Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 07-12-2016
Uruchomiony przez 7 (administrator)  7-KOMPUTER (13-12-2016 02:24:18)
Uruchomiony z C:\Users\7\Downloads
Załadowane profile: 7 (Dostępne profile: 7)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\7\Downloads\xo4v2u2f.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2771576 2015-12-09] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2786768 2016-11-29] (Malwarebytes)
HKU\S-1-5-21-981421183-1387059128-155499913-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-981421183-1387059128-155499913-1001\...\MountPoints2: J - J:\AutoRun.exe
HKU\S-1-5-21-981421183-1387059128-155499913-1001\...\MountPoints2: {2db3e67e-d53c-11e4-800f-902b34e4d844} - F:\AutoRun.exe
HKU\S-1-5-21-981421183-1387059128-155499913-1001\...\MountPoints2: {2db3e69c-d53c-11e4-800f-902b34e4d844} - F:\AutoRun.exe
HKU\S-1-5-21-981421183-1387059128-155499913-1001\...\MountPoints2: {2db3e6a7-d53c-11e4-800f-902b34e4d844} - E:\AutoRun.exe
HKU\S-1-5-21-981421183-1387059128-155499913-1001\...\MountPoints2: {35786d44-8519-11e3-b481-902b34e4d844} - F:\LGAutoRun.exe
HKU\S-1-5-21-981421183-1387059128-155499913-1001\...\MountPoints2: {4beff635-e38a-11e3-8d28-902b34e4d844} - F:\AutoRun.exe
HKU\S-1-5-21-981421183-1387059128-155499913-1001\...\MountPoints2: {60ed8449-7a9e-11e2-bbee-806e6f6e6963} - E:\cdstart.exe
HKU\S-1-5-21-981421183-1387059128-155499913-1001\...\MountPoints2: {90e66040-d9f1-11e4-9e38-902b34e4d844} - E:\AutoRun.exe
HKU\S-1-5-21-981421183-1387059128-155499913-1001\...\MountPoints2: {b314c248-60f9-11e3-93c1-902b34e4d844} - J:\AutoRun.exe
HKU\S-1-5-21-981421183-1387059128-155499913-1001\...\MountPoints2: {b314c25d-60f9-11e3-93c1-902b34e4d844} - F:\AutoRun.exe
HKU\S-1-5-21-981421183-1387059128-155499913-1001\...\MountPoints2: {b314c26b-60f9-11e3-93c1-902b34e4d844} - E:\AutoRun.exe
HKU\S-1-5-21-981421183-1387059128-155499913-1001\...\MountPoints2: {f6185d97-41c7-11e6-9b95-902b34e4d844} - F:\SISetup.exe
HKU\S-1-5-21-981421183-1387059128-155499913-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-21] (Microsoft Corporation)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} =>  Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} =>  Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} =>  Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} =>  Brak pliku

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62
Tcpip\..\Interfaces\{35B72947-B349-46B9-AB68-5FD1211EC090}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{5632FED9-E689-4035-A959-832F69E52230}: [NameServer] 194.204.152.34,194.204.159.1
Tcpip\..\Interfaces\{5632FED9-E689-4035-A959-832F69E52230}: [DhcpNameServer] 62.179.1.63 62.179.1.62
Tcpip\..\Interfaces\{626714D4-BC77-42D9-80B8-0C24644DDDAE}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{A47FC55C-9D11-46B9-B599-5931BEA3FB93}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {943F4E9B-6E4C-4D92-AE6D-AA9373BB6C20} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {A43BE3D8-C024-4339-93D6-B09DAD406E72} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {943F4E9B-6E4C-4D92-AE6D-AA9373BB6C20} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-11-22] (Microsoft Corporation)
BHO: Brak nazwy -> {7549CA81-7BB5-41AF-AF7D-4689F5CF8340} -> Brak pliku
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-09-29] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2016-10-24] (McAfee, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2016-11-22] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-11-22] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-29] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-11-22] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-09-19] (Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-09-23] (Microsoft Corporation)
BHO-x32: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2016-10-24] (McAfee, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2016-11-22] (Microsoft Corporation)
BHO-x32: Brak nazwy -> {BA3295CF-17ED-4F49-9E95-D999A0ADBFDC} -> Brak pliku
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-11-22] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-09-19] (Oracle Corporation)
Toolbar: HKLM - Brak nazwy - {0124123D-61B4-456f-AF86-78C53A0790C5} -  Brak pliku
Toolbar: HKU\S-1-5-21-981421183-1387059128-155499913-1001 -> Brak nazwy - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -  Brak pliku
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2016-10-24] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2016-10-24] (McAfee, Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-22] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-22] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-22] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-11-22] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2016-10-24] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2016-10-24] (McAfee, Inc.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  Brak pliku

FireFox:
========
FF DefaultProfile: ynqe9lz7.default
FF ProfilePath: C:\Users\7\AppData\Roaming\Mozilla\Firefox\Profiles\ynqe9lz7.default [2016-12-12]
FF Extension: (Firefox Hotfix) - C:\Users\7\AppData\Roaming\Mozilla\Firefox\Profiles\ynqe9lz7.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-10-11]
FF Extension: (Brak nazwy) - C:\Users\7\AppData\Roaming\Mozilla\Firefox\Profiles\ynqe9lz7.default\extensions\{068e178c-61a9-4a63-b74f-87404a6f5ea1} [nie znaleziono]
FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2016-05-24]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => nie znaleziono
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [Brak pliku]
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Brak pliku]
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-29] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-29] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1216156.dll [2015-01-09] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll [Brak pliku]
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [Brak pliku]
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [Brak pliku]
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Brak pliku]
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-09-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-09-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-11-22] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-11-22] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Brak pliku]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-981421183-1387059128-155499913-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [Brak pliku]

Chrome: 
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://izaktv.pl/"
CHR Profile: C:\Users\7\AppData\Local\Google\Chrome\User Data\Default [2016-12-13]
CHR Extension: (Dokumenty Google) - C:\Users\7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]
CHR Extension: (Dysk Google) - C:\Users\7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-31]
CHR Extension: (YouTube) - C:\Users\7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]
CHR Extension: (Google Search) - C:\Users\7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-31]
CHR Extension: (Dokumenty Google offline) - C:\Users\7\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Izak) - C:\Users\7\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfoinbicgoegjpcnkjmigednagamoppm [2015-04-29]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\7\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-01]
CHR Extension: (Gmail) - C:\Users\7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-01]
CHR Extension: (Chrome Media Router) - C:\Users\7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-14]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-09-02] (Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3294912 2016-10-30] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156216 2015-12-09] (NVIDIA Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-11-29] (Malwarebytes)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [187840 2016-10-24] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-12-09] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8185464 2015-12-09] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [6477432 2015-12-09] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-12-10] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2180624 2016-12-10] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2015-08-17] ()
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [186048 2014-12-09] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [110744 2012-07-19] (Qualcomm Atheros Co., Ltd.)
S3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2016-12-13] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [250816 2016-12-13] (Malwarebytes)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [46240 2016-06-06] (McAfee, Inc.)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2010-10-14] (Marvell Semiconductor, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-12-09] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39592 2014-09-05] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2014-12-09] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129600 2014-11-17] (Razer, Inc.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
U0 aswVmm; Brak ImagePath
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 RtlWlanu; system32\DRIVERS\rtwlanu.sys [X]
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
U3 awloiuog; \??\C:\Users\7\AppData\Local\Temp\awloiuog.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-12-13 02:16 - 2016-12-13 02:16 - 00380928 _____ C:\Users\7\Downloads\xo4v2u2f.exe
2016-12-13 01:16 - 2016-12-13 01:16 - 00000000 ____D C:\Users\7\Desktop\Infekcja
2016-12-13 00:32 - 2016-12-13 00:48 - 00102856 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2016-12-13 00:32 - 2016-12-13 00:47 - 00250816 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-12-13 00:32 - 2016-12-13 00:47 - 00081696 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2016-12-13 00:32 - 2016-12-13 00:47 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-12-13 00:32 - 2016-12-13 00:32 - 00176064 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2016-12-13 00:32 - 2016-12-13 00:32 - 00001873 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2016-12-13 00:32 - 2016-12-13 00:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2016-12-13 00:32 - 2016-12-13 00:32 - 00000000 ____D C:\Program Files\Malwarebytes
2016-12-13 00:32 - 2016-11-29 06:27 - 00077408 _____ C:\Windows\system32\Drivers\mbae64.sys
2016-12-13 00:31 - 2016-12-13 00:31 - 51969976 _____ (Malwarebytes ) C:\Users\7\Downloads\mb3-setup-consumer-3.0.4.1269.exe
2016-12-13 00:20 - 2016-12-13 02:24 - 00023515 _____ C:\Users\7\Downloads\FRST.txt
2016-12-13 00:20 - 2016-12-13 02:24 - 00000000 ____D C:\FRST
2016-12-13 00:19 - 2016-12-13 00:19 - 02420224 _____ (Farbar) C:\Users\7\Downloads\FRST64.exe
2016-12-13 00:16 - 2016-12-13 00:16 - 00000485 _____ C:\DelFix.txt
2016-12-12 22:21 - 2016-12-12 22:21 - 00003164 _____ C:\Windows\System32\Tasks\Razer_Game_Booster_AutoUpdate
2016-12-12 22:21 - 2016-12-12 22:21 - 00000000 ____D C:\Users\7\Documents\Razer
2016-12-12 22:20 - 2016-12-13 00:10 - 00000000 ____D C:\Program Files (x86)\McAfee
2016-12-12 22:20 - 2016-12-12 22:20 - 23832608 _____ (Razer USA Ltd ) C:\Users\7\Downloads\Game Booster 3.4 [1].exe
2016-12-12 22:20 - 2016-12-12 22:20 - 00000000 ____D C:\ProgramData\McAfee
2016-12-12 22:20 - 2016-12-12 22:20 - 00000000 ____D C:\Program Files\McAfee
2016-12-12 19:41 - 2016-12-12 19:41 - 00000000 ____D C:\Users\7\AppData\Local\Chromium
2016-12-12 19:22 - 2016-12-12 19:22 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-12-11 01:11 - 2016-12-12 20:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 13
2016-12-07 22:50 - 2016-12-07 22:50 - 00000232 _____ C:\Users\7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Assassin's Creed III.url
2016-12-02 02:07 - 2016-12-02 02:07 - 00000000 ____D C:\Users\7\Documents\Notesy programu OneNote
2016-11-29 21:17 - 2016-11-29 21:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gwent [GOG.com]
2016-11-29 21:16 - 2016-12-12 22:32 - 00000000 ____D C:\Program Files (x86)\GOG Galaxy
2016-11-25 21:47 - 2016-11-25 21:47 - 00001113 _____ C:\Users\Public\Desktop\FIFA 15.lnk
2016-11-25 21:47 - 2016-11-25 21:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 15
2016-11-25 18:55 - 2016-11-25 18:55 - 00000000 ____D C:\Users\7\.QtWebEngineProcess
2016-11-22 17:39 - 2016-11-22 17:39 - 00002198 _____ C:\Users\7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-11-22 17:39 - 2016-11-22 17:39 - 00002110 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-11-22 17:39 - 2016-11-22 17:39 - 00002110 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-11-22 17:39 - 2016-11-22 17:39 - 00000000 ___RD C:\Users\7\OneDrive
2016-11-22 17:39 - 2016-11-22 17:39 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2016-11-22 17:23 - 2016-11-22 17:23 - 00002499 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype dla firm 2016.lnk
2016-11-22 17:23 - 2016-11-22 17:23 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive dla firm.lnk
2016-11-22 17:23 - 2016-11-22 17:23 - 00002402 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-11-22 17:23 - 2016-11-22 17:23 - 00002390 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-11-22 17:23 - 2016-11-22 17:23 - 00002375 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-11-22 17:23 - 2016-11-22 17:23 - 00002372 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-11-22 17:23 - 2016-11-22 17:23 - 00002369 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-11-22 17:23 - 2016-11-22 17:23 - 00002336 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-11-22 17:23 - 2016-11-22 17:23 - 00002326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-11-22 17:23 - 2016-11-22 17:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Narzędzia pakietu Microsoft Office 2016
2016-11-22 17:20 - 2016-11-22 17:38 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-11-22 17:17 - 2016-11-22 17:17 - 00000000 ____D C:\Program Files\Microsoft Office 15

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-12-13 02:25 - 2016-10-24 00:31 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-13 01:52 - 2014-03-30 01:15 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-13 00:55 - 2009-07-14 05:45 - 00024800 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-13 00:55 - 2009-07-14 05:45 - 00024800 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-13 00:54 - 2013-06-16 19:02 - 00000000 ____D C:\Program Files (x86)\Steam
2016-12-13 00:53 - 2010-11-21 13:53 - 00745352 _____ C:\Windows\system32\perfh015.dat
2016-12-13 00:53 - 2010-11-21 13:53 - 00157904 _____ C:\Windows\system32\perfc015.dat
2016-12-13 00:53 - 2009-07-14 06:13 - 01679338 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-13 00:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-12-13 00:46 - 2014-03-30 01:15 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-13 00:46 - 2013-02-19 15:39 - 00000000 ____D C:\ProgramData\NVIDIA
2016-12-13 00:46 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-13 00:32 - 2013-12-09 20:19 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-13 00:08 - 2015-01-16 20:09 - 00000000 ____D C:\Windows\system32\log
2016-12-13 00:08 - 2014-03-30 01:17 - 00001270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-13 00:08 - 2013-05-06 13:40 - 00000995 _____ C:\Users\7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-12-13 00:08 - 2013-05-06 13:40 - 00000000 ____D C:\Users\7
2016-12-12 22:56 - 2014-07-27 11:37 - 00000000 ____D C:\Windows\pss
2016-12-12 22:48 - 2014-04-27 17:00 - 00000000 ____D C:\Users\7\AppData\Roaming\TS3Client
2016-12-12 22:39 - 2016-09-28 16:28 - 00000000 ____D C:\Users\7\Desktop\PJATK
2016-12-12 22:36 - 2013-05-07 16:39 - 00000000 ____D C:\Program Files (x86)\Farming Simulator 2013
2016-12-12 22:35 - 2014-11-09 21:30 - 00000000 ____D C:\Program Files (x86)\Winamp
2016-12-12 22:35 - 2013-05-07 16:41 - 00000000 ____D C:\Users\7\Documents\My Games
2016-12-12 22:33 - 2013-05-09 13:30 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-12 22:32 - 2014-05-16 16:02 - 00000000 ____D C:\Users\7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-12-12 22:31 - 2014-04-19 21:47 - 00000000 ____D C:\Program Files (x86)\Counter-Strike 1.6
2016-12-12 22:31 - 2013-05-14 21:23 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-12-12 22:31 - 2013-05-06 19:57 - 00000000 ____D C:\Users\7\AppData\Local\Google
2016-12-12 22:31 - 2013-05-06 19:57 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-12 22:31 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-12-12 22:30 - 2013-05-24 23:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
2016-12-12 22:26 - 2016-11-06 03:00 - 00000000 ____D C:\Program Files (x86)\PokerStars.EU
2016-12-12 22:26 - 2014-12-23 14:35 - 00000000 ____D C:\ProgramData\Razer
2016-12-12 22:26 - 2014-12-23 14:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2016-12-12 22:26 - 2014-12-23 14:35 - 00000000 ____D C:\Program Files (x86)\Razer
2016-12-12 22:26 - 2014-08-31 16:15 - 00000000 ____D C:\Users\7\AppData\Local\PokerStars.EU
2016-12-12 22:25 - 2013-05-21 17:29 - 00000000 ____D C:\Users\7\AppData\Local\Ubisoft Game Launcher
2016-12-12 22:21 - 2014-12-23 14:36 - 00000000 ____D C:\Users\7\AppData\Local\Razer
2016-12-12 22:20 - 2016-09-30 15:38 - 00000000 ____D C:\ProgramData\AVAST Software
2016-12-12 21:16 - 2015-12-20 19:06 - 00000000 ____D C:\Users\7\AppData\Local\CrashDumps
2016-12-12 21:16 - 2013-09-13 18:29 - 00000000 ____D C:\Windows\Minidump
2016-12-12 20:24 - 2013-11-20 00:31 - 00000000 ____D C:\Users\7\AppData\Local\NVIDIA
2016-12-12 20:21 - 2016-09-30 15:40 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-12-12 20:21 - 2013-08-06 00:32 - 00000000 ____D C:\Users\7\Documents\FIFA 13
2016-12-12 20:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\security
2016-12-12 20:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help
2016-12-12 20:20 - 2015-02-19 12:49 - 00000000 ____D C:\Users\7\AppData\Local\Steam
2016-12-12 20:20 - 2013-05-14 21:19 - 00000000 ____D C:\ProgramData\Origin
2016-12-12 20:20 - 2013-05-06 19:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-12-12 20:20 - 2013-02-19 15:39 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-12-12 20:20 - 2013-02-19 15:39 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-12-12 20:20 - 2013-02-19 15:39 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-12-12 20:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2016-12-12 19:45 - 2014-08-30 02:49 - 00000219 _____ C:\Users\7\Desktop\Counter-Strike Global Offensive.url
2016-12-12 19:22 - 2014-06-21 15:23 - 00000000 ____D C:\Users\7\AppData\Local\NVIDIA Corporation
2016-12-11 02:12 - 2013-05-14 21:19 - 00000000 ____D C:\Users\7\AppData\Roaming\Origin
2016-12-11 00:55 - 2016-10-24 00:31 - 00000992 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-12-10 00:42 - 2013-05-14 21:18 - 00000000 ____D C:\Program Files (x86)\Origin
2016-12-07 22:49 - 2013-05-21 17:02 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2016-12-05 19:23 - 2016-10-12 20:28 - 00000000 ____D C:\Users\7\workspace
2016-12-05 19:23 - 2016-10-11 18:50 - 00000000 ____D C:\Users\7\AppData\Local\Eclipse
2016-12-05 19:23 - 2016-10-11 18:28 - 00000000 ____D C:\Users\7\.p2
2016-12-01 01:55 - 2013-05-10 23:20 - 00113624 _____ C:\Users\7\AppData\Local\GDIPFONTCACHEV1.DAT
2016-11-30 12:59 - 2013-05-11 11:12 - 00450880 _____ C:\Windows\system32\FNTCACHE.DAT
2016-11-29 21:17 - 2014-10-13 22:10 - 00000000 ____D C:\ProgramData\Package Cache
2016-11-26 03:19 - 2013-12-25 15:21 - 00000000 ____D C:\Users\7\Documents\FIFA 14
2016-11-23 13:53 - 2013-06-02 10:38 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-11-22 17:20 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-11-21 17:31 - 2016-09-28 18:10 - 00000600 _____ C:\Users\7\AppData\Roaming\winscp.rnd
2016-11-20 03:09 - 2013-05-06 13:40 - 00000000 ____D C:\Users\7\AppData\Local\VirtualStore
2016-11-13 02:43 - 2016-02-27 00:11 - 00000000 ____D C:\Users\7\BrawlhallaReplays
2016-11-13 00:23 - 2014-12-23 15:42 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-11-13 00:23 - 2013-02-19 15:23 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

==================== Pliki w katalogu głównym wybranych folderów =======

2013-06-08 19:51 - 2013-06-08 19:52 - 4167680 _____ () C:\Program Files (x86)\GUT3B3C.tmp
2013-07-27 19:24 - 2013-07-28 15:20 - 0093668 _____ () C:\Users\7\AppData\Roaming\Uninstal.exe
2016-09-28 18:10 - 2016-11-21 17:31 - 0000600 _____ () C:\Users\7\AppData\Roaming\winscp.rnd
2015-04-06 22:24 - 2015-04-06 22:24 - 0002403 _____ () C:\Users\7\AppData\Local\recently-used.xbel
2016-09-30 16:37 - 2016-09-30 16:37 - 0238147 _____ () C:\ProgramData\1475249771.bdinstall.bin
2016-09-30 16:37 - 2016-09-30 16:37 - 0028661 _____ () C:\ProgramData\agent.1475249864.bdinstall.bin

Niektóre pliki w TEMP:
====================
C:\Users\7\AppData\Local\Temp\libeay32.dll
C:\Users\7\AppData\Local\Temp\msvcr120.dll
C:\Users\7\AppData\Local\Temp\sqlite3.dll
C:\Users\7\AppData\Local\Temp\_isBA1D.exe
C:\Users\7\AppData\Local\Temp\_unps.exe


==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2015-04-05 09:21

==================== Koniec  FRST.txt ============================