Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 01-01-2017
Uruchomiony przez Marcin (administrator)  POTWÓR (05-01-2017 09:35:52)
Uruchomiony z C:\Users\Marcin\Desktop\FRST
Załadowane profile: Marcin (Dostępne profile: Marcin)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Vimicro) C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Lenovo) C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Autodesk Inc.) C:\Users\Marcin\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2741544 2011-04-08] (Synaptics Incorporated)
HKLM\...\Run: [Lenovo EE Boot Optimizer] => C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2012-04-15] (Lenovo)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9753024 2012-04-15] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5908928 2012-04-15] (Lenovo(beijing) Limited)
HKLM\...\Run: [smycWTeXSeDFCWU] => wscript.exe //B "C:\Users\Marcin\AppData\Local\Temp\smycWTeXSeDFCWU.wSf" <===== UWAGA
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-02-18] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-11-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [332BigDog] => C:\Program Files (x86)\USB Camera2\VM332_STI.EXE [536576 2010-01-19] (Vimicro)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2011-01-29] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [228448 2011-01-29] (CyberLink Corp.)
HKLM-x32\...\Run: [VeriFaceManager] => C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2012-04-15] (Lenovo)
HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2678784 2011-12-13] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-18] (AVAST Software)
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [529480 2016-02-24] (Autodesk Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\...\Run: [Facebook Update] => C:\Users\Marcin\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-02-13] (Facebook Inc.)
HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\...\Run: [Time Organizer] => C:\Program Files (x86)\Time Organizer\Time Organizer.exe
HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\...\Run: [LightShot] => C:\Users\Marcin\AppData\Local\Skillbrains\lightshot\Lightshot.exe
HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\...\Run: [Dropbox Update] => C:\Users\Marcin\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-04] (Dropbox, Inc.)
HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\...\Run: [smycWTeXSeDFCWU] => wscript.exe //B "C:\Users\Marcin\AppData\Local\Temp\smycWTeXSeDFCWU.wSf" <===== UWAGA
HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\...\Policies\Explorer: [] 
HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\...\MountPoints2: {ae1db0d4-1501-11e5-b9a7-7ce9d3c986f8} - H:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\...\MountPoints2: {ba615e79-9185-11e6-a97a-7ce9d3c986f8} - E:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\...\MountPoints2: {d720963f-866e-11e6-a9a5-7ce9d3c986f8} - E:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\...\MountPoints2: {e3ec0574-d805-11e5-a5a0-7ce9d3c986f8} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> 
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-16] (AVAST Software)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [VeriFace Enc] -> {771C7324-DA80-49D3-8017-753B0AF60951} => C:\windows\system32\IcnOvrly.dll [2012-04-15] ()
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marcin\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2012-04-15]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Marcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\smycWTeXSeDFCWU.wSf [2016-03-29] ()

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{49F22AF5-1DC6-481F-A04F-C6B9CB5A768B}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{E705E89F-2A81-46C6-BF92-52E661D20DFC}: [DhcpNameServer] 10.208.100.20 10.150.1.4

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo.msn.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKU\S-1-5-21-2793137438-1847085760-1212310075-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2793137438-1847085760-1212310075-1000 -> DefaultScope {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
SearchScopes: HKU\S-1-5-21-2793137438-1847085760-1212310075-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2793137438-1847085760-1212310075-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN
SearchScopes: HKU\S-1-5-21-2793137438-1847085760-1212310075-1000 -> {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-06] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-06] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-2793137438-1847085760-1212310075-1000 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Brak pliku

FireFox:
========
FF ProfilePath: C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\ctnghvvf.default [2017-01-05]
FF Homepage: Mozilla\Firefox\Profiles\ctnghvvf.default -> about:newtab
FF Extension: (Google™ Translator) - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\ctnghvvf.default\Extensions\jid1-dgnIBwQga0SIBw@jetpack.xpi [2016-12-17]
FF Extension: (Transferuj.pl) - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\ctnghvvf.default\Extensions\trtransferfill@transferuj.pl.xpi [2013-07-03] [Brak podpisu cyfrowego]
FF Extension: (uBlock Origin) - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\ctnghvvf.default\Extensions\uBlock0@raymondhill.net.xpi [2016-12-19]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2017-01-01]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-15] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-15] ()
FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll [2012-07-25] ( )
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> D:\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-06] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-06] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2793137438-1847085760-1212310075-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Marcin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npganymedenet.dll [2012-07-25] ( )

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\PepperFlash\pepflashplayer.dll => Brak pliku
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\ppGoogleNaClPluginChrome.dll => Brak pliku
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\pdf.dll => Brak pliku
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => Brak pliku
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Picasa) - D:\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll => Brak pliku
CHR Profile: C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default [2017-01-01]
CHR Extension: (Tłumacz Google) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2015-12-13]
CHR Extension: (Transferuj.pl) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gamjcgdmfcciglelnlngnknalhbhmkif [2015-09-08]
CHR Extension: (AdBlock) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-01-01]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
CHR Extension: (Chrome Media Router) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-09]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1145928 2016-02-24] (Autodesk Inc.)
R2 AMD External Events Utility; C:\windows\system32\atiesrxx.exe [203264 2011-11-02] (AMD) [Brak podpisu cyfrowego]
S2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-16] (AVAST Software)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [953632 2010-12-14] (Broadcom Corporation.)
S2 KMService; C:\windows\SysWOW64\srvany.exe [8192 2016-09-12] () [Brak podpisu cyfrowego]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-12-14] (Malwarebytes)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [Brak podpisu cyfrowego]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 amdkmdag; C:\windows\System32\DRIVERS\atikmdag.sys [9319424 2011-11-02] (ATI Technologies Inc.) [Brak podpisu cyfrowego]
S3 amdkmdap; C:\windows\System32\DRIVERS\atikmpag.sys [303616 2011-11-02] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego]
S3 aswHwid; C:\windows\system32\drivers\aswHwid.sys [37656 2016-09-16] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [108816 2016-09-16] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [103064 2016-09-16] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-16] (AVAST Software)
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [969184 2016-09-16] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\windows\system32\drivers\aswStm.sys [163416 2016-09-16] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-13] (AVAST Software)
R1 ESProtectionDriver; C:\windows\system32\drivers\mbae64.sys [77416 2016-12-14] ()
S3 HtcVCom32; C:\windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated)
R2 MBAMChameleon; C:\windows\system32\drivers\MBAMChameleon.sys [176064 2017-01-05] (Malwarebytes)
R3 MBAMFarflt; C:\windows\system32\drivers\farflt.sys [102856 2017-01-05] (Malwarebytes)
R3 MBAMProtection; C:\windows\system32\drivers\mbam.sys [43968 2017-01-05] (Malwarebytes)
R0 MBAMSwissArmy; C:\windows\System32\drivers\MBAMSwissArmy.sys [250816 2017-01-05] (Malwarebytes)
R3 MBAMWebProtection; C:\windows\system32\drivers\mwac.sys [81696 2017-01-05] (Malwarebytes)
U3 BcmSqlStartupSvc; Brak ImagePath
U2 CLKMSVC10_3A60B698; Brak ImagePath
U2 CLKMSVC10_C3B3B687; Brak ImagePath
U2 DriverService; Brak ImagePath
U2 iATAgentService; Brak ImagePath
U2 idealife Update Service; Brak ImagePath
U3 IGRS; Brak ImagePath
U2 IviRegMgr; Brak ImagePath
U2 nvUpdatusService; Brak ImagePath
U2 Oasis2Service; Brak ImagePath
U2 PCCarerService; Brak ImagePath
U2 ReadyComm.DirectRouter; Brak ImagePath
U2 RichVideo; Brak ImagePath
U2 RtLedService; Brak ImagePath
U2 SeaPort; Brak ImagePath
U2 SoftwareService; Brak ImagePath
U3 SQLWriter; Brak ImagePath
U2 Stereo Service; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-01-05 09:35 - 2017-01-05 09:35 - 00000000 ____D C:\FRST
2017-01-05 09:13 - 2017-01-05 09:35 - 00000000 ____D C:\Users\Marcin\Desktop\FRST
2017-01-05 09:13 - 2017-01-05 09:13 - 00000000 ____D C:\Users\Marcin\Desktop\GMER
2017-01-05 09:12 - 2017-01-05 09:33 - 00250816 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-05 09:12 - 2017-01-05 09:33 - 00102856 _____ (Malwarebytes) C:\windows\system32\Drivers\farflt.sys
2017-01-05 09:12 - 2017-01-05 09:33 - 00081696 _____ (Malwarebytes) C:\windows\system32\Drivers\mwac.sys
2017-01-05 09:12 - 2017-01-05 09:33 - 00043968 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys
2017-01-05 09:12 - 2017-01-05 09:12 - 00176064 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMChameleon.sys
2017-01-05 09:12 - 2017-01-05 09:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-05 09:12 - 2016-12-14 12:55 - 00077416 _____ C:\windows\system32\Drivers\mbae64.sys
2017-01-05 09:11 - 2017-01-05 09:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-05 09:11 - 2017-01-05 09:11 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-04 12:31 - 2017-01-04 12:31 - 00096444 _____ C:\Users\Marcin\Downloads\sylabus_2012_2013_3_rok.pdf
2017-01-04 11:49 - 2017-01-04 11:49 - 00268357 _____ C:\Users\Marcin\Downloads\2016_Zasady przeprowadzenia pisemnego egzaminu dyplomowego.pdf
2017-01-03 14:57 - 2017-01-03 14:59 - 00234710 _____ C:\windows\ntbtlog.txt
2017-01-03 14:25 - 2012-05-15 07:13 - 00144896 _____ (Intel Corporation) C:\windows\system32\IntelOpenCL64.dll
2017-01-03 14:25 - 2012-05-15 06:20 - 00104448 _____ (Intel Corporation) C:\windows\SysWOW64\IntelOpenCL32.dll
2017-01-03 12:36 - 2017-01-03 12:36 - 00029378 _____ C:\Users\Marcin\Downloads\semestr_zimowy_2016_2017.pdf
2017-01-03 12:36 - 2017-01-03 12:36 - 00024199 _____ C:\Users\Marcin\Downloads\semestr_letni_2016_2017.pdf
2017-01-01 19:45 - 2016-09-16 10:01 - 00391496 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2017-01-01 18:44 - 2017-01-01 18:44 - 00000000 ____D C:\Program Files\AMD
2017-01-01 18:43 - 2017-01-01 18:53 - 00000000 ____D C:\AMD
2016-12-31 01:21 - 2016-12-31 01:21 - 00232204 _____ C:\Users\Marcin\Desktop\wiz1.jpg
2016-12-30 10:39 - 2016-12-30 10:40 - 06546538 _____ C:\Users\Marcin\Downloads\D20000735.pdf
2016-12-30 10:38 - 2016-12-30 10:38 - 02237949 _____ C:\Users\Marcin\Downloads\D19990430_01.pdf
2016-12-30 10:38 - 2016-12-30 10:38 - 02108709 _____ C:\Users\Marcin\Downloads\D19990430_02.pdf
2016-12-30 10:38 - 2016-12-30 10:38 - 01824737 _____ C:\Users\Marcin\Downloads\D19990430_03.pdf
2016-12-29 22:09 - 2016-12-29 22:09 - 01777542 _____ C:\Users\Marcin\Downloads\Plaskie_uklady_ramowe_1-2_KoMBo.PDF
2016-12-29 22:06 - 2016-12-29 22:07 - 06359741 _____ C:\Users\Marcin\Downloads\ramy.pdf
2016-12-28 14:30 - 2016-12-28 14:30 - 01820508 _____ C:\Users\Marcin\Downloads\5_Polska_przestrzen_osadnicza.pdf
2016-12-28 13:12 - 2016-12-28 13:12 - 07803673 _____ C:\Users\Marcin\Downloads\Wykład-5-mgr-Architektoniczne-konstrukcje-cięgnowe.pdf
2016-12-28 12:48 - 2016-12-28 12:48 - 00095425 _____ C:\Users\Marcin\Desktop\Screenshot_4.jpg
2016-12-28 11:19 - 2016-12-28 11:19 - 00346973 _____ C:\Users\Marcin\Downloads\WorłowskaMarkoWorłowska_PECO11_1.pdf
2016-12-28 00:27 - 2016-12-28 00:27 - 04302302 _____ C:\Users\Marcin\Desktop\K.Solarek.pdf
2016-12-27 20:10 - 2016-12-27 20:10 - 00590051 _____ C:\Users\Marcin\Downloads\pw_wpme_2.pdf
2016-12-27 18:20 - 2016-12-27 18:20 - 02023966 _____ C:\Users\Marcin\Downloads\e-HISTORIA_urbanistyki_sem1.pdf
2016-12-22 12:30 - 2016-12-22 12:30 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-12-21 23:30 - 2016-12-21 23:30 - 04560405 _____ C:\Users\Marcin\Desktop\turystyka_2014_2015.pdf
2016-12-21 23:26 - 2016-12-21 23:26 - 00815027 _____ C:\Users\Marcin\Desktop\sygnalna-turystyka_w_2015.pdf
2016-12-21 23:09 - 2016-12-21 23:09 - 00193588 _____ C:\Users\Marcin\Desktop\Screenshot_1.jpg
2016-12-21 23:08 - 2016-12-21 23:08 - 00272467 _____ C:\Users\Marcin\Desktop\ważne!!!!.jpg
2016-12-21 22:40 - 2016-12-21 22:59 - 01496217 _____ C:\Users\Marcin\Downloads\Załącznik 6f.pdf.part
2016-12-21 20:33 - 2016-12-21 20:33 - 01086937 _____ C:\Users\Marcin\Downloads\trzypotrzy.pdf
2016-12-21 20:28 - 2016-12-21 20:28 - 01089364 _____ C:\Users\Marcin\Downloads\Fredro, Aleksander - Trzy po trzy.pdf
2016-12-21 15:11 - 2016-12-21 15:11 - 00546738 _____ C:\Users\Marcin\Downloads\JNiOPD_140608.pdf
2016-12-21 15:05 - 2016-12-21 15:05 - 00197186 _____ C:\Users\Marcin\Downloads\Opis - architektura.pdf
2016-12-21 15:05 - 2016-12-21 15:05 - 00052239 _____ C:\Users\Marcin\Downloads\architektura-opis.pdf
2016-12-21 12:14 - 2016-12-21 12:14 - 00957047 _____ C:\Users\Marcin\Desktop\Ustawa Prawo Budowlane.pdf
2016-12-14 18:05 - 2016-12-14 18:05 - 00205286 _____ C:\Users\Marcin\Downloads\Dachy_płaskie_stropodachy_l_Stropodach_pełny_kryty_papą_l_połączenie_ze_ścianą_ocieploną_l_Zestaw_Złoty_Dach.pdf
2016-12-06 14:02 - 2016-12-06 14:07 - 00000000 ____D C:\Users\Marcin\Desktop\m

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-01-05 09:38 - 2012-11-18 19:46 - 00000930 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2017-01-05 09:36 - 2013-02-19 11:33 - 01677926 _____ C:\windows\system32\PerfStringBackup.INI
2017-01-05 09:36 - 2012-04-14 20:34 - 00743694 _____ C:\windows\system32\perfh015.dat
2017-01-05 09:36 - 2012-04-14 20:34 - 00157144 _____ C:\windows\system32\perfc015.dat
2017-01-05 09:36 - 2009-07-14 04:20 - 00000000 ____D C:\windows\inf
2017-01-05 09:33 - 2016-11-20 11:02 - 00000000 ____D C:\Users\Marcin\AppData\LocalLow\Mozilla
2017-01-05 09:30 - 2012-04-15 05:29 - 00191711 _____ C:\windows\system32\fastboot.set
2017-01-05 09:30 - 2012-04-15 05:23 - 00000000 ____D C:\ProgramData\VeriFace
2017-01-05 09:29 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2017-01-05 09:28 - 2016-09-18 21:22 - 00000000 ____D C:\ProgramData\Autodesk
2017-01-05 09:28 - 2015-07-19 10:09 - 00001166 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2793137438-1847085760-1212310075-1000UA.job
2017-01-05 09:27 - 2016-09-18 21:41 - 00000000 ____D C:\Users\Marcin\Documents\Autodesk Application Manager
2017-01-05 09:20 - 2014-12-02 10:39 - 00000390 _____ C:\windows\Tasks\update-S-1-5-21-2793137438-1847085760-1212310075-1000.job
2017-01-05 09:17 - 2009-07-14 05:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-05 09:17 - 2009-07-14 05:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-05 09:08 - 2014-12-02 10:39 - 00000390 _____ C:\windows\Tasks\update-sys.job
2017-01-05 09:08 - 2014-02-13 20:39 - 00000932 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2793137438-1847085760-1212310075-1000UA.job
2017-01-04 23:45 - 2014-08-31 17:29 - 00000000 ___RD C:\Users\Marcin\Dropbox
2017-01-04 23:30 - 2016-09-18 18:06 - 00000000 ____D C:\Users\Marcin\Graphisoft
2017-01-04 22:51 - 2016-09-18 18:06 - 00000000 ____D C:\Users\Marcin\Documents\BIMx
2017-01-04 20:44 - 2014-02-13 20:39 - 00000910 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2793137438-1847085760-1212310075-1000Core.job
2017-01-04 11:07 - 2015-07-19 10:09 - 00001114 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2793137438-1847085760-1212310075-1000Core.job
2017-01-03 18:00 - 2015-07-19 10:09 - 00000000 ____D C:\Users\Marcin\AppData\Local\Dropbox
2017-01-03 14:45 - 2016-09-18 20:31 - 00000000 ____D C:\Users\Marcin\Documents\Lumion 5
2017-01-03 10:11 - 2016-09-18 23:33 - 00000000 ____D C:\Users\Marcin\Desktop\praca inż
2017-01-02 13:05 - 2016-11-29 11:24 - 00000000 ____D C:\Users\Marcin\Desktop\PRACA INŻYNIERSKA
2017-01-01 19:47 - 2016-09-16 10:02 - 00003922 _____ C:\windows\System32\Tasks\avast! Emergency Update
2017-01-01 19:47 - 2016-09-16 10:02 - 00001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2017-01-01 19:44 - 2012-10-21 16:23 - 00000000 ____D C:\Users\Marcin
2017-01-01 19:43 - 2016-10-29 18:03 - 00000000 ____D C:\Users\Marcin\Desktop\EGZAMIN INŻYNIERSKI
2017-01-01 19:43 - 2016-09-18 21:22 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\Autodesk
2017-01-01 19:43 - 2016-09-16 10:02 - 00000000 ____D C:\windows\System32\Tasks\AVAST Software
2017-01-01 19:43 - 2012-10-21 20:04 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\Winamp
2017-01-01 19:43 - 2012-10-21 16:23 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2017-01-01 19:43 - 2009-07-14 04:20 - 00000000 ____D C:\windows\registration
2017-01-01 19:42 - 2012-04-15 05:02 - 00000000 ____D C:\ProgramData\Intel
2017-01-01 19:41 - 2012-04-15 04:52 - 00000000 ____D C:\Program Files (x86)\Intel
2016-12-22 12:30 - 2014-08-31 17:27 - 00000000 ____D C:\Users\Marcin\AppData\Roaming\Dropbox
2016-12-22 12:30 - 2012-10-21 16:23 - 00000000 ___RD C:\Users\Marcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-22 12:04 - 2013-03-01 19:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-16 22:12 - 2012-04-15 05:28 - 00003480 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-16 22:12 - 2012-04-15 05:28 - 00003352 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-16 11:52 - 2016-11-19 16:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-15 11:38 - 2012-11-18 19:46 - 00802904 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2016-12-15 11:38 - 2012-11-18 19:46 - 00144472 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-12-15 11:38 - 2012-11-18 19:46 - 00003868 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2016-12-15 11:38 - 2012-11-18 19:46 - 00000000 ____D C:\windows\SysWOW64\Macromed
2016-12-15 11:38 - 2012-11-18 19:46 - 00000000 ____D C:\windows\system32\Macromed
2016-12-10 12:01 - 2012-04-15 05:28 - 00002201 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-08 23:24 - 2016-09-18 23:18 - 00000000 ____D C:\Users\Marcin\Desktop\praktyki

==================== Pliki w katalogu głównym wybranych folderów =======

2012-10-30 17:17 - 2012-10-30 17:18 - 0005632 _____ () C:\Users\Marcin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-04-01 09:15 - 2013-04-01 09:15 - 0004200 _____ () C:\Users\Marcin\AppData\Local\recently-used.xbel
2014-12-02 10:39 - 2014-12-02 10:39 - 0000003 _____ () C:\Users\Marcin\AppData\Local\updater.log
2014-12-02 10:39 - 2016-08-09 08:39 - 0000424 _____ () C:\Users\Marcin\AppData\Local\UserProducts.xml
2016-09-18 21:34 - 2016-09-18 21:34 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Niektóre pliki w TEMP:
====================
C:\Users\Marcin\AppData\Local\Temp\AcDeltree.exe
C:\Users\Marcin\AppData\Local\Temp\FNP_ACT_InstallerCA.dll
C:\Users\Marcin\AppData\Local\Temp\GURDF08.exe


==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\windows\explorer.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\windows\system32\services.exe => Plik podpisany cyfrowo
C:\windows\system32\User32.dll => Plik podpisany cyfrowo
C:\windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-01-03 13:41

==================== Koniec  FRST.txt ============================