Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 21-12-2016
Uruchomiony przez User (administrator)  USER-KOMPUTER (25-12-2016 20:09:28)
Uruchomiony z C:\Users\User\Downloads
Załadowane profile: User (Dostępne profile: User & Administrator)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(GG Network S.A.) C:\Users\User\AppData\Local\GG\Application\gghub.exe
(GG Network S.A.) C:\Users\User\AppData\Local\GG\Application\ggapp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <====== UWAGA
HKLM Group Policy restriction on software: C:\Users\User\Desktop\d7II <====== UWAGA
HKU\S-1-5-19\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoViewContextMenu] 0
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 31.128.24.2 31.128.0.31
Tcpip\..\Interfaces\{6B656B12-B433-45D8-A4E5-AF0197A915EE}: [DhcpNameServer] 31.128.24.2 31.128.0.31

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\S-1-5-21-2674393007-2980067062-2201329540-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2674393007-2980067062-2201329540-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2674393007-2980067062-2201329540-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={D5DE7AE2-0CCE-4F9B-8CEA-652D726073E8}&mid=22da4f7d97a747cc9c7c0119dfa408b9-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=AVG&coid=avgtbavg&cmpid=0615piz&pr=fr&d=2015-12-13 17:56:47&v=4.2.3.128&pid=wtu&sg=&sap=hp
SearchScopes: HKU\S-1-5-21-2674393007-2980067062-2201329540-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2674393007-2980067062-2201329540-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={D5DE7AE2-0CCE-4F9B-8CEA-652D726073E8}&mid=22da4f7d97a747cc9c7c0119dfa408b9-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=AVG&coid=avgtbavg&cmpid=0615piz&pr=fr&d=2015-12-13 17:56:47&v=4.2.3.128&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 8275o61y.default
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\8275o61y.default [2016-10-10]
FF NetworkProxy: Mozilla\Firefox\Profiles\8275o61y.default -> type", 0
FF Extension: (Firefox Hotfix) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\8275o61y.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-09-06]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-03] (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-24] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-24] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2674393007-2980067062-2201329540-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [Brak pliku]

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2016-02-07]
CHR Extension: (Prezentacje Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-12]
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-12]
CHR Extension: (Dysk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-12]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-12]
CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-04]
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-12]
CHR Extension: (Arkusze Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-12]
CHR Extension: (Dokumenty Google offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-12]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-12]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-12]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Guest Profile [2016-02-07]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1 [2016-12-25]
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-06]
CHR Extension: (Dysk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-06]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-06]
CHR Extension: (uBlock Origin) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-12-22]
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-06]
CHR Extension: (Arkusze Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-06]
CHR Extension: (Dokumenty Google offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-17]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (uBlock Origin Extra) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pgdnlhfefecpicbbihgmbmffkjpaplco [2016-12-23]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-06]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-16]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile [2016-02-06]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1368408 2015-11-30] (Disc Soft Ltd)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2771848 2016-11-10] (ESET)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156400 2015-11-25] (NVIDIA Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-03] (Intel Corporation)
S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2015-12-12] () [Brak podpisu cyfrowego]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-11-25] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8133424 2015-11-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5915440 2015-11-25] (NVIDIA Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10216688 2016-11-28] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-12-12] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [46392 2015-12-12] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [262792 2016-11-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [197248 2016-11-10] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [181384 2016-11-10] (ESET)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [118504 2012-12-19] (Qualcomm Atheros Co., Ltd.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-03] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-11-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-11-25] (NVIDIA Corporation)
S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation)
S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [19496 2008-05-16] (MCCI Corporation)
S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [158760 2008-05-16] (MCCI Corporation)
S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [137256 2008-05-16] (MCCI Corporation)
S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [34344 2008-05-16] (MCCI Corporation)
S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [136744 2008-05-16] (MCCI Corporation)
S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [151592 2008-05-16] (MCCI Corporation)
R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2008-01-09] (Sony Ericsson Mobile Communications)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-12-25 20:09 - 2016-12-25 20:09 - 00016792 _____ C:\Users\User\Downloads\FRST.txt
2016-12-25 20:08 - 2016-12-25 20:09 - 00000000 ____D C:\FRST
2016-12-25 20:08 - 2016-12-25 20:08 - 02420736 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2016-12-25 13:27 - 2016-12-25 13:29 - 60255320 _____ C:\Users\User\Downloads\ME(v9.5.14.1724_1.5M).zip
2016-12-25 13:27 - 2016-12-25 13:28 - 11692328 _____ C:\Users\User\Downloads\SmartConnect(v5.0.10.2907_64bit).zip
2016-12-25 13:27 - 2016-12-25 13:27 - 11054661 _____ C:\Users\User\Downloads\RapidStorage(v13.1.0.1058).zip
2016-12-25 13:27 - 2016-12-25 13:27 - 05508962 _____ C:\Users\User\Downloads\Intel_USB3(v4.0.3.49_PV).zip
2016-12-25 13:27 - 2016-12-25 13:27 - 01456058 _____ C:\Users\User\Downloads\Floppy(v13.1.0.1058).zip
2016-12-25 13:26 - 2016-12-25 13:29 - 123207552 _____ C:\Users\User\Downloads\VGA(v15.36.25.64.4280).zip
2016-12-25 13:20 - 2016-12-25 13:20 - 00315448 _____ C:\Windows\Minidump\122516-16114-01.dmp
2016-12-25 13:12 - 2016-12-25 13:12 - 00316576 _____ C:\Windows\Minidump\122516-11856-01.dmp
2016-12-23 15:07 - 2016-12-23 15:11 - 00000000 ____D C:\Users\User\Desktop\New Folder
2016-12-23 15:07 - 2016-12-23 15:07 - 00085380 _____ C:\Users\User\Downloads\bluescreenview-x64.zip
2016-12-23 15:04 - 2016-12-23 15:04 - 00315832 _____ C:\Windows\Minidump\122316-11497-01.dmp
2016-12-23 15:03 - 2016-12-23 15:03 - 00304064 _____ C:\Windows\Minidump\122316-12230-01.dmp
2016-12-23 14:54 - 2016-12-23 14:54 - 00319920 _____ C:\Windows\Minidump\122316-13447-01.dmp
2016-12-23 12:42 - 2016-12-23 12:42 - 00266320 _____ C:\Windows\Minidump\122316-10795-01.dmp
2016-12-22 14:58 - 2016-12-22 14:58 - 00575121 _____ C:\Users\User\Desktop\zdjecie.lek.54
2016-12-17 14:47 - 2016-12-17 14:47 - 00000000 ____D C:\Users\User\Desktop\c++
2016-12-17 13:13 - 2016-12-17 13:13 - 00642632 _____ (EFD Software ) C:\Users\User\Downloads\hdtune_255.exe
2016-12-17 13:13 - 2016-12-17 13:13 - 00000930 _____ C:\Users\User\Desktop\HD Tune.lnk
2016-12-17 13:13 - 2016-12-17 13:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune
2016-12-17 13:13 - 2016-12-17 13:13 - 00000000 ____D C:\Program Files (x86)\HD Tune
2016-12-17 13:02 - 2016-12-25 13:35 - 00358698 _____ C:\Windows\ntbtlog.txt
2016-12-10 18:53 - 2016-12-10 18:53 - 00000971 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2016-12-10 18:53 - 2016-12-10 18:53 - 00000959 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
2016-11-27 16:03 - 2016-12-10 22:46 - 00000000 ____D C:\Users\User\Desktop\codeblocks-project
2016-11-27 16:02 - 2016-12-17 15:27 - 00000000 ____D C:\Users\User\AppData\Roaming\CodeBlocks
2016-11-27 16:02 - 2016-11-27 16:02 - 00001095 _____ C:\Users\User\Desktop\CodeBlocks.lnk
2016-11-27 16:02 - 2016-11-27 16:02 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2016-11-27 16:02 - 2016-11-27 16:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks
2016-11-27 16:02 - 2016-11-27 16:02 - 00000000 ____D C:\Program Files (x86)\CodeBlocks
2016-11-27 15:59 - 2016-11-27 16:01 - 83783938 _____ (The Code::Blocks Team) C:\Users\User\Downloads\codeblocks-16.01mingw-setup.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-12-25 19:51 - 2009-07-14 05:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-25 19:51 - 2009-07-14 05:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-25 19:50 - 2011-04-12 14:21 - 00743042 _____ C:\Windows\system32\perfh015.dat
2016-12-25 19:50 - 2011-04-12 14:21 - 00156524 _____ C:\Windows\system32\perfc015.dat
2016-12-25 19:50 - 2009-07-14 06:13 - 01676910 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-25 19:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-12-25 19:48 - 2015-12-12 21:05 - 00000000 ____D C:\Users\User\AppData\Roaming\GG
2016-12-25 19:44 - 2015-12-12 22:59 - 00000000 ____D C:\ProgramData\NVIDIA
2016-12-25 19:44 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-25 13:22 - 2016-06-03 12:34 - 310507966 _____ C:\Windows\MEMORY.DMP
2016-12-25 13:20 - 2016-06-03 12:34 - 00000000 ____D C:\Windows\Minidump
2016-12-25 13:17 - 2015-12-12 20:43 - 00003982 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{7D13AB53-34AE-40E7-8412-B1AC7E9700B2}
2016-12-25 13:14 - 2015-12-16 19:37 - 00002562 _____ C:\Windows\diagwrn.xml
2016-12-25 13:14 - 2015-12-16 19:37 - 00001908 _____ C:\Windows\diagerr.xml
2016-12-23 21:24 - 2016-06-05 13:31 - 00000000 ____D C:\Users\User\AppData\Roaming\AIMP
2016-12-23 21:22 - 2016-02-19 16:50 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-22 20:39 - 2016-09-23 11:53 - 00003898 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1474627984
2016-12-22 20:39 - 2016-09-23 11:52 - 00000000 ____D C:\Program Files (x86)\Opera
2016-12-18 17:04 - 2016-09-13 09:18 - 00000000 ____D C:\Users\User\AppData\Local\Tibia
2016-12-17 13:24 - 2015-12-12 09:56 - 00003480 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-17 13:24 - 2015-12-12 09:56 - 00003352 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-15 13:25 - 2015-12-12 09:57 - 00002201 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-15 13:25 - 2015-12-12 09:57 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-11 16:58 - 2015-12-11 20:01 - 00108840 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-11 15:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports
2016-12-10 21:29 - 2009-07-14 05:45 - 00416352 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-10 19:31 - 2016-01-17 16:49 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-12-09 21:37 - 2015-12-12 22:18 - 00000000 ____D C:\Users\User\Documents\Euro Truck Simulator 2

==================== Pliki w katalogu głównym wybranych folderów =======

2016-04-08 21:33 - 2016-04-08 21:33 - 0000000 _____ () C:\Users\User\AppData\Local\{24E43B48-8864-4A8F-8E04-CB68BD376651}
2016-03-02 21:22 - 2016-03-02 21:22 - 0000000 _____ () C:\Users\User\AppData\Local\{4FCD3F5C-D377-4EE6-A557-8E45997D5F4B}
2016-04-11 18:30 - 2016-04-11 18:30 - 0000000 _____ () C:\Users\User\AppData\Local\{9189815E-FE71-469C-8F7F-085D524E6113}
2016-04-18 16:53 - 2016-04-18 16:53 - 0000000 _____ () C:\Users\User\AppData\Local\{A60157E0-D43A-4C50-96A9-AF87592D6CF3}
2016-04-04 14:49 - 2016-04-04 14:49 - 0000000 _____ () C:\Users\User\AppData\Local\{D785EB98-AD56-43D3-AC4F-EB8519EA2BE9}

Niektóre pliki w TEMP:
====================
C:\Users\User\AppData\Local\Temp\drm_dialogs.dll
C:\Users\User\AppData\Local\Temp\drm_dyndata_7330014.dll
C:\Users\User\AppData\Local\Temp\ggdrive-menu.exe
C:\Users\User\AppData\Local\Temp\ggdrive-overlay.exe
C:\Users\User\AppData\Local\Temp\installstats.exe
C:\Users\User\AppData\Local\Temp\Tibia_Setup_4fbb-8cc7-4e48-aad5.exe
C:\Users\User\AppData\Local\Temp\ubi56B8.tmp.exe


==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2016-12-18 12:58

==================== Koniec  FRST.txt ============================