Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 15-02-2017 02
Uruchomiony przez oem2 (administrator)  OEM (16-02-2017 12:21:22)
Uruchomiony z C:\Users\oem2\Downloads
Załadowane profile: oem2 (Dostępne profile: oem2)
Platform: Windows 8.1 Pro (Update) (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: "C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1")
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(深圳市猫哈网络科技发展有限公司) C:\Program Files (x86)\Maoha\MaohaAP\MaohaWifiSvr.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(© pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
(DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Users\oem2\AppData\Local\Temp\00018633\msiql.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Program Files (x86)\UCBrowser\Application\UCService.exe
() C:\Program Files (x86)\UCBrowser\Application\6.0.1471.914\UCAgent.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKU\S-1-5-21-1102267148-3212572079-3134952296-1001\...\MountPoints2: {28753b83-e3ed-11e6-8268-605718103217} - "E:\WD Drive Unlock.exe" autoplay=true
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} => C:\Program Files\żěŃą\X64\KZipShell.dll [2017-02-16] ()
GroupPolicy: Ograniczenia - Chrome <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62
Tcpip\..\Interfaces\{4E46F935-C47B-4B29-9FDC-B9886C5433D6}: [DhcpNameServer] 62.179.1.63 62.179.1.62

Internet Explorer:
==================
HKU\S-1-5-21-1102267148-3212572079-3134952296-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-01-25] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-06-30] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-25] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-06-30] (Adobe Systems Incorporated)
BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2016-08-05] (pdfforge GmbH)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-06-30] (Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-06-30] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-06-30] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files (x86)\PDF Architect 4\creator-ie-plugin.dll [2016-08-05] (pdfforge GmbH)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-06-30] (Adobe Systems Incorporated)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-09-13] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat DC - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn [2017-01-12]
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-25] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-25] (Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-04] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-04] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-19] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-25] (Adobe Systems)
FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [2016-08-05] (pdfforge GmbH)

Chrome: 
=======
CHR Profile: C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default [2017-02-16]
CHR Extension: (Prezentacje Google) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-09-12]
CHR Extension: (Dokumenty Google) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-12]
CHR Extension: (Dysk Google) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-12]
CHR Extension: (YouTube) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-12]
CHR Extension: (Adobe Acrobat) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-01-31]
CHR Extension: (Arkusze Google) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-09-12]
CHR Extension: (Dokumenty Google offline) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-13]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-22]
CHR Extension: (Gmail) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-12]
CHR Extension: (Chrome Media Router) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-14]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-25] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [237272 2015-08-27] (Dell Inc.)
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1392792 2015-10-30] (Intel Corporation)
S2 GoogleChromeUpService; C:\ProgramData\service.exe [1620992 2017-02-16] () [Brak podpisu cyfrowego] <==== UWAGA
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-04] (Intel Corporation)
S2 KuaizipUpdateChecker; C:\Program Files\żěŃą\X86\kuaizipUpdateChecker.dll [219032 2017-02-16] ()
R2 MaohaWifiSvr; C:\Program Files (x86)\Maoha\MaohaAP\MaohaWifiSvr.exe [168992 2016-11-26] (深圳市猫哈网络科技发展有限公司)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2438880 2016-08-05] (pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-08-05] (pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-08-05] (pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [972056 2016-05-18] (© pdfforge GmbH.)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\Sh4Service.exe [859816 2017-02-16] (Enigma Software Group USA, LLC.)
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-12-03] (DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH)
R2 UCBrowserSvc; C:\Program Files (x86)\UCBrowser\Application\UCService.exe [597208 2017-02-14] ()
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-24] (OSR Open Systems Resources, Inc.)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 dptf_acpi; C:\Windows\System32\drivers\dptf_acpi.sys [55784 2015-10-30] (Intel Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [52200 2015-10-30] (Intel Corporation)
R3 dptf_pch; C:\Windows\System32\drivers\dptf_pch.sys [50664 2015-10-30] (Intel Corporation)
R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2017-02-16] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2017-02-16] ()
R3 esif_lf; C:\Windows\system32\DRIVERS\esif_lf.sys [260072 2015-10-30] (Intel Corporation)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-02-16] (REALiX(tm))
R3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-08-08] (Intel Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-08-08] (Intel Corporation)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [191944 2014-05-09] (Intel Corporation)
R2 KuaiZipDrive; C:\Windows\system32\drivers\KuaiZipDrive.sys [92832 2017-02-16] (WinMount International Inc)
R1 MaohaWifiNetPro; C:\Program Files (x86)\Maoha\MaohaAP\MaoHaWiFiNet64.sys [1030496 2016-11-26] ()
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100824 2013-12-04] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3515152 2016-01-11] (Intel Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 RTLU3E8023-W8-64; C:\Windows\system32\DRIVERS\rtu30x64w8.sys [70656 2013-06-18] (Realtek                                            )
R3 SensorsServiceDriver; C:\Windows\System32\drivers\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S1 ucdrv; C:\Program Files (x86)\UCBrowser\Security:ucdrv-x64.sys [25444 ] (UC Web Inc.) <==== UWAGA
R3 USBPcap; C:\Windows\system32\DRIVERS\USBPcap.sys [51104 2016-08-02] (USBPcap)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 PCDSRVC{9D5F6500-B9473007-06020200}_0; \??\c:\pcdoctor_depot_tools\pcdr\pcdsrvc_x64.pkms [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-02-16 12:21 - 2017-02-16 12:21 - 00018511 _____ C:\Users\oem2\Downloads\FRST.txt
2017-02-16 12:19 - 2017-02-16 12:21 - 00000000 ____D C:\FRST
2017-02-16 12:18 - 2017-02-16 12:18 - 02422272 _____ (Farbar) C:\Users\oem2\Downloads\FRST64.exe
2017-02-16 12:07 - 2017-02-16 12:07 - 00003476 _____ C:\Windows\System32\Tasks\UCBrowserSecureUpdater
2017-02-16 11:57 - 2017-02-16 11:57 - 00000000 ____D C:\Users\oem2\AppData\Roaming\Enigma Software Group
2017-02-16 11:57 - 2017-02-16 11:57 - 00000000 _____ C:\autoexec.bat
2017-02-16 11:56 - 2017-02-16 11:56 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2017-02-16 11:56 - 2017-02-16 11:56 - 00003312 _____ C:\Windows\System32\Tasks\SpyHunter4Startup
2017-02-16 11:56 - 2017-02-16 11:56 - 00001103 _____ C:\Users\oem2\Desktop\SpyHunter.lnk
2017-02-16 11:56 - 2017-02-16 11:56 - 00000000 ____D C:\sh4ldr
2017-02-16 11:56 - 2017-02-16 11:56 - 00000000 ____D C:\Program Files\Enigma Software Group
2017-02-16 11:48 - 2017-02-16 12:18 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1102267148-3212572079-3134952296-1001
2017-02-16 11:47 - 2017-02-16 11:47 - 00002588 _____ C:\Windows\System32\Tasks\UCBrowserUpdaterCore
2017-02-16 11:47 - 2017-02-16 11:47 - 00000310 _____ C:\Windows\Tasks\UCBrowserUpdaterCore.job
2017-02-16 11:38 - 2017-02-16 12:13 - 00002521 _____ C:\Users\oem2\Desktop\Osoba 1 - Chrome.lnk
2017-02-16 11:15 - 2017-02-16 11:15 - 03516080 _____ (Enigma Software Group USA, LLC.) C:\Users\oem2\Downloads\SpyHunter-Installer.exe
2017-02-16 10:51 - 2017-02-16 11:36 - 00000000 ___HD C:\Users\Public\Documents\AdobeGC
2017-02-16 10:50 - 2017-02-16 10:50 - 00000266 __RSH C:\Users\oem2\ntuser.pol
2017-02-16 10:48 - 2017-02-16 12:07 - 00000000 ____D C:\Program Files (x86)\UCBrowser
2017-02-16 10:48 - 2017-02-16 11:40 - 00000000 ____D C:\Program Files\żěŃą
2017-02-16 10:48 - 2017-02-16 11:01 - 00000000 ____D C:\Users\oem2\AppData\Roaming\KuaiZip
2017-02-16 10:48 - 2017-02-16 10:53 - 00000000 ____D C:\ProgramData\ProductData
2017-02-16 10:48 - 2017-02-16 10:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MaohaWiFi
2017-02-16 10:48 - 2017-02-16 10:48 - 00092832 _____ (WinMount International Inc) C:\Windows\system32\Drivers\KuaiZipDrive.sys
2017-02-16 10:48 - 2017-02-16 10:48 - 00027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2017-02-16 10:48 - 2017-02-16 10:48 - 00001542 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UC浏览器.lnk
2017-02-16 10:48 - 2017-02-16 10:48 - 00001129 _____ C:\Users\oem2\Desktop\MaohaWiFi.lnk
2017-02-16 10:48 - 2017-02-16 10:48 - 00000853 _____ C:\Users\oem2\AppData\Roaming\Microsoft\Windows\Start Menu\żěŃą.lnk
2017-02-16 10:48 - 2017-02-16 10:48 - 00000829 _____ C:\Users\oem2\Desktop\żěŃą.lnk
2017-02-16 10:48 - 2017-02-16 10:48 - 00000000 __SHD C:\Users\oem2\AppData\Local\svchost
2017-02-16 10:48 - 2017-02-16 10:48 - 00000000 ____D C:\Windows\IObit
2017-02-16 10:48 - 2017-02-16 10:48 - 00000000 ____D C:\Users\oem2\AppData\Roaming\Softlink
2017-02-16 10:48 - 2017-02-16 10:48 - 00000000 ____D C:\Users\oem2\AppData\LocalLow\IObit
2017-02-16 10:48 - 2017-02-16 10:48 - 00000000 ____D C:\Users\oem2\AppData\Local\UCBrowser
2017-02-16 10:48 - 2017-02-16 10:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UC浏览器
2017-02-16 10:48 - 2017-02-16 10:48 - 00000000 ____D C:\ProgramData\IObit
2017-02-16 10:48 - 2017-02-16 10:48 - 00000000 ____D C:\Program Files (x86)\Maoha
2017-02-16 10:47 - 2017-02-16 10:54 - 00000000 ____D C:\Program Files (x86)\PubHotspot
2017-02-16 10:47 - 2017-02-16 10:47 - 06324670 _____ C:\Users\oem2\Downloads\Lista_projektow_POPW_30_11_2016 (3).xlsx
2017-02-16 10:47 - 2017-02-16 10:47 - 01620992 _____ C:\ProgramData\service.exe
2017-02-16 10:47 - 2017-02-16 10:47 - 00000000 ____D C:\Users\Public\Thunder Network
2017-02-16 10:47 - 2017-02-16 10:47 - 00000000 ____D C:\Users\oem2\AppData\Roaming\IObit
2017-02-16 10:47 - 2017-02-16 10:47 - 00000000 ____D C:\ProgramData\Thunder Network
2017-02-16 10:46 - 2017-02-16 10:46 - 00001550 __RSH C:\ProgramData\ntuser.pol
2017-02-16 10:46 - 2017-02-16 10:46 - 00000000 ____D C:\Users\oem2\AppData\Local\Himergh
2017-02-16 10:46 - 2017-02-16 10:46 - 00000000 ____D C:\Program Files (x86)\Rewity
2017-02-16 10:07 - 2017-02-16 10:07 - 00052663 _____ C:\Users\oem2\Downloads\Biznesplan_szkolenie_przykład_19.12..odt
2017-02-16 10:06 - 2017-02-14 12:30 - 00052701 _____ C:\Users\oem2\Documents\Biznesplan_szkolenie_przykład_19.12..docx_0.odt
2017-02-16 10:04 - 2017-02-16 10:04 - 01128916 _____ (www.hellopdf.com ) C:\Users\oem2\Downloads\pdf2wordsetup.exe
2017-02-16 09:50 - 2017-02-16 09:50 - 00256188 _____ C:\Users\oem2\Downloads\UMOWA INWESTYCYJNA 1 (1).pages
2017-02-16 09:48 - 2017-02-16 09:48 - 00256188 _____ C:\Users\oem2\Downloads\UMOWA INWESTYCYJNA 1.pages
2017-02-16 08:02 - 2017-02-16 08:02 - 00462195 _____ C:\Users\oem2\Downloads\Ekspertyza-IUNG-gleba-2017.pdf
2017-02-16 07:35 - 2017-02-16 07:35 - 06324670 _____ C:\Users\oem2\Downloads\Lista_projektow_POPW_30_11_2016 (2).xlsx
2017-02-15 13:36 - 2017-02-15 13:36 - 00040338 _____ C:\Users\oem2\Downloads\Potwierdzenie wykonania operacji_20170215_133143.pdf
2017-02-15 13:25 - 2017-02-15 13:25 - 00157385 _____ C:\Users\oem2\Downloads\Polisa_50000522390_15022017_123114 (2).pdf
2017-02-15 13:24 - 2017-02-15 13:24 - 00157385 _____ C:\Users\oem2\Downloads\Polisa_50000522390_15022017_123114 (1).pdf
2017-02-15 13:23 - 2017-02-15 13:23 - 00480967 _____ C:\Users\oem2\Downloads\podpis.pdf
2017-02-15 12:43 - 2017-02-15 12:43 - 00157385 _____ C:\Users\oem2\Downloads\Polisa_50000522390_15022017_123114.pdf
2017-02-15 08:13 - 2017-02-15 08:13 - 00089427 _____ C:\Users\oem2\Downloads\Kalkulacja_1000002035815_14022017_141019 (2).pdf
2017-02-15 08:12 - 2017-02-15 08:12 - 00089427 _____ C:\Users\oem2\Downloads\Kalkulacja_1000002035815_14022017_141019 (1).pdf
2017-02-15 08:12 - 2017-02-15 08:12 - 00089178 _____ C:\Users\oem2\Downloads\Kalkulacja_1000002035815_14022017_141142 (1).pdf
2017-02-14 15:05 - 2017-02-14 15:05 - 00089427 _____ C:\Users\oem2\Downloads\Kalkulacja_1000002035815_14022017_141019.pdf
2017-02-14 15:05 - 2017-02-14 15:05 - 00089178 _____ C:\Users\oem2\Downloads\Kalkulacja_1000002035815_14022017_141142.pdf
2017-02-14 15:05 - 2017-02-14 15:05 - 00089175 _____ C:\Users\oem2\Downloads\Kalkulacja_1000002035815_14022017_141112.pdf
2017-02-14 11:25 - 2017-02-14 11:26 - 06324670 _____ C:\Users\oem2\Downloads\Lista_projektow_POPW_30_11_2016 (1).xlsx
2017-02-14 11:25 - 2017-02-14 11:25 - 06324670 _____ C:\Users\oem2\Downloads\Lista_projektow_POPW_30_11_2016.xlsx
2017-02-10 12:02 - 2017-02-10 12:02 - 00514926 _____ C:\Users\oem2\Downloads\52-PELCZAR MARIOLA (3).pdf
2017-02-09 13:32 - 2017-02-09 13:32 - 00514926 _____ C:\Users\oem2\Downloads\52-PELCZAR MARIOLA (2).pdf
2017-02-09 11:31 - 2017-02-09 11:31 - 00376248 _____ C:\Users\oem2\Downloads\ubezpieczenie kredyt hipoteczny (1).pdf
2017-02-09 11:31 - 2017-02-09 11:31 - 00207606 _____ C:\Users\oem2\Downloads\karta płatnicza (1).pdf
2017-02-09 11:17 - 2017-02-09 11:17 - 00041658 _____ C:\Users\oem2\Downloads\potwierdzenie przelewu.pdf
2017-02-09 11:16 - 2017-02-09 11:16 - 00513534 _____ C:\Users\oem2\Downloads\160109903153.PDF
2017-02-08 14:49 - 2017-02-08 14:49 - 00172062 _____ C:\Users\oem2\Downloads\mBiznes konto S nr _76429121 za 2017-01.pdf
2017-02-08 13:40 - 2017-02-08 13:40 - 00147901 _____ C:\Users\oem2\Downloads\karta_classic.pdf
2017-02-07 15:34 - 2017-02-07 15:34 - 00045511 _____ C:\Users\oem2\Desktop\CROWDFUNDING.odt
2017-02-07 10:48 - 2017-02-07 10:48 - 00624136 _____ C:\Users\oem2\Downloads\OWUOC 187 2015.pdf
2017-02-07 09:40 - 2017-02-07 09:40 - 00514926 _____ C:\Users\oem2\Downloads\52-PELCZAR MARIOLA (1).pdf
2017-02-06 14:05 - 2017-02-06 14:05 - 00608461 _____ C:\Users\oem2\Downloads\Boatex-2017-Zaproszenie-105 (1).pdf
2017-02-06 14:03 - 2017-02-06 14:03 - 00608461 _____ C:\Users\oem2\Downloads\Boatex-2017-Zaproszenie-105.pdf
2017-02-06 11:41 - 2017-02-06 11:41 - 00514926 _____ C:\Users\oem2\Downloads\52-PELCZAR MARIOLA.pdf
2017-02-03 15:24 - 2017-02-03 15:24 - 01450382 _____ C:\Users\oem2\Downloads\D20001037Lj.pdf
2017-02-02 14:06 - 2017-02-02 14:06 - 00403660 _____ C:\Users\oem2\Downloads\PL.pdf
2017-02-01 17:46 - 2017-02-01 17:46 - 00001919 _____ C:\Users\Public\Desktop\TMS Trader.lnk
2017-02-01 17:46 - 2017-02-01 17:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TMS Trader
2017-02-01 17:46 - 2017-02-01 17:46 - 00000000 ____D C:\ProgramData\MetaQuotes
2017-02-01 17:46 - 2017-02-01 17:46 - 00000000 ____D C:\Program Files (x86)\TMS Trader
2017-02-01 17:45 - 2017-02-01 17:46 - 00000000 ____D C:\Users\oem2\AppData\Roaming\MetaQuotes
2017-02-01 17:45 - 2017-02-01 17:45 - 00575664 _____ (MetaQuotes Software Corp.) C:\Users\oem2\Downloads\tmstrader.exe
2017-02-01 14:59 - 2017-02-01 14:59 - 00041727 _____ C:\Users\oem2\Downloads\Koszty przeprowadzenia otwartej emisji akcji na platformie beesfund.xlsx
2017-02-01 09:45 - 2017-02-16 12:19 - 00000000 ____D C:\Users\oem2\AppData\Roaming\Skype
2017-02-01 09:45 - 2017-02-01 09:45 - 00002715 _____ C:\Users\Public\Desktop\Skype.lnk
2017-02-01 09:45 - 2017-02-01 09:45 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-02-01 09:45 - 2017-02-01 09:45 - 00000000 ____D C:\Users\oem2\Tracing
2017-02-01 09:45 - 2017-02-01 09:45 - 00000000 ____D C:\ProgramData\Skype
2017-02-01 09:45 - 2017-02-01 09:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-02-01 09:44 - 2017-02-01 09:44 - 01629664 _____ (Skype Technologies S.A.) C:\Users\oem2\Downloads\SkypeSetup.exe
2017-01-31 15:51 - 2017-01-31 15:51 - 00728453 _____ C:\Users\oem2\Downloads\Oswiadczenie dotyczace zdolnosci pochlaniania co2.pdf
2017-01-31 10:27 - 2017-01-31 10:27 - 00014410 _____ C:\Users\oem2\Downloads\RP_384491_7_20170131102748.pdf
2017-01-31 10:27 - 2017-01-31 10:27 - 00014408 _____ C:\Users\oem2\Downloads\RP_384491_7_20170131102751.pdf
2017-01-30 11:00 - 2017-01-30 11:00 - 00000022 _____ C:\Users\oem2\Desktop\rze dom.txt
2017-01-29 19:17 - 2017-01-29 19:35 - 00000000 ____D C:\Users\oem2\AppData\Roaming\TeamViewer
2017-01-29 19:17 - 2017-01-29 19:18 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2017-01-29 19:17 - 2017-01-29 19:17 - 00001059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2017-01-29 19:17 - 2017-01-29 19:17 - 00001047 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
2017-01-29 19:17 - 2016-11-28 11:55 - 00035112 _____ (TeamViewer GmbH) C:\Windows\system32\Drivers\teamviewervpn.sys
2017-01-29 19:16 - 2017-01-29 19:16 - 12974632 _____ (TeamViewer GmbH) C:\Users\oem2\Downloads\TeamViewer_Setup_pl-tln.exe
2017-01-27 18:28 - 2017-01-27 18:28 - 00000000 ____D C:\Users\oem2\AppData\Roaming\MPC-HC
2017-01-27 18:27 - 2017-01-29 10:29 - 00001760 _____ C:\Users\oem2\Desktop\MPC-HC x64.lnk
2017-01-27 18:27 - 2017-01-27 18:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
2017-01-27 18:27 - 2017-01-27 18:27 - 00000000 ____D C:\Program Files\MPC-HC
2017-01-27 18:26 - 2017-01-27 18:26 - 13395440 _____ (MPC-HC Team ) C:\Users\oem2\Downloads\MPC-HC.1.7.10.x64.exe
2017-01-27 18:26 - 2017-01-27 18:26 - 01280960 _____ (Rusahebac ) C:\Users\oem2\Downloads\Media-Player-Classic-Home-Cinema-12469-dp.exe
2017-01-27 18:18 - 2017-01-30 14:25 - 00000000 ____D C:\Users\oem2\.smplayer
2017-01-27 18:18 - 2017-01-27 18:18 - 00000000 ____D C:\Users\oem2\AppData\Roaming\mpv
2017-01-27 18:17 - 2017-01-27 18:18 - 00000000 ____D C:\Program Files\SMPlayer
2017-01-27 18:17 - 2017-01-27 18:17 - 00000824 _____ C:\Users\Public\Desktop\SMPlayer.lnk
2017-01-27 18:17 - 2017-01-27 18:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SMPlayer
2017-01-27 18:16 - 2017-01-27 18:16 - 37740112 _____ C:\Users\oem2\Downloads\smplayer-17.1.0-x64.exe
2017-01-27 18:15 - 2017-01-27 18:15 - 01280960 _____ (Rusahebac ) C:\Users\oem2\Downloads\SMPlayer-13051-dp.exe
2017-01-27 16:58 - 2017-01-27 16:58 - 00000000 ____D C:\ProgramData\Western Digital
2017-01-26 15:44 - 2017-01-26 15:44 - 01968800 _____ C:\Users\oem2\Downloads\oferta.pdf
2017-01-26 14:45 - 2017-01-26 14:45 - 00203175 _____ C:\Users\oem2\Downloads\4191329_100031746696.pdf
2017-01-26 10:06 - 2017-01-26 10:06 - 02054804 _____ C:\Users\oem2\Downloads\5_EBOOK_Zest_FIN.zip
2017-01-26 09:36 - 2017-01-26 09:36 - 04092335 _____ C:\Users\oem2\Downloads\5_EBOOK_new.zip
2017-01-25 13:04 - 2017-01-25 13:43 - 315916817 _____ C:\Users\oem2\Downloads\eclipse-jee-neon-2-win32-x86_64.zip
2017-01-25 13:00 - 2017-01-25 13:00 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2017-01-25 13:00 - 2017-01-25 13:00 - 00000000 ____D C:\Users\oem2\AppData\Roaming\Sun
2017-01-25 13:00 - 2017-01-25 13:00 - 00000000 ____D C:\ProgramData\Oracle
2017-01-25 13:00 - 2017-01-25 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2017-01-25 13:00 - 2017-01-25 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-01-25 12:59 - 2017-01-25 13:00 - 00000000 ____D C:\Program Files\Java
2017-01-25 12:59 - 2017-01-25 12:59 - 00000000 ____D C:\Users\oem2\AppData\LocalLow\Oracle
2017-01-25 12:55 - 2017-01-25 12:59 - 205004856 _____ (Oracle Corporation) C:\Users\oem2\Downloads\jdk-8u121-windows-x64.exe
2017-01-24 15:21 - 2017-01-24 15:21 - 02038529 _____ C:\Users\oem2\Downloads\5_EBOOK.zip
2017-01-24 13:33 - 2017-01-24 13:33 - 00001773 _____ C:\Users\oem2\Downloads\Region DSA - Warszawa.txt
2017-01-24 13:32 - 2017-01-24 13:32 - 00954880 _____ C:\Users\oem2\Downloads\1005_20080604.xls
2017-01-24 13:31 - 2017-01-24 13:31 - 00692224 _____ C:\Users\oem2\Downloads\Raport Profile 04.06.08.xls
2017-01-24 13:28 - 2017-01-24 13:28 - 00003113 _____ C:\Users\oem2\Downloads\Fw- Raport Profile Polska za 04.06.08.txt
2017-01-24 13:16 - 2017-01-24 13:16 - 01168384 _____ C:\Users\oem2\Downloads\1005_20081031.xls
2017-01-24 13:11 - 2017-01-24 13:11 - 00006995 _____ C:\Users\oem2\Downloads\Fw- Baza Firm Znanych kryteria dodawania + karta kwalifikacyjna.txt
2017-01-24 13:08 - 2017-01-24 13:08 - 00001866 _____ C:\Users\oem2\Downloads\Fw- Śmieszne.txt
2017-01-24 13:07 - 2017-01-24 13:07 - 00002065 _____ C:\Users\oem2\Downloads\ODP- kontakt.txt
2017-01-24 12:35 - 2017-01-24 12:35 - 00222092 _____ C:\Users\oem2\Downloads\OK200803150460585777.xls
2017-01-24 11:13 - 2017-01-24 11:13 - 00320035 _____ C:\Users\oem2\Downloads\OWU kredyt consumer bank.pdf
2017-01-24 09:55 - 2017-01-24 09:55 - 00376248 _____ C:\Users\oem2\Downloads\ubezpieczenie kredyt hipoteczny.pdf
2017-01-24 09:37 - 2017-01-24 09:37 - 00207606 _____ C:\Users\oem2\Downloads\karta płatnicza.pdf
2017-01-23 11:28 - 2017-01-23 11:28 - 00000000 ____D C:\ProgramData\787f034b-8cc3-4c4e-b097-4bbfc2be35fa
2017-01-23 10:31 - 2017-01-23 10:31 - 00014892 _____ C:\Users\oem2\Downloads\RP_422709_7_20170123103126.pdf
2017-01-22 19:21 - 2017-01-22 19:21 - 00000000 ___DL C:\Users\oem2\AppData\LocalLow\PlayReady
2017-01-22 17:56 - 2017-01-22 17:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-01-22 17:56 - 2017-01-22 17:56 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-01-22 17:56 - 2017-01-22 17:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-02-16 12:13 - 2016-09-12 09:05 - 00002419 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-16 12:13 - 2016-09-12 09:05 - 00002407 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-02-16 12:13 - 2016-06-16 15:31 - 00001090 _____ C:\Users\oem2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-02-16 11:56 - 2016-06-16 15:31 - 00000000 ____D C:\Users\oem2
2017-02-16 11:32 - 2016-06-16 15:34 - 01738750 _____ C:\Windows\system32\PerfStringBackup.INI
2017-02-16 11:32 - 2013-08-23 00:12 - 00773004 _____ C:\Windows\system32\perfh015.dat
2017-02-16 11:32 - 2013-08-23 00:12 - 00156654 _____ C:\Windows\system32\perfc015.dat
2017-02-16 11:32 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2017-02-16 11:29 - 2016-09-26 13:15 - 00000000 ___RD C:\Users\oem2\Creative Cloud Files
2017-02-16 11:29 - 2016-09-26 13:15 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-02-16 11:29 - 2016-09-26 12:55 - 00000000 ____D C:\Users\oem2\AppData\Local\Adobe
2017-02-16 11:28 - 2016-06-16 17:52 - 00000000 __SHD C:\Users\oem2\IntelGraphicsProfiles
2017-02-16 11:28 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-02-16 11:28 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2017-02-16 10:55 - 2013-08-22 15:44 - 00364184 _____ C:\Windows\system32\FNTCACHE.DAT
2017-02-16 10:46 - 2016-06-16 15:31 - 00000000 ____D C:\Users\oem2\AppData\Roaming\Adobe
2017-02-16 10:46 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\GroupPolicy
2017-02-16 07:35 - 2016-06-16 17:39 - 00003960 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{C07F2B4D-0FF3-47CE-8A7B-B7DD8B832F97}
2017-02-13 13:19 - 2016-09-23 08:55 - 00000000 ____D C:\Users\oem2\Desktop\MAR
2017-02-03 13:17 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2017-01-22 10:16 - 2016-09-26 13:13 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2017-01-18 12:32 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\NDF

==================== Pliki w katalogu głównym wybranych folderów =======

2017-01-13 13:15 - 2017-01-13 13:15 - 0027959 _____ () C:\Users\oem2\AppData\Local\recently-used.xbel
2017-02-16 10:47 - 2017-02-16 10:47 - 1620992 _____ () C:\ProgramData\service.exe

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\service.exe


Niektóre pliki w TEMP:
====================
2017-02-16 10:46 - 2017-02-16 10:46 - 17628560 _____ (IObit                                                       ) C:\Users\oem2\AppData\Local\Temp\3650.tmp.exe
2017-02-16 10:46 - 2017-02-16 10:47 - 2315388 _____ (                                                            ) C:\Users\oem2\AppData\Local\Temp\AutoTime51495.exe
2017-02-16 11:47 - 2017-02-16 11:47 - 0550404 _____ () C:\Users\oem2\AppData\Local\Temp\DBUpdater.exe
2017-02-16 10:46 - 2017-02-16 10:46 - 0075264 _____ () C:\Users\oem2\AppData\Local\Temp\DriverBoosterSetup.exe
2017-02-16 10:47 - 2017-02-16 10:47 - 0528137 _____ (                                                            ) C:\Users\oem2\AppData\Local\Temp\global_installer.exe
2017-02-16 11:01 - 2017-02-16 11:01 - 0210840 _____ () C:\Users\oem2\AppData\Local\Temp\Rho.exe
2017-02-16 10:46 - 2017-02-16 10:46 - 2984392 _____ () C:\Users\oem2\AppData\Local\Temp\sys32.exe
2017-02-16 10:47 - 2017-02-16 10:47 - 0501318 _____ (Leading2Apps                                                ) C:\Users\oem2\AppData\Local\Temp\XQI4ES6.exe
2017-02-16 10:46 - 2017-02-16 10:46 - 2150398 _____ () C:\Users\oem2\AppData\Local\Temp\yt.exe

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-02-13 09:02

==================== Koniec  FRST.txt ============================