Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 01.12.2018 01
Uruchomiony przez Adi (administrator)  ADI-KOMPUTER (08-12-2018 13:09:16)
Uruchomiony z C:\Users\Adi\Desktop
Załadowane profile: Adi &  (Dostępne profile: Adi & Marcin)
Platform: Windows 10 Home Wersja 1803 17134.112 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Windows\System32\WirelessKB850NotificationService.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18052.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
() C:\Program Files (x86)\SteamServerBrowser\SteamServerBrowser.exe
(Valve Corporation) D:\Steam\Steam.exe
(Discord Inc.) C:\Users\Adi\AppData\Local\Discord\app-0.0.301\Discord.exe
(SourceForge.net) C:\Program Files\Password Safe\pwsafe.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.35\Lightshot.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Discord Inc.) C:\Users\Adi\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\Adi\AppData\Local\Discord\app-0.0.301\Discord.exe
(SoundMixer) C:\Users\Adi\AppData\Roaming\Microsoft\SoundMixer\SoundMixer.exe
(Discord Inc.) C:\Users\Adi\AppData\Local\Discord\app-0.0.301\Discord.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [193024 2018-07-06] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18381792 2018-02-08] (Realtek Semiconductor)
HKLM\...\Run: [Windows Mobile Device Center] => C:\WINDOWS\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe [39792 2008-01-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2017-04-11] ()
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-07-07] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5885352 2018-05-30] (LogMeIn Inc.)
HKLM-x32\...\Run: [NBKeyScan] => "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115610222\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115610222\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115610988\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115610988\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-1962681985-163799491-3190242698-1000\...\Run: [SteamServerBrowser] => C:\Program Files (x86)\SteamServerBrowser\SteamServerBrowser.exe [228352 2017-02-26] ()
HKU\S-1-5-21-1962681985-163799491-3190242698-1000\...\Run: [Steam] => D:\Steam\steam.exe [3131680 2018-11-26] (Valve Corporation)
HKU\S-1-5-21-1962681985-163799491-3190242698-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [5230784 2017-12-15] (Disc Soft Ltd)
HKU\S-1-5-21-1962681985-163799491-3190242698-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [18630056 2018-09-11] (Piriform Ltd)
HKU\S-1-5-21-1962681985-163799491-3190242698-1000\...\Run: [Discord] => C:\Users\Adi\AppData\Local\Discord\app-0.0.301\Discord.exe [57816920 2018-04-30] (Discord Inc.)
HKU\S-1-5-21-1962681985-163799491-3190242698-1000\...\Run: [Flvto Youtube Downloader] => "C:\Users\Adi\AppData\Local\Flvto Youtube Downloader\FlvtoYoutubeDownloader.Redesign.exe" /minimize
HKU\S-1-5-21-1962681985-163799491-3190242698-1000\...\Run: [vidnotifier.exe] => C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\vidnotifier.exe
HKU\S-1-5-21-1962681985-163799491-3190242698-1000\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
HKU\S-1-5-21-1962681985-163799491-3190242698-1000\...\MountPoints2: {b729524b-3cbf-11e7-9883-6cf049743b7b} - "G:\LaunchU3.exe" -a
HKU\S-1-5-21-1962681985-163799491-3190242698-1000\...\Command Processor: @mode 20,5 & tasklist /FI "IMAGENAME eq SoundMixer.exe" 2>NUL | find /I /N "SoundMixer.exe">NUL && exit & if exist "C:\Users\Adi\AppData\Roaming\Microsoft\SoundMixer\SoundMixer.exe" ( start /MIN "" "C:\Users\Adi\AppData\Roaming\Microsoft\SoundMixer\SoundMixer.exe" & tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) else ( tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) <==== UWAGA
HKU\S-1-5-21-1962681985-163799491-3190242698-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115612144\...\Run: [SteamServerBrowser] => C:\Program Files (x86)\SteamServerBrowser\SteamServerBrowser.exe [228352 2017-02-26] ()
HKU\S-1-5-21-1962681985-163799491-3190242698-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115612144\...\Run: [Steam] => D:\Steam\steam.exe [3131680 2018-11-26] (Valve Corporation)
HKU\S-1-5-21-1962681985-163799491-3190242698-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115612144\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [5230784 2017-12-15] (Disc Soft Ltd)
HKU\S-1-5-21-1962681985-163799491-3190242698-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115612144\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [18630056 2018-09-11] (Piriform Ltd)
HKU\S-1-5-21-1962681985-163799491-3190242698-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115612144\...\Run: [Discord] => C:\Users\Adi\AppData\Local\Discord\app-0.0.301\Discord.exe [57816920 2018-04-30] (Discord Inc.)
HKU\S-1-5-21-1962681985-163799491-3190242698-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115612144\...\Run: [Flvto Youtube Downloader] => "C:\Users\Adi\AppData\Local\Flvto Youtube Downloader\FlvtoYoutubeDownloader.Redesign.exe" /minimize
HKU\S-1-5-21-1962681985-163799491-3190242698-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115612144\...\Run: [vidnotifier.exe] => C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\vidnotifier.exe
HKU\S-1-5-21-1962681985-163799491-3190242698-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115612144\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
HKU\S-1-5-21-1962681985-163799491-3190242698-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115612144\...\MountPoints2: {b729524b-3cbf-11e7-9883-6cf049743b7b} - "G:\LaunchU3.exe" -a
HKU\S-1-5-21-1962681985-163799491-3190242698-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115612144\...\Command Processor: @mode 20,5 & tasklist /FI "IMAGENAME eq SoundMixer.exe" 2>NUL | find /I /N "SoundMixer.exe">NUL && exit & if exist "C:\Users\Adi\AppData\Roaming\Microsoft\SoundMixer\SoundMixer.exe" ( start /MIN "" "C:\Users\Adi\AppData\Roaming\Microsoft\SoundMixer\SoundMixer.exe" & tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) else ( tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) <==== UWAGA
Startup: C:\Users\Adi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk [2018-07-18]
ShortcutTarget: GameRanger.lnk -> C:\Users\Adi\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Pty Ltd)
Startup: C:\Users\Adi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Password Safe.lnk [2018-07-20]
ShortcutTarget: Password Safe.lnk -> C:\Program Files\Password Safe\pwsafe.exe (SourceForge.net)
Startup: C:\Users\Adi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wysyłanie do programu OneNote.lnk [2018-08-05]
ShortcutTarget: Wysyłanie do programu OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Brak pliku)
GroupPolicy: Ograniczenia ? <==== UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{EDC91408-4443-4EED-B71A-6981EA03636B}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-1962681985-163799491-3190242698-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
HKU\S-1-5-21-1962681985-163799491-3190242698-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115612144\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_181\bin\ssv.dll [2018-07-23] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_181\bin\jp2ssv.dll [2018-07-23] (Oracle Corporation)
BHO-x32: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22] (Adobe Systems Incorporated)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-11] (Microsoft Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_101.dll [2018-12-06] ()
FF Plugin: @java.com/DTPlugin,version=11.181.2 -> C:\Program Files\Java\jre1.8.0_181\bin\dtplugin\npDeployJava1.dll [2018-07-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.181.2 -> C:\Program Files\Java\jre1.8.0_181\bin\plugin2\npjp2.dll [2018-07-23] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_101.dll [2018-12-06] ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-06-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-06-04] (Google Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> msn.com
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__PARAM__DF&PC=__PARAM__&query={searchTerms}
CHR Session Restore: Default -> [funkcja włączona]
CHR Profile: C:\Users\Adi\AppData\Local\Google\Chrome\User Data\Default [2018-12-08]
CHR Extension: (Dokumenty) - C:\Users\Adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-06-04]
CHR Extension: (Adblock Plus) - C:\Users\Adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-12-03]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-06-04]
CHR Extension: (Material Dark) - C:\Users\Adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\npadhaijchjemiifipabpmeebeelbmpd [2018-10-11]
CHR Extension: (Chrome Media Router) - C:\Users\Adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-12-07]
CHR HKLM\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1962681985-163799491-3190242698-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1962681985-163799491-3190242698-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12082018115612144\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Session Restore: -> [funkcja włączona]
OPR Extension: (Ads Cleaner) - C:\Users\Adi\AppData\Roaming\Opera Software\Opera Stable\Extensions\epidkblbijdjihifinfihbdhhckopdeh [2017-08-19]
OPR Extension: (convert2mp3.net Online Video Converter) - C:\Users\Adi\AppData\Roaming\Opera Software\Opera Stable\Extensions\kefimjmcofjhaphjiadipfoojljnoinn [2018-05-25]
OPR Extension: (AdBlocker Ultimate) - C:\Users\Adi\AppData\Roaming\Opera Software\Opera Stable\Extensions\pmpmnoinbkdojlnknogfeoagmhmhgakc [2017-05-20]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [7013384 2018-03-09] ()
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3128000 2017-12-15] (Disc Soft Ltd)
S3 GoogleChromeElevationService; C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.80\elevation_service.exe [443872 2018-11-30] (Google Inc.)
R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3346856 2018-05-30] (LogMeIn Inc.)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6347056 2018-09-19] (Malwarebytes)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2017-08-28] ()
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [873968 2017-06-30] (Tunngle.net GmbH) [Brak podpisu cyfrowego]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\NisSrv.exe [3925648 2018-06-27] (Microsoft Corporation)
R2 WirelessKB850NotificationService; C:\WINDOWS\system32\WirelessKB850NotificationService.exe [176624 2018-05-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2018-01-04] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2018-01-04] (Disc Soft Ltd)
S3 FairplayKD; C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [87048 2018-10-19] (Multi Theft Auto)
R3 hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2018-05-30] (LogMeIn Inc.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-02-08] (REALiX(tm))
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [260480 2018-12-08] (Malwarebytes)
S3 phantomtap; C:\WINDOWS\System32\DRIVERS\phantomtap.sys [35664 2017-05-18] (The OpenVPN Project)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [51808 2018-02-08] (Synaptics Incorporated)
S3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2018-05-16] (The OpenVPN Project)
S3 tap0901t; C:\WINDOWS\System32\drivers\tap0901t.sys [47736 2015-12-21] (Tunngle.net)
S3 taphss6; C:\WINDOWS\System32\drivers\taphss6.sys [42064 2017-08-17] (Anchorfree Inc.)
S3 VOICEMOD_Driver; C:\WINDOWS\system32\drivers\vmdrv.sys [27648 2018-03-15] (Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46592 2018-06-27] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [340008 2018-06-27] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [59944 2018-06-27] (Microsoft Corporation)
U3 idsvc; Brak ImagePath
U3 wpcsvc; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-12-08 13:09 - 2018-12-08 13:10 - 000022363 _____ C:\Users\Adi\Desktop\FRST.txt
2018-12-08 13:08 - 2018-12-08 13:08 - 002417152 _____ (Farbar) C:\Users\Adi\Downloads\FRST64.exe
2018-12-08 13:08 - 2018-12-08 13:08 - 002417152 _____ (Farbar) C:\Users\Adi\Desktop\FRST64.exe
2018-12-08 12:13 - 2018-12-08 12:13 - 000260480 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2018-12-08 11:53 - 2018-12-08 11:54 - 000000000 ____D C:\AdwCleaner
2018-12-08 11:53 - 2018-12-08 11:53 - 007321808 _____ (Malwarebytes) C:\Users\Adi\Downloads\adwcleaner_7.2.5.0.exe
2018-12-08 11:39 - 2018-12-08 11:39 - 000000000 ____D C:\Users\Adi\AppData\Local\mbamtray
2018-12-08 11:39 - 2018-12-08 11:39 - 000000000 ____D C:\Users\Adi\AppData\Local\mbam
2018-12-08 11:38 - 2018-12-08 12:12 - 000152688 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2018-12-08 11:38 - 2018-12-08 11:38 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-12-08 11:38 - 2018-12-08 11:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-12-08 10:43 - 2018-12-08 13:09 - 000000000 ____D C:\FRST
2018-12-08 10:38 - 2018-12-08 10:38 - 000002694 _____ C:\Users\Adi\Downloads\1click2.cmd
2018-12-08 10:38 - 2018-12-08 10:38 - 000002694 _____ C:\Users\Adi\Desktop\1click2.cmd
2018-12-08 10:26 - 2018-12-08 10:26 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2018-12-08 10:25 - 2018-12-08 10:26 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2018-12-08 10:15 - 2018-12-08 10:15 - 000000000 ____D C:\ProgramData\TEMP
2018-12-07 16:31 - 2018-12-07 16:33 - 007481728 _____ (Microsoft Corporation) C:\Users\Adi\Downloads\setuplanguagepack.x64.pl-pl_.exe
2018-12-07 16:28 - 2018-12-07 16:28 - 000000000 ____D C:\Users\Adi\AppData\Roaming\OfficeTab
2018-12-07 16:27 - 2018-12-07 16:27 - 000001384 _____ C:\Users\Public\Desktop\Office Tab Center 2013-16.lnk
2018-12-07 16:27 - 2018-12-07 16:27 - 000000000 ____D C:\Users\Public\Documents\Office Tab
2018-12-07 16:27 - 2018-12-07 16:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Office Tab
2018-12-07 16:27 - 2018-12-07 16:27 - 000000000 ____D C:\Program Files (x86)\Detong
2018-12-07 16:14 - 2018-12-07 16:14 - 000771414 _____ C:\Users\Adi\Downloads\147766-camhunt-gtasa_manual.zip
2018-12-07 16:02 - 2018-12-08 10:27 - 000002642 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2018-12-07 16:02 - 2018-12-08 10:26 - 000002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2018-12-07 16:02 - 2018-12-08 10:26 - 000002648 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2018-12-07 16:02 - 2018-12-07 16:02 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools
2018-12-07 16:00 - 2018-12-07 16:00 - 000000000 ____D C:\WINDOWS\PCHEALTH
2018-12-07 16:00 - 2018-12-07 16:00 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2018-12-07 15:58 - 2018-12-07 15:58 - 000000000 ____D C:\Users\Adi\AppData\Local\Microsoft Help
2018-12-07 15:58 - 2018-12-07 15:58 - 000000000 ____D C:\Program Files\Microsoft Analysis Services
2018-12-07 15:58 - 2018-12-07 15:58 - 000000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2018-12-07 15:57 - 2018-12-07 15:57 - 000000000 __RHD C:\MSOCache
2018-12-06 18:03 - 2018-12-06 18:03 - 000002316 _____ C:\Users\Adi\AppData\Local\recently-used.xbel
2018-12-05 13:16 - 2018-12-05 13:16 - 038415127 _____ (Absolute Play www.gta-samp.ru ) C:\Users\Adi\Downloads\SAMP_Addon_2.4_Setup.exe
2018-12-05 12:36 - 2018-12-05 12:37 - 033333915 _____ C:\Users\Adi\Downloads\Pliki_ls-stories.pl (1).zip
2018-12-03 19:10 - 2018-12-03 19:10 - 000041768 _____ C:\Users\Adi\Downloads\(CLEO)StreamMemory Fix by Acid.rar
2018-12-02 22:02 - 2018-01-25 20:56 - 000413696 _____ C:\Users\Adi\Desktop\SAMP.exe
2018-12-02 22:02 - 2016-11-12 22:52 - 000704000 _____ C:\Users\Adi\Desktop\modloader.asi
2018-12-02 22:02 - 2014-12-31 21:44 - 000354816 _____ C:\Users\Adi\Desktop\V_HUD_by_DK22Pac.asi
2018-12-02 16:36 - 2018-12-02 16:36 - 033333915 _____ C:\Users\Adi\Downloads\Pliki_ls-stories.pl.zip
2018-12-02 10:57 - 2018-12-02 10:57 - 000000000 ____D C:\Users\Adi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2018-12-02 10:56 - 2018-12-02 10:56 - 015656217 _____ C:\Users\Adi\Downloads\sa-mp-0.3.DL-R1-install.exe
2018-12-01 01:57 - 2018-12-01 01:57 - 002066632 _____ C:\Users\Adi\Downloads\AnyDesk (1).exe
2018-11-30 13:53 - 2018-11-30 13:53 - 000638944 _____ C:\Users\Adi\Downloads\riftmod_voxelMap_1.8.2_for_1.13.0.jar
2018-11-30 13:53 - 2018-11-30 13:53 - 000134659 _____ C:\Users\Adi\Downloads\Rift-1.0.4-66.jar
2018-11-30 13:41 - 2018-11-30 13:41 - 000442228 _____ C:\Users\Adi\Downloads\MinimapInstaller.exe
2018-11-30 09:00 - 2018-11-30 09:00 - 000872861 _____ C:\Users\Adi\Downloads\received_196976517872157.mp4
2018-11-29 21:36 - 2018-11-29 21:36 - 002630637 _____ C:\Users\Adi\Downloads\OptiFine_1.13.2_HD_U_E4 (1).jar
2018-11-25 00:44 - 2018-11-25 00:44 - 000000000 ____D C:\Users\Marcin\AppData\Roaming\Nero
2018-11-23 01:47 - 2018-11-23 01:47 - 001422402 _____ C:\Users\Adi\Downloads\Reklama kremu corega.mp4
2018-11-23 01:09 - 2018-11-23 01:09 - 006042718 _____ C:\Users\Adi\Downloads\BLIK BLIK PRZELEW NA TELEFON W MIG (1).mp4
2018-11-22 23:36 - 2018-11-22 23:36 - 001328822 _____ C:\Users\Adi\Downloads\POXIPOL® to naprawi - Reklama TV Łódka 30sek.mp4
2018-11-22 23:32 - 2018-11-22 23:32 - 003973637 _____ C:\Users\Adi\Downloads\TADAM® reklama TV 30.mp4
2018-11-22 23:21 - 2018-11-22 23:21 - 004698942 _____ C:\Users\Adi\Downloads\Dezaftan - spot telewizyjny - udźwiękowienie.mp4
2018-11-22 23:13 - 2018-11-22 23:13 - 005464034 _____ C:\Users\Adi\Downloads\Ultrablanc - ultra białe zęby - reklama telewizyjna.mp4
2018-11-22 23:08 - 2018-11-22 23:08 - 005399059 _____ C:\Users\Adi\Downloads\Apart.TV - Pearl Anniversary - spot 30 sek. - 2013.mp4
2018-11-22 23:02 - 2018-11-22 23:02 - 001456589 _____ C:\Users\Adi\Downloads\Red Bull - Drakula - Reklama Telewizyjna PL.mp4
2018-11-22 23:00 - 2018-11-22 23:00 - 003996537 _____ C:\Users\Adi\Downloads\Co się stanie gdy Oreo dam... [PL] - Reklama 2017.mp4
2018-11-22 22:52 - 2018-11-22 22:52 - 006454481 _____ C:\Users\Adi\Downloads\Reklamy Avon Luminata - Wrzesien 2018.mp4
2018-11-22 22:51 - 2018-11-22 22:51 - 003659934 _____ C:\Users\Adi\Downloads\BLIK BLIK PRZELEW NA TELEFON W MIG.mp4
2018-11-22 22:44 - 2018-11-22 22:44 - 000000000 ____D C:\Users\Adi\AppData\Roaming\Nero
2018-11-22 22:44 - 2018-11-22 22:44 - 000000000 ____D C:\Users\Adi\AppData\Local\Ahead
2018-11-22 22:43 - 2018-12-06 13:20 - 000001024 _____ C:\Users\Adi\.rnd
2018-11-22 22:43 - 2018-11-22 22:43 - 000000026 _____ C:\WINDOWS\Irremote.ini
2018-11-22 22:42 - 2018-12-06 13:20 - 000000000 ____D C:\ProgramData\Nero
2018-11-22 22:42 - 2018-11-22 22:42 - 000000000 ____D C:\Program Files (x86)\Nero
2018-11-22 22:38 - 2018-11-22 22:38 - 004790714 _____ C:\Users\Adi\Downloads\Lubella. Najlepsze ze zboża.mp4
2018-11-22 22:36 - 2018-11-22 23:36 - 000000000 ____D C:\Users\Adi\Desktop\REKLAMY - TECHNIKI
2018-11-22 22:36 - 2018-11-22 22:36 - 003718237 _____ C:\Users\Adi\Downloads\Dawtona - Witajcie Ulubione - 30 s.mp4
2018-11-22 22:30 - 2018-11-22 22:30 - 002731330 _____ C:\Users\Adi\Downloads\video-1542921074.mp4
2018-11-22 19:07 - 2018-11-22 19:07 - 000000000 ____D C:\ProgramData\DigitalWave.ApplicationUpdater_files
2018-11-22 19:06 - 2018-11-22 19:13 - 000000000 ____D C:\Users\Adi\AppData\Roaming\DVDVideoSoft
2018-11-22 19:06 - 2018-11-22 19:06 - 035312816 _____ (Digital Wave Ltd ) C:\Users\Adi\Downloads\FreeYouTubeDownload_4.1.87.1005_r.exe
2018-11-22 19:06 - 2018-11-22 19:06 - 000000000 ____D C:\Program Files (x86)\FreeCodecPack
2018-11-22 18:56 - 2018-12-08 11:51 - 000000000 ____D C:\ProgramData\Card
2018-11-22 18:47 - 2018-11-22 18:48 - 377190544 _____ (Nero AG) C:\Users\Adi\Downloads\Nero_Standard2018-19.0.10100.exe
2018-11-20 15:10 - 2018-11-20 15:10 - 000613297 _____ C:\Users\Adi\Downloads\2018polski PP klucz.pdf
2018-11-14 21:08 - 2018-11-17 16:17 - 000000000 ____D C:\Users\Adi\Documents\ETS2MP
2018-11-14 21:06 - 2018-11-18 21:23 - 000000000 ____D C:\ProgramData\TruckersMP
2018-11-14 21:06 - 2018-11-14 21:06 - 000000636 _____ C:\Users\Public\Desktop\TruckersMP.lnk
2018-11-14 21:06 - 2018-11-14 21:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TruckersMP Launcher
2018-11-14 21:04 - 2018-11-14 21:04 - 000667351 _____ C:\Users\Adi\Downloads\launcher_1004.zip
2018-11-14 18:47 - 2018-12-07 12:51 - 000000000 ____D C:\Users\Adi\Documents\Euro Truck Simulator 2
2018-11-14 18:42 - 2018-11-14 18:42 - 000000202 _____ C:\Users\Adi\Desktop\Euro Truck Simulator 2.url
2018-11-12 22:29 - 2018-11-12 22:29 - 033003828 _____ C:\Users\Adi\Downloads\OpelAstraK_Beta_emirbardakci_com.scs
2018-11-12 22:01 - 2018-11-12 22:02 - 106911141 _____ C:\Users\Adi\Downloads\BMW X6 xDrive50i.rar
2018-11-12 21:25 - 2018-11-12 21:25 - 009988219 _____ C:\Users\Adi\Downloads\Toyota_Yaris_S_V1.rar

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-12-08 12:28 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-12-08 12:04 - 2018-02-28 22:10 - 000000000 ___RD C:\Users\Adi\Desktop\MICROSOFT OFFICE
2018-12-08 12:00 - 2018-06-03 22:45 - 001964594 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-12-08 12:00 - 2018-04-12 16:51 - 000853698 _____ C:\WINDOWS\system32\perfh015.dat
2018-12-08 12:00 - 2018-04-12 16:51 - 000186806 _____ C:\WINDOWS\system32\perfc015.dat
2018-12-08 12:00 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
2018-12-08 11:57 - 2018-06-03 22:48 - 000000000 ____D C:\Users\Adi\AppData\Local\LogMeIn Hamachi
2018-12-08 11:56 - 2018-07-20 18:34 - 000000000 ____D C:\Users\Adi\AppData\Local\PasswordSafe
2018-12-08 11:55 - 2018-06-03 22:57 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-12-08 11:54 - 2018-04-11 22:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-12-08 11:51 - 2018-08-31 10:59 - 000000000 ____D C:\Users\Adi\AppData\Roaming\FlvtoConverter
2018-12-08 10:26 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Common Files\system
2018-12-08 10:26 - 2018-02-28 17:51 - 000000000 ____D C:\Program Files\Microsoft Office
2018-12-08 10:26 - 2009-07-14 03:34 - 000000440 _____ C:\WINDOWS\win.ini
2018-12-08 10:25 - 2009-07-14 19:09 - 000000000 ____D C:\WINDOWS\ShellNew
2018-12-08 09:44 - 2017-08-05 02:11 - 000000000 ____D C:\Users\Adi\AppData\Roaming\uTorrent
2018-12-08 09:42 - 2018-06-03 22:36 - 000422336 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-12-08 00:45 - 2018-01-22 20:48 - 000000000 ____D C:\Users\Adi\AppData\Roaming\SA-MP Audio Plugin
2018-12-07 21:02 - 2018-06-03 22:36 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-12-07 16:36 - 2018-06-03 22:59 - 000000000 ____D C:\Users\Adi\AppData\Local\Packages
2018-12-07 16:01 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-12-07 15:58 - 2018-02-28 19:02 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-12-07 14:40 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-12-06 21:16 - 2017-10-06 12:01 - 000000000 ____D C:\Users\Adi\AppData\Roaming\.minecraft
2018-12-06 18:40 - 2017-05-27 13:04 - 000000000 ____D C:\Users\Adi\.gimp-2.8
2018-12-06 18:03 - 2017-05-27 13:09 - 000000000 ____D C:\Users\Adi\AppData\Local\gtk-2.0
2018-12-06 13:49 - 2017-08-25 01:30 - 000000000 ____D C:\Users\Adi\AppData\Local\Battle.net
2018-12-06 13:04 - 2018-06-03 21:49 - 000000000 ___DC C:\WINDOWS\Panther
2018-12-06 07:42 - 2018-06-03 22:57 - 000004690 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-12-06 07:42 - 2018-06-03 22:57 - 000004678 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-12-06 07:42 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-12-06 07:42 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-12-03 05:11 - 2018-06-03 22:48 - 000002444 _____ C:\Users\Adi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-12-03 05:11 - 2018-02-28 17:59 - 000000000 ___RD C:\Users\Adi\OneDrive
2018-12-02 22:02 - 2017-05-19 20:18 - 000000000 ____D C:\Users\Adi\AppData\Local\modloader
2018-12-02 22:02 - 2017-05-19 20:18 - 000000000 ____D C:\ProgramData\modloader
2018-12-02 20:05 - 2017-05-19 20:18 - 000000000 ____D C:\Users\Adi\Documents\GTA San Andreas User Files
2018-12-01 02:39 - 2018-06-03 22:48 - 000000000 ____D C:\Users\Adi
2018-11-30 16:02 - 2018-06-03 23:16 - 000000000 ____D C:\Users\Adi\AppData\Roaming\discord
2018-11-28 23:46 - 2018-07-20 20:15 - 000000069 _____ C:\Users\Adi\Desktop\Nowy dokument tekstowy.txt
2018-11-28 17:12 - 2018-06-03 22:57 - 000003994 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1495220256
2018-11-28 17:12 - 2017-05-19 19:57 - 000000000 ____D C:\Program Files\Opera
2018-11-25 12:20 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-11-25 11:43 - 2018-08-30 23:19 - 000000000 ____D C:\Users\Marcin\AppData\Local\LogMeIn Hamachi
2018-11-25 00:53 - 2018-08-30 23:27 - 000003372 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1962681985-163799491-3190242698-1003
2018-11-25 00:53 - 2018-08-30 23:25 - 000000000 ___RD C:\Users\Marcin\OneDrive
2018-11-25 00:53 - 2018-08-30 23:19 - 000002452 _____ C:\Users\Marcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-11-22 22:42 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\Cursors
2018-11-22 19:13 - 2018-07-21 02:07 - 000000000 ____D C:\Program Files (x86)\Betternet
2018-11-16 06:23 - 2018-06-03 22:57 - 000004210 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2018-11-14 09:28 - 2018-06-03 22:57 - 000004522 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2018-11-10 23:16 - 2018-08-30 23:23 - 000000000 ____D C:\Users\Marcin\AppData\Roaming\discord

==================== Pliki w katalogu głównym wybranych folderów =======

2017-10-26 12:46 - 2017-10-26 14:41 - 000000000 _____ () C:\ProgramData\srtf.dat
2018-08-31 10:59 - 2018-10-31 14:41 - 000041583 _____ () C:\Users\Adi\AppData\Roaming\downloads.json
2017-10-26 12:48 - 2017-10-26 12:55 - 000181760 _____ () C:\Users\Adi\AppData\Roaming\setup.dll
2018-12-06 18:03 - 2018-12-06 18:03 - 000002316 _____ () C:\Users\Adi\AppData\Local\recently-used.xbel
2017-10-26 14:46 - 2017-10-26 14:46 - 000007602 _____ () C:\Users\Adi\AppData\Local\Resmon.ResmonCfg
2018-03-11 22:39 - 2018-03-11 22:39 - 000000003 _____ () C:\Users\Adi\AppData\Local\updater.log
2018-03-11 22:39 - 2018-03-11 22:39 - 000000425 _____ () C:\Users\Adi\AppData\Local\UserProducts.xml

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


UWAGA: ==> Nie można uzyskać dostępu do BCD. 

LastRegBack: 2018-06-03 22:36

==================== Koniec  FRST.txt ============================