Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:14-09-2015
Uruchomiony przez HYPER (administrator)  HYPER-KOMPUTER (14-09-2015 18:12:39)
Uruchomiony z C:\Users\HYPER\Desktop\Sentino
Załadowane profile: HYPER (Dostępne profile: HYPER & UpdatusUser & sunset & Administrator & Gość)
Platform: Microsoft Windows 7 Ultimate  (X86) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
() C:\Program Files\Clarus\Samsung SecretZone\MSSvc.exe
() C:\Windows\System32\PnkBstrA.exe
(StarWind Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(DT Soft Ltd) C:\Programy\DAEMON Tools Lite\DTLite.exe
(GG Network S.A.) C:\Users\HYPER\AppData\Local\GG\Application\gghub.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(GG Network S.A.) C:\Users\HYPER\AppData\Local\GG\Application\ggapp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(GG Network S.A.) C:\Users\HYPER\AppData\Local\GG\Application\ggdrive\ggdrive.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox 4.0 Beta 10\firefox.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12021464 2014-05-09] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5088456 2015-01-28] (ESET)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Run: [RGSC] => D:\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe [305064 2008-11-14] (Take-Two Interactive Software, Inc.)
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Run: [Google Update] => C:\Users\HYPER\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-14] (Google Inc.)
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Run: [AlcoholAutomount] => C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Run: [DAEMON Tools Lite] => C:\Programy\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Run: [GG] => C:\Users\HYPER\AppData\Local\GG\Application\gghub.exe [4078144 2015-04-21] (GG Network S.A.)
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Run: [AirDroid 3] => C:\Program Files\AirDroid\AirDroid.exe [6499328 2015-08-12] (Sand Studio)
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Policies\Explorer: [HideSCAHealth] 1
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [147456 2008-12-12] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{269D4EBB-3481-46C5-A504-9E0ECAA6E248}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://wyborcza.pl/0,0.html?p=139
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.firetab.org/?type=ds3hp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3231952852-421943317-2037577364-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=UP21DF&PC=UP21&dt=050313&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3231952852-421943317-2037577364-1000 -> {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = 
SearchScopes: HKU\S-1-5-21-3231952852-421943317-2037577364-1000 -> {ECBA0070-A9C2-4785-A9B3-AB79FA2F4BCD} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-23] (Oracle Corporation)
BHO: Brak nazwy -> {95B7759C-8C7F-4BF1-B163-73684A933233} ->  Brak pliku
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-23] (Oracle Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2014-03-27] (DVDVideoSoft Ltd.)
Toolbar: HKLM - Brak nazwy - {95B7759C-8C7F-4BF1-B163-73684A933233} -  Brak pliku
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_60-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0060-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_60-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_60-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.)

FireFox:
========
FF ProfilePath: C:\Users\HYPER\AppData\Roaming\Mozilla\Firefox\Profiles\wdw9r6i3.default-1394971919367
FF SelectedSearchEngine: Search
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-12] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1206147.dll [2013-11-25] (Adobe Systems, Inc.)
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.5.0\\npsitesafety.dll [Brak pliku]
FF Plugin: @esn/npbattlelog,version=2.3.1 -> C:\Program Files\Battlelog Web Plugins\2.3.1\npbattlelog.dll [Brak pliku]
FF Plugin: @esn/npbattlelog,version=2.4.0 -> C:\Program Files\Battlelog Web Plugins\2.4.0\npbattlelog.dll [Brak pliku]
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-23] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2012-12-01] (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2012-12-01] (NVIDIA Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [Brak pliku]
FF Plugin: @real.com/nprphtml5videoshim;version=12.0.1.609 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2011-01-03] (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [Brak pliku]
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [Brak pliku]
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: @onlive.com/OnLiveGameClientDetector,version=1.0.0 -> C:\Program Files\OnLive\Plugin\npolgdet.dll Brak pliku
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: @tools.google.com/Google Update;version=3 -> C:\Users\HYPER\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: @tools.google.com/Google Update;version=9 -> C:\Users\HYPER\AppData\Local\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\HYPER\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-06-30] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: electronicarts.com/GameFacePlugin -> C:\Users\HYPER\AppData\Roaming\Electronic Arts\Game Face\npGameFacePlugin.dll [2012-12-20] (Electronic Arts)
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll Brak pliku
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: pokki.com/PokkiDownloadHelper -> C:\Users\HYPER\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.2.0.78.dll [2013-07-12] (Pokki)
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: ubisoft.com/uplaypc -> D:\231312\datapack\orbit\npuplaypc.dll [2013-03-18] (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2011-01-03] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2011-01-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2011-01-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2011-01-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2011-01-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2011-01-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2011-01-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2011-01-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprjplug.dll [2011-01-03] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpjplug.dll [2011-01-03] (RealNetworks, Inc.)
FF SearchPlugin: C:\Users\HYPER\AppData\Roaming\Mozilla\Firefox\Profiles\wdw9r6i3.default-1394971919367\searchplugins\db1839da-d2e5-4470-96e1-7e3c1c774e5c.xml [2015-05-21]
FF Extension: PriceSparrow - C:\Users\HYPER\AppData\Roaming\Mozilla\Firefox\Profiles\c579hl8n.default-1373223264373\Extensions\extension@pricesparrow.com [2015-05-21]
FF Extension: PriceSparrow - C:\Users\HYPER\AppData\Roaming\Mozilla\Firefox\Profiles\wdw9r6i3.default-1394971919367\Extensions\extension@pricesparrow.com.xpi [2015-05-21]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-05-23]
FF HKLM\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff [2013-05-11]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.5.0.909
FF HKLM\...\Firefox\Extensions: [dnshelp@dnshelp.com] - C:\Users\HYPER\AppData\Roaming\Helper
FF Extension: Helper - C:\Users\HYPER\AppData\Roaming\Helper [2015-05-21]
FF HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff
StartMenuInternet: FIREFOX.EXE - C:\Users\sunset\AppData\Local\Mozilla Firefox\firefox.exe

Chrome: 
=======
CHR HomePage: Default -> hxxp://mysearch.avg.com?cid={7C921DC5-47CC-4E47-9DD4-097A5EC3854E}&mid=22fe57513d654551af4a297c33122e76-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=AVG&coid=avgtbavg&cmpid=&pr=pr&d=2014-03-15 16:41:09&v=18.1.5.512&pid=safeguard&sg=&sap=hp
CHR StartupUrls: Default -> "hxxp://mysearch.avg.com?cid={7C921DC5-47CC-4E47-9DD4-097A5EC3854E}&mid=22fe57513d654551af4a297c33122e76-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=AVG&coid=avgtbavg&cmpid=&pr=pr&d=2014-03-15 16:41:09&v=18.1.9.786&pid=safeguard&sg=&sap=hp"
CHR NewTab: Default -> "chrome-extension://ndibdjnfmopecpmkdieinmbadjfpblof/pages/newtab.html"
CHR DefaultSearchURL: Default -> hxxp://mysearch.avg.com/search?cid={7C921DC5-47CC-4E47-9DD4-097A5EC3854E}&mid=22fe57513d654551af4a297c33122e76-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-03-15 16:41:09&v=17.3.1.91&pid=safeguard&sg=&sap=dsp&q={searchTerms}
CHR DefaultSearchKeyword: Default -> mysearch.avg.com_
CHR DefaultNewTabURL: Default -> hxxps://mysearch.avg.com/chroment?espv=2&cid={7C921DC5-47CC-4E47-9DD4-097A5EC3854E}&mid=22fe57513d654551af4a297c33122e76-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=AVG&pr=fr&d=2014-03-15 16:41:09&v=18.1.0.443&pid=safeguard&sg=
CHR DefaultSuggestURL: Default -> hxxp://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR Plugin: (Native Client) - C:\Users\HYPER\AppData\Local\Google\Chrome\Application\44.0.2403.157\ppGoogleNaClPluginChrome.dll => Brak pliku
CHR Plugin: (Chrome PDF Viewer) - C:\Users\HYPER\AppData\Local\Google\Chrome\Application\44.0.2403.157\pdf.dll => Brak pliku
CHR Plugin: (Shockwave Flash) - C:\Users\HYPER\AppData\Local\Google\Chrome\Application\44.0.2403.157\gcswf32.dll => Brak pliku
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll => Brak pliku
CHR Plugin: (StartSearch Video plug-in) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\bildoibdboopgomcbiplincneeicgipj\1.3_0\chvsharetvplg.dll => Brak pliku
CHR Plugin: (StartSearch Video plug-in) - C:\Program Files\Mozilla Firefox\plugins\npvsharetvplg.dll => Brak pliku
CHR Plugin: (Skype Toolbars) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll => Brak pliku
CHR Plugin: (Java Deployment Toolkit 6.0.220.4) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U22) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Winamp Application Detector) - C:\Program Files\Mozilla Firefox\plugins\npwachk.dll => Brak pliku
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files\Battlelog Web Plugins\0.80.0\npesnlaunch.dll => Brak pliku
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll => Brak pliku
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll => Brak pliku
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Profile: C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-18]
CHR Extension: (Google Search) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-18]
CHR Extension: (DNSHelper) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaffpnfojcdkcdimoobneboagdnnenbo [2015-05-21]
CHR Extension: (Skype Click to Call) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2011-08-17]
CHR Extension: (Tiësto) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmeobddjkkgkglnogihcaejaleikhdh [2013-01-28]
CHR Extension: (HyperCam) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpcknfcdcgpffjddjeceioobdelceffo [2011-08-07]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Gmail) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-18]
CHR HKLM\...\Chrome\Extension: [gaffpnfojcdkcdimoobneboagdnnenbo] - C:\Users\HYPER\AppData\Roaming\DNSHelper Chrome\DNSHelper.crx [2015-05-21]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <Brak Path\update_url>
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]
StartMenuInternet: Google Chrome - C:\Users\HYPER\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S4 AxAutoMntSrv; C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1349576 2015-01-28] (ESET)
S4 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [235696 2015-06-26] (McAfee, Inc.)
R2 MSR Service; C:\Program Files\Clarus\Samsung SecretZone\MSSvc.exe [114688 2010-03-13] () [Brak podpisu cyfrowego]
S4 npggsvc; C:\Windows\system32\GameMon.des [4135800 2011-05-15] (INCA Internet Co., Ltd.) [Brak podpisu cyfrowego]
S4 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [2007048 2015-07-30] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-11-17] ()
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [Brak podpisu cyfrowego]
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 BVRPMPR5; C:\Windows\system32\drivers\BVRPMPR5.SYS [49904 2008-12-15] (Avanquest Software) [Brak podpisu cyfrowego]
S3 DroidCam; C:\Windows\System32\drivers\droidcam.sys [22656 2012-01-28] (Dev47Apps)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2012-11-29] (DT Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [193464 2015-02-23] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [135808 2015-02-23] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [123424 2015-02-23] (ESET)
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [Brak podpisu cyfrowego]
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
S3 Loader; C:\Windows\system32\Loader.sys [8704 2011-08-12] () [Brak podpisu cyfrowego]
R1 mdf15; C:\Program Files\Clarus\Samsung SecretZone\mdf15.sys [12800 2009-04-21] () [Brak podpisu cyfrowego]
R1 mvd20; C:\Program Files\Clarus\Samsung SecretZone\mvd20.sys [64000 2009-10-30] () [Brak podpisu cyfrowego]
R0 speedfan; C:\Windows\System32\speedfan.sys [25240 2011-03-18] (Almico Software)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [466008 2013-02-24] (Duplex Secure Ltd.)
S3 ST330; C:\Windows\System32\drivers\st330.sys [30464 2010-10-22] (THOMSON Telecom Belgium)
S3 STBUS; C:\Windows\System32\drivers\stbus.sys [12672 2010-10-22] (THOMSON Telecom Belgium)
S3 stppp; C:\Windows\System32\DRIVERS\stppp.sys [32000 2010-10-22] (THOMSON Telecom Belgium)
S3 V0260VID; C:\Windows\System32\DRIVERS\V0260Vid.sys [154784 2007-07-18] (Creative Technology Ltd.)
U3 a19fb13n; C:\Windows\system32\Drivers\a19fb13n.sys [0 ] (Advanced Micro Devices) <==== UWAGA (zerobajtowy plik/folder)
U3 ayyddd6a; C:\Windows\system32\Drivers\ayyddd6a.sys [0 ] (Advanced Micro Devices) <==== UWAGA (zerobajtowy plik/folder)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

NETSVC: {F1E897F5-AEE2-43EB-8127A6926AE02A5D} -> Brak ścieżki do pliku.
NETSVC: {1E9BEE46-4790-42FB-818AB7FE3A7EE9DD} -> Brak ścieżki do pliku.

==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-09-14 18:13 - 2015-09-14 18:13 - 00899072 _____ (Farbar) C:\Users\HYPER\Downloads\FSS(1).exe
2015-09-14 18:05 - 2015-09-14 18:05 - 04009167 _____ C:\Users\HYPER\Downloads\ServicesRepair(1).exe
2015-09-14 17:34 - 2010-08-11 06:44 - 02983424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2015-09-14 17:34 - 2010-08-11 06:35 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2015-09-14 17:33 - 2010-05-23 12:15 - 01619456 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2015-09-14 17:33 - 2010-05-23 12:11 - 03181568 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-09-14 17:33 - 2010-05-23 12:11 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2015-09-14 17:32 - 2015-09-14 17:32 - 00000000 ____D C:\Users\HYPER\AppData\Local\Windows Live
2015-09-14 17:32 - 2015-09-14 17:32 - 00000000 ____D C:\Program Files\Common Files\Windows Live
2015-09-14 17:31 - 2015-09-14 17:31 - 01245896 _____ (Microsoft Corporation) C:\Users\HYPER\Downloads\wlsetup-web.exe
2015-09-14 17:21 - 2015-09-14 18:01 - 00001524 _____ C:\Windows\PFRO.log
2015-09-14 12:27 - 2015-09-14 12:27 - 03079168 _____ C:\Users\HYPER\Desktop\Android Control.exe
2015-09-14 12:27 - 2015-09-14 12:27 - 00000000 ____D C:\Users\HYPER\Downloads\Tools
2015-09-14 12:14 - 2015-09-14 12:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bonjour
2015-09-14 12:14 - 2015-09-14 12:14 - 00000000 ____D C:\Program Files\Bonjour
2015-09-14 12:13 - 2015-09-14 18:03 - 00000000 ____D C:\Users\HYPER\Documents\AirDroid
2015-09-14 12:13 - 2015-09-14 12:14 - 00000000 ____D C:\Users\Public\Documents\AirDroid
2015-09-14 12:13 - 2015-09-14 12:14 - 00000000 ____D C:\Program Files\AirDroid
2015-09-14 12:13 - 2015-09-14 12:13 - 00001831 _____ C:\Users\Public\Desktop\AirDroid.lnk
2015-09-14 12:13 - 2015-09-14 12:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AirDroid
2015-09-14 12:12 - 2015-09-14 12:13 - 12390499 _____ C:\Users\HYPER\Downloads\AirDroid_Desktop_Client_3.1.4.1.exe
2015-09-14 12:06 - 2015-09-14 12:06 - 00002015 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2015-09-14 12:06 - 2015-09-14 12:06 - 00000000 ____D C:\Users\HYPER\AppData\Roaming\MyPhoneExplorer
2015-09-14 12:06 - 2015-09-14 12:06 - 00000000 ____D C:\Users\HYPER\.android
2015-09-14 12:06 - 2015-09-14 12:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2015-09-14 12:06 - 2015-09-14 12:06 - 00000000 ____D C:\Program Files\MyPhoneExplorer
2015-09-14 12:05 - 2015-09-14 12:06 - 07319280 _____ C:\Users\HYPER\Downloads\MyPhoneExplorer_Setup_1.8.6.exe
2015-09-14 11:34 - 2015-09-14 17:39 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3231952852-421943317-2037577364-1000UA1d0eed0801cee2a.job
2015-09-14 11:34 - 2015-09-14 11:39 - 00001006 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3231952852-421943317-2037577364-1000Core1d0eed07f18e7b2.job
2015-09-13 14:54 - 2015-09-14 18:06 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0ee235fce4211.job
2015-09-13 14:54 - 2015-09-13 14:54 - 06420480 _____ C:\Program Files\GUT7F97.tmp
2015-09-13 14:54 - 2015-09-13 14:54 - 00000000 ____D C:\Program Files\GUM7F38.tmp
2015-08-30 12:26 - 2015-08-30 12:26 - 00000000 ____D C:\Users\sunset\AppData\Roaming\Sun
2015-08-30 12:26 - 2015-08-30 12:26 - 00000000 ____D C:\Users\sunset\.oracle_jre_usage
2015-08-24 18:29 - 2015-09-14 18:09 - 00211259 _____ C:\Windows\WindowsUpdate.log
2015-08-24 18:25 - 2015-08-24 18:26 - 00000000 ____D C:\Users\Public\Desktop\CC Support
2015-08-24 18:25 - 2015-08-24 18:25 - 04009167 _____ C:\Users\HYPER\Downloads\ServicesRepair.exe
2015-08-23 17:48 - 2015-08-23 17:48 - 00007652 _____ C:\Users\HYPER\fixlist.txt
2015-08-23 17:27 - 2015-08-23 17:27 - 00036265 _____ C:\Users\HYPER\Desktop\frst.rar
2015-08-23 17:19 - 2015-08-23 17:56 - 00030169 _____ C:\Users\HYPER\Desktop\FRST.txt
2015-08-23 17:18 - 2015-08-23 17:18 - 00000000 ____D C:\Users\HYPER\Desktop\FRST-OlderVersion
2015-08-23 14:43 - 2015-09-14 18:06 - 00011168 _____ C:\Windows\setupact.log
2015-08-23 14:43 - 2015-08-23 14:43 - 00000000 _____ C:\Windows\setuperr.log
2015-08-23 14:36 - 2015-08-23 14:36 - 06611176 _____ (Piriform Ltd) C:\Users\HYPER\Downloads\ccsetup508pro.exe
2015-08-23 14:27 - 2015-08-23 14:27 - 00000000 ____D C:\Program Files\Common Files\Java
2015-08-23 14:26 - 2015-08-23 14:26 - 00000000 ____D C:\Users\HYPER\AppData\Roaming\Sun
2015-08-23 14:26 - 2015-08-23 14:26 - 00000000 ____D C:\Users\HYPER\.oracle_jre_usage
2015-08-23 14:21 - 2015-08-23 14:21 - 00584288 _____ (Oracle Corporation) C:\Users\HYPER\Downloads\jre-8u60-windows-i586-iftw.exe
2015-08-22 20:52 - 2015-08-22 20:52 - 00000199 _____ C:\Users\sunset\Desktop\Counter-Strike Global Offensive.url
2015-08-22 20:51 - 2015-08-22 20:51 - 00000606 _____ C:\Users\sunset\Desktop\Steam.lnk
2015-08-21 21:34 - 2015-08-23 14:51 - 00000000 ____D C:\Users\sunset\AppData\Roaming\GG
2015-08-21 21:34 - 2015-08-21 21:35 - 00000000 ____D C:\Users\sunset\AppData\Local\GG
2015-08-21 20:27 - 2015-08-21 20:27 - 00000000 ____D C:\błąd
2015-08-21 17:40 - 2015-08-21 17:40 - 00000000 ____D C:\Users\sunset\048298C9A4D3490B9FF9AB023A9238F3.TMP
2015-08-17 17:36 - 2015-09-14 13:46 - 00000000 ____D C:\Program Files\Mozilla Firefox 4.0 Beta 10

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-09-14 18:12 - 2015-07-16 20:09 - 00000000 ____D C:\Users\HYPER\Desktop\Sentino
2015-09-14 18:12 - 2015-07-01 02:05 - 00000000 ____D C:\FRST
2015-09-14 18:07 - 2014-02-05 19:53 - 00000000 ____D C:\Users\HYPER\AppData\Roaming\GG
2015-09-14 18:06 - 2014-04-21 12:05 - 00000362 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_0414c_rmv.job
2015-09-14 18:06 - 2014-04-21 12:05 - 00000362 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_0414c_rel.job
2015-09-14 18:06 - 2011-09-02 17:38 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-14 18:06 - 2010-10-22 15:00 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2015-09-14 18:06 - 2010-10-12 15:40 - 00000000 ____D C:\ProgramData\NVIDIA
2015-09-14 18:06 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-14 18:05 - 2009-07-14 06:34 - 00014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-14 18:05 - 2009-07-14 06:34 - 00014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-14 18:00 - 2014-11-05 21:14 - 00000000 ____D C:\Users\HYPER\Desktop\121
2015-09-14 17:59 - 2015-07-16 03:28 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0bf66a78c7755.job
2015-09-14 17:33 - 2011-09-02 17:38 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-14 17:33 - 2011-02-09 21:05 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3231952852-421943317-2037577364-1000UA.job
2015-09-14 17:23 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\tracing
2015-09-14 17:21 - 2012-05-31 17:25 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-09-14 14:43 - 2014-02-19 18:00 - 00009046 _____ C:\Users\HYPER\Desktop\or.txt
2015-09-14 14:21 - 2012-11-02 13:15 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-14 12:06 - 2010-10-12 14:34 - 00000000 ____D C:\Users\HYPER
2015-09-14 11:43 - 2011-02-09 21:08 - 00002378 _____ C:\Users\HYPER\Desktop\Google Chrome.lnk
2015-09-14 11:39 - 2015-07-15 22:28 - 00001006 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3231952852-421943317-2037577364-1000Core1d0bf3cca65655e.job
2015-09-14 11:34 - 2015-07-15 22:28 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3231952852-421943317-2037577364-1000UA1d0bf3ccb0c701f.job
2015-08-30 12:29 - 2010-10-12 18:18 - 00000000 ____D C:\Steam
2015-08-30 12:26 - 2013-07-20 19:47 - 00000000 ____D C:\Users\sunset
2015-08-24 22:33 - 2011-02-09 21:05 - 00001006 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3231952852-421943317-2037577364-1000Core.job
2015-08-23 14:50 - 2011-11-22 23:54 - 00000000 ____D C:\Windows\pss
2015-08-23 14:29 - 2014-02-21 18:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-23 14:29 - 2010-10-23 15:04 - 00000000 ____D C:\Program Files\Java
2015-08-23 14:25 - 2014-02-21 18:48 - 00274016 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-08-23 14:25 - 2014-02-21 18:48 - 00097888 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-08-23 14:25 - 2014-02-21 18:48 - 00000000 ____D C:\ProgramData\Oracle
2015-08-23 14:04 - 2009-07-14 06:53 - 00032562 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-08-22 20:52 - 2014-05-02 16:19 - 00000000 ____D C:\Users\sunset\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-22 20:45 - 2015-08-09 22:56 - 00000000 ____D C:\Users\sunset\AppData\Local\Mozilla Firefox
2015-08-22 16:27 - 2010-10-13 08:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan
2015-08-21 17:40 - 2010-11-25 22:13 - 00000000 ____D C:\Windows\system32\appmgmt
2015-08-21 17:40 - 2010-10-12 18:18 - 00000000 ____D C:\Program Files\Common Files\Steam

==================== Pliki w katalogu głównym wybranych folderów =======

2015-09-13 14:54 - 2015-09-13 14:54 - 6420480 _____ () C:\Program Files\GUT7F97.tmp
2010-10-12 19:37 - 2013-11-16 19:26 - 0138056 _____ () C:\Users\HYPER\AppData\Roaming\PnkBstrK.sys
2011-10-24 15:39 - 2012-08-20 00:24 - 0000132 _____ () C:\Users\HYPER\AppData\Roaming\Preferencje Adobe CS5 dla formatu GIF
2010-11-28 11:35 - 2013-12-05 20:43 - 0000132 _____ () C:\Users\HYPER\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG
2013-01-22 02:40 - 2013-01-22 15:05 - 0000004 _____ () C:\Users\HYPER\AppData\Roaming\skype.ini
2011-06-08 23:34 - 2014-04-21 13:45 - 0005120 _____ () C:\Users\HYPER\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-07-18 23:24 - 2011-07-18 23:24 - 0000600 _____ () C:\Users\HYPER\AppData\Local\PUTTY.RND
2012-12-15 13:18 - 2012-12-15 13:18 - 0007666 _____ () C:\Users\HYPER\AppData\Local\Resmon.ResmonCfg
2008-02-05 13:28 - 2008-02-05 13:28 - 0000051 _____ () C:\Users\HYPER\AppData\Local\setup.txt
2012-01-28 14:26 - 2012-01-28 14:26 - 0017408 _____ () C:\Users\HYPER\AppData\Local\WebpageIcons.db
2011-11-22 17:52 - 2011-11-22 17:52 - 0000000 _____ () C:\Users\HYPER\AppData\Local\{145DDD62-D4B0-4443-B461-F2483531BEFB}
2011-11-22 15:11 - 2011-11-22 15:11 - 0000000 _____ () C:\Users\HYPER\AppData\Local\{48110CBC-F1C0-4C7F-A63E-E524F04CE96B}
2011-11-22 17:42 - 2011-11-22 17:42 - 0000000 _____ () C:\Users\HYPER\AppData\Local\{D6B2AC6A-B5C2-4600-9FD3-35ACC3E82196}
2012-01-28 12:35 - 2013-05-23 22:26 - 0000031 _____ () C:\ProgramData\droidcam-settings
2013-06-18 14:25 - 2013-06-26 12:07 - 0000000 _____ () C:\ProgramData\qbxbvpsagvwynrx
2015-07-04 11:50 - 2015-07-04 11:50 - 0001534 _____ () C:\ProgramData\ss.ini
2013-06-26 12:04 - 2013-06-26 12:04 - 0178176 _____ () C:\ProgramData\upikdrphwbptejd
2013-06-21 06:22 - 2013-06-21 06:22 - 0028160 _____ () C:\ProgramData\wiupymvtxevnrhq

ZeroAccess:
C:\Users\HYPER\AppData\Local\f46bf428
C:\Users\HYPER\AppData\Local\f46bf428\@
C:\Users\HYPER\AppData\Local\f46bf428\loader.tlb

Pliki do przeniesienia lub usunięcia:
====================
C:\Users\HYPER\AppData\Roaming\skype.ini


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-08-22 15:09

==================== Koniec  FRST.txt ============================