Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 26-10-2017 Uruchomiony przez Elektronicy (administrator) TC-PC23 (28-10-2017 06:18:05) Uruchomiony z C:\Documents and Settings\Elektronik\Moje dokumenty\Pobrane Załadowane profile: Elektronicy & (Dostępne profile: Elektronicy & Administrator) Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) Język: Polski Internet Explorer Wersja 8 (Domyślna przeglądarka: Opera) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (SIEMENS AG) C:\Program Files\Common Files\Siemens\sws\almsrv\almsrvx.exe (Autodata Limited) C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe (Siemens AG) C:\Program Files\Common Files\Siemens\AlmPanelPlugin\ALMPanelPlugin.exe (SafeNet Inc.) C:\WINDOWS\system32\hasplms.exe (Kerio Technologies Inc.) C:\Program Files\Kerio\UpdaterService\ktupdaterservice.exe (McAfee, Inc.) C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe (McAfee, Inc.) C:\Program Files\McAfee\Common Framework\FrameworkService.exe (McAfee, Inc.) C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe (McAfee, Inc.) C:\WINDOWS\system32\mfevtps.exe (McAfee, Inc.) C:\Program Files\McAfee\Common Framework\naPrdMgr.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Omron) C:\WINDOWS\system32\Omron\autoip\Omron.Cxmw.Modules.AutoIP.AutoIPService.exe (OMRON Corporation) C:\WINDOWS\system32\Omron\PppService\Omron.Cxmw.Modules.Ppp.PppService.exe (SIEMENS AG) C:\Program Files\Common Files\Siemens\S7IEPG\s7oiehsx.exe (SIEMENS AG) C:\Program Files\Common Files\Siemens\Automation\TraceEngine\bin\S7TraceServiceX.exe (SIEMENS AG) C:\Program Files\Common Files\Siemens\SimNetCom\pniomgr.exe () C:\WINDOWS\system32\SecUPDUtilSvc.exe (STOBER ANTRIEBSTECHNIK GmbH & Co. KG) C:\WINDOWS\system32\SATMIC~1.EXE (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\aswidsagent.exe (McAfee, Inc.) C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE (ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Ai Charger\AiChargerAP.exe (McAfee, Inc.) C:\Program Files\McAfee\Common Framework\UdaterUI.exe (McAfee, Inc.) C:\Program Files\McAfee\Common Framework\McTray.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe () C:\Program Files\MultiCalc\MultiCalc.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe (BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-Agent.exe (Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (SIEMENS AG) C:\Program Files\Siemens\SIMATIC.NET\SimNetCom\pniopcac.exe (Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (McAfee, Inc.) C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe (McAfee, Inc.) C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe (Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera.exe (Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera_crashreporter.exe (Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera.exe (Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera.exe (Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera.exe (Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera.exe (Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera.exe (Opera Software) C:\Program Files\Opera\36.0.2130.80_0\opera.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20065384 2012-09-12] (Realtek Semiconductor Corp.) HKLM\...\Run: [ASUS Ai Charger] => C:\Program Files\ASUS\ASUS Ai Charger\AiChargerAP.exe [547984 2012-08-13] (ASUSTek Computer Inc.) HKLM\...\Run: [McAfeeUpdaterUI] => C:\Program Files\McAfee\Common Framework\udaterui.exe [136512 2009-01-16] (McAfee, Inc.) HKLM\...\Run: [ShStatEXE] => C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE [124240 2009-04-29] (McAfee, Inc.) HKLM\...\Run: [SiemensAutomationFileStorage] => C:\Program Files\Siemens\Automation\Portal V11\\Bin\Siemens.Automation.ObjectFrame.FileStorage.Server.exe [856064 2011-11-22] (Siemens AG) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM\...\Run: [CX-One Upgrade Utility] => C:\Program Files\OMRON\CX-One\Upgrade Utility\AutoUpdate.exe [176128 2011-10-18] () HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\qttask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation) HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [351968 2014-09-08] () HKLM\...\Run: [ISUSPM Startup] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [249856 2005-08-11] (Macrovision Corporation) HKLM\...\Run: [] => [X] HKLM\...\Run: [HPUsageTrackingLEDM] => C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe [30264 2009-08-04] (Hewlett-Packard Company) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-10-05] (AVAST Software) HKLM\...\Run: [UserFaultCheck] => %systemroot%\system32\dumprep 0 -u HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\Run: [MultiCalc] => C:\Program Files\MultiCalc\MultiCalc.exe [2474496 2006-02-02] () HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7685808 2017-10-05] (Piriform Ltd) HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd) HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\Run: [STUISpeedLauncher] => C:\Program Files\Samsung\Stylish UI Pack\TouchBasedUI.exe [383488 2015-07-24] () HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\Run: [BlueStacks Agent] => C:\Program Files\BlueStacks\HD-Agent.exe [160824 2017-05-24] (BlueStack Systems, Inc.) HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\Policies\Explorer: [NoDriveAutoRun] ffffffff HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\MountPoints2: G - G:\SISetup.exe HKU\S-1-5-21-1275210071-776561741-682003330-1003\...\MountPoints2: {9b93601e-72d8-11e7-ae7f-14dae9be04fe} - G:\SISetup.exe HKU\S-1-5-21-3372850609-1789448846-4230942516-1150\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7685808 2017-10-05] (Piriform Ltd) Startup: C:\Documents and Settings\Elektronik\Menu Start\Programy\Autostart\PowerReg Scheduler.exe [2012-11-19] () GroupPolicy: Ograniczenia - Chrome <==== UWAGA CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{978971FC-43A9-485E-AAF6-ABF062C243DD}: [NameServer] 172.30.1.11,172.30.1.12 Tcpip\..\Interfaces\{978971FC-43A9-485E-AAF6-ABF062C243DD}: [DhcpNameServer] 192.168.0.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKU\S-1-5-21-1275210071-776561741-682003330-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1275210071-776561741-682003330-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-3372850609-1789448846-4230942516-1150\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-3372850609-1789448846-4230942516-1150\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://gazeta.pl/0,0.html?sc=1 URLSearchHook: HKLM -> Domyślne = {74198672-5F7D-4FE9-A611-4AC1D5A66A15} URLSearchHook: HKU\S-1-5-21-1275210071-776561741-682003330-1003 -> Domyślne = {74198672-5F7D-4FE9-A611-4AC1D5A66A15} HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxp://www.interia.pl/#utm_source=instalki&utm_medium=installer&utm_campaign=instalki" <==== UWAGA SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3372850609-1789448846-4230942516-1150 -> DefaultScope {A02E3EE1-F26D-4C62-8B59-B280844E39A7} URL = hxxp://szukaj.gazeta.pl/portalSearch.do?s.si(navigation).navigationEnabled=true&s.sm.query={searchTerms} SearchScopes: HKU\S-1-5-21-3372850609-1789448846-4230942516-1150 -> {A02E3EE1-F26D-4C62-8B59-B280844E39A7} URL = hxxp://szukaj.gazeta.pl/portalSearch.do?s.si(navigation).navigationEnabled=true&s.sm.query={searchTerms} BHO: WebCGMHlprObj Class -> {56B38F40-4E70-11d4-A076-0080AD86BA2F} -> C:\WINDOWS\system32\cgmopenbho.dll [2005-06-09] (CGM Open Consortium, Inc.) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-07-22] (Oracle Corporation) BHO: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files\McAfee\VirusScan Enterprise\scriptsn.dll [2009-04-29] (McAfee, Inc.) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-22] (Oracle Corporation) DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com.tw/common/asusTek_sys_ctrl.cab DPF: {3253344D-0000-0010-8000-00AA00389B71} hxxp://download.microsoft.com/download/F/C/6/FC636FA3-701B-4BA5-9D55-76CAC20A0C8D/mpg4sax.CAB DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} hxxp://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.199.0.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab FireFox: ======== FF ProfilePath: C:\Documents and Settings\Elektronik\Dane aplikacji\TomTom\HOME\Profiles\fb8hgd0h.default [2016-04-20] FF Extension: (Brak nazwy) - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [nie znaleziono] FF ProfilePath: C:\Documents and Settings\Elektronik\Dane aplikacji\Mozilla\Firefox\Profiles\jenzl3y9.default-1489878353562 [2017-10-28] FF Extension: (AdBlocker Ultimate) - C:\Documents and Settings\Elektronik\Dane aplikacji\Mozilla\Firefox\Profiles\jenzl3y9.default-1489878353562\Extensions\adblockultimate@adblockultimate.net.xpi [2017-08-18] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: (Microsoft .NET Framework Assistant) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-09-15] [Brak podpisu cyfrowego] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-26] () FF Plugin: @cadenas.de/PARTwebViewer,version=9.7.11.7711&arch=x86_32 -> C:\Program Files\Festo\PARTwebViewer 9.07\32\npwebviewerplugins.dll [2013-08-02] (CADENAS GmbH) FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-22] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-22] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1275210071-776561741-682003330-1003: @cadenas.de/PARTwebViewer,version=9.7.11.7711&arch=x86_32 -> C:\Program Files\Festo\PARTwebViewer 9.07\32\npwebviewerplugins.dll [2013-08-02] (CADENAS GmbH) FF Plugin HKU\S-1-5-21-1275210071-776561741-682003330-1003: @citrixonline.com/appdetectorplugin -> C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\Citrix\Plugins\104\npappdetector.dll [2015-10-09] (Citrix Online) FF Plugin HKU\S-1-5-21-1275210071-776561741-682003330-1003: @coreonline.com/run3d,version=1.0 -> C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\Square Enix\nprun3d.dll [2012-09-14] (Square Enix) FF Plugin HKU\S-1-5-21-1275210071-776561741-682003330-1003: @unity3d.com/UnityPlayer,version=1.0 -> C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll [2015-09-03] (Unity Technologies ApS) Opera: ======= OPR Extension: (Bloker reklam Adguard) - C:\Documents and Settings\Elektronik\Dane aplikacji\Opera Software\Opera Stable\Extensions\bopfaehpakahokaelnomggbohfbimcia [2017-10-26] OPR Extension: (360 Internet Protection) - C:\Documents and Settings\Elektronik\Dane aplikacji\Opera Software\Opera Stable\Extensions\cnpeghmjdfdmneiljeibjnemfdkojdhl [2017-10-26] OPR Extension: (Tłumacz) - C:\Documents and Settings\Elektronik\Dane aplikacji\Opera Software\Opera Stable\Extensions\ibnombjmjocaccigcefonnipcnlaeaed [2017-10-26] OPR Extension: (History Eraser) - C:\Documents and Settings\Elektronik\Dane aplikacji\Opera Software\Opera Stable\Extensions\lfpoajlbkhlfoeeokbppmecpplmieedm [2017-10-26] ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2017-10-26] (Adobe Systems Incorporated) [Brak podpisu cyfrowego] R2 almservice; C:\program files\common files\Siemens\sws\almsrv\almsrvx.exe [1138312 2011-12-11] (SIEMENS AG) [Brak podpisu cyfrowego] R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5828816 2017-10-05] (AVAST Software s.r.o.) R2 Autodata Limited License Service; C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe [72704 2014-12-10] (Autodata Limited) [Brak podpisu cyfrowego] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-10-05] (AVAST Software) S3 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [387128 2017-05-24] (BlueStack Systems, Inc.) [Brak podpisu cyfrowego] S3 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [369720 2017-05-24] (BlueStack Systems, Inc.) [Brak podpisu cyfrowego] S3 BstHdPlusAndroidSvc; C:\Program Files\BlueStacks\HD-Plus-Service.exe [407608 2017-05-24] (BlueStack Systems, Inc.) [Brak podpisu cyfrowego] R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4609928 2013-08-01] (SafeNet Inc.) S2 HP LaserJet Service; C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [136704 2009-06-24] (HP) [Brak podpisu cyfrowego] S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Brak podpisu cyfrowego] R2 ktupdaterservice; C:\Program Files\Kerio\UpdaterService\ktupdaterservice.exe [892928 2013-02-12] (Kerio Technologies Inc.) [Brak podpisu cyfrowego] R2 McAfeeEngineService; C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe [21256 2009-04-29] (McAfee, Inc.) R2 McAfeeFramework; C:\Program Files\McAfee\Common Framework\FrameworkService.exe [103744 2009-01-16] (McAfee, Inc.) U2 McShield; C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe [144888 2009-04-29] (McAfee, Inc.) R2 McTaskManager; C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe [62800 2009-04-29] (McAfee, Inc.) R2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [70216 2009-04-29] (McAfee, Inc.) R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe [29178224 2007-02-10] (Microsoft Corporation) R2 MSSQL$WINCCPLUS; c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29181272 2008-12-18] (Microsoft Corporation) S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [45272 2005-10-14] (Microsoft Corporation) R2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego] R2 OMRON_EDC_Manager; C:\WINDOWS\system32\Omron\autoip\Omron.Cxmw.Modules.AutoIP.AutoIPService.exe [61952 2011-09-21] (Omron) [Brak podpisu cyfrowego] R2 OMRON_UC_Manager; C:\WINDOWS\system32\Omron\PppService\Omron.Cxmw.Modules.Ppp.PppService.exe [37376 2011-09-21] (OMRON Corporation) [Brak podpisu cyfrowego] S3 OpcEnum; C:\WINDOWS\system32\OpcEnum.exe [135168 2007-04-17] (OPC Foundation) [Brak podpisu cyfrowego] R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego] R2 s7oiehsx; C:\program files\common files\Siemens\S7IEPG\s7oiehsx.exe [412808 2012-01-30] (SIEMENS AG) [Brak podpisu cyfrowego] R2 S7TraceServiceX; C:\Program Files\Common Files\Siemens\Automation\TraceEngine\bin\S7TraceServiceX.exe [556168 2012-01-30] (SIEMENS AG) [Brak podpisu cyfrowego] R2 SamsungUPDUtilSvc; C:\WINDOWS\system32\SecUPDUtilSvc.exe [143664 2017-01-24] () R2 SATMICLService; C:\WINDOWS\system32\SATMIC~1.EXE [159744 2009-03-25] (STOBER ANTRIEBSTECHNIK GmbH & Co. KG) [Brak podpisu cyfrowego] S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X] ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 acedrv11; C:\WINDOWS\system32\drivers\acedrv11.sys [185472 2010-02-24] (Protect Software GmbH) R3 AiCharger; C:\WINDOWS\System32\drivers\AiCharger.sys [13952 2012-03-22] (ASUSTek Computer Inc.) R2 aksfridge; C:\WINDOWS\system32\drivers\aksfridge.sys [376200 2013-08-01] (SafeNet Inc.) S3 akshasp; C:\WINDOWS\System32\DRIVERS\akshasp.sys [244040 2013-08-01] (SafeNet Inc.) S3 aksusb; C:\WINDOWS\System32\DRIVERS\aksusb.sys [296200 2013-08-01] (SafeNet Inc.) S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2012-09-12] (Creative) R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdriverx.sys [255624 2017-10-05] (AVAST Software s.r.o.) R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidshx.sys [157416 2017-10-05] (AVAST Software s.r.o.) R0 aswblog; C:\WINDOWS\system32\drivers\aswblogx.sys [276736 2017-10-05] (AVAST Software s.r.o.) R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbunivx.sys [50384 2017-10-05] (AVAST Software s.r.o.) S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [42856 2017-10-05] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [124952 2017-10-05] (AVAST Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [70112 2017-10-05] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [70864 2017-10-05] (AVAST Software) R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [783648 2017-10-26] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [499560 2017-10-05] (AVAST Software) R3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [203848 2017-10-05] (AVAST Software) R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [297840 2017-10-05] (AVAST Software) R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [281760 2012-10-08] () S3 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [139360 2017-05-24] (BlueStack Systems) S3 BstkDrv; C:\Program Files\BlueStacks\BstkDrv.sys [220216 2017-05-22] (Bluestack System Inc. ) R1 CCNMMDRV; C:\WINDOWS\system32\Drivers\CCNMMDRV.sys [20480 1995-09-11] () [Brak podpisu cyfrowego] R2 Dpmtrcdd; C:\WINDOWS\System32\DRIVERS\dpmtrcdd.sys [28331 2010-01-09] (SIEMENS AG) [Brak podpisu cyfrowego] S3 DpqUSBV3; C:\WINDOWS\System32\Drivers\DpqUSBV3.sys [36288 2009-11-11] (Datapaq Limited) R1 dtsoftbus01; C:\WINDOWS\System32\DRIVERS\dtsoftbus01.sys [243128 2014-02-22] (Disc Soft Ltd) S3 FTDIBUS; C:\WINDOWS\System32\drivers\ftdibus.sys [61704 2011-03-18] (FTDI Ltd.) R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [608648 2013-08-01] (SafeNet Inc.) R2 Haspnt; C:\WINDOWS\system32\drivers\Haspnt.sys [47616 2012-09-12] (Aladdin Knowledge Systems) [Brak podpisu cyfrowego] R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [25888 2012-10-08] () R3 MEI; C:\WINDOWS\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation) R3 mfeapfk; C:\WINDOWS\System32\drivers\mfeapfk.sys [75704 2009-04-29] (McAfee, Inc.) R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [91640 2009-04-29] (McAfee, Inc.) R3 mfebopk; C:\WINDOWS\System32\drivers\mfebopk.sys [43288 2009-04-29] (McAfee, Inc.) R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [342128 2009-04-29] (McAfee, Inc.) S3 mferkdet; C:\WINDOWS\System32\drivers\mferkdet.sys [65224 2009-04-29] (McAfee, Inc.) R1 mfetdik; C:\WINDOWS\System32\drivers\mfetdik.sys [63696 2009-04-29] (McAfee, Inc.) S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2012-09-12] (Creative Technology Ltd.) S3 MOSUMAC; C:\WINDOWS\System32\DRIVERS\MOSUMAC.SYS [43648 2012-05-25] (--) R2 NPF; C:\WINDOWS\System32\drivers\npf.sys [35088 2010-06-25] (CACE Technologies, Inc.) R2 S7opcsrtx; C:\WINDOWS\System32\DRIVERS\s7opcsrtx.sys [31232 2009-06-30] (SIEMENS AG) [Brak podpisu cyfrowego] R2 S7oppilx; C:\WINDOWS\System32\Drivers\S7oppilx.sys [130560 2012-01-30] (SIEMENS AG) [Brak podpisu cyfrowego] S3 s7oppitx; C:\WINDOWS\System32\Drivers\S7oppitx.sys [95232 2012-01-30] (SIEMENS AG) [Brak podpisu cyfrowego] R2 s7otranx; C:\WINDOWS\System32\Drivers\S7otranx.sys [508416 2012-01-30] (SIEMENS AG) [Brak podpisu cyfrowego] R2 s7otsadx; C:\WINDOWS\System32\Drivers\s7otsadx.sys [171008 2012-01-30] (SIEMENS AG) [Brak podpisu cyfrowego] R2 s7ousbu32x; C:\WINDOWS\System32\DRIVERS\s7ousbu32x.sys [547456 2012-01-30] (SIEMENS AG) [Brak podpisu cyfrowego] R2 s7sn2srtx; C:\WINDOWS\System32\DRIVERS\s7sn2srtx.sys [63104 2011-06-16] (SIEMENS AG) [Brak podpisu cyfrowego] R2 s7snsrtx; C:\WINDOWS\System32\DRIVERS\s7snsrtx.sys [73088 2009-02-24] (SIEMENS AG) [Brak podpisu cyfrowego] R2 SNTIE; C:\WINDOWS\System32\DRIVERS\sntie.sys [343888 2011-10-11] (SIEMENS AG) R2 SSPORT; C:\WINDOWS\system32\Drivers\SSPORT.sys [5120 2015-01-05] (Samsung Electronics) [Brak podpisu cyfrowego] S3 AIDA32Driver; \??\C:\Documents and Settings\Elektronik\Pulpit\Nowy folder\aida32.sys [X] U5 dkpccard; C:\Windows\System32\Drivers\dkpccard.sys [14856 2012-10-10] (Data Encryption Systems Limited) S4 IntelIde; Brak ImagePath S3 S5S7DRV; \??\C:\S5W\S5S7DRV.SYS [X] U1 WS2IFSL; Brak ImagePath ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-10-26 23:09 - 2017-10-26 23:09 - 002652347 _____ C:\Documents and Settings\Elektronik\Moje dokumenty\Catalogue_ ESR5 safety relay (2).pdf 2017-10-26 23:09 - 2017-10-26 23:09 - 002652347 _____ C:\Documents and Settings\Elektronik\Moje dokumenty\Catalogue_ ESR5 safety relay (1).pdf 2017-10-26 23:08 - 2017-10-26 23:09 - 002652347 _____ C:\Documents and Settings\Elektronik\Moje dokumenty\Catalogue_ ESR5 safety relay.pdf 2017-10-26 20:06 - 2017-10-26 20:06 - 000093368 _____ C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2017-10-26 06:36 - 2017-10-28 06:18 - 000000000 ____D C:\FRST 2017-10-26 02:41 - 2017-10-26 02:41 - 000735232 _____ (Opera Software) C:\Documents and Settings\Elektronik\Moje dokumenty\OperaSetupWinxpvista.exe 2017-10-26 02:26 - 2017-10-26 02:26 - 004233728 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe 2017-10-25 06:35 - 2017-10-25 06:35 - 000000664 _____ C:\WINDOWS\system32\d3d9caps.dat 2017-10-24 22:40 - 2017-10-24 23:15 - 000367304 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-10-24 07:27 - 2017-10-24 14:00 - 000000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes' Anti-Malware (portable) 2017-10-24 07:26 - 2017-10-24 14:00 - 000000000 ____D C:\Documents and Settings\Elektronik\Pulpit\mbar 2017-10-24 06:24 - 2017-10-28 02:42 - 000000452 _____ C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1508819056.job 2017-10-24 06:24 - 2017-10-24 06:24 - 000000675 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Opera.lnk 2017-10-24 06:23 - 2017-10-26 02:42 - 000000000 ____D C:\Program Files\Opera 2017-10-23 13:57 - 2017-10-23 13:57 - 000000000 ____D C:\Kerio 2017-10-23 07:21 - 2017-10-23 13:59 - 000150816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2017-10-23 07:20 - 2017-10-24 22:42 - 000040384 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2017-10-23 07:20 - 2017-10-23 21:31 - 000040384 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam(2).sys 2017-10-23 07:20 - 2017-10-23 07:20 - 000221112 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-10-23 07:20 - 2017-10-23 07:20 - 000001715 _____ C:\Documents and Settings\All Users\Pulpit\Malwarebytes.lnk 2017-10-23 07:20 - 2017-10-23 07:20 - 000000000 ____D C:\Program Files\Malwarebytes 2017-10-23 07:20 - 2017-10-23 07:20 - 000000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes 2017-10-23 07:20 - 2017-10-04 13:15 - 000059904 _____ C:\WINDOWS\system32\Drivers\mbae.sys 2017-10-23 07:19 - 2017-10-23 07:19 - 000000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\MB2Migration 2017-10-16 23:58 - 2017-10-16 23:59 - 000000000 ____D C:\Documents and Settings\Elektronik\Moje dokumenty\Shotcut 2017-10-16 23:54 - 2017-10-16 23:57 - 106278089 _____ C:\Documents and Settings\Elektronik\Moje dokumenty\shotcut-win32-171002.zip 2017-10-16 23:44 - 2017-10-16 23:45 - 055201148 _____ C:\Documents and Settings\Elektronik\Moje dokumenty\Romantyczny kozak - Adam Mickiewicz. Historia Bez Cenzury1-Split-1.avi 2017-10-16 23:42 - 2017-10-16 23:42 - 011958963 _____ (Zealotsoft,Inc. ) C:\Documents and Settings\Elektronik\Moje dokumenty\videosplitter_www.INSTALKI.pl.exe 2017-10-16 23:42 - 2017-10-16 23:42 - 000000000 ____D C:\Program Files\Zealot Software 2017-10-16 23:42 - 2008-04-06 00:43 - 000136192 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\VideoEdit.ocx 2017-10-16 23:42 - 2008-03-31 14:08 - 000140288 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomqtde.dll 2017-10-16 23:42 - 2008-03-21 15:09 - 000387584 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomflvdec.dll 2017-10-16 23:42 - 2008-03-21 14:00 - 000706560 _____ (Viscom Software Viscom Software) C:\WINDOWS\system32\viscomdata1.dll 2017-10-16 23:42 - 2008-03-17 22:18 - 000713728 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscommpgenc.dll 2017-10-16 23:42 - 2008-02-28 16:20 - 000712192 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomflashenc.dll 2017-10-16 23:42 - 2008-01-26 22:48 - 000712704 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomflvenc.dll 2017-10-16 23:42 - 2007-12-05 13:48 - 000117760 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscommpgdec.dll 2017-10-16 23:42 - 2007-10-16 17:21 - 000076800 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomrmencoder.dll 2017-10-16 23:42 - 2007-09-22 00:00 - 000705536 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomdata2.dll 2017-10-16 23:42 - 2007-08-08 12:26 - 000022016 _____ C:\WINDOWS\system32\img_utils.dll 2017-10-16 23:42 - 2007-08-08 12:25 - 000061440 _____ C:\WINDOWS\system32\imgscaler.dll 2017-10-16 23:42 - 2007-03-04 17:54 - 000054272 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomframe.dll 2017-10-16 23:42 - 2007-02-26 16:13 - 002392064 _____ C:\WINDOWS\system32\videotrans.dll 2017-10-16 23:42 - 2007-02-26 16:13 - 000215040 _____ C:\WINDOWS\system32\videoformat.dll 2017-10-16 23:42 - 2007-02-26 16:13 - 000017920 _____ C:\WINDOWS\system32\videocore.dll 2017-10-16 23:42 - 2006-12-06 12:59 - 000059904 _____ (Viscom Software) C:\WINDOWS\system32\viscomaudiodata.dll 2017-10-16 23:42 - 2006-12-05 16:19 - 000059904 _____ (Viscom Software) C:\WINDOWS\system32\viscomaudioencoder.dll 2017-10-16 23:42 - 2006-05-02 22:16 - 000060416 _____ (Viscom Software www.viscomsoft.com) C:\WINDOWS\system32\viscomtran.dll 2017-10-16 23:42 - 2004-04-05 13:46 - 000061440 _____ C:\WINDOWS\system32\xvid.ax 2017-10-16 23:42 - 2004-04-05 13:36 - 000217088 _____ C:\WINDOWS\system32\xvidcore.dll 2017-10-16 23:42 - 2004-02-26 02:08 - 000236544 _____ (DivXNetworks, Inc.) C:\WINDOWS\system32\divxdec.ax 2017-10-16 23:42 - 2004-02-10 19:15 - 000128512 _____ C:\WINDOWS\system32\xvid.dll 2017-10-16 23:42 - 2003-08-19 15:20 - 000180224 _____ () C:\WINDOWS\system32\ac3filter.ax 2017-10-16 23:42 - 2003-08-19 04:31 - 000052736 _____ (Viscom Software) C:\WINDOWS\system32\viscomwave.dll 2017-10-16 23:42 - 2003-07-29 16:16 - 000299008 _____ (Gabest) C:\WINDOWS\system32\RealMediaSplitter.ax 2017-10-16 23:42 - 2003-05-22 13:27 - 000620094 _____ (DivXNetworks, Inc.) C:\WINDOWS\system32\divx.dll 2017-10-16 23:42 - 2001-08-18 20:00 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg4ds32.axu 2017-10-16 23:42 - 2000-06-30 17:40 - 000139264 _____ (Ligos Corporation) C:\WINDOWS\system32\Mpeg2Decoder.ax 2017-10-16 23:42 - 2000-06-26 13:13 - 000094208 _____ (Ligos Corporation) C:\WINDOWS\system32\Mpeg2Parser.ax 2017-10-16 23:36 - 2017-10-16 23:38 - 075037757 _____ C:\Documents and Settings\Elektronik\Moje dokumenty\Romantyczny kozak - Adam Mickiewicz. Historia Bez Cenzury.wmv 2017-10-16 23:22 - 2017-10-16 23:22 - 000119536 _____ (GreenTree Applications SRL) C:\Documents and Settings\Elektronik\Moje dokumenty\YTDSetup.exe 2017-10-11 12:04 - 2017-10-19 06:23 - 000012399 _____ C:\Documents and Settings\Elektronik\Pulpit\Falownik musztarda.xlsx 2017-10-11 05:26 - 2017-10-11 05:26 - 000000000 ____D C:\Documents and Settings\NetworkService\Dane aplikacji\Macromedia 2017-10-07 05:48 - 2017-10-11 21:23 - 016302932 _____ C:\Documents and Settings\Elektronik\Pulpit\TPM - hansa shell.xlsx 2017-10-07 05:41 - 2017-10-07 05:43 - 108567046 _____ C:\Documents and Settings\Elektronik\Pulpit\Nowy folder.7z 2017-10-05 21:34 - 2017-10-05 21:34 - 000000000 ___HD C:\$AV_ASW 2017-10-05 19:23 - 2017-10-05 19:23 - 000000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\ByteFence 2017-10-05 19:20 - 2017-10-05 19:20 - 000000000 ____D C:\Documents and Settings\Elektronik\Dane aplikacji\AVAST Software 2017-10-05 19:18 - 2017-10-24 22:39 - 000065536 _____ C:\WINDOWS\system32\config\Reason.evt 2017-10-05 19:18 - 2017-10-05 19:18 - 000001689 _____ C:\Documents and Settings\All Users\Pulpit\Avast Free Antivirus.lnk 2017-10-05 19:18 - 2017-10-05 19:18 - 000000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\AVAST Software 2017-10-05 19:16 - 2017-10-27 19:16 - 000000368 ____H C:\WINDOWS\Tasks\Avast Emergency Update.job 2017-10-05 19:16 - 2017-10-26 19:16 - 000783648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys 2017-10-05 19:16 - 2017-10-05 19:14 - 000499560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2017-10-05 19:16 - 2017-10-05 19:14 - 000297840 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys 2017-10-05 19:16 - 2017-10-05 19:14 - 000203848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStmXP.sys 2017-10-05 19:16 - 2017-10-05 19:14 - 000124952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2017-10-05 19:16 - 2017-10-05 19:14 - 000070864 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2017-10-05 19:16 - 2017-10-05 19:14 - 000070112 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys 2017-10-05 19:16 - 2017-10-05 19:14 - 000042856 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys 2017-10-05 19:16 - 2017-10-05 19:13 - 000276736 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswblogx.sys 2017-10-05 19:16 - 2017-10-05 19:13 - 000157416 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidshx.sys 2017-10-05 19:16 - 2017-10-05 19:13 - 000050384 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbunivx.sys 2017-10-05 19:15 - 2017-10-05 19:13 - 000921280 _____ (Microsoft Corporation) C:\WINDOWS\ucrtbase.dll 2017-10-05 19:15 - 2017-10-05 19:13 - 000304816 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2017-10-05 19:15 - 2017-10-05 19:13 - 000255624 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdriverx.sys 2017-10-05 19:14 - 2017-10-05 19:14 - 000002244 _____ C:\Documents and Settings\Elektronik\Pulpit\Chromium.lnk 2017-10-05 19:14 - 2017-10-05 19:14 - 000000000 ____D C:\Documents and Settings\Elektronik\Menu Start\Programy\Chromium 2017-10-05 19:13 - 2017-10-05 19:14 - 000000000 ____D C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\chromium 2017-10-05 19:12 - 2017-10-05 19:12 - 000000000 ____D C:\Program Files\AVAST Software 2017-10-05 19:11 - 2017-10-05 20:15 - 000000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software 2017-10-05 19:11 - 2017-10-05 19:15 - 000000000 ____D C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\{7C7C4A20-58D4-2698-354C-03701124FFE8} 2017-10-05 19:11 - 2017-10-05 19:11 - 056134208 _____ (Oracle Corporation) C:\Documents and Settings\Elektronik\Downloads\JavaSetup [1].exe 2017-10-05 01:08 - 2017-10-05 01:08 - 000000000 ___SD C:\Documents and Settings\Elektronik\Moje dokumenty\My Data Sources 2017-10-02 05:19 - 2017-10-02 05:19 - 000096556 _____ C:\Documents and Settings\Elektronik\Pulpit\Dpqwin4.pdf 2017-10-02 03:38 - 2017-10-02 03:38 - 000096891 _____ C:\Documents and Settings\Elektronik\Pulpit\Dpqwin.pdf 2017-10-02 01:55 - 2017-10-02 01:56 - 000099205 _____ C:\Documents and Settings\Elektronik\Pulpit\Dpqwin1.pdf 2017-10-02 01:55 - 2017-10-02 01:55 - 000097011 _____ C:\Documents and Settings\Elektronik\Pulpit\Dpqwin2.pdf ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2017-10-28 06:19 - 2012-09-11 21:59 - 000000000 ____D C:\Documents and Settings\Elektronik\Ustawienia lokalne\Temp 2017-10-28 06:18 - 2015-03-29 01:28 - 000000000 ____D C:\Documents and Settings\Elektronik\Moje dokumenty\Pobrane 2017-10-28 05:58 - 2015-01-28 15:27 - 000000892 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job 2017-10-28 05:58 - 2012-09-11 21:54 - 000000000 ____D C:\WINDOWS\system32\Macromed 2017-10-28 05:34 - 2016-10-17 06:34 - 000000616 _____ C:\WINDOWS\Tasks\SiemensDownloader.job 2017-10-28 05:26 - 2017-07-22 20:15 - 000000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2017-10-28 04:34 - 2015-10-09 11:17 - 000000622 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-1275210071-776561741-682003330-1003.job 2017-10-28 00:10 - 2012-09-11 21:59 - 000000000 ____D C:\Documents and Settings\Elektronik\Pulpit 2017-10-27 22:26 - 2017-05-05 14:14 - 000000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help 2017-10-27 20:00 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5010.ini 2017-10-27 20:00 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5009.ini 2017-10-27 20:00 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5008.ini 2017-10-27 20:00 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5006.ini 2017-10-27 20:00 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5005.ini 2017-10-27 20:00 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5004.ini 2017-10-27 20:00 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5002.ini 2017-10-27 20:00 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_5001.ini 2017-10-27 20:00 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_1100.ini 2017-10-27 20:00 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_1010.ini 2017-10-27 20:00 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_1001.ini 2017-10-27 20:00 - 2014-11-20 08:02 - 000001764 _____ C:\Documents and Settings\All Users\Dane aplikacji\SEE_1000.ini 2017-10-27 18:26 - 2012-09-11 21:58 - 000032476 _____ C:\WINDOWS\SchedLgU.Txt 2017-10-27 05:12 - 2012-09-12 10:33 - 000000534 _____ C:\WINDOWS\ODBC.INI 2017-10-27 00:35 - 2012-09-11 21:59 - 000000000 ___RD C:\Documents and Settings\Elektronik\Moje dokumenty 2017-10-26 20:06 - 2012-09-11 21:59 - 000000000 ___HD C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji 2017-10-26 07:34 - 2012-10-24 03:21 - 000000000 ____D C:\QUARANTINE 2017-10-26 02:26 - 2015-01-28 15:27 - 000803328 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2017-10-26 02:26 - 2015-01-28 15:27 - 000144896 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2017-10-25 23:29 - 2012-09-11 23:40 - 000000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji 2017-10-25 14:02 - 2012-09-11 23:41 - 001469400 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-10-25 14:02 - 2008-04-15 14:00 - 000626730 _____ C:\WINDOWS\system32\perfh015.dat 2017-10-25 14:02 - 2008-04-15 14:00 - 000138994 _____ C:\WINDOWS\system32\perfc015.dat 2017-10-25 13:59 - 2008-04-15 14:00 - 000013646 _____ C:\WINDOWS\system32\wpa.dbl 2017-10-25 13:57 - 2012-09-11 21:58 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-10-25 13:57 - 2012-09-11 21:58 - 000000000 ____D C:\Documents and Settings\NetworkService\Ustawienia lokalne\Temp 2017-10-25 13:56 - 2017-05-05 14:28 - 000749602 _____ C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-1275210071-776561741-682003330-1003-0.dat 2017-10-25 13:56 - 2017-02-07 06:41 - 000374938 _____ C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat 2017-10-25 13:56 - 2012-09-11 21:59 - 000000292 ___SH C:\Documents and Settings\Elektronik\ntuser.ini 2017-10-25 13:56 - 2012-09-11 21:59 - 000000000 ____D C:\Documents and Settings\Elektronik 2017-10-24 23:36 - 2017-08-21 09:38 - 000002557 _____ C:\Documents and Settings\Elektronik\Pulpit\Microsoft Office Excel 2003.lnk 2017-10-24 22:47 - 2013-01-02 16:03 - 000000000 ____D C:\Documents and Settings\Administrator 2017-10-24 22:47 - 2012-09-12 10:26 - 000000000 ____D C:\Documents and Settings\rruszkowski 2017-10-24 22:47 - 2012-09-12 10:24 - 000000000 ____D C:\Documents and Settings\mcieplinski 2017-10-24 22:46 - 2012-09-11 21:58 - 000000000 __SHD C:\Documents and Settings\NetworkService 2017-10-24 22:46 - 2012-09-11 21:58 - 000000000 __SHD C:\Documents and Settings\LocalService 2017-10-24 22:46 - 2012-09-11 21:53 - 000000000 ____D C:\WINDOWS\Registration 2017-10-24 22:40 - 2012-09-11 23:40 - 000000000 ___RD C:\Documents and Settings\All Users\Pulpit 2017-10-24 22:39 - 2017-05-05 14:18 - 000065536 _____ C:\WINDOWS\system32\config\OAlerts.evt 2017-10-24 22:39 - 2012-09-12 04:27 - 000065536 _____ C:\WINDOWS\system32\config\Internet.evt 2017-10-24 07:30 - 2012-09-11 21:59 - 000000000 __RHD C:\Documents and Settings\Elektronik\Dane aplikacji 2017-10-24 06:24 - 2013-08-16 20:39 - 000000000 ____D C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\Opera Software 2017-10-24 06:24 - 2013-08-16 20:39 - 000000000 ____D C:\Documents and Settings\Elektronik\Dane aplikacji\Opera Software 2017-10-24 06:24 - 2012-09-11 23:40 - 000000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy 2017-10-23 21:52 - 2012-10-19 16:02 - 000000000 ____D C:\Program Files\HP 2017-10-23 17:17 - 2012-09-12 04:14 - 000000000 ____D C:\WINDOWS\Minidump 2017-10-23 16:06 - 2012-09-12 04:01 - 000000000 __SHD C:\WINDOWS\CSC 2017-10-23 14:54 - 2014-08-16 12:35 - 000000284 _____ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job 2017-10-23 07:20 - 2012-10-14 09:07 - 000000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes 2017-10-19 06:28 - 2017-07-20 09:31 - 000000000 ____D C:\Documents and Settings\Elektronik\Pulpit\Szablony 2017-10-17 14:49 - 2017-09-20 23:29 - 000000000 ____D C:\Documents and Settings\Elektronik\Pulpit\meltog 2017-10-16 23:43 - 2012-10-13 13:07 - 000016384 _____ C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2017-10-16 23:36 - 2015-07-17 11:54 - 000000000 ____D C:\Documents and Settings\Elektronik\Moje dokumenty\ms 2017-10-11 05:26 - 2012-09-11 21:58 - 000000000 ____D C:\Documents and Settings\NetworkService\Dane aplikacji 2017-10-10 21:57 - 2012-09-12 22:18 - 000000000 __SHD C:\Documents and Settings\LocalService\IETldCache 2017-10-06 06:50 - 2017-01-04 23:55 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service 2017-10-05 19:38 - 2012-09-12 05:02 - 000000000 ____D C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\Temp 2017-10-05 19:18 - 2012-09-11 23:34 - 000000000 ___HD C:\WINDOWS\inf 2017-10-05 19:16 - 2012-09-13 22:38 - 000000000 ____D C:\Program Files\CCleaner 2017-10-05 19:14 - 2012-09-11 21:59 - 000000000 ____D C:\Documents and Settings\Elektronik\Menu Start\Programy 2017-10-01 08:01 - 2016-11-22 08:38 - 000000000 ____D C:\Program Files\Mozilla Firefox 2017-09-30 10:51 - 2014-04-10 14:32 - 000000000 ____D C:\Documents and Settings\Elektronik\Pulpit\PDF-y 2017-09-28 14:22 - 2017-08-02 06:24 - 000070801 _____ C:\Documents and Settings\Elektronik\Pulpit\Dzienna karta pracy.xlsx ==================== Pliki w katalogu głównym wybranych folderów ======= 2014-04-24 03:12 - 2014-04-24 03:42 - 000589501 _____ () C:\Documents and Settings\Elektronik\Dane aplikacji\log.sflog 2013-03-06 17:20 - 2013-03-06 17:20 - 000138056 _____ () C:\Documents and Settings\Elektronik\Dane aplikacji\PnkBstrK.sys 2012-10-13 13:07 - 2017-10-16 23:43 - 000016384 _____ () C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2012-10-05 00:02 - 2012-10-05 00:02 - 000000135 _____ () C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\fusioncache.dat 2016-07-11 09:32 - 2016-07-11 09:33 - 000000600 _____ () C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\PUTTY.RND 2017-06-21 22:32 - 2017-06-21 22:32 - 000000724 _____ () C:\Documents and Settings\Elektronik\Ustawienia lokalne\Dane aplikacji\recently-used.xbel 2013-02-01 07:16 - 2014-11-20 08:02 - 000025064 _____ () C:\Documents and Settings\All Users\Dane aplikacji\CAEManager.lcs 2013-02-01 07:16 - 2013-02-11 17:22 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\ELECLT.ini 2012-10-19 16:00 - 2017-07-28 13:58 - 000006829 _____ () C:\Documents and Settings\All Users\Dane aplikacji\hpzinstall.log 2014-11-20 08:02 - 2017-10-27 20:00 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_1000.ini 2014-11-20 08:02 - 2017-10-27 20:00 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_1001.ini 2014-11-20 08:02 - 2017-10-27 20:00 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_1010.ini 2014-11-20 08:02 - 2017-10-27 20:00 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_1100.ini 2014-11-20 08:02 - 2017-10-27 20:00 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5001.ini 2014-11-20 08:02 - 2017-10-27 20:00 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5002.ini 2014-11-20 08:02 - 2017-10-27 20:00 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5004.ini 2014-11-20 08:02 - 2017-10-27 20:00 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5005.ini 2014-11-20 08:02 - 2017-10-27 20:00 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5006.ini 2014-11-20 08:02 - 2017-10-27 20:00 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5008.ini 2014-11-20 08:02 - 2017-10-27 20:00 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5009.ini 2014-11-20 08:02 - 2017-10-27 20:00 - 000001764 _____ () C:\Documents and Settings\All Users\Dane aplikacji\SEE_5010.ini 2015-10-11 22:29 - 2015-10-12 09:03 - 000000174 _____ () C:\Documents and Settings\All Users\Dane aplikacji\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo ==================== Koniec FRST.txt ============================