Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 24.02.2019 02 Uruchomiony przez Rafal (administrator) E7440 (25-02-2019 12:16:14) Uruchomiony z C:\Users\Rafal\Downloads Załadowane profile: Rafal (Dostępne profile: Rafal) Platform: Windows 8.1 Pro (Update) (X64) Język: Polski (Polska) Domyślna przeglądarka: Chrome Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Broadcom Corporation -> Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe (Broadcom Corporation -> Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\HidMonitorSvc.exe (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe () [Brak podpisu cyfrowego] C:\Windows\SysWOW64\srvany.exe (TODO: <公司名>) [Brak podpisu cyfrowego] C:\Windows\SysWOW64\SDIOAssist.exe (Sierra Wireless, Inc. -> Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Utils\SwiService.exe (TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (ALPS ELECTRIC CO., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (ALPS ELECTRIC CO., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxHK.exe (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Windows Hardware Compatibility Publisher -> BayHubTech/O2Micro International) C:\Windows\System32\drivers\o2flash.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [773760 2016-10-20] (ALPS ELECTRIC CO., LTD. -> Alps Electric Co., Ltd.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8466136 2015-04-30] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1395056 2015-04-20] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [609200 2015-03-01] (Waves Inc -> Waves Audio Ltd.) HKLM\\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe" HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1203856 2017-06-26] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA HKU\S-1-5-21-3899328251-438535784-1217538064-1001\...\MountPoints2: {899fe5e1-d476-11e8-825c-0c8bfdb681e9} - "V:\SETUP.EXE" HKU\S-1-5-21-3899328251-438535784-1217538064-1001\...\MountPoints2: {be9b9bf9-f8c3-11e8-8286-0c8bfdb681e9} - "V:\autorun.exe" HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.119\Installer\chrmstp.exe [2019-02-22] (Google LLC -> Google Inc.) IFEO\notepad.exe: [Debugger] "C:\Program Files\Notepad2\Notepad2.exe" /z AlternateShell: GroupPolicy: Ograniczenia - Windows Defender <==== UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{5490C4DE-6396-444F-B3EA-DACE52B3D790}: [NameServer] 194.204.152.34,8.8.8.8 Tcpip\..\Interfaces\{5490C4DE-6396-444F-B3EA-DACE52B3D790}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{7FFBFCD0-DFB3-4254-86C7-F407A4532100}: [DhcpNameServer] 10.2.41.16 Internet Explorer: ================== HKU\S-1-5-21-3899328251-438535784-1217538064-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_201\bin\ssv.dll [2019-01-25] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-01-25] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\ssv.dll [2019-01-25] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-01-25] (Oracle America, Inc. -> Oracle Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2018-03-14] (Microsoft Corporation -> Microsoft Corporation) FireFox: ======== FF Plugin: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-01-25] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-01-25] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [Brak pliku] FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [Brak pliku] FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-01-25] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-01-25] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc -> Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc -> Google Inc.) Chrome: ======= CHR NewTab: Default -> Active:"chrome-extension://dpjamkmjmigaoobjbekmfgabipmfilij/empty_ntp.html" CHR Session Restore: Default -> [funkcja włączona] CHR Profile: C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default [2019-02-25] CHR Extension: (Prezentacje) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-10-19] CHR Extension: (Dokumenty) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-10-19] CHR Extension: (Dysk Google) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-19] CHR Extension: (YouTube) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-10-19] CHR Extension: (uBlock Origin) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2019-02-15] CHR Extension: (Empty New Tab Page) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjamkmjmigaoobjbekmfgabipmfilij [2018-10-20] CHR Extension: (Full Page Screen Capture) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2018-10-20] CHR Extension: (Arkusze) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-10-19] CHR Extension: (Nano Defender) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggolfgbegefeeoocgjbmkembbncoadlb [2019-02-24] CHR Extension: (Dokumenty Google offline) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-10-19] CHR Extension: (LastPass: Free Password Manager) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2019-02-01] CHR Extension: (Śledzenie cen AliExpress - AliPrice Asystent) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\hihlaoogegdjakmdbpbilijdghoggkim [2019-02-19] CHR Extension: (Backspace to go Back) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlffgllnjjkheddehpolbanogdeaogbc [2018-10-23] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-10-19] CHR Extension: (Gmail) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-10-19] CHR Extension: (Chrome Media Router) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-02-15] CHR Extension: (History Trends Unlimited) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnmchffiealhkdloeffcdnbgdnedheme [2019-01-27] ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 ApHidMonitorService; C:\Program Files\DellTPad\HidMonitorSvc.exe [104744 2016-10-20] (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) S3 dcpm-notify; C:\Program Files\Dell\CommandPowerManager\NotifyService.exe [86048 2017-08-16] (Dell Inc -> Dell Inc.) S3 Dell.CommandPowerManager.Service; C:\Windows\system32\dllhost.exe /Processid:{824A52BE-4412-4CBC-BA79-68206E83A969} [19264 2014-11-21] (Microsoft Windows -> Microsoft Corporation) S3 Dell.CommandPowerManager.Service; C:\Windows\SysWOW64\dllhost.exe /Processid:{824A52BE-4412-4CBC-BA79-68206E83A969} [17216 2014-11-21] (Microsoft Windows -> Microsoft Corporation) R2 ibtsiva; C:\Windows\system32\ibtsiva.exe [541896 2018-05-15] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [343016 2018-04-26] (Intel Corporation -> Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [732448 2017-02-24] (Intel(R) Trust Services -> Intel(R) Corporation) S2 Intel(R) TPM Provisioning Service; C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe [548648 2017-02-24] (Intel(R) Trust Services -> Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [197264 2017-06-26] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) R2 O2FLASH; C:\Windows\System32\drivers\o2flash.exe [65536 2014-03-07] (Microsoft Windows Hardware Compatibility Publisher -> BayHubTech/O2Micro International) R2 O2SDIOAssist; C:\Windows\SysWOW64\srvany.exe [8192 2012-03-09] () [Brak podpisu cyfrowego] R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [291032 2014-08-18] (Realtek Semiconductor Corp -> Realtek Semiconductor) R2 SwiService; C:\Program Files (x86)\Sierra Wireless Inc\Utils\SWIService.exe [792840 2015-07-02] (Sierra Wireless, Inc. -> Sierra Wireless, Inc.) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11786992 2018-11-14] (TeamViewer GmbH -> TeamViewer GmbH) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation) ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 AMTFLASH; C:\Windows\system32\drivers\AmtFlash.sys [74528 2011-09-07] (Amt-Cartech Ltd -> Amt Cartech Ltd) R3 cvusbdrv; C:\Windows\System32\Drivers\cvusbdrv.sys [58464 2016-08-30] (Broadcom Corporation -> Broadcom Corporation) R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-24] (Microsoft Windows Hardware Compatibility Publisher -> OSR Open Systems Resources, Inc.) S3 e1dexpress; C:\Windows\system32\DRIVERS\e1d64x64.sys [555496 2017-03-19] (Intel(R) INTELND1617 -> Intel Corporation) S3 FTDIBUS; C:\Windows\system32\drivers\ftdibus.sys [129456 2017-08-24] (Future Technology Devices International Ltd -> Future Technology Devices International Ltd.) S3 FTSER2K; C:\Windows\system32\drivers\ftser2k.sys [89800 2017-08-24] (Future Technology Devices International Ltd -> Future Technology Devices International Ltd.) S3 ggsomc; C:\Windows\System32\drivers\ggsomc.sys [30424 2014-03-25] (Sony Mobile Communications AB -> Sony Mobile Communications) S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2018-11-23] (Microsoft Windows Hardware Compatibility Publisher -> LogMeIn Inc.) R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [145424 2018-05-15] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) R3 IntcAzAudAddService; C:\Windows\system32\drivers\RTDVHD64.sys [2532056 2015-04-30] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.) R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3526400 2017-03-09] (Intel Corporation-Wireless Connectivity Solutions -> Intel Corporation) S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation-Mobile Wireless Group -> Intel Corporation) R3 O2FJ2RDR; C:\Windows\System32\drivers\O2FJ2w8x64.sys [210616 2014-05-14] (O2Micro -> BayHubTech/O2Micro ) R0 stdcfltn; C:\Windows\System32\DRIVERS\stdcfltn.sys [22168 2012-07-13] (STMicroelectronics -> ST Microelectronics) R3 ST_ACCEL; C:\Windows\system32\DRIVERS\ST_Accel.sys [93872 2014-04-21] (STMicroelectronics -> STMicroelectronics) S3 swg3kser05; C:\Windows\system32\DRIVERS\swg3kser05.sys [276720 2015-07-02] (Sierra Wireless, Inc. -> Sierra Wireless Incorporated) R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [213216 2018-10-15] (Oracle Corporation -> Oracle Corporation) R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [223000 2018-10-15] (Oracle Corporation -> Oracle Corporation) S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [156568 2018-10-15] (Oracle Corporation -> Oracle Corporation) S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation) S3 wmbclass; C:\Windows\System32\drivers\wmbclass.sys [267264 2017-12-10] (Microsoft Windows -> Microsoft Corporation) S3 cpuz146; \??\C:\Windows\temp\cpuz146\cpuz146_x64.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-02-25 12:16 - 2019-02-25 12:16 - 000020103 _____ C:\Users\Rafal\Downloads\FRST.txt 2019-02-25 12:15 - 2019-02-25 12:16 - 000000000 ____D C:\FRST 2019-02-25 12:15 - 2019-02-25 12:15 - 002433536 _____ (Farbar) C:\Users\Rafal\Downloads\FRST64.exe 2019-02-24 23:57 - 2019-02-24 23:57 - 000000118 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2019-02-24 22:40 - 2019-02-24 22:40 - 003448880 _____ C:\Users\Rafal\Downloads\avg_remover_slt (1).exe 2019-02-24 22:14 - 2019-02-24 22:15 - 000295520 _____ (Kaspersky Lab ZAO) C:\Users\Rafal\Downloads\salitykiller.exe 2019-02-24 21:06 - 2019-02-24 21:06 - 001048576 _____ C:\Users\Rafal\Downloads\06A906032AC 0004.Bin 2019-02-24 20:47 - 2019-02-24 20:47 - 007853063 _____ C:\MPPS.7z 2019-02-24 20:17 - 2019-02-24 20:17 - 000524288 _____ C:\Users\Rafal\Desktop\06A906032AC.bin 2019-02-23 18:44 - 2019-02-23 18:44 - 000098304 _____ (Hewlett-Packard Company) C:\Users\Rafal\Downloads\HP_USB_Disk_Storage_Format_Tool_2.2.3(dobreprogramy.pl).exe 2019-02-23 18:40 - 2018-11-29 10:48 - 1682029766 _____ C:\Users\Rafal\Desktop\Autodata.v3.41.PL-USER.rar 2019-02-23 18:40 - 2017-09-23 11:59 - 001200789 _____ (www.startisback.com) C:\Users\Rafal\Desktop\StartIsBack 1.7.6 Patched for Windows 8.1.exe 2019-02-23 18:29 - 2019-02-23 18:29 - 000000060 _____ C:\Users\Rafal\Desktop\asd.txt 2019-02-22 12:34 - 2019-02-22 12:34 - 010617559 _____ C:\Users\Rafal\Downloads\OpenSC-win64_0.19.0.msi 2019-02-22 12:34 - 2019-02-22 12:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenSC Project 2019-02-22 12:34 - 2019-02-22 12:34 - 000000000 ____D C:\Program Files\OpenSC Project 2019-02-22 12:18 - 2019-02-22 12:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JW Secure 2019-02-22 12:18 - 2019-02-22 12:18 - 000000000 ____D C:\Program Files (x86)\JW Secure 2019-02-22 12:17 - 2019-02-22 12:17 - 001251420 _____ C:\Users\Rafal\Downloads\SmartUtil.zip 2019-02-22 11:07 - 2019-02-23 18:28 - 000000000 ____D C:\Users\Rafal\Desktop\Nowy folder 2019-02-22 01:39 - 2019-02-22 01:39 - 001048576 _____ C:\Users\Rafal\Desktop\Audi A3 1.8T AUQ 180HP 06A906032BJ 0261206892 360288.ori 2019-02-21 09:11 - 2019-02-21 09:11 - 000076929 _____ C:\Users\Rafal\Downloads\Narcos.S03.MULTi.720p.WEB-DL.x264.PACK-PSiG.torrent 2019-02-19 15:25 - 2019-02-19 15:25 - 000000000 ____D C:\Users\Rafal\Desktop\CD1 2019-02-17 22:47 - 2019-02-17 22:49 - 000000000 ____D C:\Users\Rafal\AppData\Roaming\Winamp 2019-02-17 22:47 - 2019-02-17 22:47 - 012504056 _____ C:\Users\Rafal\Downloads\2019.02.16-22;55-Winamp.rar 2019-02-17 22:47 - 2019-02-17 22:47 - 000000991 _____ C:\Users\Public\Desktop\Winamp.lnk 2019-02-17 22:47 - 2019-02-17 22:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp 2019-02-17 22:47 - 2019-02-17 22:47 - 000000000 ____D C:\Program Files (x86)\Winamp 2019-02-15 14:47 - 2019-02-06 03:07 - 003323392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2019-02-15 14:47 - 2019-02-06 02:43 - 003616768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2019-02-15 14:47 - 2019-02-06 01:53 - 002780160 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2019-02-15 14:47 - 2019-02-06 01:44 - 002464256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2019-02-15 14:47 - 2019-01-26 02:02 - 025736192 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2019-02-15 14:47 - 2019-01-26 01:38 - 002902528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2019-02-15 14:47 - 2019-01-26 01:32 - 005778944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2019-02-15 14:47 - 2019-01-26 01:27 - 020279808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2019-02-15 14:47 - 2019-01-26 01:24 - 000790016 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2019-02-15 14:47 - 2019-01-26 01:03 - 002295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2019-02-15 14:47 - 2019-01-26 00:46 - 015283712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2019-02-15 14:47 - 2019-01-26 00:34 - 004858880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2019-02-15 14:47 - 2019-01-26 00:34 - 004494336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2019-02-15 14:47 - 2019-01-26 00:29 - 013680640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2019-02-15 14:47 - 2019-01-26 00:22 - 001556480 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2019-02-15 14:47 - 2019-01-26 00:11 - 004386304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2019-02-15 14:47 - 2019-01-26 00:08 - 001331200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2019-02-15 14:47 - 2019-01-12 02:36 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll 2019-02-15 14:47 - 2019-01-12 02:35 - 000044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll 2019-02-15 14:47 - 2019-01-09 07:36 - 001901688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2019-02-15 14:47 - 2019-01-09 07:27 - 002533920 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2019-02-15 14:47 - 2019-01-09 07:24 - 007371512 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2019-02-15 14:47 - 2019-01-09 04:34 - 001755136 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll 2019-02-15 14:47 - 2019-01-09 04:34 - 000134656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll 2019-02-15 14:47 - 2019-01-09 04:21 - 001493504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll 2019-02-15 14:47 - 2019-01-09 04:21 - 000102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll 2019-02-15 14:47 - 2019-01-08 05:54 - 000032896 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2019-02-15 14:47 - 2019-01-08 02:22 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll 2019-02-15 14:47 - 2019-01-08 02:22 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll 2019-02-15 14:47 - 2019-01-05 18:48 - 004168704 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2019-02-15 14:47 - 2019-01-05 18:47 - 000684032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2019-02-15 14:47 - 2019-01-05 18:46 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2019-02-15 14:47 - 2018-12-27 18:57 - 000805376 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2019-02-15 14:47 - 2018-12-27 17:30 - 000626176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2019-02-15 14:47 - 2018-12-02 11:08 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll 2019-02-15 14:47 - 2018-12-01 17:44 - 000151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll 2019-02-15 14:47 - 2018-10-12 14:19 - 000998480 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2019-02-15 14:46 - 2019-01-26 01:36 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2019-02-15 14:46 - 2019-01-26 01:06 - 000498176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2019-02-15 14:46 - 2019-01-26 00:57 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2019-02-15 14:46 - 2019-01-26 00:56 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2019-02-15 14:46 - 2019-01-26 00:48 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2019-02-15 14:46 - 2019-01-26 00:36 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2019-02-15 14:46 - 2019-01-26 00:31 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2019-02-15 14:46 - 2019-01-26 00:12 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2019-02-15 14:46 - 2019-01-26 00:06 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2019-02-15 14:46 - 2019-01-12 02:18 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll 2019-02-15 14:46 - 2018-12-08 17:01 - 000513376 _____ C:\Windows\SysWOW64\locale.nls 2019-02-15 14:46 - 2018-12-08 17:01 - 000513376 _____ C:\Windows\system32\locale.nls 2019-02-09 13:17 - 2019-02-09 13:39 - 000000000 ____D C:\Users\Rafal\Downloads\EVC 2019-02-09 13:15 - 2019-02-09 13:15 - 000000000 ____D C:\Users\Rafal\Downloads\Winamp PRO 5.666 Build 3516 FULL + Serials [ThumperDC] 2019-02-08 16:34 - 2019-02-08 16:34 - 000257589 _____ C:\Users\Rafal\Downloads\final_cut_2_3_4.exe 2019-02-08 00:56 - 2019-02-08 00:56 - 001278132 _____ C:\Users\Rafal\Downloads\flac-1.3.2-win.zip 2019-02-08 00:56 - 2019-02-08 00:56 - 000776192 _____ C:\Users\Rafal\Downloads\flac-1.3.2.tar.xz 2019-02-08 00:36 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2019-02-08 00:36 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2019-02-08 00:35 - 2019-02-08 00:35 - 012892432 _____ (Nullsoft, Inc.) C:\Users\Rafal\Downloads\winamp5666_full_pl-pl.exe 2019-02-07 12:24 - 2019-02-07 12:25 - 020354917 _____ C:\Users\Rafal\Downloads\prb.zip 2019-02-06 00:54 - 2019-02-06 00:59 - 000000000 ____D C:\Users\Rafal\Downloads\ECU Tuning Files + WinOLS XP 2019-02-06 00:53 - 2019-02-06 00:53 - 000016158 _____ C:\Users\Rafal\Downloads\ecu tuning files winols xp.torrent 2019-02-04 14:38 - 2019-02-04 14:38 - 002660566 _____ C:\Users\Rafal\Downloads\1.8T.pdf 2019-02-04 00:31 - 2019-02-04 00:31 - 000536594 _____ C:\Users\Rafal\Downloads\hello.dcsms.bungkus-1.2-mirror-catatandroid.com.apk 2019-02-04 00:31 - 2019-02-04 00:31 - 000536594 _____ C:\Users\Rafal\Downloads\hello.dcsms.bungkus-1.2-mirror-catatandroid.com (1).apk 2019-02-04 00:10 - 2019-02-04 00:10 - 000000000 ____D C:\Users\Rafal\Documents\MyTheme 2019-02-03 16:40 - 2011-05-16 10:22 - 035622745 _____ C:\Users\Rafal\Desktop\ENG#1_Audi_R4-5V_T_132kW_ME7_jib_W.pdf 2019-02-03 01:59 - 2019-02-03 01:59 - 000000000 ____D C:\Users\Rafal\Desktop\MapAnalyzer 2019-02-02 22:05 - 2018-11-06 08:55 - 000000000 ____D C:\Users\Rafal\Desktop\SppExtComObjPatcher-kms2 2019-02-02 20:40 - 2019-02-15 10:19 - 000000000 ____D C:\Users\Rafal\Desktop\1.8t 2019-02-02 20:39 - 2019-02-02 20:39 - 000000000 ____D C:\Users\Rafal\Desktop\HS_HJ_KP_HP_AL_AM 2019-02-02 14:43 - 2019-02-02 14:44 - 000000000 ____D C:\Users\Rafal\Desktop\OSZUST ==================== Jeden miesiąc (zmodyfikowane) ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-02-25 12:14 - 2014-11-21 00:03 - 001817498 _____ C:\Windows\system32\PerfStringBackup.INI 2019-02-25 12:14 - 2014-11-20 23:04 - 000801022 _____ C:\Windows\system32\perfh015.dat 2019-02-25 12:14 - 2014-11-20 23:04 - 000160728 _____ C:\Windows\system32\perfc015.dat 2019-02-25 12:14 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\Inf 2019-02-25 12:08 - 2018-10-20 00:53 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2019-02-25 12:08 - 2018-10-20 00:46 - 000003758 _____ C:\Windows\System32\Tasks\AutoKMS 2019-02-25 12:08 - 2018-10-19 23:34 - 000000000 __SHD C:\Users\Rafal\IntelGraphicsProfiles 2019-02-25 12:08 - 2013-08-22 15:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2019-02-25 00:08 - 2013-08-22 14:25 - 000000233 _____ C:\Windows\system.ini 2019-02-24 22:17 - 2019-01-05 01:18 - 000000000 ____D C:\Program Files\totalcmd 2019-02-24 22:17 - 2018-10-20 13:22 - 000000000 ____D C:\Program Files\ShareX 2019-02-24 21:52 - 2018-10-20 01:03 - 000000000 ____D C:\Program Files\Notepad++ 2019-02-24 21:52 - 2018-10-20 00:35 - 000000000 ____D C:\Program Files\MPC-HC 2019-02-24 21:40 - 2018-10-20 00:38 - 000000000 ____D C:\Program Files\7-Zip 2019-02-24 21:15 - 2019-01-04 23:32 - 000000000 ____D C:\ProgramData\TEMP 2019-02-24 20:55 - 2018-10-20 15:44 - 000000000 ____D C:\Users\Rafal\Documents\ShareX 2019-02-24 20:48 - 2019-01-05 00:55 - 000000000 ____D C:\Program Files\EVC 2019-02-24 20:41 - 2018-10-20 01:02 - 000023992 _____ C:\Users\Rafal\AppData\Roaming\Notepad2.ini 2019-02-24 16:45 - 2018-11-10 21:28 - 000001804 __RSH C:\ProgramData\ntuser.pol 2019-02-24 14:44 - 2018-12-29 20:38 - 000000000 ____D C:\MPPS 2019-02-24 13:56 - 2019-01-04 22:44 - 000000000 ____D C:\Users\Rafal\Documents\Autodata 2019-02-23 20:57 - 2018-10-20 18:06 - 000000000 ____D C:\Users\Rafal\Desktop\YT-DOWNLOAD 2019-02-23 18:39 - 2018-10-19 23:14 - 000003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3899328251-438535784-1217538064-1001 2019-02-23 18:28 - 2018-10-21 12:46 - 000000000 ____D C:\Users\Rafal\.VirtualBox 2019-02-22 03:37 - 2018-10-24 16:24 - 000000000 ____D C:\Windows\system32\MRT 2019-02-22 03:35 - 2018-10-24 16:24 - 129330784 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2019-02-22 01:15 - 2018-10-19 23:35 - 000002250 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-02-22 01:15 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\rescache 2019-02-21 23:30 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\Registration 2019-02-21 17:13 - 2018-10-20 00:35 - 000004128 _____ C:\Windows\System32\Tasks\CCleaner Update 2019-02-21 09:46 - 2018-10-20 20:52 - 000000000 ____D C:\Users\Rafal\AppData\Roaming\uTorrent 2019-02-18 14:28 - 2018-11-28 10:45 - 000000000 ____D C:\Users\Rafal\Desktop\foobar2000 2019-02-15 15:22 - 2013-08-22 15:44 - 000420416 _____ C:\Windows\system32\FNTCACHE.DAT 2019-02-15 15:21 - 2013-08-22 16:20 - 000000000 ____D C:\Windows\CbsTemp 2019-02-15 15:19 - 2018-10-20 16:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2019-02-15 11:29 - 2018-10-19 23:09 - 000000000 ____D C:\Users\Rafal\AppData\Local\VirtualStore 2019-02-15 09:47 - 2019-01-11 20:38 - 000000000 ____D C:\Users\Rafal\Desktop\moje 1.8t 2019-02-15 09:46 - 2019-01-12 00:27 - 000000000 ____D C:\Users\Rafal\Desktop\AUQ 032HN 2019-02-15 09:45 - 2019-01-04 22:39 - 000000000 ____D C:\Users\Rafal\Desktop\VAG 2019-02-08 17:34 - 2018-10-20 00:53 - 000000000 ____D C:\Users\Rafal\AppData\Roaming\TeamViewer 2019-02-07 13:54 - 2018-10-20 00:36 - 000000000 ____D C:\Users\Rafal\AppData\Roaming\MPC-HC 2019-02-07 01:42 - 2018-10-20 00:35 - 000002786 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2019-02-07 01:41 - 2018-10-23 22:14 - 000000000 ____D C:\Windows\Minidump 2019-02-07 01:39 - 2019-01-04 22:33 - 000000000 ___RD C:\Users\Rafal\Desktop\STUDIA 2019-02-07 01:36 - 2018-10-21 18:25 - 000000000 ____D C:\Users\Rafal\VirtualBox VMs 2019-02-07 01:36 - 2018-10-19 23:09 - 000000000 ____D C:\Users\Rafal 2019-02-05 10:21 - 2018-10-20 00:35 - 000000000 ____D C:\Program Files\CCleaner 2019-02-04 00:04 - 2019-01-12 10:41 - 000000000 ____D C:\Program Files\Java 2019-02-04 00:04 - 2019-01-12 10:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2019-02-02 21:07 - 2018-10-24 18:17 - 000835480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2019-02-02 21:07 - 2018-10-24 18:17 - 000179600 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl ==================== Pliki w katalogu głównym wybranych folderów ======= 2019-01-13 14:25 - 2019-01-13 14:25 - 000000320 _____ () C:\Users\Rafal\AppData\Roaming\logfile.txt 2018-10-20 01:02 - 2019-02-24 20:41 - 000023992 _____ () C:\Users\Rafal\AppData\Roaming\Notepad2.ini 2018-11-05 22:40 - 2018-12-07 13:44 - 000000600 _____ () C:\Users\Rafal\AppData\Local\PUTTY.RND 2019-01-08 12:34 - 2019-01-08 12:34 - 000000032 RSHOT () C:\Users\Rafal\AppData\Local\t80.dat ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\dllhost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\dllhost.exe => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2019-02-22 03:35 ==================== Koniec FRST.txt ============================