Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 01-01-2017
Uruchomiony przez valdgir (administrator)  VALDGIR-PC (03-01-2017 23:23:02)
Uruchomiony z C:\Users\valdgir\Desktop
Załadowane profile: valdgir (Dostępne profile: valdgir)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 7 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
() C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(SAMSUNG Electronics co., LTD.) C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6111232 2008-04-17] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-10-26] (Synaptics, Inc.)
HKLM\...\Run: [RemoteControl] => C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [71216 2007-03-14] (Cyberlink Corp.)
HKLM\...\Run: [LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [52256 2007-01-08] ()
HKU\S-1-5-21-3262479037-2494767950-1924738242-1003\...\Run: [LightScribe Control Panel] => C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2289664 2008-03-17] (Hewlett-Packard Company)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk [2008-07-16]
ShortcutTarget: Adobe Reader Speed Launch.lnk -> C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk [2008-07-16]
ShortcutTarget: Adobe Reader Synchronizer.lnk -> C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk [2008-07-16]
ShortcutTarget: BTTray.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{49D3FE37-CB78-4C9E-AC28-F75E19D0D5B7}: [DhcpNameServer] 192.168.1.1 0.0.0.0

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp:\\www.samsungcomputer.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-3262479037-2494767950-1924738242-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3262479037-2494767950-1924738242-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp:\\www.samsungcomputer.com
BHO: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22] (Adobe Systems Incorporated)

FireFox:
========
FF DefaultProfile: i45dm2vn.default
FF ProfilePath: C:\Users\valdgir\AppData\Roaming\Mozilla\Firefox\Profiles\i45dm2vn.default [2017-01-03]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2017-01-03] [Brak podpisu cyfrowego]
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 EvtEng; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [819200 2008-05-23] (Intel(R) Corporation) [Brak podpisu cyfrowego]
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-03-17] (Hewlett-Packard Company) [Brak podpisu cyfrowego]
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [45272 2005-10-13] (Microsoft Corporation)
R2 RegSrvc; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [466944 2008-05-23] (Intel(R) Corporation) [Brak podpisu cyfrowego]
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2006-12-19] ()
R2 Samsung Update Plus; C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe [77480 2008-05-13] () [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2007-05-23] (SAMSUNG ELECTRONICS CO., LTD.)
R3 VMC302; C:\Windows\System32\Drivers\VMC302.sys [242560 2008-04-05] (Vimicro Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
U3 fxdiifob; \??\C:\Users\valdgir\AppData\Local\Temp\fxdiifob.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-01-03 22:28 - 2008-06-20 02:14 - 00781344 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2017-01-03 22:28 - 2008-06-20 02:14 - 00622080 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2017-01-03 22:28 - 2008-06-20 02:14 - 00326160 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2017-01-03 22:28 - 2008-06-20 02:14 - 00105016 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2017-01-03 22:28 - 2008-06-20 02:14 - 00097800 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2017-01-03 22:28 - 2008-06-20 02:14 - 00043544 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2017-01-03 22:28 - 2008-06-20 02:14 - 00037384 _____ (Microsoft Corporation) C:\Windows\system32\infocardcpl.cpl
2017-01-03 22:28 - 2008-06-20 02:14 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2017-01-03 22:24 - 2008-07-27 19:03 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2017-01-03 22:24 - 2008-07-27 19:03 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2017-01-03 22:24 - 2008-07-27 19:03 - 00096760 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2017-01-03 22:24 - 2008-07-27 19:03 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2017-01-03 22:24 - 2008-07-27 19:03 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2017-01-03 22:23 - 2010-02-21 00:39 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\nshhttp.dll
2017-01-03 22:23 - 2010-02-21 00:37 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll
2017-01-03 22:23 - 2010-02-20 22:18 - 00411136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-01-03 15:20 - 2017-01-03 15:20 - 00000000 ____D C:\zoek
2017-01-03 15:18 - 2017-01-03 15:23 - 00000603 _____ C:\runcheck.txt
2017-01-03 15:18 - 2017-01-03 15:18 - 00000000 ____D C:\zoek_backup
2017-01-03 15:17 - 2017-01-03 15:17 - 01309184 _____ C:\Users\valdgir\Desktop\zoek.exe
2017-01-03 14:16 - 2017-01-03 14:16 - 05198336 _____ (AVAST Software) C:\Users\valdgir\Desktop\aswMBR.exe
2017-01-03 14:12 - 2017-01-03 14:14 - 00000000 ____D C:\ProgramData\HitmanPro
2017-01-03 14:11 - 2017-01-03 14:11 - 11005320 _____ (SurfRight B.V.) C:\Users\valdgir\Desktop\HitmanPro.exe
2017-01-03 14:01 - 2017-01-03 14:01 - 07269656 _____ (Bitdefender LLC) C:\Users\valdgir\Desktop\BootkitRemoval_x86.exe
2017-01-03 13:59 - 2008-06-26 02:45 - 12240896 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0007.dll
2017-01-03 13:58 - 2008-06-26 04:29 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2017-01-03 13:58 - 2008-06-26 02:45 - 02644480 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0009.dll
2017-01-03 13:55 - 2017-01-03 13:59 - 00344094 _____ C:\TDSSKiller.3.1.0.12_03.01.2017_13.55.21_log.txt
2017-01-03 13:55 - 2017-01-03 13:55 - 04747704 _____ (AO Kaspersky Lab) C:\Users\valdgir\Desktop\tdsskiller.exe
2017-01-03 13:53 - 2011-04-21 14:16 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2017-01-03 13:53 - 2011-02-16 16:29 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-01-03 13:53 - 2011-02-16 14:24 - 00292864 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-01-03 13:53 - 2010-12-28 15:57 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
2017-01-03 13:53 - 2010-09-10 19:18 - 10626560 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-01-03 13:53 - 2010-09-10 17:37 - 08147456 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2017-01-03 13:53 - 2010-06-16 16:12 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-01-03 13:53 - 2010-04-16 17:10 - 00501760 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-01-03 13:53 - 2009-06-15 16:20 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-01-03 13:53 - 2008-06-19 04:31 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2017-01-03 13:52 - 2011-07-06 15:56 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-03 13:52 - 2011-06-02 13:59 - 02042368 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-01-03 13:52 - 2011-04-29 13:49 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-03 13:52 - 2011-04-29 13:49 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-03 13:52 - 2011-04-14 15:24 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2017-01-03 13:52 - 2011-03-10 17:12 - 01161728 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2017-01-03 13:52 - 2011-03-10 17:12 - 01136640 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2017-01-03 13:52 - 2011-03-02 15:49 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2017-01-03 13:52 - 2011-03-02 15:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2017-01-03 13:52 - 2011-02-22 13:51 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2017-01-03 13:52 - 2011-02-18 14:31 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-01-03 13:52 - 2010-10-15 15:08 - 03600272 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2017-01-03 13:52 - 2010-10-15 15:08 - 03548048 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-01-03 13:52 - 2010-10-15 14:48 - 01205080 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-01-03 13:52 - 2010-08-26 17:07 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-01-03 13:52 - 2010-08-17 14:32 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2017-01-03 13:52 - 2010-06-28 17:15 - 01315840 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-01-03 13:52 - 2010-05-27 20:16 - 00081920 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll
2017-01-03 13:52 - 2010-04-05 17:07 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-01-03 13:52 - 2009-09-10 18:30 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-03 13:52 - 2009-08-14 17:29 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2017-01-03 13:52 - 2009-08-14 17:29 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2017-01-03 13:52 - 2009-08-14 15:16 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\NETSTAT.EXE
2017-01-03 13:52 - 2009-08-14 15:16 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\ARP.EXE
2017-01-03 13:52 - 2009-08-14 15:16 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\ROUTE.EXE
2017-01-03 13:52 - 2009-08-14 15:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\MRINFO.EXE
2017-01-03 13:52 - 2009-08-14 15:16 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\finger.exe
2017-01-03 13:52 - 2009-08-14 15:16 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\TCPSVCS.EXE
2017-01-03 13:52 - 2009-08-14 15:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\HOSTNAME.EXE
2017-01-03 13:52 - 2009-07-17 15:35 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\atl.dll
2017-01-03 13:52 - 2009-07-11 20:32 - 00513024 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2017-01-03 13:52 - 2009-07-11 20:32 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2017-01-03 13:52 - 2009-07-11 20:32 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2017-01-03 13:52 - 2009-07-11 20:29 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\L2SecHC.dll
2017-01-03 13:52 - 2009-07-11 18:18 - 02501921 _____ C:\Windows\system32\wlan.tmf
2017-01-03 13:52 - 2009-06-10 13:12 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2017-01-03 13:52 - 2009-06-10 13:11 - 02868224 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2017-01-03 13:52 - 2009-06-10 13:11 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
2017-01-03 13:52 - 2009-05-04 11:11 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2017-01-03 13:52 - 2008-12-06 05:42 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2017-01-03 13:52 - 2008-10-21 06:25 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-01-03 13:52 - 2008-06-06 04:27 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2017-01-03 13:52 - 2008-06-06 04:27 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\xolehlp.dll
2017-01-03 13:52 - 2008-04-05 04:34 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\pacerprf.dll
2017-01-03 13:52 - 2008-04-05 02:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
2017-01-03 13:51 - 2011-04-29 13:49 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-01-03 13:51 - 2011-04-29 13:49 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-01-03 13:51 - 2011-02-16 16:35 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-01-03 13:51 - 2011-02-16 16:32 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-01-03 13:51 - 2010-12-20 16:39 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-01-03 13:51 - 2010-12-14 16:49 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2017-01-03 13:51 - 2010-08-31 16:41 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll
2017-01-03 13:51 - 2010-08-31 16:41 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll
2017-01-03 13:51 - 2010-08-20 16:21 - 00866816 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2017-01-03 13:51 - 2010-06-18 17:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2017-01-03 13:51 - 2010-05-04 19:39 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\msshsq.dll
2017-01-03 13:51 - 2010-04-05 17:08 - 00317952 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2017-01-03 13:51 - 2009-06-15 19:20 - 00439896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-03 13:51 - 2009-06-15 16:24 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-03 13:51 - 2009-06-15 16:24 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-03 13:51 - 2009-06-15 16:23 - 01256448 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-03 13:51 - 2009-06-15 16:21 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-03 13:51 - 2009-06-15 13:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-03 13:51 - 2009-04-23 13:42 - 00636928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-01-03 13:51 - 2009-03-03 05:39 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-01-03 13:51 - 2009-03-03 05:39 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\sdohlp.dll
2017-01-03 13:51 - 2009-03-03 05:39 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll
2017-01-03 13:51 - 2009-03-03 05:37 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll
2017-01-03 13:51 - 2009-03-03 05:37 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\iasads.dll
2017-01-03 13:51 - 2009-03-03 05:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\iasdatastore.dll
2017-01-03 13:51 - 2009-03-03 04:04 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
2017-01-03 13:51 - 2009-03-03 03:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\iashost.exe
2017-01-03 13:51 - 2008-10-29 07:29 - 02927104 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-01-03 13:51 - 2008-10-16 05:47 - 00466944 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2017-01-03 13:51 - 2008-06-26 04:29 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2017-01-03 13:51 - 2008-04-18 06:48 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\es.dll
2017-01-03 13:50 - 2011-05-02 16:58 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-01-03 13:50 - 2011-01-21 16:46 - 11582464 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-01-03 13:50 - 2011-01-21 16:46 - 00351744 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
2017-01-03 13:50 - 2010-12-29 18:41 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2017-01-03 13:50 - 2010-12-29 18:41 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2017-01-03 13:50 - 2010-12-29 18:41 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\sbeio.dll
2017-01-03 13:50 - 2010-12-29 18:39 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2017-01-03 13:50 - 2010-11-06 12:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2017-01-03 13:50 - 2010-11-06 12:10 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
2017-01-03 13:50 - 2010-11-06 12:10 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2017-01-03 13:50 - 2010-11-06 12:09 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2017-01-03 13:50 - 2010-11-05 01:53 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2017-01-03 13:50 - 2010-10-28 13:56 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-01-03 13:50 - 2010-10-18 15:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2017-01-03 13:50 - 2010-06-11 16:30 - 01257472 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-01-03 13:50 - 2010-04-16 17:10 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-01-03 13:50 - 2010-02-18 15:11 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2017-01-03 13:50 - 2010-02-18 12:52 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2017-01-03 13:50 - 2010-01-21 16:59 - 00062464 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\system32\l3codeca.acm
2017-01-03 13:50 - 2009-03-17 04:38 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\amxread.dll
2017-01-03 13:50 - 2009-03-17 04:38 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\apilogen.dll
2017-01-03 13:50 - 2009-02-13 09:49 - 00888832 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-01-03 13:50 - 2008-08-12 04:39 - 00443392 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-01-03 13:50 - 2008-08-02 04:26 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-01-03 13:50 - 2008-08-02 02:01 - 00625152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-01-03 13:50 - 2008-06-26 04:29 - 00565248 _____ (Microsoft Corporation) C:\Windows\system32\emdmgmt.dll
2017-01-03 13:50 - 2008-06-26 04:29 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll
2017-01-03 13:50 - 2008-05-10 02:33 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2017-01-03 13:49 - 2011-04-20 15:47 - 00375808 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-01-03 13:49 - 2011-04-20 15:44 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-01-03 13:49 - 2010-12-17 17:43 - 02067456 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-01-03 13:49 - 2010-12-17 16:06 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2017-01-03 13:49 - 2010-06-16 16:59 - 00898952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-01-03 13:49 - 2009-09-04 13:24 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll
2017-01-03 13:49 - 2009-07-14 14:00 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2017-01-03 13:49 - 2009-07-14 13:59 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2017-01-03 13:49 - 2009-07-14 13:59 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2017-01-03 13:49 - 2009-07-14 13:58 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2017-01-03 13:49 - 2009-07-14 09:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.tlb
2017-01-03 13:49 - 2009-07-14 09:30 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\amcompat.tlb
2017-01-03 13:49 - 2009-04-23 13:43 - 00784896 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-03 13:49 - 2008-06-23 02:59 - 00996352 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
2017-01-03 13:49 - 2008-06-23 02:58 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe
2017-01-03 13:49 - 2008-05-08 22:59 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2017-01-03 13:49 - 2008-05-08 22:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2017-01-03 13:49 - 2008-05-08 22:59 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2017-01-03 13:49 - 2008-05-08 22:59 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\wshext.dll
2017-01-03 13:49 - 2008-05-08 22:58 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2017-01-03 13:49 - 2008-05-08 22:58 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2017-01-03 13:48 - 2010-08-31 16:40 - 00531968 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2017-01-03 13:48 - 2009-12-28 13:35 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
2017-01-03 13:48 - 2009-12-28 13:32 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll
2017-01-03 13:48 - 2009-12-28 13:32 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
2017-01-03 13:48 - 2009-12-28 13:32 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
2017-01-03 13:48 - 2009-12-28 13:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
2017-01-03 13:48 - 2009-12-28 13:31 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll
2017-01-03 13:48 - 2009-12-28 13:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
2017-01-03 13:48 - 2009-12-28 13:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll
2017-01-03 13:48 - 2009-12-28 13:28 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\avicap32.dll
2017-01-03 13:48 - 2009-10-07 13:41 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2017-01-03 13:48 - 2009-10-07 13:41 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2017-01-03 13:48 - 2009-08-10 14:05 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2017-01-03 13:48 - 2009-04-02 13:37 - 00604672 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2017-01-03 13:48 - 2008-09-10 04:40 - 01334272 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2017-01-03 13:38 - 2017-01-03 13:51 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-01-03 13:38 - 2017-01-03 13:38 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-03 13:38 - 2017-01-03 13:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-03 13:37 - 2017-01-03 13:37 - 00094936 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2017-01-03 13:37 - 2017-01-03 13:37 - 00000357 _____ C:\Users\valdgir\Desktop\Pobieranie.lnk
2017-01-03 13:37 - 2017-01-03 13:37 - 00000000 ____D C:\Users\valdgir\Desktop\mbar
2017-01-03 13:36 - 2017-01-03 13:36 - 16563352 _____ (Malwarebytes Corp.) C:\Users\valdgir\Downloads\mbar-1.09.3.1001.exe
2017-01-03 13:32 - 2011-04-29 15:54 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-03 13:31 - 2016-10-26 16:29 - 00407720 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-01-03 13:29 - 2017-01-03 15:49 - 00000000 ____D C:\Users\valdgir\AppData\LocalLow\Mozilla
2017-01-03 13:29 - 2017-01-03 13:29 - 00000858 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-01-03 13:29 - 2017-01-03 13:29 - 00000846 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-01-03 13:29 - 2017-01-03 13:29 - 00000000 ____D C:\Users\valdgir\AppData\Roaming\Mozilla
2017-01-03 13:29 - 2017-01-03 13:29 - 00000000 ____D C:\Users\valdgir\AppData\Local\Mozilla
2017-01-03 13:29 - 2017-01-03 13:29 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-01-03 13:28 - 2017-01-03 13:28 - 45345440 _____ C:\Users\valdgir\Downloads\Firefox Setup 50.1.0.exe
2017-01-03 13:28 - 2009-12-23 13:43 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2017-01-03 13:27 - 2017-01-03 13:27 - 00000000 ____D C:\Users\valdgir\AppData\Roaming\Macromedia
2017-01-03 13:27 - 2010-01-15 01:04 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2017-01-03 13:23 - 2017-01-03 13:24 - 00000708 _____ C:\Users\valdgir\Desktop\gmer.txt
2017-01-03 13:20 - 2017-01-03 23:23 - 00008122 _____ C:\Users\valdgir\Desktop\FRST.txt
2017-01-03 13:20 - 2017-01-03 23:23 - 00000000 ____D C:\FRST
2017-01-03 13:19 - 2017-01-02 14:17 - 01760256 _____ (Farbar) C:\Users\valdgir\Desktop\FRST.exe
2017-01-03 13:15 - 2017-01-02 16:39 - 00380928 _____ C:\Users\valdgir\Desktop\ybz2vpf5.exe
2017-01-03 13:13 - 2017-01-03 13:13 - 00143424 _____ C:\Windows\Minidump\Mini010317-01.dmp
2017-01-03 13:13 - 2017-01-03 13:13 - 00000000 ____D C:\Windows\Minidump
2017-01-03 13:12 - 2017-01-03 13:13 - 240881050 _____ C:\Windows\MEMORY.DMP

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-01-03 23:21 - 2009-02-23 20:36 - 00000000 ____D C:\Users\valdgir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2017-01-03 23:21 - 2008-07-16 15:18 - 00137211 _____ C:\ProgramData\nvModes.001
2017-01-03 23:20 - 2008-07-16 15:17 - 00137211 _____ C:\ProgramData\nvModes.dat
2017-01-03 23:20 - 2008-07-16 13:38 - 00708820 _____ C:\Windows\system32\perfh015.dat
2017-01-03 23:20 - 2008-07-16 13:38 - 00144430 _____ C:\Windows\system32\perfc015.dat
2017-01-03 23:20 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-03 23:20 - 2006-11-02 13:47 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-03 23:20 - 2006-11-02 13:47 - 00004784 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-03 23:20 - 2006-11-02 11:33 - 01624630 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-03 23:19 - 2006-11-02 13:47 - 00375368 _____ C:\Windows\system32\FNTCACHE.DAT
2017-01-03 23:18 - 2008-07-17 06:45 - 00000012 _____ C:\Windows\bthservsdp.dat
2017-01-03 23:18 - 2006-11-02 14:01 - 00012488 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-01-03 23:17 - 2006-11-02 13:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2017-01-03 23:17 - 2006-11-02 13:37 - 00000000 ____D C:\Program Files\Movie Maker
2017-01-03 23:17 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\manifeststore
2017-01-03 23:17 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\inf
2017-01-03 22:06 - 2008-07-16 15:29 - 00000000 ____D C:\Windows\WinClon
2017-01-03 15:46 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2017-01-03 13:37 - 2009-02-23 20:35 - 00000000 ____D C:\Users\valdgir
2017-01-03 13:18 - 2008-07-16 15:27 - 00000000 ____D C:\ProgramData\McAfee

==================== Pliki w katalogu głównym wybranych folderów =======

2008-07-16 15:18 - 2017-01-03 23:21 - 0137211 _____ () C:\ProgramData\nvModes.001
2008-07-16 15:17 - 2017-01-03 23:20 - 0137211 _____ () C:\ProgramData\nvModes.dat

Niektóre pliki w TEMP:
====================
C:\Users\valdgir\AppData\Local\Temp\7za.exe
C:\Users\valdgir\AppData\Local\Temp\DaS_21.exe
C:\Users\valdgir\AppData\Local\Temp\hijackthis.exe
C:\Users\valdgir\AppData\Local\Temp\NirCmd.exe
C:\Users\valdgir\AppData\Local\Temp\PEVZ.EXE
C:\Users\valdgir\AppData\Local\Temp\remove.exe
C:\Users\valdgir\AppData\Local\Temp\sed.exe
C:\Users\valdgir\AppData\Local\Temp\shortcut.exe
C:\Users\valdgir\AppData\Local\Temp\swreg.exe
C:\Users\valdgir\AppData\Local\Temp\swxcacls.exe
C:\Users\valdgir\AppData\Local\Temp\wget.exe
C:\Users\valdgir\AppData\Local\Temp\zoek-delete.exe


==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-01-03 15:47

==================== Koniec  FRST.txt ============================