Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 15-03-2017
Uruchomiony przez Gracjan (administrator)  DESKTOP-0MQ0DSO (15-03-2017 15:21:44)
Uruchomiony z C:\Users\Gracjan\Downloads\Programs
Załadowane profile: Gracjan (Dostępne profile: Gracjan)
Platform: Windows 10 Home Wersja 1607 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: "C:\Program Files\Slimjet\slimjet.exe" -- "%1")
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
() C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(RoseCitySoftware) C:\Program Files\RFA 11\rfagent64.exe
(Dominik Reichl) C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
(FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
(FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
(FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
(FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17012.10301.0_x64__8wekyb3d8bbwe\Video.UI.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17012.10311.0_x64__8wekyb3d8bbwe\Music.UI.exe
(BitTorrent Inc.) C:\Users\Gracjan\AppData\Roaming\uTorrent\uTorrent.exe
(BitTorrent Inc.) C:\Users\Gracjan\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe
(BitTorrent Inc.) C:\Users\Gracjan\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe
(FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
(FlashPeak Inc.) C:\Program Files\Slimjet\slimjet.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8505088 2016-08-06] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2016-08-06] (Realtek Semiconductor)
HKLM\...\Run: [rfagent] => C:\Program Files\RFA 11\rfagent64.exe [3506192 2017-02-07] (RoseCitySoftware)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2867712 2017-01-09] (Dominik Reichl)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [61944 2017-02-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [909744 2017-02-15] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-4242828667-1088706184-1539738138-1001\...\Run: [KeePass Password Safe 2] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2867712 2017-01-09] (Dominik Reichl)
HKU\S-1-5-21-4242828667-1088706184-1539738138-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [4005944 2017-02-14] (Tonec Inc.)
HKU\S-1-5-21-4242828667-1088706184-1539738138-1001\...\Run: [uTorrent] => C:\Users\Gracjan\AppData\Roaming\uTorrent\uTorrent.exe [2147520 2017-03-15] (BitTorrent Inc.)
HKU\S-1-5-21-4242828667-1088706184-1539738138-1001\...\Run: [Mscvin] => C:\Users\Gracjan\AppData\Roaming\Mscvin.exe [266080 2016-07-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [   IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Brak pliku
GroupPolicyScripts: Ograniczenia <======= UWAGA
GroupPolicyScripts-x32: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Winsock: Catalog5 05 C:\WINDOWS\SysWOW64\networkdlllsp.dll [448296 2016-10-16] (Network Tunnel Lab)
Winsock: Catalog9 01 C:\WINDOWS\SysWOW64\networkdlllsp.dll [448296 2016-10-16] (Network Tunnel Lab)
Winsock: Catalog9 02 C:\WINDOWS\SysWOW64\networkdlllsp.dll [448296 2016-10-16] (Network Tunnel Lab)
Winsock: Catalog9 03 C:\WINDOWS\SysWOW64\networkdlllsp.dll [448296 2016-10-16] (Network Tunnel Lab)
Winsock: Catalog9 04 C:\WINDOWS\SysWOW64\networkdlllsp.dll [448296 2016-10-16] (Network Tunnel Lab)
Winsock: Catalog9 05 C:\WINDOWS\SysWOW64\networkdlllsp.dll [448296 2016-10-16] (Network Tunnel Lab)
Winsock: Catalog9 06 C:\WINDOWS\SysWOW64\networkdlllsp.dll [448296 2016-10-16] (Network Tunnel Lab)
Winsock: Catalog9 07 C:\WINDOWS\SysWOW64\networkdlllsp.dll [448296 2016-10-16] (Network Tunnel Lab)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.2 193.59.201.24 195.187.244.8
Tcpip\..\Interfaces\{322ce5f7-f93c-4c63-ab27-528ba014e18a}: [DhcpNameServer] 192.168.2.2 193.59.201.24 195.187.244.8

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)

FireFox:
========
FF HKU\S-1-5-21-4242828667-1088706184-1539738138-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Gracjan\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Gracjan\AppData\Roaming\IDM\idmmzcc5 [2017-03-15] [Brak podpisu cyfrowego]
FF HKU\S-1-5-21-4242828667-1088706184-1539738138-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-01-26]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-02-13]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1115552 2017-02-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [487424 2017-02-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [487424 2017-02-15] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1519144 2017-02-15] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [349048 2017-02-22] (Avira Operations GmbH & Co. KG)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2014-01-15] ()
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-08-06] (Intel Corporation)
S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [682064 2014-04-26] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2016-08-06] (Realtek Semiconductor)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269400 2016-10-05] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [314016 2017-01-12] ()
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [161824 2017-02-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [163976 2017-02-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [44488 2017-02-15] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [88488 2017-02-15] (Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\WINDOWS\System32\Drivers\avusbflt.sys [48584 2017-02-15] (Avira Operations GmbH & Co. KG)
S3 HaozipVirtualCDBus; C:\WINDOWS\System32\drivers\HaoZipVirtualCDBus.sys [207336 2015-08-28] (Shanghai RuiChuang)
S3 huawei_wwanecm; C:\WINDOWS\System32\drivers\ew_juwwanecm.sys [246272 2013-11-30] (Huawei Technologies Co., Ltd.)
S3 hwusb_cdcacm; C:\WINDOWS\system32\DRIVERS\ew_cdcacm.sys [124800 2014-06-11] (Huawei Technologies Co., Ltd.)
S3 hwusb_wwanecm; C:\WINDOWS\System32\drivers\ew_wwanecm.sys [379392 2014-05-04] (Huawei Technologies Co., Ltd.)
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [43680 2017-01-12] ()
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 netr28x; C:\WINDOWS\system32\DRIVERS\netr28x.sys [2554528 2016-08-06] (MediaTek Inc.)
S3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [310528 2016-08-06] (Realtek Semiconductor Corp.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )
R3 rtbth; C:\WINDOWS\System32\drivers\rtbth.sys [1219200 2016-08-06] (Ralink Technology, Corp.)
S3 VSScanner; C:\WINDOWS\System32\DRIVERS\vsscanner.sys [29808 2016-08-18] (VoodooSoft, LLC)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\system32\DRIVERS\WirelessButtonDriver64.sys [31656 2016-08-06] (HP)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-03-15 15:21 - 2017-03-15 15:21 - 00000000 ____D C:\FRST
2017-03-15 14:25 - 2016-07-16 12:42 - 00266080 _____ (Microsoft Corporation) C:\Users\Gracjan\AppData\Roaming\Mscvin.exe
2017-03-15 12:41 - 2017-03-15 12:41 - 00000000 ____D C:\Users\Gracjan\AppData\LocalLow\uTorrent
2017-03-14 18:15 - 2017-03-14 20:03 - 00000000 ____D C:\Users\Gracjan\AppData\Local\Rockstar Games
2017-03-14 17:50 - 2017-03-14 17:50 - 00000000 __RHD C:\Users\Gracjan\AppData\Roaming\SecuROM
2017-03-14 17:49 - 2017-03-14 17:49 - 00178800 _____ (Sony DADC Austria AG.) C:\WINDOWS\SysWOW64\CmdLineExt_x64.dll
2017-03-14 12:55 - 2017-03-14 12:55 - 71553024 _____ C:\WINDOWS\system32\config\SOFTWARE.tmp
2017-03-14 12:55 - 2017-03-14 12:55 - 16011264 _____ C:\WINDOWS\system32\config\SYSTEM.tmp
2017-03-14 12:55 - 2017-03-14 12:55 - 00028672 _____ C:\WINDOWS\system32\config\SECURITY.tmp
2017-03-14 12:55 - 2017-03-14 12:55 - 00024576 _____ C:\WINDOWS\system32\config\SAM.tmp
2017-03-14 12:15 - 2016-08-18 17:17 - 00029808 _____ (VoodooSoft, LLC) C:\WINDOWS\system32\Drivers\vsscanner.sys
2017-03-11 16:55 - 2017-03-11 16:55 - 00000000 ____D C:\Users\Gracjan\AppData\Roaming\Avira
2017-03-11 16:50 - 2017-02-15 16:55 - 00163976 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2017-03-11 16:50 - 2017-02-15 16:55 - 00161824 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2017-03-11 16:50 - 2017-02-15 16:55 - 00088488 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2017-03-11 16:50 - 2017-02-15 16:55 - 00048584 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avusbflt.sys
2017-03-11 16:50 - 2017-02-15 16:55 - 00044488 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2017-03-11 16:40 - 2017-03-11 16:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-03-11 16:40 - 2017-03-11 16:50 - 00000000 ____D C:\ProgramData\Avira
2017-03-11 16:40 - 2017-03-11 16:50 - 00000000 ____D C:\Program Files (x86)\Avira
2017-03-11 16:40 - 2017-03-11 16:40 - 00001254 _____ C:\Users\Public\Desktop\Avira Connect.lnk
2017-03-11 13:47 - 2017-03-11 13:47 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Registry First Aid 11
2017-03-08 20:09 - 2017-03-08 20:09 - 00000000 _____ C:\WINDOWS\SysWOW64\last.dump
2017-03-08 20:00 - 2017-03-08 20:00 - 00000000 ___HD C:\$AV_ASW
2017-03-08 19:53 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2017-03-08 19:53 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2017-03-08 19:53 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2017-03-08 19:53 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2017-03-08 19:53 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2017-03-08 19:53 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2017-03-08 19:53 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2017-03-08 19:53 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2017-03-08 19:53 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2017-03-08 19:53 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2017-03-08 19:53 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2017-03-08 19:53 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2017-03-08 19:53 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2017-03-08 19:53 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2017-03-08 19:53 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2017-03-08 19:53 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2017-03-08 19:53 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2017-03-08 19:53 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2017-03-08 19:53 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2017-03-08 19:53 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2017-03-08 19:53 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2017-03-08 19:53 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2017-03-08 19:53 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2017-03-08 19:53 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2017-03-08 19:53 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2017-03-08 19:53 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2017-03-08 19:53 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2017-03-08 19:53 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2017-03-08 19:53 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2017-03-08 19:53 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2017-03-08 19:53 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2017-03-08 19:53 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2017-03-08 19:53 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2017-03-08 19:53 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2017-03-08 19:53 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2017-03-08 19:53 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2017-03-08 19:53 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2017-03-08 19:53 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2017-03-08 19:53 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2017-03-08 19:53 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2017-03-08 19:53 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2017-03-08 19:53 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2017-03-08 19:53 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2017-03-08 19:53 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2017-03-08 19:53 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2017-03-08 19:53 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2017-03-08 19:53 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2017-03-08 19:53 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2017-03-08 19:53 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2017-03-08 19:53 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
2017-03-08 19:53 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2017-03-08 19:53 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
2017-03-08 19:53 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2017-03-08 19:53 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2017-03-08 19:53 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2017-03-08 19:53 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2017-03-08 19:53 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2017-03-08 19:53 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2017-03-08 19:53 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2017-03-08 19:53 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2017-03-08 19:53 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2017-03-08 19:53 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2017-03-08 19:53 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2017-03-08 19:53 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2017-03-07 19:26 - 2017-03-07 19:26 - 00000000 ____D C:\Users\Public\Documents\HostsMan Backups
2017-03-07 16:07 - 2017-03-07 16:07 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf
2017-03-07 13:26 - 2017-03-07 13:26 - 00000255 _____ C:\WINDOWS\SysWOW64\Drivers\vwifikerneldrv.sys
2017-03-07 13:26 - 2017-03-07 13:26 - 00000255 _____ C:\WINDOWS\SysWOW64\d3dx9_11.dll.tmp
2017-03-07 13:26 - 2017-03-07 13:26 - 00000255 _____ C:\ProgramData\fontcacheev1.dat
2017-03-04 17:33 - 2017-03-07 15:25 - 00000000 ____D C:\Program Files (x86)\Google
2017-02-17 14:32 - 2017-02-17 14:32 - 404862860 _____ C:\WINDOWS\MEMORY.DMP
2017-02-17 14:32 - 2017-02-17 14:32 - 00454500 _____ C:\WINDOWS\Minidump\021717-27328-01.dmp
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ____D C:\WINDOWS\Minidump
2017-02-13 18:14 - 2016-10-17 16:35 - 00223464 _____ (Tonec Inc.) C:\WINDOWS\system32\Drivers\idmwfp.sys

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-03-15 15:21 - 2016-11-24 12:39 - 00000000 ____D C:\Users\Gracjan\AppData\Roaming\uTorrent
2017-03-15 15:17 - 2016-11-22 12:31 - 00000000 ____D C:\Users\Gracjan\AppData\Roaming\DMCache
2017-03-15 15:12 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-03-15 15:12 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-03-15 15:08 - 2016-11-02 14:14 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-03-15 14:29 - 2016-11-22 12:31 - 00000000 ____D C:\Users\Gracjan\Downloads\Compressed
2017-03-15 11:29 - 2016-08-06 18:11 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-03-15 11:27 - 2016-08-06 18:11 - 138634176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-03-15 11:26 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-03-15 10:46 - 2016-12-06 20:20 - 00004230 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E5828F65-EA38-4B37-8CD2-5E4F47779FDB}
2017-03-15 10:43 - 2016-11-02 14:37 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-03-15 10:43 - 2016-08-06 18:17 - 00000000 __SHD C:\Users\Gracjan\IntelGraphicsProfiles
2017-03-15 10:43 - 2016-07-16 07:04 - 02621440 _____ C:\WINDOWS\system32\config\BBI
2017-03-14 21:59 - 2016-08-06 18:39 - 00000000 ____D C:\Users\Gracjan\AppData\Roaming\KeePass
2017-03-14 20:10 - 2016-11-02 14:22 - 00000000 ____D C:\Users\Gracjan
2017-03-14 20:08 - 2017-01-05 18:39 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-03-14 12:55 - 2017-02-03 16:43 - 00000000 ____D C:\ProgramData\RFA_Backups
2017-03-13 15:41 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-03-11 18:24 - 2016-11-22 12:31 - 00000000 ____D C:\Users\Gracjan\Downloads\Video
2017-03-11 16:40 - 2016-08-06 19:25 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-11 16:27 - 2016-12-30 16:15 - 00003294 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-03-11 16:27 - 2016-08-06 17:31 - 00002430 _____ C:\Users\Gracjan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-03-11 16:27 - 2016-08-06 17:31 - 00000000 ___RD C:\Users\Gracjan\OneDrive
2017-03-11 15:17 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\registration
2017-03-11 13:47 - 2017-02-03 16:41 - 00000855 _____ C:\Users\Public\Desktop\Registry First Aid 11.lnk
2017-03-11 13:47 - 2017-02-03 16:41 - 00000000 ____D C:\Program Files\RFA 11
2017-03-11 12:50 - 2016-11-02 14:14 - 00194256 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-03-11 11:53 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-03-10 13:40 - 2016-07-24 14:07 - 00006254 _____ C:\Users\Gracjan\Documents\Hasła.kdbx
2017-03-09 10:43 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-03-09 10:43 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy
2017-03-07 15:31 - 2016-07-16 12:47 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2017-03-07 15:28 - 2016-12-12 16:21 - 00000000 ____D C:\Users\Gracjan\AppData\Local\CrashDumps
2017-03-07 15:25 - 2016-10-07 11:10 - 00000000 ____D C:\Users\Gracjan\AppData\Local\Google
2017-03-06 14:38 - 2016-12-16 10:37 - 00001055 _____ C:\Users\Gracjan\Desktop\Internet Download Manager.lnk
2017-03-06 14:37 - 2016-12-16 10:37 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2017-02-13 12:08 - 2016-11-22 12:31 - 00000000 ____D C:\Users\Gracjan\AppData\Roaming\IDM

==================== Pliki w katalogu głównym wybranych folderów =======

2017-02-03 15:37 - 2017-02-03 15:37 - 0000020 ___SH () C:\Users\Gracjan\AppData\Roaming\1816CA7466166.ind
2017-03-15 14:25 - 2016-07-16 12:42 - 0266080 _____ (Microsoft Corporation) C:\Users\Gracjan\AppData\Roaming\Mscvin.exe
2017-02-03 15:37 - 2017-02-03 15:37 - 0000020 ___SH () C:\Users\Gracjan\AppData\Roaming\Programs8187ConfigDB.dat
2017-03-07 13:26 - 2017-03-07 13:26 - 0000255 _____ () C:\ProgramData\fontcacheev1.dat
2016-08-16 12:27 - 2016-08-16 12:27 - 0000016 _____ () C:\ProgramData\mntemp

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\fontcacheev1.dat


Niektóre pliki w TEMP:
====================
2017-03-11 12:12 - 2017-03-11 12:12 - 0000000 ____D () C:\Users\Gracjan\AppData\Local\Temp\avgnt.exe
2017-03-14 17:50 - 2017-03-14 17:51 - 0204800 _____ (Sony DADC Austria AG) C:\Users\Gracjan\AppData\Local\Temp\drm_dyndata_7370014.dll
2017-02-14 18:00 - 2017-01-29 19:32 - 0389765 _____ () C:\Users\Gracjan\AppData\Local\Temp\IDM Patch Uninstaller.exe
2017-02-03 21:10 - 2017-02-03 21:10 - 47682223 _____ (Igor Pavlov) C:\Users\Gracjan\AppData\Local\Temp\sjt7z_x64_console.exe

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-03-07 19:33

==================== Koniec  FRST.txt ============================