Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:22-10-2015
Uruchomiony przez user (administrator)  USER-KOMPUTER (22-10-2015 22:23:13)
Uruchomiony z C:\Users\user\Downloads
Załadowane profile: user (Dostępne profile: user)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(ATI Technologies Inc.) C:\Windows\System32\ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Valve Corporation) D:\steam\Steam.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Valve Corporation) D:\steam\bin\steamwebhelper.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe
(TeamSpeak Systems GmbH) D:\ts3\ts3client_win32.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Valve Corporation) D:\steam\bin\steamwebhelper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2009-03-17] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Cmaudio] => RunDll32 cmicnfg.cpl,CMICtrlWnd
HKLM\...\Run: [ATIModeChange] => C:\Windows\system32\Ati2mdxx.exe [26112 2012-07-28] (ATI Technologies, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-09] (AVAST Software)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-10-03] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [935288 2009-09-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
Winlogon\Notify\AtiExtEvent: C:\Windows\system32\Ati2evxx.dll [2012-07-28] (ATI Technologies Inc.)
HKU\S-1-5-21-2180490207-185124550-1352214969-1000\...\Run: [Steam] => D:\steam\steam.exe [2901584 2015-10-14] (Valve Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-10-09] (AVAST Software)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{66A6DAE4-0683-4BA2-B9E5-742E479FAF42}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-2180490207-185124550-1352214969-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki
SearchScopes: HKU\S-1-5-21-2180490207-185124550-1352214969-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> D:\ttts3\bin\ssv.dll [2015-10-13] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> D:\ttts3\bin\jp2ssv.dll [2015-10-13] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\512djtda.default
FF Homepage: hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> D:\ttts3\bin\dtplugin\npDeployJava1.dll [2015-10-13] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> D:\ttts3\bin\plugin2\npjp2.dll [2015-10-13] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-09] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-09] (Google Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki
CHR StartupUrls: Default -> "hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki","hxxp://www.google.com/"
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-10-09]
CHR Extension: (Dokumenty Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-09]
CHR Extension: (Dysk Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-09]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-09]
CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-09]
CHR Extension: (Arkusze Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-10-09]
CHR Extension: (Dokumenty Google offline) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-10-09]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-09]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-09]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-09] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3219136 2015-10-09] (Avast Software)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-01] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24016 2015-10-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [76000 2015-10-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-10-09] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49776 2015-10-09] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [789296 2015-10-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [434184 2015-10-09] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [115640 2015-10-09] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [208664 2015-10-09] (AVAST Software)
R3 athur; C:\Windows\System32\DRIVERS\athur.sys [1500160 2010-01-05] (Atheros Communications, Inc.)
R3 cmudax; C:\Windows\System32\drivers\cmudax.sys [1287296 2005-05-12] (C-Media Inc.)
R3 FETNDIS; C:\Windows\System32\DRIVERS\fetnd6.sys [44032 2009-07-14] (VIA Technologies, Inc.              )
R0 ngvss; C:\Windows\system32\Drivers\ngvss.sys [107984 2015-10-09] (AVAST Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-10-09] (Avast Software)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-10-22 22:23 - 2015-10-22 22:23 - 00009459 _____ C:\Users\user\Downloads\FRST.txt
2015-10-22 22:22 - 2015-10-22 22:23 - 00000000 ____D C:\FRST
2015-10-22 22:21 - 2015-10-22 22:22 - 01700352 _____ (Farbar) C:\Users\user\Downloads\FRST.exe
2015-10-22 13:32 - 2015-10-22 13:33 - 00000000 ____D C:\Users\user\minecraft
2015-10-22 13:15 - 2015-10-22 13:15 - 00000000 ____D C:\Nowy folder (2)
2015-10-16 13:34 - 2015-10-16 13:35 - 00005562 _____ C:\Windows\DPINST.LOG
2015-10-16 13:33 - 2015-10-16 13:33 - 00000000 ____D C:\Program Files\Innovative Solutions
2015-10-16 13:32 - 2015-10-16 13:32 - 03049624 _____ (Innovative Solutions) C:\Users\user\Downloads\Printer-HP-HP-DeskJet-815C.exe
2015-10-16 12:36 - 2015-10-16 12:34 - 00026344 _____ C:\Users\user\Documents\komenda - Kopia.odt
2015-10-16 12:34 - 2015-10-16 12:34 - 00026344 _____ C:\Users\user\Desktop\komenda - Kopia.odt
2015-10-16 10:04 - 2015-10-16 12:34 - 00026344 _____ C:\Users\user\Desktop\komenda.odt
2015-10-13 22:19 - 2015-10-22 16:54 - 00000000 ____D C:\Users\user\AppData\Roaming\.minecraft
2015-10-13 22:17 - 2015-10-13 22:17 - 00000000 ____D C:\Users\user\AppData\Roaming\Sun
2015-10-13 22:17 - 2015-10-13 22:17 - 00000000 ____D C:\Users\user\AppData\LocalLow\Sun
2015-10-13 22:17 - 2015-10-13 22:17 - 00000000 ____D C:\Users\user\.oracle_jre_usage
2015-10-13 22:17 - 2015-10-13 22:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-10-13 22:17 - 2015-10-13 22:17 - 00000000 ____D C:\Program Files\Common Files\Java
2015-10-13 22:17 - 2015-10-13 22:16 - 00097888 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-10-13 22:16 - 2015-10-13 22:16 - 00000000 ____D C:\ProgramData\Oracle
2015-10-13 22:13 - 2015-10-13 22:13 - 00584288 _____ (Oracle Corporation) C:\Users\user\Downloads\chromeinstall-8u60.exe
2015-10-13 22:13 - 2015-10-13 22:13 - 00000000 ____D C:\Users\user\AppData\LocalLow\Oracle
2015-10-13 22:01 - 2015-10-13 22:06 - 12963457 _____ C:\Users\user\Downloads\ShiginimaSE_v1406.zip
2015-10-13 14:56 - 2015-10-13 14:56 - 20261624 _____ (Gameforge ) C:\Users\user\Downloads\Metin2_GameforgeLiveSetup.exe
2015-10-11 20:58 - 2015-10-11 20:58 - 00000579 _____ C:\Users\Public\Desktop\Urban Terror (io).lnk
2015-10-11 20:58 - 2015-10-11 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Urban Terror
2015-10-11 19:42 - 2015-10-11 20:38 - 742991526 _____ C:\Users\user\Downloads\UrbanTerror_41_FULL_win.zip
2015-10-10 17:34 - 2015-10-10 17:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-10-10 17:32 - 2015-10-10 17:33 - 29056760 _____ (TeamSpeak Systems GmbH) C:\Users\user\Downloads\TeamSpeak3-Client-win32-3.0.18(1).exe
2015-10-10 17:08 - 2015-10-10 17:34 - 00000584 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2015-10-10 16:58 - 2015-10-10 16:59 - 29056760 _____ (TeamSpeak Systems GmbH) C:\Users\user\Downloads\TeamSpeak3-Client-win32-3.0.18.exe
2015-10-09 22:21 - 2015-10-09 22:21 - 00000200 _____ C:\Users\user\Desktop\Killing Floor.url
2015-10-09 20:37 - 2015-10-09 20:38 - 07380976 _____ (Wargaming.net ) C:\Users\user\Downloads\WoWP_internet_install_eu.exe
2015-10-09 17:48 - 2015-10-09 17:48 - 00000000 ____D C:\Users\user\AppData\Local\CrashRpt
2015-10-09 17:28 - 2015-10-09 20:18 - 00000000 ____D C:\Users\user\AppData\Local\wf-launcher
2015-10-09 17:28 - 2015-10-09 19:42 - 00000000 ____D C:\ProgramData\GFACE
2015-10-09 16:24 - 2015-10-09 16:24 - 00000000 ____D C:\Windows\system32\vbox
2015-10-09 15:27 - 2015-10-09 15:27 - 00001870 _____ C:\Users\user\Desktop\Facebook.lnk
2015-10-09 15:27 - 2015-10-09 15:27 - 00001093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-10-09 15:27 - 2015-10-09 15:27 - 00000000 ____D C:\Users\user\AppData\Roaming\Shortcut
2015-10-09 15:27 - 2015-10-09 15:27 - 00000000 ____D C:\Users\user\AppData\Roaming\Opera Software
2015-10-09 15:27 - 2015-10-09 15:27 - 00000000 ____D C:\Users\user\AppData\Local\Opera Software
2015-10-09 15:25 - 2015-10-09 15:25 - 00000598 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2015-10-09 15:25 - 2015-10-09 15:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-10-09 15:24 - 2015-10-09 15:24 - 01629552 _____ ( ) C:\Users\user\Downloads\cpu-z_1.73-en.exe
2015-10-09 15:23 - 2015-10-09 15:23 - 01129293 _____ C:\Users\user\Downloads\installer.zip
2015-10-09 14:52 - 2015-10-09 14:59 - 00000000 ____D C:\Users\user\Desktop\z telefonu
2015-10-09 14:51 - 2015-10-09 14:51 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2015-10-09 13:00 - 2015-10-15 20:51 - 00002135 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-10-09 13:00 - 2015-10-09 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-10-09 12:58 - 2015-10-22 22:17 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-09 12:58 - 2015-10-22 21:02 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-09 12:57 - 2015-10-09 13:00 - 00000000 ____D C:\Users\user\AppData\Local\Google
2015-10-09 12:57 - 2015-10-09 12:59 - 00000000 ____D C:\Program Files\Google
2015-10-09 05:11 - 2015-10-09 05:11 - 00313472 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-10-09 05:11 - 2015-10-09 05:11 - 00107984 _____ (AVAST Software) C:\Windows\system32\Drivers\ngvss.sys
2015-10-09 05:11 - 2015-10-09 05:11 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-10-09 05:11 - 2015-10-09 05:11 - 00002003 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-10-09 05:11 - 2015-10-09 05:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-10-08 20:29 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2015-10-08 20:29 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2015-10-08 20:29 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2015-10-08 20:25 - 2015-10-09 00:42 - 00000000 ____D C:\Users\user\AppData\Local\Warframe
2015-10-08 18:43 - 2015-10-10 21:08 - 00000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-10-08 18:30 - 2015-06-23 13:27 - 00246952 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-10-08 18:29 - 2015-10-11 14:01 - 00000000 ____D C:\Users\user\AppData\Local\Steam
2015-10-08 18:29 - 2015-10-08 18:29 - 00000000 ____D C:\Users\user\AppData\Local\CEF
2015-10-08 18:26 - 2015-10-16 09:55 - 00000000 ____D C:\Program Files\Common Files\Steam
2015-10-08 18:26 - 2015-10-08 18:26 - 00000512 _____ C:\Users\Public\Desktop\Steam.lnk
2015-10-08 18:26 - 2015-10-08 18:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-10-08 18:25 - 2015-10-08 18:25 - 01476720 _____ C:\Users\user\Downloads\SteamSetup.exe
2015-10-08 17:52 - 2015-10-08 17:52 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2015-10-08 17:52 - 2015-10-08 17:52 - 00000000 ____D C:\Windows\Options
2015-10-08 17:52 - 2010-05-13 09:58 - 00007480 _____ C:\Windows\system32\athurext.cat
2015-10-08 17:52 - 2010-01-05 19:20 - 01500160 ____R (Atheros Communications, Inc.) C:\Windows\system32\athur.sys
2015-10-08 17:52 - 2010-01-05 19:20 - 01500160 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athur.sys
2015-10-08 17:51 - 2015-10-08 17:51 - 00000000 ____D C:\ProgramData\TP-LINK

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-10-22 21:15 - 2003-01-01 03:59 - 00154331 _____ C:\Windows\WindowsUpdate.log
2015-10-22 21:09 - 2009-07-14 06:34 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-22 21:09 - 2009-07-14 06:34 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-22 21:06 - 2011-04-12 07:08 - 00687590 _____ C:\Windows\system32\perfh015.dat
2015-10-22 21:06 - 2011-04-12 07:08 - 00131176 _____ C:\Windows\system32\perfc015.dat
2015-10-22 21:06 - 2010-11-20 23:01 - 01523412 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-22 21:02 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-22 21:02 - 2009-07-14 06:39 - 00026578 _____ C:\Windows\setupact.log
2015-10-16 13:36 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-10-10 13:08 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\LogFiles
2015-10-09 15:07 - 2010-11-20 23:48 - 00011566 _____ C:\Windows\PFRO.log
2015-10-09 13:01 - 2003-01-01 04:04 - 00000000 ____D C:\Users\user\AppData\Local\VirtualStore
2015-10-09 05:11 - 2003-01-01 05:07 - 00789296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-10-09 05:11 - 2003-01-01 05:07 - 00434184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-10-09 05:11 - 2003-01-01 05:07 - 00208664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-10-09 05:11 - 2003-01-01 05:07 - 00115640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-10-09 05:11 - 2003-01-01 05:07 - 00081728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-10-09 05:11 - 2003-01-01 05:07 - 00076000 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-10-09 05:11 - 2003-01-01 05:07 - 00049776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-10-09 05:11 - 2003-01-01 05:07 - 00024016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-10-08 17:43 - 2003-01-01 05:11 - 00000000 ____D C:\Users\user\AppData\Roaming\WinRAR

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-10-14 15:28

==================== Koniec  FRST.txt ============================