Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:17-10-2015
Uruchomiony przez Tomek (administrator)  TOMEK-KOMPUTER (17-10-2015 16:28:37)
Uruchomiony z C:\Users\Tomek\Desktop
Załadowane profile: Tomek (Dostępne profile: Tomek & Tom)
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 10 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ABBYY Production LLC) C:\Program Files (x86)\ABBYY PDF Transformer+\NetworkLicenseServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(GlavSoft LLC.) C:\Program Files\TightVNC\tvnserver.exe
(Sony DADC Austria AG.) C:\Windows\SysWOW64\UAService7.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(GlavSoft LLC.) C:\Program Files\TightVNC\tvnserver.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [tvncontrol] => C:\Program Files\TightVNC\tvnserver.exe [2179056 2013-07-19] (GlavSoft LLC.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-16] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [185896 2014-10-16] (RealNetworks, Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3940539798-2983024366-2410409241-1000\...\Run: [HP Photosmart 5520 series (NET)] => C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe [2551656 2012-01-31] (Hewlett-Packard Co.)
HKU\S-1-5-21-3940539798-2983024366-2410409241-1000\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [2901584 2015-10-14] (Valve Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{9DFBD5F6-1629-40C3-8693-6449FBD08501}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================

FireFox:
========
FF ProfilePath: C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\dbpp97qp.default
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-3940539798-2983024366-2410409241-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-11-15] ()

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-21]
CHR Extension: (Dokumenty Google) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-21]
CHR Extension: (Dysk Google) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-21]
CHR Extension: (YouTube) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-21]
CHR Extension: (Google Search) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-21]
CHR Extension: (Arkusze Google) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-21]
CHR Extension: (Dokumenty Google offline) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-04]
CHR Extension: (AdBlock) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-12-02]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-21]
CHR Extension: (Gmail) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-21]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ABBYY.Licensing.PDFTransformer.Classic.4.0; C:\Program Files (x86)\ABBYY PDF Transformer+\NetworkLicenseServer.exe [959184 2014-06-06] (ABBYY Production LLC)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
S4 MBAMScheduler; D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
S3 Origin Client Service; D:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-01] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2015-09-01] ()
R2 tvnserver; C:\Program Files\TightVNC\tvnserver.exe [2179056 2013-07-19] (GlavSoft LLC.)
R2 UserAccess7; C:\Windows\SysWOW64\UAService7.exe [143360 2014-11-11] (Sony DADC Austria AG.) [Brak podpisu cyfrowego]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22240 2013-10-28] ()
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-15] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [22240 2013-10-24] ()
R3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-10-17 16:28 - 2015-10-17 16:28 - 00013190 _____ C:\Users\Tomek\Desktop\FRST.txt
2015-10-17 16:28 - 2015-10-17 16:28 - 00000000 ____D C:\Users\Tomek\Desktop\FRST-OlderVersion
2015-10-17 16:25 - 2015-10-17 16:25 - 00000000 ____D C:\Users\Tomek\AppData\Local\Steam
2015-10-17 16:24 - 2015-10-17 16:24 - 01476720 _____ C:\Users\Tomek\Downloads\SteamSetup (1).exe
2015-10-17 16:24 - 2015-10-17 16:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-10-14 17:42 - 2015-10-14 17:42 - 01661326 _____ C:\Users\Tomek\Documents\his.rar
2015-10-14 17:42 - 2015-10-14 17:42 - 00000000 ____D C:\Users\Tomek\Documents\his
2015-10-14 15:00 - 2015-10-14 15:00 - 00719928 _____ C:\Windows\Minidump\101415-5990-01.dmp
2015-10-14 12:41 - 2015-10-14 14:26 - 00000000 ____D C:\Windows\system32\appmgmt
2015-10-14 11:16 - 2015-10-17 16:28 - 00000000 ____D C:\FRST
2015-10-14 11:14 - 2015-10-17 16:28 - 02196992 _____ (Farbar) C:\Users\Tomek\Desktop\FRST64.exe
2015-10-14 11:14 - 2015-10-14 11:14 - 02196480 _____ (Farbar) C:\Users\Tomek\Downloads\FRST64.exe
2015-10-14 11:14 - 2015-10-14 11:13 - 00380416 _____ C:\Users\Tomek\Desktop\mrbe7bfl.exe
2015-10-14 11:13 - 2015-10-14 11:13 - 00380416 _____ C:\Users\Tomek\Downloads\mrbe7bfl.exe
2015-10-14 11:08 - 2015-10-14 11:08 - 00003505 _____ C:\AdwCleaner[C2].txt
2015-10-10 16:34 - 2015-10-10 16:34 - 04686376 _____ C:\Users\Tomek\Documents\matma.rar
2015-10-10 16:33 - 2015-10-10 16:34 - 00000000 ____D C:\Users\Tomek\Documents\matma
2015-10-04 13:27 - 2015-10-04 13:27 - 00015912 _____ C:\Users\Tomek\Downloads\[kat.cr]dream.r.g.mechanics.torrent
2015-10-04 13:14 - 2015-10-04 13:14 - 00018409 _____ C:\Users\Tomek\Downloads\[kat.cr]homesick.repack.by.r.g.mechanics.torrent
2015-10-04 13:11 - 2015-10-04 13:11 - 00012577 _____ C:\Users\Tomek\Downloads\[kat.cr]pc.penumbra.overture.rip.dopeman.torrent
2015-10-04 13:09 - 2015-10-04 13:09 - 00012833 _____ C:\Users\Tomek\Downloads\[kat.cr]among.the.sleep.z10yded.torrent
2015-10-04 13:05 - 2015-10-04 13:05 - 00102375 _____ C:\Users\Tomek\Downloads\[kat.cr]among.the.sleep.v1.0.0.2.click.run.torrent
2015-10-03 17:53 - 2015-10-14 17:42 - 03295029 _____ C:\Users\Tomek\Documents\Documents.rar
2015-10-03 17:49 - 2015-10-03 17:54 - 01633778 _____ C:\Users\Tomek\Documents\Hentai-chanhejcitatmasbojestmojążonąijestpieknazeojej(tomatmaheh).rar
2015-10-01 18:28 - 2015-10-01 18:28 - 00014408 _____ C:\Users\Tomek\Downloads\overdrive_sunset.zip
2015-10-01 16:38 - 2015-10-01 16:38 - 00011717 _____ C:\Users\Tomek\Downloads\[kat.cr]ziarno.prawdy.2015.hqdvdrip.xvid.ac3.k12.5.1.pl.torrent
2015-10-01 16:28 - 2015-10-01 16:28 - 00000000 ____D C:\sr
2015-10-01 15:49 - 2015-10-01 15:49 - 07990646 _____ C:\Users\Tomek\Downloads\2906-brushed-silver-reflective-text-effect-wet-metal.zip
2015-10-01 15:46 - 2015-10-01 15:46 - 00403289 _____ C:\Users\Tomek\Downloads\TrajanPro-Regular.ttf
2015-09-30 20:04 - 2015-09-30 20:04 - 00011480 _____ C:\Users\Tomek\Downloads\[kat.cr]stairs.torrent
2015-09-30 20:02 - 2015-09-30 20:02 - 00036061 _____ C:\Users\Tomek\Downloads\[kat.cr]stairs.v0.1g.beta.torrent
2015-09-26 18:13 - 2015-09-26 18:13 - 00021047 _____ C:\Users\Tomek\Downloads\[kat.cr]how.to.get.away.with.murder.s02e01.hdtv.x264.lol.rartv.torrent
2015-09-26 16:39 - 2015-09-26 16:39 - 00012488 _____ C:\Users\Tomek\Downloads\Halsey-BADLANDSDeluxeEdition2015CBR320KbpsAryaN_L33T - ThePirateBay.TO.torrent
2015-09-19 17:55 - 2015-09-19 17:55 - 02596107 _____ C:\Users\Tomek\Documents\tujestwiai.rar

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-10-17 16:27 - 2014-10-16 13:10 - 01146390 _____ C:\Windows\WindowsUpdate.log
2015-10-17 16:21 - 2011-04-12 15:21 - 00744846 _____ C:\Windows\system32\perfh015.dat
2015-10-17 16:21 - 2011-04-12 15:21 - 00157826 _____ C:\Windows\system32\perfc015.dat
2015-10-17 16:21 - 2009-07-14 07:13 - 01682848 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-17 16:18 - 2015-01-21 17:36 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-17 16:17 - 2014-10-23 14:56 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Skype
2015-10-17 16:16 - 2015-01-21 17:36 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-17 16:15 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-17 16:15 - 2009-07-14 06:51 - 00105030 _____ C:\Windows\setupact.log
2015-10-15 22:30 - 2009-07-14 06:45 - 00030880 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-15 22:30 - 2009-07-14 06:45 - 00030880 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-14 15:00 - 2014-10-25 18:12 - 00000000 ____D C:\Windows\Minidump
2015-10-14 15:00 - 2010-11-21 05:47 - 00196296 _____ C:\Windows\PFRO.log
2015-10-14 14:46 - 2015-03-20 20:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-10-14 13:54 - 2014-10-21 17:37 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\BitTorrent
2015-10-12 12:53 - 2014-10-23 14:56 - 00000000 ____D C:\ProgramData\Skype
2015-10-10 17:25 - 2014-10-21 18:30 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-10-05 20:15 - 2014-10-25 14:13 - 00000132 _____ C:\Users\Tomek\AppData\Roaming\Adobe PNG Format CS6 Prefs
2015-10-02 15:34 - 2009-07-14 06:45 - 00358040 _____ C:\Windows\system32\FNTCACHE.DAT
2015-10-01 15:51 - 2014-10-16 13:20 - 00091312 _____ C:\Users\Tomek\AppData\Local\GDIPFONTCACHEV1.DAT

==================== Pliki w katalogu głównym wybranych folderów =======

2015-04-20 14:27 - 2015-04-20 14:27 - 0000132 _____ () C:\Users\Tomek\AppData\Roaming\Adobe GIF Format CS6 Prefs
2014-10-25 14:13 - 2015-10-05 20:15 - 0000132 _____ () C:\Users\Tomek\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-10-31 22:28 - 2015-07-09 20:57 - 0001456 _____ () C:\Users\Tomek\AppData\Local\Adobe Save for Web 13.0 Prefs
2014-11-03 22:25 - 2015-08-29 14:33 - 0007597 _____ () C:\Users\Tomek\AppData\Local\Resmon.ResmonCfg
2014-11-02 17:46 - 2014-11-02 17:46 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-10-16 13:20 - 2014-10-16 13:20 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => MD5 jest poprawne
C:\Windows\SysWOW64\User32.dll => MD5 jest poprawne
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-10-11 11:08

==================== Koniec  FRST.txt ============================