-10-23 17:05 - 2013-03-14 16:27 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-10-23 17:05 - 2012-01-11 00:02 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-10-23 17:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-10-23 17:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Dism
2016-10-23 17:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2016-10-23 17:05 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-10-23 17:04 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2016-10-23 17:02 - 2012-01-24 11:57 - 00000000 ____D C:\ProgramData\Real

==================== Pliki w katalogu głównym wybranych folderów =======

2012-05-28 15:38 - 2012-05-28 15:38 - 0000008 ___SH () C:\Program Files (x86)\.dat000001.dat
2012-05-28 15:38 - 2012-05-28 15:38 - 0000008 ___SH () C:\Program Files (x86)\.dat000002.dat
2012-05-28 15:38 - 2012-05-28 15:38 - 0000008 ___SH () C:\Program Files (x86)\.data110704.dat
2012-05-28 15:38 - 2012-05-28 15:38 - 0000008 ___SH () C:\Program Files (x86)\.data211004.dat
2012-05-28 15:38 - 2012-05-28 15:38 - 0000008 ___SH () C:\Program Files (x86)\.data211204.dat
2012-05-28 15:38 - 2012-05-28 15:38 - 0000008 ___SH () C:\Program Files (x86)\.drv120405.dat
2012-05-28 15:38 - 2016-07-12 14:55 - 0000008 ___SH () C:\Users\Stefcio\AppData\Roaming\.addit001.dat
2012-05-28 15:38 - 2012-05-28 15:38 - 0000008 ___SH () C:\Users\Stefcio\AppData\Roaming\.app190905.dat
2014-03-04 16:45 - 2014-03-04 16:45 - 0000008 ___SH () C:\Users\Stefcio\AppData\Roaming\.ax010705.dat
2012-05-28 15:38 - 2016-07-12 14:55 - 0000008 ___SH () C:\Users\Stefcio\AppData\Roaming\.data000.dat
2012-05-28 15:38 - 2016-07-12 14:55 - 0000008 ___SH () C:\Users\Stefcio\AppData\Roaming\.data001.dat
2012-05-28 15:38 - 2012-05-28 15:38 - 0000008 ___SH () C:\Users\Stefcio\AppData\Roaming\.drv120205.dat
2012-05-28 15:38 - 2012-05-28 15:38 - 0000008 ___SH () C:\Users\Stefcio\AppData\Roaming\.drv190904.dat
2014-03-04 16:45 - 2014-03-04 16:45 - 0000008 ___SH () C:\Users\Stefcio\AppData\Roaming\.px050107.dat
2014-03-04 16:45 - 2014-03-04 16:45 - 0000008 ___SH () C:\Users\Stefcio\AppData\Roaming\.xp070105.dat
2016-09-16 20:16 - 2016-09-20 17:12 - 0000348 _____ () C:\Users\Stefcio\AppData\Roaming\FotoSketcher.ini
2012-01-20 13:07 - 2016-02-16 20:39 - 0049152 _____ () C:\Users\Stefcio\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-11-18 22:29 - 2016-11-18 22:29 - 2426291 _____ () C:\Users\Stefcio\AppData\Local\recently-used.xbel
2012-04-26 22:07 - 2015-01-29 14:48 - 0007624 _____ () C:\Users\Stefcio\AppData\Local\Resmon.ResmonCfg
2013-02-18 18:13 - 2013-02-18 18:13 - 21748128 _____ () C:\Users\Stefcio\AppData\Local\TempFullTiltPokerEuSetup.exe
2012-04-01 17:49 - 2012-04-01 17:48 - 0692744 _____ () C:\Users\Stefcio\AppData\Local\unins000.exe
2013-04-15 18:55 - 2013-04-15 18:55 - 0002431 _____ () C:\Users\Stefcio\AppData\Local\unins001.dat
2013-04-15 18:55 - 2013-04-15 18:55 - 0707504 _____ () C:\Users\Stefcio\AppData\Local\unins001.exe
2013-04-15 18:55 - 2013-04-15 18:55 - 0011761 _____ () C:\Users\Stefcio\AppData\Local\unins001.msg

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-11-16 20:49

==================== Koniec  FRST.txt ============================