Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 07-12-2016
Uruchomiony przez admin (administrator)  ADMIN-NTT (13-12-2016 21:43:53)
Uruchomiony z C:\Users\admin\Downloads
Załadowane profile: admin (Dostępne profile: admin)
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: IE)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1246516170-3302107629-780083620-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-20] (Piriform Ltd)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{72ECFD71-5D67-44C1-B624-91F1B051FEF0}: [DhcpNameServer] 213.158.199.1 213.158.199.5
Tcpip\..\Interfaces\{8F0473DC-C5F7-4B89-8A49-7B8BD90833A0}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-1246516170-3302107629-780083620-1000 -> DefaultScope {AC746685-FF45-41EC-801A-90AD4E1766ED} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-1246516170-3302107629-780083620-1000 -> {AC746685-FF45-41EC-801A-90AD4E1766ED} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_77\bin\ssv.dll [2016-04-02] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-04-02] (Oracle Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll [2012-02-13] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll [2012-02-13] (Microsoft Corporation.)

FireFox:
========
FF DefaultProfile: w1ibm05p.default
FF ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\w1ibm05p.default [2016-12-13]
FF user.js: detected! => C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\w1ibm05p.default\user.js [2016-12-13]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\w1ibm05p.default -> luck
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\w1ibm05p.default -> luck
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\w1ibm05p.default -> luck
FF Extension: (Brak nazwy) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\w1ibm05p.default\extensions\arthurj8283@gmail.com [nie znaleziono]
FF SearchPlugin: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\w1ibm05p.default\searchplugins\luck.xml [2016-12-05]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll [2016-09-13] ()
FF Plugin: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-04-02] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-04-02] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-13] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.60129.0\npctrl.dll [2011-01-28] ( Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 ABConfSV; C:\Program Files\Arcabit\common\arcaconfsv.exe [206304 2015-06-11] (Arcabit)
S3 ABMainSV; C:\Program Files\Arcabit\arcavir\arcamainsv.exe [241312 2016-05-17] (Arcabit)
S3 ArcaRemoteService; C:\Program Files\Arcabit\arcaagent\arcaremotesvc.exe [1007656 2015-06-11] (Arcabit)
S3 AVBackup; C:\Program Files\Arcabit\arcatools\arcabackup\arcabackupservice.exe [257304 2015-06-11] (Arcabit)
S3 AVTasks2; C:\Program Files\Arcabit\common\arcatasksservice.exe [200136 2015-06-11] (ArcaBit)
S3 AVUpdate; C:\Program Files\Arcabit\arcaupdate\update.exe [326296 2015-06-11] (Arcabit)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1404936 2016-08-09] ()
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [245544 2015-08-11] (EasyAntiCheat Ltd)
S3 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-29] ()
S3 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-29] (Intel Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2960672 2016-07-20] (IObit)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3844640 2015-11-22] (INCA Internet Co., Ltd.)
S3 SAService; C:\Windows\SysWOW64\SAsrv.exe [440320 2011-09-01] (Conexant Systems, Inc.) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 ABFLT; C:\Program Files\Arcabit\ArcaVir\ABFLT.sys [85232 2015-06-11] (ArcaBit)
S3 ABndis; C:\Windows\System32\DRIVERS\abndis.sys [49904 2015-06-11] (ArcaBit)
S3 ABndisMP; C:\Windows\System32\DRIVERS\abndis.sys [49904 2015-06-11] (ArcaBit)
R1 arcawfp; C:\Windows\System32\drivers\arcawfp.sys [60104 2016-12-09] (NetFilterSDK.com)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [54736 2016-11-17] ()
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-12-13] (REALiX(tm))
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-11-19] (Intel Corporation)
S3 IFCoEMP; C:\Windows\system32\drivers\ifM60x64.sys [347408 2011-01-12] (Intel(R) Corporation)
S3 IFCoEVB; C:\Windows\system32\drivers\ifP60X64.sys [70416 2011-01-12] (Intel(R) Corporation)
R0 ioatdma; C:\Windows\System32\Drivers\ioatdma.sys [46792 2009-11-16] (Intel Corporation)
S3 iSSetup; C:\Windows\system32\drivers\iSSetup.sys [191200 2011-01-05] (Intel Corporation)
S3 wbondir; C:\Windows\system32\drivers\wbondir.sys [56320 2007-03-20] (Winbond Electronics Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-12-13 21:43 - 2016-12-13 21:44 - 00008814 _____ C:\Users\admin\Downloads\FRST.txt
2016-12-13 21:28 - 2016-12-13 21:32 - 00018949 _____ C:\Users\admin\Desktop\Fixlog.txt
2016-12-13 21:26 - 2016-12-13 21:26 - 02420224 _____ (Farbar) C:\Users\admin\Downloads\FRST64.exe
2016-12-13 20:56 - 2016-12-13 21:11 - 07065600 _____ C:\Program Files (x86)\GUTBA69.tmp
2016-12-13 20:56 - 2016-12-13 20:56 - 00000000 ____D C:\Program Files (x86)\GUMBA68.tmp
2016-12-13 20:48 - 2016-12-13 20:48 - 07065600 _____ C:\Program Files (x86)\GUTC67A.tmp
2016-12-13 20:48 - 2016-12-13 20:48 - 00000000 ____D C:\Program Files (x86)\GUMC679.tmp
2016-12-13 20:47 - 2016-12-13 20:47 - 00000000 ____D C:\Users\admin\AppData\Local\Google
2016-12-13 20:42 - 2016-12-13 20:42 - 00000050 _____ C:\Windows\system32\Null
2016-12-13 20:36 - 2016-12-13 20:48 - 07065600 _____ C:\Program Files (x86)\GUTBD37.tmp
2016-12-13 20:36 - 2016-12-13 20:36 - 00000000 ____D C:\Program Files (x86)\GUMBD26.tmp
2016-12-13 20:30 - 2016-12-13 20:30 - 00002888 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (admin)
2016-12-13 20:30 - 2016-12-13 20:30 - 00000000 ____D C:\Windows\IObit
2016-12-13 19:55 - 2016-12-13 19:55 - 00027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2016-12-13 19:51 - 2016-12-13 19:51 - 07065600 _____ C:\Program Files (x86)\GUTC38E.tmp
2016-12-13 19:51 - 2016-12-13 19:51 - 00000000 ____D C:\Program Files (x86)\GUMC38D.tmp
2016-12-13 11:39 - 2016-12-13 11:39 - 00000000 ____D C:\Users\admin\AppData\Local\Chromium
2016-12-13 11:37 - 2016-12-13 19:10 - 00000000 ____D C:\AdwCleaner
2016-12-13 10:07 - 2016-12-13 10:07 - 00000368 _____ C:\Windows\Tasks\060184C3-9766-46a0-B258-F4518A0B2633.job
2016-12-13 10:07 - 2016-12-13 10:07 - 00000000 ____D C:\Users\admin\AppData\Roaming\Baidu
2016-12-13 10:06 - 2016-12-13 10:23 - 00349934 _____ C:\Windows\ntbtlog.txt
2016-12-12 11:09 - 2016-12-12 11:09 - 00000000 ____D C:\ProgramData\Gaijin
2016-12-11 20:29 - 2016-12-11 20:29 - 00073640 _____ C:\Users\admin\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-11 00:30 - 2016-12-11 00:30 - 00000222 _____ C:\Users\admin\Desktop\War Thunder.url
2016-12-10 20:07 - 2016-12-13 21:43 - 00000000 ____D C:\FRST
2016-12-10 11:24 - 2016-12-10 11:24 - 00000000 ____D C:\Users\admin\AppData\Roaming\Opera Software
2016-12-10 11:24 - 2016-12-10 11:24 - 00000000 ____D C:\Users\admin\AppData\Local\Opera Software
2016-12-10 11:20 - 2016-12-10 11:20 - 00001135 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk.1481621589.old
2016-12-10 11:17 - 2016-12-13 10:33 - 00000000 ____D C:\Program Files (x86)\Opera
2016-12-10 07:18 - 2015-03-05 06:12 - 00421784 _____ (Baidu, Inc.) C:\Windows\system32\BdSandboxDll64.dll
2016-12-10 07:18 - 2015-03-05 06:12 - 00332320 _____ (Baidu, Inc.) C:\Windows\SysWOW64\BdSandboxDll32.dll
2016-12-10 07:10 - 2016-12-10 07:11 - 00336192 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-10 06:45 - 2016-12-10 06:45 - 00000000 ____D C:\Users\admin\AppData\Local\ElevatedDiagnostics
2016-12-10 06:26 - 2016-12-10 06:26 - 00000116 _____ C:\Windows\wininit.ini
2016-12-09 18:57 - 2016-12-09 18:57 - 07065600 _____ C:\Program Files (x86)\GUTCF3E.tmp
2016-12-09 18:57 - 2016-12-09 18:57 - 00000000 ____D C:\Program Files (x86)\GUMCF3D.tmp
2016-12-08 14:23 - 2016-12-13 10:08 - 00000000 ____D C:\ProgramData\Baidu Security
2016-12-08 14:23 - 2016-12-08 14:23 - 00075248 _____ (Baidu, Inc.) C:\Windows\system32\bdhookx64.dll
2016-12-08 14:23 - 2016-12-08 14:23 - 00032752 _____ (Baidu, Inc.) C:\Windows\SysWOW64\bdhookx86.dll
2016-12-08 14:23 - 2016-12-08 14:23 - 00000000 ____D C:\Users\admin\AppData\LocalLow\BAVData
2016-12-08 14:23 - 2016-12-08 14:23 - 00000000 ____D C:\Program Files (x86)\Baidu Security
2016-12-08 14:20 - 2016-12-08 14:20 - 00000000 ____D C:\Users\Public\Documents\Baidu
2016-12-08 14:20 - 2016-12-08 14:20 - 00000000 ____D C:\Users\admin\AppData\Roaming\BavMini
2016-12-08 14:20 - 2016-12-08 14:20 - 00000000 ____D C:\ProgramData\Baidu
2016-12-08 13:39 - 2016-12-13 20:51 - 00000000 ____D C:\ProgramData\ProductData
2016-12-08 13:39 - 2016-12-08 13:40 - 00000000 ____D C:\Users\admin\AppData\Roaming\ProductData
2016-12-08 13:39 - 2016-12-08 13:39 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
2016-12-08 13:39 - 2016-12-08 13:39 - 00000000 ____D C:\Users\admin\AppData\LocalLow\IObit
2016-12-08 13:39 - 2016-12-08 13:39 - 00000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2016-12-08 13:39 - 2016-12-08 13:39 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2016-12-08 13:38 - 2016-12-13 20:51 - 00000000 ____D C:\Program Files (x86)\IObit
2016-12-08 13:38 - 2016-12-13 19:55 - 00000000 ____D C:\Users\admin\AppData\Roaming\IObit
2016-12-08 13:38 - 2016-12-13 19:55 - 00000000 ____D C:\ProgramData\IObit
2016-12-08 07:11 - 2016-12-08 07:11 - 00000000 ____D C:\Users\admin\AppData\Roaming\FiraxisLive
2016-12-05 23:07 - 2016-12-05 23:07 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-03 11:04 - 2016-12-03 11:04 - 00002297 _____ C:\Users\admin\Desktop\Skyrim (SKSE).lnk
2016-12-01 10:52 - 2016-12-05 23:13 - 00000000 ____D C:\Users\admin\AppData\Roaming\cfibf
2016-12-01 10:50 - 2016-12-05 23:43 - 00000000 ____D C:\ProgramData\ehadh
2016-12-01 10:50 - 2016-12-05 23:30 - 00000000 ____D C:\ProgramData\aehad
2016-12-01 10:50 - 2016-12-01 10:50 - 00000000 ____D C:\ProgramData\ttff
2016-11-30 16:56 - 2016-11-30 16:56 - 00000000 ____D C:\Users\admin\AppData\Local\Nexus
2016-11-30 13:52 - 2016-12-12 21:39 - 00000000 ____D C:\Users\admin\Desktop\Skyrim
2016-11-30 11:14 - 2016-12-04 11:09 - 00000000 ____D C:\Users\admin\AppData\Local\LOOT
2016-11-30 11:09 - 2016-11-30 11:09 - 00000963 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LOOT.lnk
2016-11-30 11:09 - 2016-11-30 11:09 - 00000000 ____D C:\Program Files (x86)\LOOT
2016-11-30 06:40 - 2016-11-30 20:35 - 00000000 ____D C:\Users\admin\AppData\Local\Skyrim
2016-11-30 06:39 - 2016-12-10 06:27 - 00000000 ____D C:\Users\admin\AppData\Local\Black_Tree_Gaming
2016-11-29 15:44 - 2016-12-01 14:42 - 00000000 ____D C:\Users\admin\Desktop\Data
2016-11-23 07:51 - 2016-11-23 12:42 - 00000000 ____D C:\Users\admin\AppData\Roaming\.StarMade
2016-11-23 07:48 - 2016-11-23 07:48 - 00000000 ____D C:\Users\admin\AppData\Roaming\StarMade Launcher
2016-11-22 22:07 - 2016-11-22 22:08 - 00000000 ____D C:\e9f89fe42c1bd6bfb2d1
2016-11-17 21:14 - 2016-11-17 21:14 - 00054736 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2016-11-17 21:12 - 2016-11-17 21:14 - 00000000 ____D C:\ProgramData\HitmanPro
2016-11-16 11:33 - 2016-11-16 11:33 - 00000000 ____D C:\7a90194b48d275713c8676
2016-11-16 06:02 - 2016-11-18 19:41 - 00000000 ____D C:\Users\admin\AppData\Roaming\SpaceEngineers
2016-11-15 23:16 - 2016-12-13 21:08 - 00000000 ____D C:\Users\admin\AppData\Roaming\discord
2016-11-15 23:16 - 2016-12-03 10:39 - 00002260 _____ C:\Users\admin\Desktop\Discord.lnk
2016-11-15 23:16 - 2016-12-03 10:38 - 00000000 ____D C:\Users\admin\AppData\Local\Discord
2016-11-15 23:16 - 2016-11-15 23:16 - 00000000 ____D C:\Users\admin\AppData\Local\SquirrelTemp
2016-11-13 12:57 - 2016-12-13 20:05 - 00000000 ____D C:\ProgramData\SkySaga Infinite Isles
2016-11-13 12:56 - 2016-11-13 12:56 - 00000000 ____D C:\ProgramData\Caphyon

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-12-13 21:41 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-13 21:35 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-13 21:35 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-13 21:28 - 2016-07-27 10:12 - 00000000 ___RD C:\Users\admin\Desktop\Gry
2016-12-13 21:25 - 2016-10-18 20:56 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-13 20:56 - 2016-10-18 20:55 - 00000000 ____D C:\Users\admin\AppData\Local\Deployment
2016-12-13 20:21 - 2015-06-12 14:58 - 00000000 ____D C:\Program Files (x86)\Steam
2016-12-13 20:13 - 2015-06-11 13:41 - 00001042 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-12-13 19:44 - 2015-06-14 01:35 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-12-13 19:43 - 2015-06-11 14:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-13 19:17 - 2016-09-23 13:16 - 00000000 _____ C:\Users\Public\Documents\temp.dat
2016-12-13 19:10 - 2016-09-23 13:17 - 00000000 ____D C:\Windows\system32\log
2016-12-13 19:07 - 2015-07-02 06:43 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-13 11:39 - 2015-06-12 15:09 - 00000000 ____D C:\Users\admin\AppData\Local\Steam
2016-12-13 10:31 - 2016-11-09 16:29 - 00000000 ____D C:\GOG Games
2016-12-13 10:31 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-12-12 11:45 - 2016-03-18 20:13 - 00000000 ____D C:\Users\admin\Documents\My Games
2016-12-12 10:31 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\oldcatroot2
2016-12-11 17:29 - 2015-06-24 21:55 - 00000000 ____D C:\Users\admin\AppData\Roaming\TS3Client
2016-12-10 06:45 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-12-10 06:37 - 2016-09-08 08:32 - 00000000 ____D C:\Windows\Minidump
2016-12-09 07:00 - 2015-06-11 14:40 - 00060104 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\arcawfp.sys
2016-12-08 14:07 - 2015-06-11 13:35 - 00000000 ____D C:\Windows\SoftwareDistribution.old
2016-12-08 13:54 - 2016-08-23 12:23 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2016-12-08 13:54 - 2015-06-11 14:30 - 00000000 ____D C:\Windows\Panther
2016-12-07 14:56 - 2015-06-12 10:12 - 00000000 ____D C:\Users\admin\AppData\Roaming\Skype
2016-12-01 10:50 - 2016-09-23 13:16 - 00000000 _____ C:\Users\Public\Documents\report.dat
2016-11-30 17:22 - 2010-11-21 13:53 - 00706632 _____ C:\Windows\system32\perfh015.dat
2016-11-30 17:22 - 2010-11-21 13:53 - 00139530 _____ C:\Windows\system32\perfc015.dat
2016-11-30 14:21 - 2015-06-11 14:12 - 01670152 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-11-30 14:21 - 2009-07-14 06:13 - 01670152 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-30 13:41 - 2015-06-11 14:28 - 00000000 ____D C:\ProgramData\Package Cache
2016-11-16 00:15 - 2016-09-28 14:39 - 00000000 ____D C:\ProgramData\Hi-Rez Studios
2016-11-16 00:15 - 2016-09-28 14:39 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2016-11-16 00:15 - 2015-06-11 13:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-11-16 00:03 - 2015-09-19 16:19 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2016-11-15 17:09 - 2016-07-19 11:54 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi
2016-11-15 17:09 - 2016-07-19 11:54 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi

==================== Pliki w katalogu głównym wybranych folderów =======

2016-10-18 20:56 - 2016-10-18 20:56 - 7065600 _____ () C:\Program Files (x86)\GUT8B8.tmp
2016-12-13 20:56 - 2016-12-13 21:11 - 7065600 _____ () C:\Program Files (x86)\GUTBA69.tmp
2016-12-13 20:36 - 2016-12-13 20:48 - 7065600 _____ () C:\Program Files (x86)\GUTBD37.tmp
2016-12-13 19:51 - 2016-12-13 19:51 - 7065600 _____ () C:\Program Files (x86)\GUTC38E.tmp
2016-12-13 20:48 - 2016-12-13 20:48 - 7065600 _____ () C:\Program Files (x86)\GUTC67A.tmp
2016-12-09 18:57 - 2016-12-09 18:57 - 7065600 _____ () C:\Program Files (x86)\GUTCF3E.tmp
2016-11-01 21:18 - 2016-11-02 02:58 - 7065600 _____ () C:\Program Files (x86)\GUTF8C2.tmp

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2016-12-06 13:45

==================== Koniec  FRST.txt ============================