Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 16-10-2016
Uruchomiony przez DAMIAN (administrator)  PIPEK-KOMPUTER (22-10-2016 20:01:05)
Uruchomiony z C:\Users\DAMIAN\Downloads
Załadowane profile: DAMIAN & UpdatusUser (Dostępne profile: pipek & MATEUSZ & DAMIAN & UpdatusUser)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka: IE)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgwdsvcx.exe
() C:\ProgramData\Logic Handler\set.exe
() C:\ProgramData\service.exe
(猫哈网络 版权所有) C:\Program Files\GreatMaker\MaohaWiFi\MaohaWifiSvr.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\ProgramData\NetworkPacketManitor\Nettrans.exe
() C:\ProgramData\Quoteex\Quoteex.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgemcx.exe
() C:\Program Files\Razer\Razer Services\GSS\GameScannerService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(AIMP DevTeam) C:\Program Files\AIMP3\AIMP3.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Users\DAMIAN\AppData\Roaming\GowvePitpagf\Lurzem.exe
() C:\Users\DAMIAN\AppData\Roaming\Geunfy\Geunfy.exe
(Microsoft Corporation) C:\Windows\System32\slui.exe
() C:\Users\DAMIAN\AppData\Roaming\SimpleNotepad4\SimpleNoteApp3.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe
() C:\Program Files\7DF8AE40-1477055635-11DC-A6AD-001E68D5EA8B\knsC89F.tmp
() C:\Users\DAMIAN\AppData\Roaming\Geunfy\Yurejjaeb.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_23_0_0_185.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_23_0_0_185.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe


==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguirnx.exe [187152 2016-09-13] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\Framework\Common\avguirnx.exe [187152 2016-09-13] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [NeroCheck] => C:\Windows\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [55264 2016-03-10] (Malwarebytes)
HKU\S-1-5-21-3091924290-661932203-592501800-1004\...\Run: [ALLPlayer WiFi Remote] => C:\Program Files\ALLPlayer Remote\ALLPlayerRemoteControl.exe [5182896 2014-07-23] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-3091924290-661932203-592501800-1004\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3671872 2012-04-17] (DT Soft Ltd)
HKU\S-1-5-21-3091924290-661932203-592501800-1004\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6495144 2015-09-16] (Piriform Ltd)
HKU\S-1-5-21-3091924290-661932203-592501800-1004\...\Run: [uTorrent] => C:\Users\DAMIAN\AppData\Roaming\uTorrent\uTorrent.exe [2139840 2016-09-09] (BitTorrent Inc.)
HKU\S-1-5-21-3091924290-661932203-592501800-1004\...\RunOnce: [ALLPlayer Remote Update] => C:\Users\DAMIAN\AppData\Local\Temp\ALLRemote.exe <===== UWAGA
HKU\S-1-5-21-3091924290-661932203-592501800-1004\...\MountPoints2: {d0fd73f3-7cee-11e5-9084-001e68d5ea8b} - I:\AutoRun.exe
HKLM\...\Providers\04946f7y: C:\Users\UpdatusUser\AppData\LocalLow\Youtube AdBlock_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\0k8tte2j: C:\Users\MATEUSZ\AppData\Local\Google\Chrome\User Data_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\0ljj4oi5: C:\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\0oao8zaf: C:\Windows\Temp_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\0ps778jc: e:\mazury 2  2015_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\1h61wcsd: e:\mazury 2  2015_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\224mwbyp: E:\mazury 2015\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\28ylz3qh: C:\Users\DAMIAN\AppData\LocalLow\Youtube AdBlock_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\29mvacy5: C:\Users\pipek\AppData\Local\Temp_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\2coon5vi: e:\mazury 2  2015\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\2urry2cn: d:\katalogi_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\2ymkb0ok: C:\Users\pipek\AppData\Roaming\Opera Software\Opera Stable_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\332yyp3l: C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\33zn95n9: C:\Users\MATEUSZ\AppData\Local\Temp\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\3s7fuaih: c:\_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\3ykv4qz7: C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\3yzx6wwm: C:\Users\pipek\AppData\Local\Temp\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\44ubtcoz: E:\mazury 2015_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\463q6jzc: C:\Users\pipek\AppData\Local\Google\Chrome\User Data_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\490kqvpw: C:\Users\DAMIAN\AppData\Roaming\Opera Software\Opera Stable_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\4a4vsm9h: C:\Windows\Temp\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\4t86ip39: C:\Users\MATEUSZ\AppData\LocalLow\Youtube AdBlock\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\51j78t2s: C:\Users\pipek\AppData\Local\Google\Chrome\User Data\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\5yrgbsoo: C:\Users\DAMIAN\AppData\Local\Temp_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\67pd86ir: C:\Users\DAMIAN\AppData\Local\Temp\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\6aazv9sw: d:\hip hop\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\6v47rmaw: D:\Hip Hop_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\7zrpfh4r: C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\94wpkk60: C:\Users\pipek\AppData\LocalLow\Youtube AdBlock\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\9f3z8q7i: d:\katalogi\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\9l9k3t9m: C:\Users\pipek\AppData\Local\Temp_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\a0pyjr7g: C:\Users\MATEUSZ\AppData\Roaming\Opera Software\Opera Stable_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\a911vv07: C:\Program Files\Youtube AdBlock\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\afn3mx7n: C:\Users\UpdatusUser\AppData\Local\Temp\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\amxi9m62: E:\mazury 2  2015\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\apzmy4ko: C:\Users\MATEUSZ\AppData\Roaming\Opera Software\Opera Stable\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\awv7p3we: D:\Hip Hop_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\c01qizb6: d:\hip hop_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\cgqxvi7k: C:\Program Files\Mozilla Firefox\browser\features_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\cxlb65dn: C:\_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\dg76wkaf: C:\Users\DAMIAN\AppData\Roaming\Opera Software\Opera Stable_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\dq0u3v2u: C:\Users\pipek\AppData\Roaming\Opera Software\Opera Stable\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\dz9f3m5e: C:\Users\DAMIAN\AppData\Roaming\Opera Software\Opera Stable\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\e2xd893s: d:\katalogi\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\ego7d5rs: c:\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\eix20zao: C:\Users\UpdatusUser\AppData\Local\Temp_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\eqnd7oct: C:\Users\DAMIAN\AppData\Roaming\Opera Software\Opera Stable\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\f2qwxq8c: C:\Users\pipek\AppData\LocalLow\Youtube AdBlock_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\fpiiqsre: C:\Users\MATEUSZ\AppData\Roaming\Opera Software\Opera Stable_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\fqcewcx8: C:\Users\MATEUSZ\AppData\Local\Temp_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\g13h6f8q: D:\katalogi_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\gnnn00bz: C:\Users\DAMIAN\AppData\LocalLow\Youtube AdBlock_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\h8omagr8: C:\Users\MATEUSZ\AppData\Local\Google\Chrome\User Data\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\h9f05g8n: C:\Program Files\Youtube AdBlock_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\hxxi7pxz: E:\mazury 2  2015_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\ihymuzii: C:\Users\DAMIAN\AppData\LocalLow\Youtube AdBlock\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\ix1rwdwp: e:\mazury 2  2015\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\izoyrbhx: C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\jfsza3z5: E:\mazury 2015_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\jzr5umca: C:\Users\MATEUSZ\AppData\Local\Google\Chrome\User Data\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\k0t5zryc: C:\Program Files\Youtube AdBlock\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\knuhr082: C:\Users\pipek\AppData\Roaming\Opera Software\Opera Stable\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\m2axiw3l: d:\katalogi_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\m7kl87xg: C:\Users\MATEUSZ\AppData\Local\Temp_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\m7sbha9q: C:\Users\UpdatusUser\AppData\LocalLow\Youtube AdBlock\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\m8z4px8t: C:\Users\MATEUSZ\AppData\Local\Temp\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\ml2vmzi5: C:\Windows\Temp\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\n0m16dba: C:\Users\MATEUSZ\AppData\LocalLow\Youtube AdBlock_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\nqzb6anv: d:\hip hop_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\nte8qk0d: D:\katalogi\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\nyctbjac: C:\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\o374i3a1: c:\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\on8n976h: D:\Hip Hop\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\phhcp8p4: C:\Users\pipek\AppData\LocalLow\Youtube AdBlock_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\pj272zwp: C:\Program Files\Mozilla Firefox\browser\features\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\pko9h5lm: C:\Users\MATEUSZ\AppData\LocalLow\Youtube AdBlock_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\qfk5c0vl: d:\hip hop\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\qkzdwrwe: D:\katalogi\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\rnxfhqok: D:\Hip Hop\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\rqk37jq4: D:\katalogi_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\s9zjgbv9: C:\Users\pipek\AppData\LocalLow\Youtube AdBlock\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\sjzxr4di: C:\Users\pipek\AppData\Local\Google\Chrome\User Data_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\swn2dj7h: C:\Program Files\Youtube AdBlock_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\szd4kdzr: C:\Users\DAMIAN\AppData\LocalLow\Youtube AdBlock\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\tbct2d5j: C:\Users\UpdatusUser\AppData\LocalLow\Youtube AdBlock_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\ucn014e6: c:\_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\uu7y1yjh: C:\_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\v5api39c: C:\Users\pipek\AppData\Roaming\Opera Software\Opera Stable_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\v7ktan23: C:\Users\MATEUSZ\AppData\Local\Google\Chrome\User Data_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\vgmbjaiq: C:\Users\DAMIAN\AppData\Local\Temp\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\whkvzb96: C:\Users\UpdatusUser\AppData\Local\Temp\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\wuhwe0n3: C:\Users\DAMIAN\AppData\Local\Temp_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\wwogu1kp: C:\Windows\Temp_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\x3c3fx9j: C:\Users\MATEUSZ\AppData\LocalLow\Youtube AdBlock\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\x7t9n3vv: C:\Users\UpdatusUser\AppData\Local\Temp_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\y8uz9yhl: C:\Users\pipek\AppData\Local\Temp\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\ymn5kj0g: C:\Users\UpdatusUser\AppData\LocalLow\Youtube AdBlock\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\z0vsc8qz: E:\mazury 2  2015\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\z6iux0t6: C:\Users\MATEUSZ\AppData\Roaming\Opera Software\Opera Stable\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\z8dsz5u4: C:\Users\pipek\AppData\Local\Google\Chrome\User Data\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\z9qbe20i: C:\Program Files\Mozilla Firefox\browser\features_\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\zju2yh6k: C:\Program Files\Mozilla Firefox\browser\features\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\zs4m3gbr: E:\mazury 2015\\local32spl.dll [145408 2016-10-22] ()
HKLM\...\Providers\zske1dn3: E:\mazury 2  2015_\local32spl.dll [145408 2016-10-22] ()
BootExecute: autocheck autochk /r \??\C:autocheck autochk * 
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.20.40
Tcpip\..\Interfaces\{520D779E-2ABF-4F85-BE65-2616E1133924}: [DhcpNameServer] 192.168.20.40
Tcpip\..\Interfaces\{96284DF8-9C64-44D4-9FEF-FF8656EF6A64}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{C96B782A-8963-4CED-8D61-D2AC93A70B8B}: [DhcpNameServer] 192.168.8.1 192.168.8.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
SearchScopes: HKU\S-1-5-21-3091924290-661932203-592501800-1005 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF DefaultProfile: t4c4z6kn.default
FF ProfilePath: C:\Users\DAMIAN\AppData\Roaming\Mozilla\Firefox\naweriweentcofise\Profiles\t4c4z6kn.default\Profiles\t4c4z6kn.default [nie znaleziono]
FF ProfilePath: C:\Users\DAMIAN\AppData\Roaming\Mozilla\Firefox\Profiles\t4c4z6kn.default [2016-10-22]
FF Homepage: Mozilla\Firefox\Profiles\t4c4z6kn.default -> hxxps://www.malwarebytes.org/restorebrowser/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_185.dll [2016-10-12] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)

Chrome: 
=======
CHR DefaultProfile: ChromeDefaultData
CHR DefaultSearchURL: ChromeDefaultData -> hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoGk3GzeHhcr-ccYvH_X9rCxtVcAgIN_is3v5VrBOMOAmGvBGDoP36xd1Vux3HO0I7Lmqf8ikdDhXfDu-QHsi4WhRFc36ndY8lc8hqXpc77EaOZ2_5TRdcwJlNWRTimlPpMrMzzEuOR9n1xhtKyL-lGGAJE0bihRIFjQJvltTAA,,&q={searchTerms}
CHR DefaultSearchKeyword: ChromeDefaultData -> feed.sonic-search.com
CHR DefaultSuggestURL: ChromeDefaultData -> hxxps://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms}
CHR Profile: C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2016-10-22] <==== UWAGA
CHR Extension: (Dokumenty Google) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-21]
CHR Extension: (Dysk Google) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-21]
CHR Extension: (YouTube) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-21]
CHR Extension: (Dokumenty Google offline) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-21]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-21]
CHR Extension: (Gmail) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-21]
CHR Extension: (Chrome Media Router) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-21]
CHR Profile: C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\Default [2016-10-22]
CHR Extension: (Easy Auto Refresh) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aabcgdmkeabbnleenpncegpcngjpnjkc [2016-08-22]
CHR Extension: (Prezentacje Google) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-30]
CHR Extension: (Dokumenty Google) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-30]
CHR Extension: (Dysk Google) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-30]
CHR Extension: (YouTube) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-30]
CHR Extension: (Google Search) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-30]
CHR Extension: (Arkusze Google) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-30]
CHR Extension: (Dokumenty Google offline) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-05]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-08-22]
CHR Extension: (Gmail) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-30]
CHR Extension: (Chrome Media Router) - C:\Users\DAMIAN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-11]
CHR HKLM\...\Chrome\Extension: [efhdjkbfpoohkmfaldijcpbnmbpefpkb] - C:\Program Files\ALLPlayer\AllPlayer.crx [2015-06-25]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AvgAMPS; C:\Program Files\AVG\Av\avgamps.exe [647864 2016-10-13] (AVG Technologies CZ, s.r.o.)
S2 AVGIDSAgent; C:\Program Files\AVG\Av\avgidsagent.exe [4149312 2016-10-13] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [945936 2016-09-13] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\Av\avgwdsvcx.exe [605336 2016-10-13] (AVG Technologies CZ, s.r.o.)
R2 MaohaWifiSvr; C:\Program Files\GreatMaker\MaohaWiFi\MaohaWifiSvr.exe [170464 2014-12-18] (猫哈网络 版权所有)
R2 Mogileghekpy; C:\Program Files\Gruheph\Mwscloud.dll [277504 2016-10-21] () [Brak podpisu cyfrowego]
R2 Razer Game Scanner Service; C:\Program Files\Razer\Razer Services\GSS\GameScannerService.exe [188072 2015-11-05] ()
R3 sppuinotify; C:\Windows\system32\sppuinotify.dll [53760 2010-11-20] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [3944720 2016-09-19] (AVG Technologies CZ, s.r.o.)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [49424 2016-09-19] (AVG Technologies CZ, s.r.o.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [134912 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [257792 2016-09-22] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [210176 2016-07-27] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [31664 2015-11-20] (AVG Technologies CZ, s.r.o.)
S1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [218880 2016-09-20] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [287008 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [197376 2016-09-26] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [47360 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [231680 2016-07-27] (AVG Technologies CZ, s.r.o.)
R0 Avgunivx; C:\Windows\System32\DRIVERS\avgunivx.sys [65280 2016-06-20] (AVG Technologies CZ, s.r.o.)
U0 cgqr; C:\Windows\System32\drivers\kmtj.sys [52440 2016-10-21] (Malwarebytes)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2015-11-14] (DT Soft Ltd)
R3 L1E; C:\Windows\System32\DRIVERS\L1E62x86.sys [48640 2016-01-28] (Atheros Communications, Inc.)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [170200 2016-10-22] (Malwarebytes)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [20288 2015-09-23] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [63808 2015-12-15] (Razer, Inc.)
R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [31792 2016-02-15] (AVG Netherlands B.V.)
S3 ucdrv; C:\Windows\System32\drivers:ucdrv-x86.sys [69010 ] (UC Web Inc.) <==== UWAGA
U0 yvpxay; C:\Windows\System32\drivers\pjajnsy.sys [52440 2016-10-22] (Malwarebytes)
R1 MaohaWifiNetPro; \??\C:\Program Files\GreatMaker\MaohaWiFi\MaoHaWiFiNet.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Trzy miesiące - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-10-22 20:01 - 2016-10-22 20:01 - 00025595 _____ C:\Users\DAMIAN\Downloads\FRST.txt
2016-10-22 19:38 - 2016-10-22 20:01 - 00000000 ____D C:\Users\DAMIAN\Downloads\FRST
2016-10-22 19:37 - 2016-10-22 19:37 - 00921728 _____ C:\Users\DAMIAN\Downloads\Farming-Simulator-17-Cracked-Version-[Full Unlocked].zip
2016-10-22 19:35 - 2016-10-22 20:01 - 00000000 ____D C:\FRST
2016-10-22 19:24 - 2016-10-22 19:25 - 00000080 _____ C:\Users\DAMIAN\Desktop\FarmingSimulator2015 - skrót.lnk
2016-10-22 19:24 - 2016-10-22 19:24 - 00052440 _____ (Malwarebytes) C:\Windows\system32\Drivers\pjajnsy.sys
2016-10-22 19:24 - 2016-10-22 19:24 - 00026286 _____ C:\Windows\system\trfa
2016-10-22 18:39 - 2016-10-22 18:39 - 00000000 ___HD C:\Windows\Temp_
2016-10-22 18:39 - 2016-10-22 18:39 - 00000000 ___HD C:\Users\UpdatusUser\AppData\LocalLow\Youtube AdBlock_
2016-10-22 18:39 - 2016-10-22 18:39 - 00000000 ___HD C:\Users\UpdatusUser\AppData\Local\Temp_
2016-10-22 18:39 - 2016-10-22 18:39 - 00000000 ___HD C:\Users\pipek\AppData\LocalLow\Youtube AdBlock_
2016-10-22 18:39 - 2016-10-22 18:39 - 00000000 ___HD C:\Users\pipek\AppData\Local\Temp_
2016-10-22 18:39 - 2016-10-22 18:39 - 00000000 ___HD C:\Users\MATEUSZ\AppData\LocalLow\Youtube AdBlock_
2016-10-22 18:39 - 2016-10-22 18:39 - 00000000 ___HD C:\Users\MATEUSZ\AppData\Local\Temp_
2016-10-22 18:39 - 2016-10-22 18:39 - 00000000 ___HD C:\Users\DAMIAN\AppData\Local\Temp_
2016-10-22 18:38 - 2016-10-22 19:19 - 00145408 ____N C:\local32spl.dll
2016-10-22 18:38 - 2016-10-22 19:19 - 00000000 ____D C:\http
2016-10-22 18:38 - 2016-10-22 18:39 - 00000000 ____D C:\Users\UpdatusUser\AppData\LocalLow\Youtube AdBlock
2016-10-22 18:38 - 2016-10-22 18:39 - 00000000 ____D C:\Users\pipek\AppData\LocalLow\Youtube AdBlock
2016-10-22 18:38 - 2016-10-22 18:39 - 00000000 ____D C:\Users\MATEUSZ\AppData\LocalLow\Youtube AdBlock
2016-10-22 18:38 - 2016-10-22 18:38 - 00000000 ___HD C:\Users\DAMIAN\AppData\LocalLow\Youtube AdBlock_
2016-10-22 18:38 - 2016-10-22 18:38 - 00000000 ___HD C:\Program Files\Youtube AdBlock_
2016-10-22 18:38 - 2016-10-22 18:38 - 00000000 ___HD C:\_
2016-10-22 18:38 - 2016-10-22 18:38 - 00000000 ____D C:\Users\DAMIAN\AppData\LocalLow\Youtube AdBlock
2016-10-22 18:38 - 2016-10-22 18:38 - 00000000 ____D C:\Program Files\Youtube AdBlock
2016-10-21 18:35 - 2016-10-13 03:58 - 02860832 _____ (Valve Corporation) C:\Users\DAMIAN\Desktop\Steam.exe
2016-10-21 18:18 - 2016-10-21 18:18 - 00052440 _____ (Malwarebytes) C:\Windows\system32\Drivers\kmtj.sys
2016-10-21 18:03 - 2016-10-21 18:03 - 00000266 __RSH C:\Users\DAMIAN\ntuser.pol
2016-10-21 17:54 - 2016-10-22 19:26 - 00001054 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-10-21 17:54 - 2016-10-22 18:56 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-10-21 17:54 - 2016-10-21 17:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-10-21 17:54 - 2016-10-21 17:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-10-21 17:54 - 2016-10-21 17:54 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-10-21 17:54 - 2016-03-10 14:09 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-10-21 17:54 - 2016-03-10 14:08 - 00126336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-10-21 17:54 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-10-21 17:10 - 2016-10-21 17:34 - 00002026 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ореrа.lnk
2016-10-21 17:10 - 2016-10-21 17:34 - 00002026 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk
2016-10-21 17:10 - 2016-10-21 17:34 - 00002014 _____ C:\Users\Public\Desktop\Ореrа.lnk
2016-10-21 17:10 - 2016-10-21 17:34 - 00002014 _____ C:\Users\Public\Desktop\Gооglе Сhrоmе.lnk
2016-10-21 17:10 - 2016-10-21 17:34 - 00001872 _____ C:\Users\pipek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехрlоrеr.lnk
2016-10-21 17:10 - 2016-10-21 17:34 - 00001872 _____ C:\Users\MATEUSZ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехрlоrеr.lnk
2016-10-21 17:10 - 2016-10-21 17:34 - 00001872 _____ C:\Users\DAMIAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехрlоrеr.lnk
2016-10-21 17:10 - 2016-10-21 17:34 - 00001849 _____ C:\Users\pipek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WаrТhundеr.lnk
2016-10-21 17:10 - 2016-10-21 17:34 - 00001831 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfох.lnk
2016-10-21 17:10 - 2016-10-21 17:34 - 00001819 _____ C:\Users\Public\Desktop\Моzillа Firеfох.lnk
2016-10-21 17:10 - 2016-10-21 17:34 - 00001819 _____ C:\Users\pipek\Desktop\WаrТhundеr.lnk
2016-10-21 17:09 - 2016-10-21 17:09 - 00000000 ____D C:\Users\DAMIAN\AppData\Roaming\ssn
2016-10-21 17:08 - 2016-10-21 17:33 - 00000000 ____D C:\Users\DAMIAN\AppData\Roaming\SimpleNotepad4
2016-10-21 17:02 - 2016-10-22 19:23 - 00000000 ____D C:\Users\DAMIAN\AppData\Roaming\Geunfy
2016-10-21 17:02 - 2016-10-22 19:23 - 00000000 ____D C:\Program Files\Yhid
2016-10-21 17:02 - 2016-10-21 18:18 - 00000000 ____D C:\Users\DAMIAN\AppData\LocalLow\Company
2016-10-21 17:02 - 2016-10-21 17:02 - 00000000 ____D C:\Users\DAMIAN\AppData\Roaming\GowvePitpagf
2016-10-21 17:02 - 2016-10-21 17:02 - 00000000 ____D C:\Users\DAMIAN\AppData\Local\Tempfolder
2016-10-21 17:02 - 2016-10-21 17:02 - 00000000 ____D C:\uninst
2016-10-21 15:44 - 2016-10-21 15:44 - 00000000 ____D C:\Users\DAMIAN\AppData\Local\UCBrowser
2016-10-21 15:30 - 2016-10-21 15:30 - 00000000 ____D C:\Program Files\GreatMaker
2016-10-21 15:27 - 2016-10-21 15:27 - 01620992 ____N C:\ProgramData\service.exe
2016-10-21 15:24 - 2016-10-22 19:25 - 00001096 _____ C:\Users\DAMIAN\Desktop\AutoTime.lnk
2016-10-21 15:19 - 2016-10-21 15:19 - 00000000 ____D C:\ProgramData\Avira
2016-10-21 15:19 - 2016-10-21 15:19 - 00000000 ____D C:\ProgramData\AVAST Software
2016-10-21 15:18 - 2016-10-22 19:23 - 00000000 ____D C:\Program Files\mpck
2016-10-21 15:18 - 2016-10-21 16:31 - 00000000 ____D C:\Users\DAMIAN\AppData\Roaming\Drerhty
2016-10-21 15:17 - 2016-10-21 16:20 - 00000000 ____D C:\Program Files\Gruheph
2016-10-21 15:17 - 2016-10-21 15:18 - 00000000 ____D C:\Users\DAMIAN\AppData\Local\Grisale
2016-10-21 15:14 - 2016-10-21 15:14 - 00000000 _____ C:\TOSTACK
2016-10-21 15:13 - 2016-10-22 19:23 - 00000000 ____D C:\ProgramData\Logic Handler
2016-10-21 15:13 - 2016-10-22 18:36 - 00000000 ____D C:\Program Files\7DF8AE40-1477055635-11DC-A6AD-001E68D5EA8B
2016-10-21 15:12 - 2016-10-22 19:36 - 00000000 ____D C:\ProgramData\Quoteex
2016-10-21 15:12 - 2016-10-21 15:12 - 07214592 _____ C:\Users\DAMIAN\AppData\Roaming\agent.dat
2016-10-21 15:12 - 2016-10-21 15:12 - 00018432 _____ C:\Users\DAMIAN\AppData\Roaming\Main.dat
2016-10-21 15:11 - 2016-10-22 19:23 - 00000000 ____D C:\ProgramData\NetworkPacketManitor
2016-10-21 15:11 - 2016-10-21 15:11 - 00140288 _____ C:\Users\DAMIAN\AppData\Roaming\Installer.dat
2016-10-06 15:53 - 2016-10-06 15:53 - 00000000 ____D C:\Users\DAMIAN\AppData\Roaming\Milestone
2016-09-28 20:08 - 2016-09-28 20:41 - 00000000 ____D C:\Users\DAMIAN\Desktop\Filmy na pulpicie
2016-09-26 18:19 - 2016-09-26 18:19 - 00197376 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx86.sys
2016-09-26 17:43 - 2016-09-26 17:43 - 00000144 _____ C:\Users\DAMIAN\Documents\ts 125 dyfuzor.edf
2016-09-26 17:38 - 2016-09-26 17:47 - 00000000 ____D C:\Users\DAMIAN\Downloads\Cone Layout
2016-09-26 17:38 - 2002-01-01 02:18 - 00000000 ____D C:\Users\DAMIAN\Downloads\ExhaustCalculator2
2016-09-24 20:55 - 2016-10-22 19:30 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-09-22 14:44 - 2016-09-22 14:44 - 00257792 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdriverx.sys
2016-09-20 16:53 - 2016-09-20 16:53 - 00218880 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx86.sys
2016-09-19 19:39 - 2016-09-19 20:52 - 00000000 ____D C:\Users\DAMIAN\Desktop\muzyka a
2016-09-19 13:04 - 2016-09-22 20:45 - 00000000 ____D C:\Users\pipek\Desktop\HARRY POTTER  1-8
2016-09-19 12:56 - 2016-10-21 15:18 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-09-19 12:48 - 2016-09-19 12:48 - 00242240 _____ C:\Users\pipek\Downloads\Firefox Setup Stub 48.0.2 (1).exe
2016-09-19 12:47 - 2016-09-19 12:48 - 00242240 _____ C:\Users\pipek\Downloads\Firefox Setup Stub 48.0.2.exe
2016-09-16 13:40 - 2016-09-16 13:40 - 00242240 _____ C:\Users\DAMIAN\Desktop\Firefox Setup Stub 48.0.2.exe
2016-09-15 21:19 - 2016-10-22 19:38 - 00000000 ____D C:\Users\DAMIAN\Downloads\filmy do pobrania
2016-09-05 18:12 - 2016-09-05 18:12 - 00000000 ____D C:\Users\pipek\Desktop\Batman.v.Superman.Dawn.of.Justice.2016.EXTENDED.720p.BRRip.x264.AAC-ETRG
2016-08-10 15:34 - 2016-08-10 15:34 - 00001340 _____ C:\Users\DAMIAN\Desktop\FarmingSimulator2015 — skrót.lnk
2016-08-08 17:12 - 2016-08-08 17:12 - 00000887 _____ C:\Users\pipek\Desktop\Farming Simulator 15 Gold Edition.lnk
2016-08-08 17:12 - 2016-08-08 17:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\by.xatab
2016-08-08 16:53 - 2016-08-08 16:53 - 00000000 ____D C:\Users\DAMIAN\AppData\Roaming\NVIDIA
2016-08-08 15:29 - 2016-08-08 17:12 - 00000000 ____D C:\Windows\system32\directx
2016-08-07 15:35 - 2016-08-07 15:35 - 00015089 _____ C:\Users\DAMIAN\Desktop\Farming_Simulator_15_1.4.2.torrent
2016-08-07 13:45 - 2016-10-21 16:28 - 00000000 ____D C:\Users\DAMIAN\AppData\LocalLow\uTorrent
2016-08-07 13:26 - 2016-10-03 14:31 - 00000000 ___SD C:\Users\DAMIAN\AppData\LocalLow\Temp
2016-07-27 15:29 - 2016-07-27 15:29 - 00231680 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdix.sys
2016-07-27 15:28 - 2016-07-27 15:28 - 00210176 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidshx.sys

==================== Trzy miesiące - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-10-22 19:48 - 2015-11-19 20:13 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-10-22 19:44 - 2016-01-20 13:50 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-10-22 19:42 - 2015-11-01 17:22 - 00000000 ____D C:\Users\DAMIAN\AppData\Roaming\AIMP3
2016-10-22 19:26 - 2015-12-30 17:12 - 00002476 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk
2016-10-22 19:26 - 2015-12-30 17:00 - 00000948 _____ C:\Users\Public\Desktop\AVG.lnk
2016-10-22 19:26 - 2015-11-16 21:06 - 00001085 _____ C:\Users\Public\Desktop\ALLPlayer Pilot.lnk
2016-10-22 19:26 - 2015-11-14 00:48 - 00001890 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2016-10-22 19:26 - 2015-10-28 19:30 - 00000869 _____ C:\Users\Public\Desktop\AIMP3.lnk
2016-10-22 19:26 - 2015-10-27 23:20 - 00000900 _____ C:\Users\Public\Desktop\AVG Protection.lnk
2016-10-22 19:26 - 2015-10-27 21:51 - 00000959 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-10-22 19:26 - 2015-10-27 07:48 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-10-22 19:26 - 2015-10-27 07:48 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-10-22 19:26 - 2009-07-14 06:46 - 00001503 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-10-22 19:26 - 2009-07-14 06:42 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-10-22 19:26 - 2009-07-14 06:42 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-10-22 19:26 - 2009-07-14 06:42 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-10-22 19:26 - 2009-07-14 06:42 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-10-22 19:25 - 2016-02-28 19:58 - 00001393 _____ C:\Users\DAMIAN\Desktop\TeamSpeak 3 Client.lnk
2016-10-22 19:25 - 2009-07-14 06:46 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-10-22 19:25 - 2009-07-14 06:37 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-10-22 19:24 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system
2016-10-22 19:07 - 2016-05-16 19:36 - 00000000 ____D C:\Users\DAMIAN\AppData\Roaming\uTorrent
2016-10-22 19:07 - 2015-11-25 18:57 - 00000000 ____D C:\Users\DAMIAN\AppData\Roaming\DAEMON Tools Lite
2016-10-22 19:07 - 2015-10-28 19:29 - 00000000 ____D C:\Program Files\Steam
2016-10-22 19:00 - 2016-01-06 02:00 - 00000000 ____D C:\Users\DAMIAN\AppData\Local\CrashDumps
2016-10-22 19:00 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\inf
2016-10-22 18:39 - 2016-01-17 20:49 - 00000000 ____D C:\Users\MATEUSZ\AppData\Roaming\Opera Software
2016-10-22 18:39 - 2015-11-01 17:13 - 00000000 ____D C:\Users\DAMIAN\AppData\Roaming\Opera Software
2016-10-22 18:39 - 2015-10-29 16:38 - 00000000 ____D C:\Users\pipek\AppData\Roaming\Opera Software
2016-10-22 18:39 - 2015-10-27 23:18 - 00000000 ____D C:\ProgramData\MFAData
2016-10-22 18:36 - 2009-07-14 06:34 - 00027248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-10-22 18:36 - 2009-07-14 06:34 - 00027248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-10-21 21:47 - 2015-11-19 20:13 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-10-21 18:35 - 2015-10-28 19:30 - 00000000 ____D C:\Program Files\Common Files\Steam
2016-10-21 18:18 - 2015-12-06 17:52 - 00000000 ____D C:\Users\DAMIAN\AppData\Local\ContritelyCrenated
2016-10-21 18:18 - 2015-11-24 19:42 - 00000000 ____D C:\Program Files\Windows 7 Activator
2016-10-21 18:18 - 2015-10-27 01:33 - 00000000 ____D C:\Windows\Panther
2016-10-21 18:03 - 2015-11-01 17:11 - 00000000 ____D C:\Users\DAMIAN
2016-10-21 17:34 - 2016-01-19 15:58 - 00000000 ____D C:\Users\MATEUSZ\AppData\Local\Ubisoft Game Launcher
2016-10-21 17:34 - 2016-01-15 21:08 - 00000000 ____D C:\Users\DAMIAN\AppData\Local\Ubisoft Game Launcher
2016-10-21 17:34 - 2016-01-15 20:58 - 00000000 ____D C:\Users\pipek\AppData\Local\Ubisoft Game Launcher
2016-10-21 17:34 - 2016-01-15 20:58 - 00000000 ____D C:\Program Files\Ubisoft
2016-10-21 17:11 - 2015-10-31 15:07 - 00005358 __RSH C:\ProgramData\ntuser.pol
2016-10-21 17:11 - 2009-07-14 04:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-10-21 16:25 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-10-21 15:19 - 2015-11-14 00:47 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2016-10-21 15:19 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\DVD Maker
2016-10-21 15:18 - 2016-01-28 21:25 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-10-21 15:18 - 2016-01-11 14:17 - 00000000 ____D C:\Program Files\DivX
2016-10-21 15:18 - 2015-12-30 13:48 - 00000000 ____D C:\Program Files\Ahead
2016-10-21 15:18 - 2015-12-22 22:58 - 00000000 ____D C:\Program Files\Razer
2016-10-21 15:18 - 2015-11-16 21:06 - 00000000 ____D C:\Program Files\ALLPlayer Remote
2016-10-21 15:18 - 2015-11-16 21:05 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-10-21 15:18 - 2015-11-16 21:04 - 00000000 ____D C:\Program Files\ALLPlayer
2016-10-21 15:18 - 2015-10-29 20:38 - 00000000 ____D C:\Program Files\Google
2016-10-21 15:18 - 2015-10-29 16:37 - 00000000 ____D C:\Program Files\7-Zip
2016-10-21 15:18 - 2015-10-28 19:30 - 00000000 ____D C:\Program Files\AIMP3
2016-10-21 15:18 - 2015-10-28 19:26 - 00000000 ____D C:\Program Files\Opera
2016-10-21 15:18 - 2015-10-27 23:19 - 00000000 ____D C:\Program Files\AVG
2016-10-21 15:18 - 2015-10-27 22:26 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-10-21 15:18 - 2015-10-27 21:51 - 00000000 ____D C:\Program Files\CCleaner
2016-10-21 15:18 - 2011-04-12 07:17 - 00000000 ____D C:\Program Files\Windows Journal
2016-10-21 15:18 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Sidebar
2016-10-21 15:18 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-10-21 15:18 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-10-21 15:18 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender
2016-10-21 15:18 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-10-21 15:18 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\MSBuild
2016-10-21 15:18 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Windows NT
2016-10-19 21:33 - 2011-04-12 07:08 - 00739932 _____ C:\Windows\system32\perfh015.dat
2016-10-19 21:33 - 2011-04-12 07:08 - 00155474 _____ C:\Windows\system32\perfc015.dat
2016-10-19 21:33 - 2010-11-20 23:01 - 01668226 _____ C:\Windows\system32\PerfStringBackup.INI
2016-10-19 18:28 - 2015-10-27 23:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-10-12 17:05 - 2016-01-20 13:50 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-10-12 17:05 - 2016-01-20 13:50 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-10-12 17:05 - 2015-10-29 20:36 - 00000000 ____D C:\Windows\system32\Macromed
2016-10-06 21:19 - 2016-01-30 21:39 - 00000000 ____D C:\Users\DAMIAN\AppData\Roaming\Media Player Classic
2016-10-05 19:02 - 2016-05-17 14:37 - 00000000 ____D C:\Users\DAMIAN\Documents\Euro Truck Simulator 2
2016-10-04 21:49 - 2016-01-26 21:02 - 00000000 ____D C:\Users\DAMIAN\Desktop\Nowy folder (2)
2016-09-29 17:13 - 2015-12-30 17:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen

==================== Pliki w katalogu głównym wybranych folderów =======

2016-10-21 15:12 - 2016-10-21 15:12 - 7214592 _____ () C:\Users\DAMIAN\AppData\Roaming\agent.dat
2016-10-21 15:11 - 2016-10-21 15:11 - 0140288 _____ () C:\Users\DAMIAN\AppData\Roaming\Installer.dat
2016-10-21 15:12 - 2016-10-21 15:12 - 0018432 _____ () C:\Users\DAMIAN\AppData\Roaming\Main.dat
2016-10-21 15:27 - 2016-10-21 15:27 - 1620992 ____N () C:\ProgramData\service.exe
2015-10-28 19:29 - 2015-10-28 19:29 - 0000098 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\service.exe
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


Niektóre pliki w TEMP:
====================
C:\Users\DAMIAN\AppData\Local\Temp\local32spl.dll
C:\Users\MATEUSZ\AppData\Local\Temp\ALLRemote.exe
C:\Users\MATEUSZ\AppData\Local\Temp\local32spl.dll
C:\Users\pipek\AppData\Local\Temp\1-kyzhas.dll
C:\Users\pipek\AppData\Local\Temp\ALLRemote.exe
C:\Users\pipek\AppData\Local\Temp\avguirn_081508474481.exe
C:\Users\pipek\AppData\Local\Temp\c0qq2bez.dll
C:\Users\pipek\AppData\Local\Temp\local32spl.dll
C:\Users\UpdatusUser\AppData\Local\Temp\local32spl.dll


==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe
[2010-11-20 23:29] - [2010-11-20 23:29] - 0285696 ____A (Microsoft Corporation) 1562571D6B1541098E677C3BB78709A0

C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll
[2010-11-20 23:29] - [2010-11-20 23:29] - 0811520 ____A (Microsoft Corporation) BE8C64439F1E2AF088063218C16EB9FE

C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-09-25 22:19

==================== Koniec  FRST.txt ============================