Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 18-07-2017
Uruchomiony przez admin (administrator)  ISAMUXPOMPA (22-07-2017 14:04:31)
Uruchomiony z C:\Users\admin\Desktop
Załadowane profile: admin (Dostępne profile: admin)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

() C:\ProgramData\DatacardService\HWDeviceService64.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Gold Click Ltd) C:\Program Files (x86)\ProxyGate\PGChk.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Gold Click Ltd) C:\Program Files (x86)\ProxyGate\PGUpd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe
(Gold Click Ltd) C:\Program Files (x86)\ProxyGate\Cloud.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
() C:\Users\admin\AppData\Local\Temp\NN833B.tmp.exe
() C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Policies\Explorer\Run: [35721] => C:\ProgramData\Local Settings\Temp\msciura.bat [13824 2009-07-14] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [lliseconc8a] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lliseconc8a.exe [143360 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [backwindow132] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196818750\backwindow132.exe [147456 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [lliseconc8] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lliseconc8.exe [139264 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [backwindow632] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1968138750\backwindow632.exe [151552 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [backwindow432] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1968138750\backwindow432.exe [147456 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [backwindow532] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1968138750\backwindow532.exe [151552 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [backwindow332] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1968138750\backwindow332.exe [151552 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [backwindow32] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196818750\backwindow32.exe [147456 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [systimwindow32] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1968152800\systimwindow32.exe [151552 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [backwindow232] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196818750\backwindow232.exe [151552 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [osfip.exe] => C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx\osfip.exe [208896 2017-07-20] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [lja7shayne7] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lja7shayne7.exe [143360 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [lja7shayne3] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lja7shayne3.exe [139264 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [lja7shayne6] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lja7shayne6.exe [139264 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [lja7shayne4] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lja7shayne4.exe [147456 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [lja7shayne2] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lja7shayne2.exe [143360 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [lja7shayne8] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lja7shayne8.exe [147456 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [lja7shayne10] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lja7shayne10.exe [143360 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Run: [syseeeaz] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-6985472110112323\systeez.exe [147456 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [lliseconc8a] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lliseconc8a.exe [143360 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [backwindow132] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196818750\backwindow132.exe [147456 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [lliseconc8] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lliseconc8.exe [139264 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [backwindow632] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1968138750\backwindow632.exe [151552 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [backwindow432] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1968138750\backwindow432.exe [147456 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [backwindow532] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1968138750\backwindow532.exe [151552 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [backwindow332] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1968138750\backwindow332.exe [151552 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [backwindow32] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196818750\backwindow32.exe [147456 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [systimwindow32] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1968152800\systimwindow32.exe [151552 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [backwindow232] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196818750\backwindow232.exe [151552 2017-07-21] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [lja7shayne7] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lja7shayne7.exe [143360 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [lja7shayne3] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lja7shayne3.exe [139264 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [lja7shayne6] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lja7shayne6.exe [139264 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [lja7shayne4] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lja7shayne4.exe [147456 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [lja7shayne2] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lja7shayne2.exe [143360 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [lja7shayne8] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lja7shayne8.exe [147456 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [lja7shayne10] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-196852800\lja7shayne10.exe [143360 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\RunOnce: [syseeeaz] => C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-6985472110112323\systeez.exe [147456 2017-07-22] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\Policies\Explorer\Run: [Opera Software] => C:\Users\admin\AppData\Roaming\Microsoft\bscbhrgu\rcreisij.exe [181248 2017-04-28] ()
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\MountPoints2: {1fd6adbd-1493-11e7-a5d0-c80aa90ece07} - F:\AutoRun.exe
HKU\S-1-5-21-1693114668-2537149228-3336235061-1001\...\MountPoints2: {1fd6adc1-1493-11e7-a5d0-c80aa90ece07} - F:\AutoRun.exe
ShellExecuteHooks: Brak nazwy - {5F51FFFE-7463-4220-B711-E5B9ACB8EDFE} - C:\Windows\C_02iu47.dat -> Brak pliku
BootExecute: autocheck autochk * SmartDefragBootTime.exe
GroupPolicy: Ograniczenia - Chrome <==== UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{0A6F6C4D-74A9-421C-A7F8-3846B8CF6A1F}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{D8F0A4D8-62FF-4D5B-BC9B-39614E0CC36D}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
BHO: TSearch -> {24744B0A-9F0D-49A6-8A90-D7EF6EAD5137} -> C:\Program Files (x86)\MefarchIE\tWCAOTC.dll [2017-07-20] ()
BHO: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-02-22] (McAfee, Inc.)
BHO-x32: TSearch -> {24744B0A-9F0D-49A6-8A90-D7EF6EAD5137} -> C:\Program Files (x86)\MefarchIE\k7eRXmV6.dll [2017-07-20] ()
BHO-x32: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-02-22] (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-02-22] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-02-22] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-02-22] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-02-22] (McAfee, Inc.)

FireFox:
========
FF ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\wo6tfa3u.default-1499287226167 [2017-07-22]
FF user.js: detected! => C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\wo6tfa3u.default-1499287226167\user.js [2017-07-12]
FF Extension: (Tables) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\wo6tfa3u.default-1499287226167\Extensions\300414@extcorp.com.xpi [2017-07-12]
FF Extension: (uBlock Origin) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\wo6tfa3u.default-1499287226167\Extensions\uBlock0@raymondhill.net.xpi [2017-07-05]
FF Extension: (TSearch) - C:\Program Files (x86)\Mozilla Firefox\browser\features\{D29DBC80-E8B5-4116-AB62-ECD8ED032A33} [2017-07-20] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2017-03-29]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-19] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-19] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-11] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-11] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1693114668-2537149228-3336235061-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\admin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default [2017-07-22]
CHR Extension: (Torrent Search) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aoojlhjjgjhndkblocmajmekmdbfdkhj [2017-07-20]
CHR Extension: (Tables) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2017-07-20]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-15]
CHR Extension: (Chrome Media Router) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-13]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Extension: (Tables) - C:\Users\admin\AppData\Roaming\Opera Software\Opera Stable\Extensions\egafjhhpbipcmpoiomegbckljbbbphoj [2017-07-20]
OPR Extension: (Torrent Search) - C:\Users\admin\AppData\Roaming\Opera Software\Opera Stable\Extensions\nhlndegfblpakjhnnicpdofhmhlocnji [2017-07-20]
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 AdService; C:\Users\admin\AppData\Local\AdService\AdService.dll [978432 2017-07-20] () [Brak podpisu cyfrowego] <==== UWAGA
S4 AdvancedSystemCareService10; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [462624 2016-12-12] (IObit)
S4 AESTFilters; C:\Program Files\IDT\WDM\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation) [Brak podpisu cyfrowego]
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1468608 2016-10-06] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [241936 2016-07-29] (EasyAntiCheat Ltd)
S3 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-03-28] (Hi-Rez Studios) [Brak podpisu cyfrowego]
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2013-02-06] ()
S4 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [188352 2017-02-22] (McAfee, Inc.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5867216 2016-08-08] (INCA Internet Co., Ltd.)
S4 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1286896 2016-05-19] (Overwolf LTD)
S2 pgt_svc; C:\Program Files (x86)\ProxyGate\MainService.exe [2285664 2017-02-22] (Gold Click Ltd) <==== UWAGA
S4 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [340480 2013-12-04] (IDT, Inc.) [Brak podpisu cyfrowego]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7757040 2017-04-06] (TeamViewer GmbH)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 cfidsk; C:\Windows\System32\drivers\cfidsk.sys [196520 2017-06-20] ()
S3 cpuz138; C:\Users\admin\AppData\Local\Temp\cpuz138\cpuz138_x64.sys [27320 2017-07-06] (CPUID) <==== UWAGA
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [129152 2017-02-24] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-08-04] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-08-04] (Disc Soft Ltd)
S3 ew_hwusbdev; C:\Windows\System32\DRIVERS\ew_hwusbdev.sys [109568 2013-01-25] (Huawei Technologies Co., Ltd.) [Brak podpisu cyfrowego]
S3 huawei_cdcecm; C:\Windows\System32\DRIVERS\ew_jucdcecm.sys [76800 2013-02-17] (Huawei Technologies Co., Ltd.) [Brak podpisu cyfrowego]
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-04-19] (REALiX(tm))
R3 johci; C:\Windows\System32\DRIVERS\johci.sys [26208 2012-07-16] (JMicron Technology Corp.)
S3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [46240 2016-06-06] (McAfee, Inc.)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21360 2016-03-22] (IObit)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1828736 2009-03-13] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [394296 2017-03-16] (Duplex Secure Ltd.)
S3 STHDA; C:\Windows\System32\DRIVERS\stwrt64.sys [551936 2013-12-04] (IDT, Inc.) [Brak podpisu cyfrowego]
S3 ubohci; C:\Windows\System32\DRIVERS\ubohci.sys [132608 2012-10-05] (Unibrain) [Brak podpisu cyfrowego]
S2 ubsbm; C:\Windows\System32\DRIVERS\ubsbm.sys [24064 2012-10-05] (Unibrain) [Brak podpisu cyfrowego]
S2 ubumapi; C:\Windows\System32\DRIVERS\ubumapi.sys [92160 2012-10-05] (Unibrain) [Brak podpisu cyfrowego]
R3 VBAudioVACMME; C:\Windows\System32\DRIVERS\vbaudio_cable64_win7.sys [41192 2014-09-02] (Windows (R) Win 7 DDK provider)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-07-22 14:04 - 2017-07-22 14:05 - 00022587 _____ C:\Users\admin\Desktop\FRST.txt
2017-07-22 14:04 - 2017-07-22 14:04 - 00000000 ____D C:\Users\admin\Desktop\FRST-OlderVersion
2017-07-20 21:46 - 2017-07-20 21:46 - 00003444 _____ C:\Windows\System32\Tasks\Xl5jVVxcVWIx
2017-07-20 21:45 - 2017-07-20 21:45 - 00000000 __SHD C:\Users\admin\AppData\Roaming\Xl5jVVxcVWIx
2017-07-20 21:37 - 2017-07-20 21:38 - 00000000 ____D C:\Program Files (x86)\ProxyGate
2017-07-20 21:36 - 2017-07-20 21:36 - 00000000 ____D C:\Users\admin\AppData\Roaming\BrowserModule
2017-07-20 21:34 - 2017-07-22 14:03 - 00000374 _____ C:\Windows\Tasks\Updater_Online_Application.job
2017-07-20 21:34 - 2017-07-22 14:02 - 00000342 _____ C:\Windows\Tasks\Online Application V2G3.job
2017-07-20 21:34 - 2017-07-22 14:02 - 00000342 _____ C:\Windows\Tasks\Online Application V2G2.job
2017-07-20 21:34 - 2017-07-22 14:02 - 00000342 _____ C:\Windows\Tasks\Online Application V2G1.job
2017-07-20 21:34 - 2017-07-20 21:34 - 00003206 _____ C:\Windows\System32\Tasks\Updater_Online_Application
2017-07-20 21:34 - 2017-07-20 21:34 - 00003170 _____ C:\Windows\System32\Tasks\Online Application V2G3
2017-07-20 21:34 - 2017-07-20 21:34 - 00003170 _____ C:\Windows\System32\Tasks\Online Application V2G2
2017-07-20 21:34 - 2017-07-20 21:34 - 00003170 _____ C:\Windows\System32\Tasks\Online Application V2G1
2017-07-20 21:34 - 2017-07-20 21:34 - 00003040 _____ C:\Windows\System32\Tasks\AF9A5517-A7AD-4299-A3C2-BD1DD4D6E61F
2017-07-20 21:34 - 2017-07-20 21:34 - 00002706 _____ C:\Windows\System32\Tasks\842DE247-2F95-42F1-A8A6-A3B7C67865332
2017-07-20 21:34 - 2017-07-20 21:34 - 00002562 _____ C:\Windows\System32\Tasks\842DE247-2F95-42F1-A8A6-A3B7C6786533
2017-07-20 21:34 - 2017-07-20 21:34 - 00000288 _____ C:\Windows\Tasks\842DE247-2F95-42F1-A8A6-A3B7C6786533.job
2017-07-20 21:34 - 2017-07-20 21:34 - 00000000 ____D C:\Program Files (x86)\Microleaves
2017-07-20 21:34 - 2017-07-20 21:34 - 00000000 ____D C:\Program Files (x86)\MefarchIE
2017-07-20 21:34 - 2017-07-20 21:34 - 00000000 ____D C:\Program Files (x86)\MederchU
2017-07-20 21:34 - 2017-07-20 21:34 - 00000000 ____D C:\Program Files (x86)\MayarchUn
2017-07-20 21:34 - 2017-07-20 21:34 - 00000000 ____D C:\Program Files (x86)\MadarchU2
2017-07-20 21:33 - 2017-07-20 21:33 - 00000000 ____D C:\Users\admin\AppData\Local\AdService
2017-07-07 20:00 - 2017-07-07 20:00 - 00000039 _____ C:\Windows\SysWOW64\Stats.ini
2017-07-07 19:56 - 2017-07-07 19:56 - 00000000 ____D C:\Users\admin\AppData\Roaming\AVAST Software
2017-07-07 19:56 - 2017-07-07 19:56 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-07-05 22:44 - 2017-07-05 23:09 - 00003874 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1499287475
2017-07-05 22:44 - 2017-07-05 22:44 - 00001097 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Przeglądarka Opera.lnk
2017-07-05 22:44 - 2017-07-05 22:44 - 00000000 ____D C:\Users\admin\AppData\Local\Opera Software
2017-07-05 22:44 - 2017-07-05 22:44 - 00000000 ____D C:\Program Files\Opera
2017-07-05 22:43 - 2017-07-05 22:43 - 01156872 _____ (Opera Software) C:\Users\admin\Downloads\OperaSetup.exe
2017-07-05 22:18 - 2017-07-05 22:18 - 00000000 ____D C:\MATS
2017-07-05 22:15 - 2017-07-05 22:15 - 00221662 _____ C:\Users\admin\Downloads\MicrosoftProgram_Install_and_Uninstall.meta.diagcab
2017-07-05 12:00 - 2017-07-05 12:00 - 00380928 _____ C:\Users\admin\Downloads\xe2bk3br.exe
2017-07-05 12:00 - 2017-07-05 12:00 - 00380928 _____ C:\Users\admin\Desktop\xe2bk3br.exe
2017-07-05 11:51 - 2017-07-22 14:04 - 02382336 _____ (Farbar) C:\Users\admin\Desktop\FRST64.exe
2017-07-05 11:51 - 2017-07-05 11:51 - 02436608 _____ (Farbar) C:\Users\admin\Downloads\FRST64.exe
2017-07-03 19:42 - 2017-07-03 19:42 - 02679904 _____ (Gemius) C:\Users\admin\Downloads\npinstall.exe
2017-07-03 18:21 - 2017-07-03 18:21 - 00000000 ____D C:\ProgramData\Microleaves
2017-07-03 18:20 - 2017-07-20 21:34 - 00000266 __RSH C:\ProgramData\ntuser.pol
2017-07-03 18:19 - 2017-07-03 18:20 - 00000000 ____D C:\Users\admin\AppData\Roaming\UCChannel
2017-07-03 18:19 - 2017-07-03 18:19 - 01623552 _____ C:\ProgramData\service.exe
2017-07-03 18:19 - 2017-07-03 18:19 - 00000000 ____D C:\ProgramData\c5dbeb89-7067-1
2017-07-03 18:19 - 2017-07-03 18:19 - 00000000 ____D C:\ProgramData\c5dbeb89-18d3-0
2017-07-03 18:18 - 2017-07-03 18:18 - 00000000 ____D C:\Users\Public\Documents\XMUpdate
2017-07-03 18:18 - 2017-07-03 18:18 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microleaves
2017-07-03 18:18 - 2017-07-03 18:18 - 00000000 ____D C:\Users\admin\AppData\Local\AdvinstAnalytics
2017-07-03 18:18 - 2017-07-03 18:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mgdisk
2017-07-03 18:18 - 2017-07-03 18:18 - 00000000 ____D C:\Program Files (x86)\mgdisk
2017-07-03 18:17 - 2017-07-03 18:17 - 11035447 _____ C:\Users\admin\Downloads\CSGO RedEye for Windows.zip
2017-07-03 18:16 - 2017-07-03 18:16 - 00001181 _____ C:\Users\admin\Downloads\CSGO_RedEye_for_Windows.xht
2017-07-02 20:56 - 2017-07-02 20:56 - 00639836 _____ C:\Users\admin\Downloads\KOPIA.rar
2017-06-23 17:31 - 2017-07-20 21:41 - 00000000 ____D C:\Users\admin\Desktop\bot

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-07-22 14:04 - 2016-06-03 22:42 - 00000000 ____D C:\FRST
2017-07-22 03:08 - 2017-04-21 19:17 - 00000000 ____D C:\Users\admin\AppData\Roaming\foobar2000
2017-07-22 03:08 - 2016-04-19 21:30 - 00000000 ____D C:\Users\admin\AppData\Roaming\TS3Client
2017-07-22 02:19 - 2016-06-27 14:43 - 00000000 ____D C:\Program Files (x86)\Steam
2017-07-20 21:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\GroupPolicy
2017-07-20 21:32 - 2016-04-23 12:14 - 00000000 ___RD C:\Users\admin\Desktop\instalki
2017-07-20 13:26 - 2009-07-14 06:45 - 00028352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-07-20 13:26 - 2009-07-14 06:45 - 00028352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-07-20 13:24 - 2016-06-27 15:14 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-07-20 13:18 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-07-20 00:59 - 2016-06-02 20:02 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2017-07-17 20:31 - 2011-02-04 19:20 - 00740672 _____ C:\Windows\system32\perfh015.dat
2017-07-17 20:31 - 2011-02-04 19:20 - 00156214 _____ C:\Windows\system32\perfc015.dat
2017-07-17 20:31 - 2009-07-14 07:13 - 01670518 _____ C:\Windows\system32\PerfStringBackup.INI
2017-07-17 20:31 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-07-14 21:18 - 2016-04-20 23:37 - 00000000 ____D C:\Users\admin\AppData\Roaming\.minecraft
2017-07-07 19:59 - 2016-04-23 12:52 - 00000000 ____D C:\ProgramData\AVAST Software
2017-07-07 19:57 - 2016-05-08 12:50 - 00000000 ____D C:\Users\admin\AppData\Roaming\uTorrent
2017-07-05 23:09 - 2017-02-22 20:29 - 00002894 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (admin)
2017-07-05 23:09 - 2017-02-22 20:21 - 00002828 _____ C:\Windows\System32\Tasks\ASC10_SkipUac_admin
2017-07-05 23:09 - 2016-10-18 14:24 - 00003138 _____ C:\Windows\System32\Tasks\{315FE303-7BE0-431A-BFAB-2B2D5E1B3F14}
2017-07-05 23:09 - 2016-04-19 00:48 - 00003354 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-07-05 23:08 - 2017-03-03 11:40 - 00002798 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2017-07-05 23:08 - 2017-02-22 20:29 - 00003262 _____ C:\Windows\System32\Tasks\Driver Booster Scheduler
2017-07-05 23:08 - 2017-02-22 20:13 - 00003176 _____ C:\Windows\System32\Tasks\SmartDefrag_AutoAnalyze
2017-07-05 23:08 - 2017-02-22 20:13 - 00003024 _____ C:\Windows\System32\Tasks\SmartDefrag_Startup
2017-07-05 23:08 - 2017-02-22 20:13 - 00003022 _____ C:\Windows\System32\Tasks\SmartDefrag_Update
2017-07-05 23:08 - 2016-04-19 01:13 - 00004478 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-07-05 23:08 - 2016-04-19 00:48 - 00003482 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-07-05 22:44 - 2016-06-04 15:02 - 00000000 ____D C:\Users\admin\AppData\Roaming\Opera Software
2017-07-05 22:31 - 2017-02-22 20:13 - 00000000 ____D C:\Program Files (x86)\IObit
2017-07-05 22:26 - 2016-04-19 00:49 - 00002216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-07-05 22:26 - 2016-04-19 00:46 - 00001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-07-05 22:26 - 2016-04-18 23:44 - 00001168 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-07-05 22:26 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Portable Devices
2017-07-05 22:26 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Microsoft Games
2017-07-05 22:18 - 2017-03-22 19:51 - 00000000 ____D C:\Users\admin\AppData\Local\ElevatedDiagnostics
2017-07-04 13:55 - 2017-06-16 14:10 - 00000000 ____D C:\Users\admin\AppData\Local\Crossout
2017-07-03 20:18 - 2016-04-19 00:55 - 00000000 ____D C:\ProgramData\ProductData
2017-07-03 20:01 - 2016-07-14 14:03 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\World of Tanks
2017-07-03 20:01 - 2016-04-23 14:48 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6
2017-07-03 18:20 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2017-07-02 20:04 - 2016-06-15 21:19 - 00000000 ____D C:\Users\admin\Documents\My Games
2017-07-02 19:46 - 2016-12-14 01:33 - 00000000 ____D C:\Users\admin\AppData\Local\Ubisoft Game Launcher
2017-06-30 12:37 - 2016-04-19 21:29 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client

==================== Pliki w katalogu głównym wybranych folderów =======

2005-07-29 16:49 - 2005-07-30 21:03 - 0002321 _____ () C:\Program Files (x86)\Polonizacja - Readme.txt
2016-07-15 14:23 - 2016-07-15 14:23 - 0000045 _____ () C:\Users\admin\AppData\Roaming\WB.CFG
2016-04-20 16:19 - 2016-06-07 20:45 - 0007597 _____ () C:\Users\admin\AppData\Local\Resmon.ResmonCfg
2017-07-03 18:19 - 2017-07-03 18:19 - 1623552 _____ () C:\ProgramData\service.exe

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\service.exe


Niektóre pliki w TEMP:
====================
2017-07-21 12:47 - 2017-07-21 12:47 - 0217088 _____ () C:\Users\admin\AppData\Local\Temp\2D70.tmp.exe
2017-07-20 21:43 - 2017-07-20 21:43 - 0188416 _____ () C:\Users\admin\AppData\Local\Temp\3F0B.tmp.exe
2017-07-22 02:06 - 2017-07-22 02:06 - 0208896 _____ () C:\Users\admin\AppData\Local\Temp\5385.tmp.exe
2017-07-22 02:26 - 2017-07-22 02:26 - 0192512 _____ () C:\Users\admin\AppData\Local\Temp\NN1CFB.tmp.exe
2017-07-21 12:41 - 2017-07-21 12:41 - 0188416 _____ () C:\Users\admin\AppData\Local\Temp\NN1DE6.tmp.exe
2017-07-22 14:03 - 2017-07-22 14:03 - 0180224 _____ () C:\Users\admin\AppData\Local\Temp\NN29C4.tmp.exe
2017-07-22 14:03 - 2017-07-22 14:03 - 0143360 _____ () C:\Users\admin\AppData\Local\Temp\NN38BE.tmp.exe
2017-07-22 14:03 - 2017-07-22 14:03 - 0143360 _____ () C:\Users\admin\AppData\Local\Temp\NN39EB.tmp.exe
2017-07-22 14:03 - 2017-07-22 14:03 - 0147456 _____ () C:\Users\admin\AppData\Local\Temp\NN833B.tmp.exe
2017-07-20 22:54 - 2017-07-20 22:54 - 0176128 _____ () C:\Users\admin\AppData\Local\Temp\NNB101.tmp.exe

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-07-04 13:36

==================== Koniec  FRST.txt ============================