Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 26-10-2017
Uruchomiony przez Elektronicy (administrator)  TC-PC23 (26-10-2017 06:37:34)
Uruchomiony z C:\Documents and Settings\Elektronik\Moje dokumenty\Pobrane
Załadowane profile: Elektronicy (Dostępne profile: Elektronicy & Administrator)
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) Język: Polski
Internet Explorer Wersja 8 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SIEMENS AG) C:\Program Files\Common Files\Siemens\sws\almsrv\almsrvx.exe
(Autodata Limited) C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe
(Siemens AG) C:\Program Files\Common Files\Siemens\AlmPanelPlugin\ALMPanelPlugin.exe
(SafeNet Inc.) C:\WINDOWS\system32\hasplms.exe
(Kerio Technologies Inc.) C:\Program Files\Kerio\UpdaterService\ktupdaterservice.exe
(McAfee, Inc.) C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe
(McAfee, Inc.) C:\Program Files\McAfee\Common Framework\FrameworkService.exe
(McAfee, Inc.) C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
(McAfee, Inc.) C:\WINDOWS\system32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\McAfee\Common Framework\naPrdMgr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Omron) C:\WINDOWS\system32\Omron\autoip\Omron.Cxmw.Modules.AutoIP.AutoIPService.exe
(OMRON Corporation) C:\WINDOWS\system32\Omron\PppService\Omron.Cxmw.Modules.Ppp.PppService.exe
(SIEMENS AG) C:\Program Files\Common Files\Siemens\S7IEPG\s7oiehsx.exe
(SIEMENS AG) C:\Program Files\Common Files\Siemens\Automation\TraceEngine\bin\S7TraceServiceX.exe
(SIEMENS AG) C:\Program Files\Common Files\Siemens\SimNetCom\pniomgr.exe
() C:\WINDOWS\system32\SecUPDUtilSvc.exe
(STOBER ANTRIEBSTECHNIK GmbH & Co. KG) C:\WINDOWS\system32\SATMIC~1.EXE
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(McAfee, Inc.) C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Ai Charger\AiChargerAP.exe
(McAfee, Inc.) C:\Program Files\McAfee\Common Framework\UdaterUI.exe
(McAfee, Inc.) C:\Program Files\McAfee\Common Framework\McTray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
() C:\Program Files\MultiCalc\MultiCalc.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-Agent.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
(SIEMENS AG) C:\Program Files\Siemens\SIMATIC.NET\SimNetCom\pniopcac.exe
(McAfee, Inc.) C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
(McAfee, Inc.) C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe
(Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera.exe
(Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera.exe
(Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera.exe
(Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera.exe
(Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera.exe
(Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20065384 2012-09-12] (Realtek Semiconductor Corp.)
HKLM\...\Run: [ASUS Ai Charger] => C:\Program Files\ASUS\ASUS Ai Charger\AiChargerAP.exe [547984 2012-08-13] (ASUSTek Computer Inc.)
HKLM\...\Run: [McAfeeUpdaterUI] => C:\Program Files\McAfee\Common Framework\udaterui.exe [136512 2009-01-16] (McAfee, Inc.)
HKLM\...\Run: [ShStatEXE] => C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE [124240 2009-04-29] (McAfee, Inc.)
HKLM\...\Run: [SiemensAutomationFileStorage] => C:\Program Files\Siemens\Automation\Portal V11\\Bin\Siemens.Automation.ObjectFrame.FileStorage.Server.exe [856064 2011-11-22] (Siemens AG)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM\...\Run: [CX-One Upgrade Utility] => C:\Program Files\OMRON\CX-One\Upgrade Utility\AutoUpdate.exe [176128 2011-10-18] ()
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\qttask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [351968 2014-09-08] ()
HKLM\...\Run: [ISUSPM Startup] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [249856 2005-08-11] (Macrovision Corporation)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [HPUsageTrackingLEDM] => C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe [30264 2009-08-04] (Hewlett-Packard Company)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-10-05] (AVAST Software)
HKLM\...\Run: [UserFaultCheck] => %systemroot%\system32\dumprep 0 -u
HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\Run: [MultiCalc] => C:\Program Files\MultiCalc\MultiCalc.exe [2474496 2006-02-02] ()
HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7685808 2017-10-05] (Piriform Ltd)
HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\Run: [STUISpeedLauncher] => C:\Program Files\Samsung\Stylish UI Pack\TouchBasedUI.exe [383488 2015-07-24] ()
HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\Run: [BlueStacks Agent] => C:\Program Files\BlueStacks\HD-Agent.exe [160824 2017-05-24] (BlueStack Systems, Inc.)
HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\Policies\Explorer: [NoDriveAutoRun] ffffffff
HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\MountPoints2: G - G:\SISetup.exe
HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\MountPoints2: {9b93601e-72d8-11e7-ae7f-14dae9be04fe} - G:\SISetup.exe
Startup: C:\Documents and Settings\Elektronik\Menu Start\Programy\Autostart\PowerReg Scheduler.exe [2012-11-19] ()
GroupPolicy: Ograniczenia - Chrome <==== UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{978971FC-43A9-485E-AAF6-ABF062C243DD}: [NameServer] 172.30.1.11,172.30.1.12
Tcpip\..\Interfaces\{978971FC-43A9-485E-AAF6-ABF062C243DD}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-1275210071-776561741-682003330-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1275210071-776561741-682003330-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKLM -> Domyślne = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}
URLSearchHook: HKU\S-1-5-21-1275210071-776561741-682003330-1003 -> Domyślne = {74198672-5F7D-4FE9-A611-4AC1D5A66A15}
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxp://www.interia.pl/#utm_source=instalki&utm_medium=installer&utm_campaign=instalki" <==== UWAGA
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: WebCGMHlprObj Class -> {56B38F40-4E70-11d4-A076-0080AD86BA2F} -> C:\WINDOWS\system32\cgmopenbho.dll [2005-06-09] (CGM Open Consortium, Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-07-22] (Oracle Corporation)
BHO: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files\McAfee\VirusScan Enterprise\scriptsn.dll [2009-04-29] (McAfee, Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-22] (Oracle Corporation)
DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com.tw/common/asusTek_sys_ctrl.cab
DPF: {3253344D-0000-0010-8000-00AA00389B71} hxxp://download.microsoft.com/download/F/C/6/FC636FA3-701B-4BA5-9D55-76CAC20A0C8D/mpg4sax.CAB
DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} hxxp://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.199.0.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Elektronik\Dane aplikacji\TomTom\HOME\Profiles\fb8hgd0h.default [2016-04-20]
FF Extension: (Brak nazwy) - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [nie znaleziono]
FF ProfilePath: C:\Documents and Settings\Elektronik\Dane aplikacji\Mozilla\Firefox\Profiles\jenzl3y9.default-1489878353562 [2017-10-26]
FF Extension: (AdBlocker Ultimate) - C:\Documents and Settings\Elektronik\Dane aplikacji\Mozilla\Firefox\Profiles\jenzl3y9.default-1489878353562\Extensions\adblockultimate@adblockultimate.net.xpi [2017-08-18]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-09-15] [Brak podpisu cyfrowego]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-26] ()
FF Plugin: @cadenas.de/PARTwebViewer,version=9.7.11.7711&arch=x86_32 -> C:\Program Files\Festo\PARTwebViewer 9.07\32\npwebviewerplugins.dll [2013-08-02] (CADENAS GmbH)
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-22] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1275210071-776561741-682003330-1003: @cadenas.de/PARTwebViewer,version=9.7.11.7711&arch=x86_32 -> C:\Program Files\Festo\PARTwebViewer 9.07\32\npwebviewerplugins.dll [2013-08-02] (CADENAS GmbH)
FF Plugin HKU\S-1-5-21-1275210071-776561741-682003330-1003: @citrixonline.com/appdetectorplugin -> C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\Citrix\Plugins\104\npappdetector.dll [2015-10-09] (Citrix Online)
FF Plugin HKU\S-1-5-21-1275210071-776561741-682003330-1003: @coreonline.com/run3d,version=1.0 -> C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\Square Enix\nprun3d.dll [2012-09-14] (Square Enix)
FF Plugin HKU\S-1-5-21-1275210071-776561741-682003330-1003: @unity3d.com/UnityPlayer,version=1.0 -> C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll [2015-09-03] (Unity Technologies ApS)

Opera: 
=======
OPR Extension: (Bloker reklam Adguard) - C:\Documents and Settings\Elektronik\Dane aplikacji\Opera Software\Opera Stable\Extensions\bopfaehpakahokaelnomggbohfbimcia [2017-10-26]
OPR Extension: (360 Internet Protection) - C:\Documents and Settings\Elektronik\Dane aplikacji\Opera Software\Opera Stable\Extensions\cnpeghmjdfdmneiljeibjnemfdkojdhl [2017-10-26]
OPR Extension: (Tłumacz) - C:\Documents and Settings\Elektronik\Dane aplikacji\Opera Software\Opera Stable\Extensions\ibnombjmjocaccigcefonnipcnlaeaed [2017-10-26]
OPR Extension: (History Eraser) - C:\Documents and Settings\Elektronik\Dane aplikacji\Opera Software\Opera Stable\Extensions\lfpoajlbkhlfoeeokbppmecpplmieedm [2017-10-26]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2017-10-26] (Adobe Systems Incorporated) [Brak podpisu cyfrowego]
R2 almservice; C:\program files\common files\Siemens\sws\almsrv\almsrvx.exe [1138312 2011-12-11] (SIEMENS AG) [Brak podpisu cyfrowego]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5828816 2017-10-05] (AVAST Software s.r.o.)
R2 Autodata Limited License Service; C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe [72704 2014-12-10] (Autodata Limited) [Brak podpisu cyfrowego]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-10-05] (AVAST Software)
S3 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [387128 2017-05-24] (BlueStack Systems, Inc.) [Brak podpisu cyfrowego]
S3 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [369720 2017-05-24] (BlueStack Systems, Inc.) [Brak podpisu cyfrowego]
S3 BstHdPlusAndroidSvc; C:\Program Files\BlueStacks\HD-Plus-Service.exe [407608 2017-05-24] (BlueStack Systems, Inc.) [Brak podpisu cyfrowego]
R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4609928 2013-08-01] (SafeNet Inc.)
S2 HP LaserJet Service; C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [136704 2009-06-24] (HP) [Brak podpisu cyfrowego]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Brak podpisu cyfrowego]
R2 ktupdaterservice; C:\Program Files\Kerio\UpdaterService\ktupdaterservice.exe [892928 2013-02-12] (Kerio Technologies Inc.) [Brak podpisu cyfrowego]
R2 McAfeeEngineService; C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe [21256 2009-04-29] (McAfee, Inc.)
R2 McAfeeFramework; C:\Program Files\McAfee\Common Framework\FrameworkService.exe [103744 2009-01-16] (McAfee, Inc.)
R2 McShield; C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe [144888 2009-04-29] (McAfee, Inc.)
R2 McTaskManager; C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe [62800 2009-04-29] (McAfee, Inc.)
R2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [70216 2009-04-29] (McAfee, Inc.)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe [29178224 2007-02-10] (Microsoft Corporation)
R2 MSSQL$WINCCPLUS; c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29181272 2008-12-18] (Microsoft Corporation)
S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [45272 2005-10-14] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 OMRON_EDC_Manager; C:\WINDOWS\system32\Omron\autoip\Omron.Cxmw.Modules.AutoIP.AutoIPService.exe [61952 2011-09-21] (Omron) [Brak podpisu cyfrowego]
R2 OMRON_UC_Manager; C:\WINDOWS\system32\Omron\PppService\Omron.Cxmw.Modules.Ppp.PppService.exe [37376 2011-09-21] (OMRON Corporation) [Brak podpisu cyfrowego]
S3 OpcEnum; C:\WINDOWS\system32\OpcEnum.exe [135168 2007-04-17] (OPC Foundation) [Brak podpisu cyfrowego]
R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 s7oiehsx; C:\program files\common files\Siemens\S7IEPG\s7oiehsx.exe [412808 2012-01-30] (SIEMENS AG) [Brak podpisu cyfrowego]
R2 S7TraceServiceX; C:\Program Files\Common Files\Siemens\Automation\TraceEngine\bin\S7TraceServiceX.exe [556168 2012-01-30] (SIEMENS AG) [Brak podpisu cyfrowego]
R2 SamsungUPDUtilSvc; C:\WINDOWS\system32\SecUPDUtilSvc.exe [143664 2017-01-24] ()
R2 SATMICLService; C:\WINDOWS\system32\SATMIC~1.EXE [159744 2009-03-25] (STOBER ANTRIEBSTECHNIK GmbH & Co. KG) [Brak podpisu cyfrowego]
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 acedrv11; C:\WINDOWS\system32\drivers\acedrv11.sys [185472 2010-02-24] (Protect Software GmbH)
R3 AiCharger; C:\WINDOWS\System32\drivers\AiCharger.sys [13952 2012-03-22] (ASUSTek Computer Inc.)
R2 aksfridge; C:\WINDOWS\system32\drivers\aksfridge.sys [376200 2013-08-01] (SafeNet Inc.)
S3 akshasp; C:\WINDOWS\System32\DRIVERS\akshasp.sys [244040 2013-08-01] (SafeNet Inc.)
S3 aksusb; C:\WINDOWS\System32\DRIVERS\aksusb.sys [296200 2013-08-01] (SafeNet Inc.)
S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2012-09-12] (Creative)
R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdriverx.sys [255624 2017-10-05] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidshx.sys [157416 2017-10-05] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswblogx.sys [276736 2017-10-05] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbunivx.sys [50384 2017-10-05] (AVAST Software s.r.o.)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [42856 2017-10-05] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [124952 2017-10-05] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [70112 2017-10-05] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [70864 2017-10-05] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [777952 2017-10-05] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [499560 2017-10-05] (AVAST Software)
R3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [203848 2017-10-05] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [297840 2017-10-05] (AVAST Software)
R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [281760 2012-10-08] ()
S3 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [139360 2017-05-24] (BlueStack Systems)
S3 BstkDrv; C:\Program Files\BlueStacks\BstkDrv.sys [220216 2017-05-22] (Bluestack System Inc. )
R1 CCNMMDRV; C:\WINDOWS\system32\Drivers\CCNMMDRV.sys [20480 1995-09-11] () [Brak podpisu cyfrowego]
R2 Dpmtrcdd; C:\WINDOWS\System32\DRIVERS\dpmtrcdd.sys [28331 2010-01-09] (SIEMENS AG) [Brak podpisu cyfrowego]
S3 DpqUSBV3; C:\WINDOWS\System32\Drivers\DpqUSBV3.sys [36288 2009-11-11] (Datapaq Limited)
R1 dtsoftbus01; C:\WINDOWS\System32\DRIVERS\dtsoftbus01.sys [243128 2014-02-22] (Disc Soft Ltd)
S3 FTDIBUS; C:\WINDOWS\System32\drivers\ftdibus.sys [61704 2011-03-18] (FTDI Ltd.)
R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [608648 2013-08-01] (SafeNet Inc.)
R2 Haspnt; C:\WINDOWS\system32\drivers\Haspnt.sys [47616 2012-09-12] (Aladdin Knowledge Systems) [Brak podpisu cyfrowego]
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [25888 2012-10-08] ()
R3 MEI; C:\WINDOWS\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)
R3 mfeapfk; C:\WINDOWS\System32\drivers\mfeapfk.sys [75704 2009-04-29] (McAfee, Inc.)
R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [91640 2009-04-29] (McAfee, Inc.)
R3 mfebopk; C:\WINDOWS\System32\drivers\mfebopk.sys [43288 2009-04-29] (McAfee, Inc.)
R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [342128 2009-04-29] (McAfee, Inc.)
S3 mferkdet; C:\WINDOWS\System32\drivers\mferkdet.sys [65224 2009-04-29] (McAfee, Inc.)
R1 mfetdik; C:\WINDOWS\System32\drivers\mfetdik.sys [63696 2009-04-29] (McAfee, Inc.)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2012-09-12] (Creative Technology Ltd.)
S3 MOSUMAC; C:\WINDOWS\System32\DRIVERS\MOSUMAC.SYS [43648 2012-05-25] (--)
R2 NPF; C:\WINDOWS\System32\drivers\npf.sys [35088 2010-06-25] (CACE Technologies, Inc.)
R2 S7opcsrtx; C:\WINDOWS\System32\DRIVERS\s7opcsrtx.sys [31232 2009-06-30] (SIEMENS AG) [Brak podpisu cyfrowego]
R2 S7oppilx; C:\WINDOWS\System32\Drivers\S7oppilx.sys [130560 2012-01-30] (SIEMENS AG) [Brak podpisu cyfrowego]
S3 s7oppitx; C:\WINDOWS\System32\Drivers\S7oppitx.sys [95232 2012-01-30] (SIEMENS AG) [Brak podpisu cyfrowego]
R2 s7otranx; C:\WINDOWS\System32\Drivers\S7otranx.sys [508416 2012-01-30] (SIEMENS AG) [Brak podpisu cyfrowego]
R2 s7otsadx; C:\WINDOWS\System32\Drivers\s7otsadx.sys [171008 2012-01-30] (SIEMENS AG) [Brak podpisu cyfrowego]
R2 s7ousbu32x; C:\WINDOWS\System32\DRIVERS\s7ousbu32x.sys [547456 2012-01-30] (SIEMENS AG) [Brak podpisu cyfrowego]
R2 s7sn2srtx; C:\WINDOWS\System32\DRIVERS\s7sn2srtx.sys [63104 2011-06-16] (SIEMENS AG) [Brak podpisu cyfrowego]
R2 s7snsrtx; C:\WINDOWS\System32\DRIVERS\s7snsrtx.sys [73088 2009-02-24] (SIEMENS AG) [Brak podpisu cyfrowego]
R2 SNTIE; C:\WINDOWS\System32\DRIVERS\sntie.sys [343888 2011-10-11] (SIEMENS AG)
R2 SSPORT; C:\WINDOWS\system32\Drivers\SSPORT.sys [5120 2015-01-05] (Samsung Electronics) [Brak podpisu cyfrowego]
S3 AIDA32Driver; \??\C:\Documents and Settings\Elektronik\Pulpit\Nowy folder\aida32.sys [X]
U5 dkpccard; C:\Windows\System32\Drivers\dkpccard.sys [14856 2012-10-10] (Data Encryption Systems Limited)
S4 IntelIde; Brak ImagePath
S3 S5S7DRV; \??\C:\S5W\S5S7DRV.SYS [X]
U1 WS2IFSL; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-10-26 06:36 - 2017-10-26 06:37 - 000000000 ____D C:\FRST
2017-10-26 02:41 - 2017-10-26 02:41 - 000735232 _____ (Opera Software) C:\Documents and Settings\Elektronik\Moje dokumenty\OperaSetupWinxpvista.exe
2017-10-26 02:26 - 2017-10-26 02:26 - 004233728 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2017-10-25 06:35 - 2017-10-25 06:35 - 000000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2017-10-24 22:40 - 2017-10-24 23:15 - 000367304 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-10-24 07:27 - 2017-10-24 14:00 - 000000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes' Anti-Malware (portable)
2017-10-24 07:26 - 2017-10-24 14:00 - 000000000 ____D C:\Documents and Settings\Elektronik\Pulpit\mbar
2017-10-24 06:24 - 2017-10-26 02:43 - 000000452 _____ C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1508819056.job
2017-10-24 06:24 - 2017-10-24 06:24 - 000000675 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Opera.lnk
2017-10-24 06:23 - 2017-10-26 02:42 - 000000000 ____D C:\Program Files\Opera
2017-10-23 13:57 - 2017-10-23 13:57 - 000000000 ____D C:\Kerio
2017-10-23 07:21 - 2017-10-23 13:59 - 000150816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2017-10-23 07:20 - 2017-10-24 22:42 - 000040384 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-10-23 07:20 - 2017-10-23 21:31 - 000040384 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam(2).sys
2017-10-23 07:20 - 2017-10-23 07:20 - 000221112 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-10-23 07:20 - 2017-10-23 07:20 - 000001715 _____ C:\Documents and Settings\All Users\Pulpit\Malwarebytes.lnk
2017-10-23 07:20 - 2017-10-23 07:20 - 000000000 ____D C:\Program Files\Malwarebytes
2017-10-23 07:20 - 2017-10-23 07:20 - 000000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes
2017-10-23 07:20 - 2017-10-04 13:15 - 000059904 _____ C:\WINDOWS\system32\Drivers\mbae.sys
2017-10-23 07:19 - 2017-10-23 07:19 - 000000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\MB2Migration
2017-10-16 23:58 - 2017-10-16 23:59 - 000000000 ____D C:\Documents and Settings\Elektronik\Moje dokumenty\Shotcut
2017-10-16 23:54 - 2017-10-16 23:57 - 106278089 _____ C:\Documents and Settings\Elektronik\Moje dokumenty\shotcut-win32-171002.zip
2017-10-16 23:44 - 2017-10-16 23:45 - 055201148 _____ C:\Documents and Settings\Elektronik\Moje dokumenty\Romantyczny kozak - Adam Mickiewicz. Historia Bez Cenzury1-Split-1.avi
2017-10-16 23:42 - 2017-10-16 23:42 - 011958963 _____ (Zealotsoft,Inc. ) C:\Documents and Settings\Elektronik\Moje dokumenty\videosplitter_www.INSTALKI.pl.exe
2017-10-16 23:42 - 2017-10-16 23:42 - 000000000 ____D C:\Program Files\Zealot Software
2017-10-16 23:42 - 2008-04-06 00:43 - 000136192 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\VideoEdit.ocx
2017-10-16 23:42 - 2008-03-31 14:08 - 000140288 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomqtde.dll
2017-10-16 23:42 - 2008-03-21 15:09 - 000387584 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomflvdec.dll
2017-10-16 23:42 - 2008-03-21 14:00 - 000706560 _____ (Viscom Software Viscom Software) C:\WINDOWS\system32\viscomdata1.dll
2017-10-16 23:42 - 2008-03-17 22:18 - 000713728 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscommpgenc.dll
2017-10-16 23:42 - 2008-02-28 16:20 - 000712192 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomflashenc.dll
2017-10-16 23:42 - 2008-01-26 22:48 - 000712704 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomflvenc.dll
2017-10-16 23:42 - 2007-12-05 13:48 - 000117760 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscommpgdec.dll
2017-10-16 23:42 - 2007-10-16 17:21 - 000076800 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomrmencoder.dll
2017-10-16 23:42 - 2007-09-22 00:00 - 000705536 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomdata2.dll
2017-10-16 23:42 - 2007-08-08 12:26 - 000022016 _____ C:\WINDOWS\system32\img_utils.dll
2017-10-16 23:42 - 2007-08-08 12:25 - 000061440 _____ C:\WINDOWS\system32\imgscaler.dll
2017-10-16 23:42 - 2007-03-04 17:54 - 000054272 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomframe.dll
2017-10-16 23:42 - 2007-02-26 16:13 - 002392064 _____ C:\WINDOWS\system32\videotrans.dll
2017-10-16 23:42 - 2007-02-26 16:13 - 000215040 _____ C:\WINDOWS\system32\videoformat.dll
2017-10-16 23:42 - 2007-02-26 16:13 - 000017920 _____ C:\WINDOWS\system32\videocore.dll
2017-10-16 23:42 - 2006-12-06 12:59 - 000059904 _____ (Viscom Software) C:\WINDOWS\system32\viscomaudiodata.dll
2017-10-16 23:42 - 2006-12-05 16:19 - 000059904 _____ (Viscom Software) C:\WINDOWS\system32\viscomaudioencoder.dll
2017-10-16 23:42 - 2006-05-02 22:16 - 000060416 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomtran.dll
2017-10-16 23:42 - 2004-04-05 13:46 - 000061440 _____ C:\WINDOWS\system32\xvid.ax
2017-10-16 23:42 - 2004-04-05 13:36 - 000217088 _____ C:\WINDOWS\system32\xvidcore.dll
2017-10-16 23:42 - 2004-02-26 02:08 - 000236544 _____ (DivXNetworks, Inc.) C:\WINDOWS\system32\divxdec.ax
2017-10-16 23:42 - 2004-02-10 19:15 - 000128512 _____ C:\WINDOWS\system32\xvid.dll
2017-10-16 23:42 - 2003-08-19 15:20 - 000180224 _____ () C:\WINDOWS\system32\ac3filter.ax
2017-10-16 23:42 - 2003-08-19 04:31 - 000052736 _____ (Viscom Software) C:\WINDOWS\system32\viscomwave.dll
2017-10-16 23:42 - 2003-07-29 16:16 - 000299008 _____ (Gabest) C:\WINDOWS\system32\RealMediaSplitter.ax
2017-10-16 23:42 - 2003-05-22 13:27 - 000620094 _____ (DivXNetworks, Inc.) C:\WINDOWS\system32\divx.dll
2017-10-16 23:42 - 2001-08-18 20:00 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg4ds32.axu
2017-10-16 23:42 - 2000-06-30 17:40 - 000139264 _____ (Ligos Corporation) C:\WINDOWS\system32\Mpeg2Decoder.ax
2017-10-16 23:42 - 2000-06-26 13:13 - 000094208 _____ (Ligos Corporation) C:\WINDOWS\system32\Mpeg2Parser.ax
2017-10-16 23:36 - 2017-10-16 23:38 - 075037757 _____ C:\Documents and Settings\Elektronik\Moje dokumenty\Romantyczny kozak - Adam Mickiewicz. Historia Bez Cenzury.wmv
2017-10-16 23:22 - 2017-10-16 23:22 - 000119536 _____ (GreenTree Applications SRL) C:\Documents and Settings\Elektronik\Moje dokumenty\YTDSetup.exe
2017-10-11 12:04 - 2017-10-19 06:23 - 000012399 _____ C:\Documents and Settings\Elektronik\Pulpit\Falownik musztarda.xlsx
2017-10-11 05:26 - 2017-10-11 05:26 - 000000000 ____D C:\Documents and Settings\NetworkService\Dane aplikacji\Macromedia
2017-10-07 05:48 - 2017-10-11 21:23 - 016302932 _____ C:\Documents and Settings\Elektronik\Pulpit\TPM - hansa shell.xlsx
2017-10-07 05:41 - 2017-10-07 05:43 - 108567046 _____ C:\Documents and Settings\Elektronik\Pulpit\Nowy folder.7z
2017-10-05 21:34 - 2017-10-05 21:34 - 000000000 ___HD C:\$AV_ASW
2017-10-05 19:23 - 2017-10-05 19:23 - 000000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\ByteFence
2017-10-05 19:20 - 2017-10-05 19:20 - 000000000 ____D C:\Documents and Settings\Elektronik\Dane aplikacji\AVAST Software
2017-10-05 19:18 - 2017-10-24 22:39 - 000065536 _____ C:\WINDOWS\system32\config\Reason.evt
2017-10-05 19:18 - 2017-10-05 19:18 - 000001689 _____ C:\Documents and Settings\All Users\Pulpit\Avast Free Antivirus.lnk
2017-10-05 19:18 - 2017-10-05 19:18 - 000000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\AVAST Software
2017-10-05 19:16 - 2017-10-25 23:20 - 000000368 ____H C:\WINDOWS\Tasks\Avast Emergency Update.job
2017-10-05 19:16 - 2017-10-05 19:14 - 000499560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2017-10-05 19:16 - 2017-10-05 19:14 - 000297840 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2017-10-05 19:16 - 2017-10-05 19:14 - 000203848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStmXP.sys
2017-10-05 19:16 - 2017-10-05 19:14 - 000124952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2017-10-05 19:16 - 2017-10-05 19:14 - 000070864 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2017-10-05 19:16 - 2017-10-05 19:14 - 000070112 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2017-10-05 19:16 - 2017-10-05 19:14 - 000042856 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2017-10-05 19:16 - 2017-10-05 19:13 - 000777952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2017-10-05 19:16 - 2017-10-05 19:13 - 000276736 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswblogx.sys
2017-10-05 19:16 - 2017-10-05 19:13 - 000157416 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidshx.sys
2017-10-05 19:16 - 2017-10-05 19:13 - 000050384 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbunivx.sys
2017-10-05 19:15 - 2017-10-05 19:13 - 000921280 _____ (Microsoft Corporation) C:\WINDOWS\ucrtbase.dll
2017-10-05 19:15 - 2017-10-05 19:13 - 000304816 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-10-05 19:15 - 2017-10-05 19:13 - 000255624 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdriverx.sys
2017-10-05 19:14 - 2017-10-05 19:14 - 000002244 _____ C:\Documents and Settings\Elektronik\Pulpit\Chromium.lnk
2017-10-05 19:14 - 2017-10-05 19:14 - 000000000 ____D C:\Documents and Settings\Elektronik\Menu Start\Programy\Chromium
2017-10-05 19:13 - 2017-10-05 19:14 - 000000000 ____D C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\chromium
2017-10-05 19:12 - 2017-10-05 19:12 - 000000000 ____D C:\Program Files\AVAST Software
2017-10-05 19:11 - 2017-10-05 20:15 - 000000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
2017-10-05 19:11 - 2017-10-05 19:15 - 000000000 ____D C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\{7C7C4A20-58D4-2698-354C-03701124FFE8}
2017-10-05 19:11 - 2017-10-05 19:11 - 056134208 _____ (Oracle Corporation) C:\Documents and Settings\Elektronik\Downloads\JavaSetup [1].exe
2017-10-05 19:11 - 2017-10-05 19:11 - 000000740 _____ C:\Documents and Settings\Elektronik\Pulpit\ByteFence Anti-Malware.lnk
2017-10-05 01:08 - 2017-10-05 01:08 - 000000000 ___SD C:\Documents and Settings\Elektronik\Moje dokumenty\My Data Sources
2017-10-02 05:19 - 2017-10-02 05:19 - 000096556 _____ C:\Documents and Settings\Elektronik\Pulpit\Dpqwin4.pdf
2017-10-02 03:38 - 2017-10-02 03:38 - 000096891 _____ C:\Documents and Settings\Elektronik\Pulpit\Dpqwin.pdf
2017-10-02 01:55 - 2017-10-02 01:56 - 000099205 _____ C:\Documents and Settings\Elektronik\Pulpit\Dpqwin1.pdf
2017-10-02 01:55 - 2017-10-02 01:55 - 000097011 _____ C:\Documents and Settings\Elektronik\Pulpit\Dpqwin2.pdf
2017-09-26 21:04 - 2017-09-26 21:04 - 010012003 _____ C:\Documents and Settings\Elektronik\Pulpit\instrukcja-pompy-prozniowe-dwustopniowe.pdf

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-10-26 06:38 - 2012-09-11 21:59 - 000000000 ____D C:\Documents and Settings\Elektronik\Ustawienia lokalne\Temp
2017-10-26 06:37 - 2015-03-29 01:28 - 000000000 ____D C:\Documents and Settings\Elektronik\Moje dokumenty\Pobrane
2017-10-26 06:34 - 2016-10-17 06:34 - 000000616 _____ C:\WINDOWS\Tasks\SiemensDownloader.job
2017-10-26 06:34 - 2015-10-09 11:17 - 000000622 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-1275210071-776561741-682003330-1003.job
2017-10-26 06:26 - 2017-07-22 20:15 - 000000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-10-26 02:48 - 2012-09-11 21:59 - 000000000 ___RD C:\Documents and Settings\Elektronik\Moje dokumenty
2017-10-26 02:26 - 2015-01-28 15:27 - 000803328 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2017-10-26 02:26 - 2015-01-28 15:27 - 000144896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2017-10-26 02:26 - 2015-01-28 15:27 - 000000892 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2017-10-26 02:26 - 2012-09-11 21:54 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-10-25 23:29 - 2012-09-11 23:40 - 000000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji
2017-10-25 21:19 - 2012-09-11 21:58 - 000032602 _____ C:\WINDOWS\SchedLgU.Txt
2017-10-25 14:02 - 2012-09-11 23:41 - 001469400 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-10-25 14:02 - 2008-04-15 14:00 - 000626730 _____ C:\WINDOWS\system32\perfh015.dat
2017-10-25 14:02 - 2008-04-15 14:00 - 000138994 _____ C:\WINDOWS\system32\perfc015.dat
2017-10-25 13:59 - 2008-04-15 14:00 - 000013646 _____ C:\WINDOWS\system32\wpa.dbl
2017-10-25 13:57 - 2012-09-11 21:58 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-10-25 13:57 - 2012-09-11 21:58 - 000000000 ____D C:\Documents and Settings\NetworkService\Ustawienia lokalne\Temp
2017-10-25 13:56 - 2017-05-05 14:28 - 000749602 _____ C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-1275210071-776561741-682003330-1003-0.dat
2017-10-25 13:56 - 2017-02-07 06:41 - 000374938 _____ C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
2017-10-25 13:56 - 2012-09-11 21:59 - 000000292 ___SH C:\Documents and Settings\Elektronik\ntuser.ini
2017-10-25 13:56 - 2012-09-11 21:59 - 000000000 ____D C:\Documents and Settings\Elektronik
2017-10-25 01:23 - 2012-09-11 21:59 - 000000000 ____D C:\Documents and Settings\Elektronik\Pulpit
2017-10-24 23:36 - 2017-08-21 09:38 - 000002557 _____ C:\Documents and Settings\Elektronik\Pulpit\Microsoft Office Excel 2003.lnk
2017-10-24 22:47 - 2013-01-02 16:03 - 000000000 ____D C:\Documents and Settings\Administrator
2017-10-24 22:47 - 2012-09-12 10:26 - 000000000 ____D C:\Documents and Settings\rruszkowski
2017-10-24 22:47 - 2012-09-12 10:24 - 000000000 ____D C:\Documents and Settings\mcieplinski
2017-10-24 22:46 - 2012-09-11 21:58 - 000000000 __SHD C:\Documents and Settings\NetworkService
2017-10-24 22:46 - 2012-09-11 21:58 - 000000000 __SHD C:\Documents and Settings\LocalService
2017-10-24 22:46 - 2012-09-11 21:53 - 000000000 ____D C:\WINDOWS\Registration
2017-10-24 22:40 - 2012-09-11 23:40 - 000000000 ___RD C:\Documents and Settings\All Users\Pulpit
2017-10-24 22:39 - 2017-05-05 14:18 - 000065536 _____ C:\WINDOWS\system32\config\OAlerts.evt
2017-10-24 22:39 - 2012-09-12 04:27 - 000065536 _____ C:\WINDOWS\system32\config\Internet.evt
2017-10-24 07:30 - 2012-09-11 21:59 - 000000000 __RHD C:\Documents and Settings\Elektronik\Dane aplikacji
2017-10-24 06:24 - 2013-08-16 20:39 - 000000000 ____D C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\Opera Software
2017-10-24 06:24 - 2013-08-16 20:39 - 000000000 ____D C:\Documents and Settings\Elektronik\Dane aplikacji\Opera Software
2017-10-24 06:24 - 2012-09-11 23:40 - 000000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy
2017-10-23 21:52 - 2012-10-19 16:02 - 000000000 ____D C:\Program Files\HP
2017-10-23 18:18 - 2012-10-24 03:21 - 000000000 ____D C:\QUARANTINE
2017-10-23 17:17 - 2012-09-12 04:14 - 000000000 ____D C:\WINDOWS\Minidump
2017-10-23 16:06 - 2012-09-12 04:01 - 000000000 __SHD C:\WINDOWS\CSC
2017-10-23 14:54 - 2014-08-16 12:35 - 000000284 _____ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2017-10-23 07:20 - 2015-06-02 00:00 - 000000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2017-10-23 07:20 - 2012-10-14 09:07 - 000000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2017-10-23 00:53 - 2012-09-11 21:59 - 000000000 ___HD C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji
2017-10-19 06:28 - 2017-07-20 09:31 - 000000000 ____D C:\Documents and Settings\Elektronik\Pulpit\Szablony
2017-10-17 14:49 - 2017-09-20 23:29 - 000000000 ____D C:\Documents and Settings\Elektronik\Pulpit\meltog
2017-10-16 23:43 - 2012-10-13 13:07 - 000016384 _____ C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-10-16 23:36 - 2015-07-17 11:54 - 000000000 ____D C:\Documents and Settings\Elektronik\Moje dokumenty\ms
2017-10-11 05:26 - 2012-09-11 21:58 - 000000000 ____D C:\Documents and Settings\NetworkService\Dane aplikacji
2017-10-10 21:57 - 2012-09-12 22:18 - 000000000 __SHD C:\Documents and Settings\LocalService\IETldCache
2017-10-06 06:50 - 2017-01-04 23:55 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-10-05 19:38 - 2012-09-12 05:02 - 000000000 ____D C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\Temp
2017-10-05 19:18 - 2012-09-11 23:34 - 000000000 ___HD C:\WINDOWS\inf
2017-10-05 19:16 - 2012-09-13 22:38 - 000000000 ____D C:\Program Files\CCleaner
2017-10-05 19:14 - 2012-09-11 21:59 - 000000000 ____D C:\Documents and Settings\Elektronik\Menu Start\Programy
2017-10-02 20:15 - 2012-09-12 10:33 - 000000421 _____ C:\WINDOWS\ODBC.INI
2017-10-02 13:14 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5010.ini
2017-10-02 13:14 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5009.ini
2017-10-02 13:14 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5008.ini
2017-10-02 13:14 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5006.ini
2017-10-02 13:14 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5005.ini
2017-10-02 13:14 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5004.ini
2017-10-02 13:14 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5002.ini
2017-10-02 13:14 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5001.ini
2017-10-02 13:14 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_1100.ini
2017-10-02 13:14 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_1010.ini
2017-10-02 13:14 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_1001.ini
2017-10-02 13:14 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_1000.ini
2017-10-01 08:01 - 2016-11-22 08:38 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-09-30 10:51 - 2014-04-10 14:32 - 000000000 ____D C:\Documents and Settings\Elektronik\Pulpit\PDF-y
2017-09-28 14:22 - 2017-08-02 06:24 - 000070801 _____ C:\Documents and Settings\Elektronik\Pulpit\Dzienna karta pracy.xlsx

==================== Pliki w katalogu głównym wybranych folderów =======

2014-04-24 03:12 - 2014-04-24 03:42 - 000589501 _____ () C:\Documents and Settings\Elektronik\Dane aplikacji\log.sflog
2013-03-06 17:20 - 2013-03-06 17:20 - 000138056 _____ () C:\Documents and Settings\Elektronik\Dane aplikacji\PnkBstrK.sys
2012-10-13 13:07 - 2017-10-16 23:43 - 000016384 _____ () C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-10-05 00:02 - 2012-10-05 00:02 - 000000135 _____ () C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
2016-07-11 09:32 - 2016-07-11 09:33 - 000000600 _____ () C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\PUTTY.RND
2017-06-21 22:32 - 2017-06-21 22:32 - 000000724 _____ () C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\recently-used.xbel
2013-02-01 07:16 - 2014-11-20 08:02 - 000025064 _____ () C:\Documents and Settings\All Users\Dane aplikacji\CAEManager.lcs
2013-02-01 07:16 - 2013-02-11 17:22 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\ELECLT.ini
2012-10-19 16:00 - 2017-07-28 13:58 - 000006829 _____ () C:\Documents and Settings\All Users\Dane aplikacji\hpzinstall.log
2014-11-20 08:02 - 2017-10-02 13:14 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_1000.ini
2014-11-20 08:02 - 2017-10-02 13:14 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_1001.ini
2014-11-20 08:02 - 2017-10-02 13:14 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_1010.ini
2014-11-20 08:02 - 2017-10-02 13:14 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_1100.ini
2014-11-20 08:02 - 2017-10-02 13:14 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5001.ini
2014-11-20 08:02 - 2017-10-02 13:14 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5002.ini
2014-11-20 08:02 - 2017-10-02 13:14 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5004.ini
2014-11-20 08:02 - 2017-10-02 13:14 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5005.ini
2014-11-20 08:02 - 2017-10-02 13:14 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5006.ini
2014-11-20 08:02 - 2017-10-02 13:14 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5008.ini
2014-11-20 08:02 - 2017-10-02 13:14 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5009.ini
2014-11-20 08:02 - 2017-10-02 13:14 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5010.ini
2015-10-11 22:29 - 2015-10-12 09:03 - 000000174 _____ () C:\Documents and Settings\All Users\Dane aplikacji\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

==================== Koniec  FRST.txt ============================