Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:30-08-2015
Uruchomiony przez admin (administrator)  ADMIN-KOMPUTER (31-08-2015 16:35:19)
Uruchomiony z C:\Users\admin\Desktop\1
Załadowane profile: admin (Dostępne profile: admin)
Platform: Windows 7 Home Premium (X64) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka nie została wykryta!)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-21] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-25] (CANON INC.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-12-20] (Intel Corporation)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKU\S-1-5-21-4085586262-2414536989-1598607991-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2015-07-27] (Google Inc.)
HKU\S-1-5-21-4085586262-2414536989-1598607991-1000\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-4085586262-2414536989-1598607991-1000\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [2899136 2015-08-19] (Valve Corporation)
HKU\S-1-5-21-4085586262-2414536989-1598607991-1000\...\Run: [GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-08-18] (Google Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2015-07-28]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci..)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{8B1F688D-F054-4615-8E3B-2C6BCF8B7F33}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{BDAE2B72-4628-42D3-BDD7-2E8B0E23C2B3}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=130854058241495833&GUID=FBB5DADD-B5C5-483E-92F7-45F8BDEABD29
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKU\S-1-5-21-4085586262-2414536989-1598607991-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-28] (Google Inc.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-28] (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-28] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-28] (Google Inc.)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-15] (CANON INC.)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-06-17] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-06-17] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-27] (Google Inc.)

Chrome: 
=======
CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Steam inventory helper) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2015-07-30]
CHR Extension: (Night Time In New York City) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnimonidkipnhnpgkhgliocfnnpgkhek [2015-07-30]
CHR Extension: (Chrome Web Store Payments) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-28]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-24] (NVIDIA Corporation)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-24] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-24] (NVIDIA Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-21] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-07-24] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47976 2015-07-03] (NVIDIA Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-08-31 14:39 - 2015-08-31 16:35 - 00000000 ____D C:\Users\admin\Desktop\1
2015-08-31 13:37 - 2015-08-31 13:37 - 00000000 ____D C:\Users\admin\Downloads\FRST-OlderVersion
2015-08-31 13:11 - 2015-08-31 13:11 - 01618432 _____ C:\Users\admin\Downloads\AdwCleaner.pl 5.004.exe
2015-08-30 15:07 - 2015-08-30 15:07 - 00001455 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-30 14:56 - 2015-08-30 14:58 - 00000000 ____D C:\ProgramData\LocalStorage
2015-08-30 14:53 - 2015-08-31 10:51 - 00000000 ____D C:\Users\admin\AppData\Roaming\ppslog
2015-08-30 14:53 - 2015-08-30 14:53 - 00000000 ____D C:\Users\admin\AppData\Roaming\QyGameClient
2015-08-30 14:53 - 2015-08-30 14:53 - 00000000 ____D C:\Users\admin\.android
2015-08-30 14:41 - 2015-08-31 16:35 - 00000000 ____D C:\FRST
2015-08-30 14:05 - 2015-08-30 14:05 - 00000000 ____D C:\Windows\SysWOW64\Flash
2015-08-30 14:04 - 2015-08-31 10:53 - 00000000 ____D C:\Users\admin\AppData\Local\Unity
2015-08-27 23:08 - 2015-08-27 23:08 - 00000048 _____ C:\Users\admin\Desktop\1.txt
2015-08-25 13:34 - 2015-08-25 13:34 - 00000000 ____D C:\Users\admin\AppData\Roaming\Jetdogs Studios
2015-08-23 00:38 - 2015-08-23 00:47 - 194223015 _____ C:\Users\admin\Documents\1.mp4
2015-08-22 15:20 - 2015-08-22 15:20 - 00000000 ____D C:\Users\admin\AppData\Roaming\Sony Creative Software Inc
2015-08-22 11:37 - 2015-08-22 11:37 - 00000000 ____D C:\Users\admin\AppData\Local\Sony
2015-08-22 11:37 - 2015-08-22 11:37 - 00000000 ____D C:\ProgramData\Sony
2015-08-22 11:36 - 2015-08-22 11:36 - 00001180 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Vegas Pro.lnk
2015-08-22 11:36 - 2015-08-22 11:36 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vegas Pro 12.0 (64-bit)
2015-08-22 11:36 - 2015-08-22 11:36 - 00000000 ____D C:\Program Files (x86)\Sony
2015-08-22 10:54 - 2015-08-22 13:41 - 00000000 ____D C:\Users\admin\AppData\Roaming\Sony
2015-08-21 01:11 - 2015-08-21 01:11 - 00000000 ____D C:\Users\admin\Documents\Adobe
2015-08-21 01:11 - 2015-08-21 01:11 - 00000000 ____D C:\Users\admin\AppData\Roaming\PACE Anti-Piracy
2015-08-21 01:11 - 2015-08-21 01:11 - 00000000 ____D C:\Users\admin\AppData\Local\PACE Anti-Piracy
2015-08-21 01:11 - 2015-08-21 01:11 - 00000000 ____D C:\ProgramData\PACE Anti-Piracy
2015-08-21 01:06 - 2015-08-21 01:06 - 00001075 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CS6.lnk
2015-08-21 01:06 - 2015-08-21 01:06 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-08-21 01:05 - 2015-08-21 01:05 - 00000973 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CS6.lnk
2015-08-21 01:04 - 2015-08-21 01:04 - 00000997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2015-08-21 01:04 - 2015-08-21 01:04 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2015-08-21 01:04 - 2015-08-21 01:04 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2015-08-21 01:04 - 2015-08-21 01:04 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2015-08-21 01:03 - 2015-08-21 01:06 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-08-21 00:59 - 2015-08-21 01:12 - 00000000 ____D C:\Users\admin\AppData\Local\Adobe
2015-08-21 00:59 - 2015-08-21 01:11 - 00000000 ____D C:\Users\admin\AppData\Roaming\Adobe
2015-08-21 00:59 - 2015-08-21 01:06 - 00000000 ____D C:\ProgramData\Adobe
2015-08-21 00:59 - 2015-08-21 00:59 - 00000000 ____D C:\Users\admin\AppData\Roaming\Macromedia
2015-08-20 14:39 - 2015-08-20 14:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-18 21:20 - 2015-08-18 21:30 - 00000000 ____D C:\Program Files (x86)\PicosmosTools
2015-08-18 21:06 - 2015-08-18 21:06 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2015-08-18 21:06 - 2015-08-18 21:06 - 00000000 ____D C:\Program Files (x86)\FormatFactory
2015-08-18 10:36 - 2015-08-18 10:36 - 00000000 ____D C:\Program Files (x86)\RocketDock
2015-08-14 11:11 - 2015-07-24 06:21 - 01756608 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-08-14 11:11 - 2015-07-24 06:21 - 01710568 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-08-14 11:11 - 2015-07-24 06:21 - 01423304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-08-14 11:11 - 2015-07-24 06:21 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-08-14 11:09 - 2015-07-03 06:28 - 00065896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-08-14 11:09 - 2015-07-03 06:28 - 00047976 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-08-13 20:12 - 2015-08-13 20:12 - 00000000 __RHD C:\Users\admin\AppData\Roaming\SecuROM
2015-08-13 11:21 - 2015-08-29 00:32 - 00000000 ____D C:\Users\admin\AppData\Roaming\Audacity
2015-08-13 11:21 - 2015-08-13 11:21 - 00001023 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2015-08-13 11:21 - 2015-08-13 11:21 - 00000000 ____D C:\Program Files (x86)\Audacity
2015-08-13 11:12 - 2015-08-13 11:12 - 05530560 _____ C:\Windows\SysWOW64\SpoonUninstall.exe
2015-08-13 11:12 - 2015-08-13 11:12 - 00016385 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp.dat
2015-08-13 11:12 - 2015-08-13 11:12 - 00014618 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp DSP Effects.dat
2015-08-13 11:12 - 2015-08-13 11:12 - 00000000 ____D C:\Program Files\dBpoweramp
2015-08-12 22:02 - 2015-08-12 22:02 - 00000040 ____H C:\6C011B113E50
2015-08-12 22:01 - 2015-08-23 00:51 - 00000000 ____D C:\Adobe Photoshop CS6 [by RED]
2015-08-12 21:58 - 2015-08-12 22:01 - 00000000 ____D C:\Users\admin\AppData\Local\Microsoft Games
2015-08-12 00:10 - 2015-08-29 00:32 - 00000000 ____D C:\Users\admin\AppData\Roaming\OBS
2015-08-12 00:06 - 2015-08-12 00:09 - 00000000 ____D C:\Program Files\OBS
2015-08-12 00:05 - 2015-08-12 00:05 - 00000000 ____D C:\Users\admin\AppData\Roaming\obs-studio
2015-08-09 12:57 - 2015-08-09 12:57 - 00000000 ____D C:\Games
2015-08-07 22:37 - 2015-08-07 22:37 - 00000000 ____D C:\Users\admin\AppData\Roaming\WinRAR
2015-08-07 22:36 - 2015-08-07 22:36 - 00000975 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2015-08-07 22:36 - 2015-08-07 22:36 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-07 22:36 - 2015-08-07 22:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-07 22:36 - 2015-08-07 22:36 - 00000000 ____D C:\Program Files\WinRAR
2015-08-05 12:56 - 2015-08-05 12:56 - 00002117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-08-05 12:56 - 2015-08-05 12:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2015-08-05 12:55 - 2015-08-05 12:56 - 00000000 ____D C:\Program Files\Microsoft Security Client
2015-08-05 07:37 - 2015-08-05 07:37 - 00000000 ____D C:\Program Files (x86)\64bit
2015-08-03 17:08 - 2015-08-30 14:04 - 00000000 ____D C:\Users\admin\AppData\Roaming\TS3Client
2015-08-03 17:08 - 2015-08-03 17:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-08-31 16:34 - 2015-07-27 13:51 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-31 16:34 - 2015-07-27 13:41 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-31 16:34 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-31 16:34 - 2009-07-14 06:51 - 00042499 _____ C:\Windows\setupact.log
2015-08-31 16:33 - 2015-07-30 00:37 - 00000000 ____D C:\Windows\Minidump
2015-08-31 16:32 - 2009-07-14 06:45 - 00009776 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-31 16:32 - 2009-07-14 06:45 - 00009776 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-31 15:47 - 2015-07-27 13:30 - 01117824 _____ C:\Windows\WindowsUpdate.log
2015-08-31 14:44 - 2015-07-29 16:26 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-08-31 14:43 - 2015-07-27 13:42 - 00662126 _____ C:\Windows\PFRO.log
2015-08-31 14:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\GroupPolicy
2015-08-31 13:51 - 2015-07-27 13:41 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-31 13:43 - 2015-07-29 16:24 - 00000000 ____D C:\AdwCleaner
2015-08-31 10:56 - 2009-07-14 19:55 - 00688628 _____ C:\Windows\system32\perfh015.dat
2015-08-31 10:56 - 2009-07-14 19:55 - 00131712 _____ C:\Windows\system32\perfc015.dat
2015-08-31 10:56 - 2009-07-14 07:13 - 01526834 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-30 15:07 - 2015-07-27 13:30 - 00001421 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-08-30 15:06 - 2009-07-14 06:45 - 04893272 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-30 14:57 - 2015-07-27 13:30 - 00000000 ____D C:\Users\admin\AppData\Local\VirtualStore
2015-08-30 14:53 - 2015-07-27 13:30 - 00000000 ____D C:\Users\admin
2015-08-30 14:39 - 2015-07-27 13:36 - 00060336 _____ C:\Users\admin\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-30 14:01 - 2015-07-30 18:00 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome
2015-08-30 14:01 - 2015-07-27 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-30 13:26 - 2015-07-29 00:08 - 00000000 ____D C:\ProgramData\yWinManProy
2015-08-30 13:02 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-08-30 02:04 - 2015-07-30 00:37 - 509901405 _____ C:\Windows\MEMORY.DMP
2015-08-25 13:34 - 2015-07-29 16:14 - 00027522 _____ C:\Windows\DirectX.log
2015-08-22 00:38 - 2015-07-29 00:00 - 00000000 ___RD C:\Kamil
2015-08-21 01:13 - 2015-07-31 10:37 - 00000000 ____D C:\Users\admin\AppData\Roaming\NVIDIA
2015-08-21 01:03 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-08-14 11:11 - 2015-07-27 13:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-08-14 11:11 - 2015-07-27 13:50 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-08-14 11:11 - 2015-07-27 13:49 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-14 11:11 - 2015-07-27 13:48 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-08-05 12:58 - 2015-07-29 00:14 - 00001912 _____ C:\Windows\epplauncher.mif
2015-08-05 12:54 - 2015-07-29 00:32 - 00000000 ____D C:\ProgramData\Panda Security
2015-08-05 12:53 - 2015-07-29 00:33 - 00000000 ____D C:\Users\admin\AppData\Roaming\Panda Security
2015-08-05 12:52 - 2015-07-29 00:32 - 00000000 ____D C:\Program Files (x86)\Panda Security
2015-08-03 17:08 - 2015-07-28 23:54 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-08-01 00:36 - 2015-07-29 15:51 - 00000000 ____D C:\ProgramData\CanonIJPLM

==================== Pliki w katalogu głównym wybranych folderów =======

2015-07-27 13:35 - 2015-07-27 13:35 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-08-22 09:47

==================== Koniec  FRST.txt ============================