Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:18-11-2015
Uruchomiony przez Admin (administrator)  ADMIN-KOMPUTER (19-11-2015 12:01:47)
Uruchomiony z C:\Users\Admin\Downloads
Załadowane profile: Admin (Dostępne profile: Admin)
Platform: Windows 10 Pro (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Edge)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files (x86)\4C4C4544-1447072269-3410-804B-CAC04F575931\knsw18C.tmp
(CobianSoft, Luis Cobian) C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Users\Admin\AppData\Local\4C4C4544-1447928267-3410-804B-CAC04F575931\qnsuCC3E.tmp
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Luis Cobian, CobianSoft) C:\Program Files (x86)\Cobian Backup 11\cbService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
() C:\Users\Admin\AppData\Roaming\NetService\netservice.exe
(TODO: <公司名>) C:\Program Files (x86)\SFK\SSFK.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(DTools LIMITED) C:\ProgramData\nWMiniPron\WMiniPro.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\BCMWLTRY.EXE
() C:\Users\Admin\AppData\Local\gmsd_pl_005010150\upgmsd_pl_005010150.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Spotify Ltd) C:\Users\Admin\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files (x86)\Feed Notifier\notifier.exe
(SoftBrain Technologies Ltd.) C:\Users\Admin\AppData\Local\SmartWeb\SmartWebHelper.exe
(SoftBrain Technologies Ltd.) C:\Users\Admin\AppData\Local\SmartWeb\SmartWebApp.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Luis Cobian, CobianSoft) C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe
() C:\Program Files (x86)\gmsd_pl_005010150\gmsd_pl_005010150.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.15361.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8512760 2015-08-03] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1411320 2015-08-03] (Realtek Semiconductor)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [5762408 2013-03-05] (Dell Inc.)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [8921600 2013-10-22] (Dell Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3010952 2012-12-20] (Synaptics Incorporated)
HKLM\...\Run: [SpaceSoundPro] => "C:\Program Files\SpaceSoundPro\SpaceSoundPro.exe"
HKLM-x32\...\Run: [gmsd_pl_42] => [X]
HKLM-x32\...\Run: [gmsd_pl_58] => [X]
HKLM-x32\...\Run: [IAI-Shop.com Fiskalizator] => C:\Program Files (x86)\IAI\IAI-Shop.com Printer\IAI Printer.exe [3133952 2015-07-16] (IAI S.A.)
HKLM-x32\...\Run: [Cobian Backup 11 interface] => C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe [4407808 2013-03-07] (Luis Cobian, CobianSoft)
HKLM-x32\...\Run: [rec_en_77] => [X]
HKLM-x32\...\Run: [gmsd_pl_005010141] => [X]
HKLM-x32\...\Run: [gmsd_pl_005010142] => [X]
HKLM-x32\...\Run: [gmsd_pl_005010144] => [X]
HKLM-x32\...\Run: [SmartWeb] => C:\Users\Admin\AppData\Local\SmartWeb\SmartWebHelper.exe [270368 2015-02-17] (SoftBrain Technologies Ltd.)
HKLM-x32\...\Run: [gmsd_pl_005010150] => C:\Program Files (x86)\gmsd_pl_005010150\gmsd_pl_005010150.exe [4018864 2015-11-18] ()
HKLM-x32\...\RunOnce: [upgmsd_pl_005010150.exe] => C:\Users\Admin\AppData\Local\gmsd_pl_005010150\upgmsd_pl_005010150.exe [3322544 2015-11-18] ()
Winlogon\Notify\igfxcui: C:\WINDOWS\SYSTEM32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1042416182-98707671-1076778749-1000\...\Run: [Spotify Web Helper] => C:\Users\Admin\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2030912 2015-10-20] (Spotify Ltd)
HKU\S-1-5-21-1042416182-98707671-1076778749-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [465920 2015-09-10] (Microsoft Corporation)
HKU\S-1-5-21-1042416182-98707671-1076778749-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-1042416182-98707671-1076778749-1000\...\MountPoints2: {c03742cd-66a9-11e5-8d6d-f82fa8d23a24} - "G:\h3_setup.exe" 
Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Feed Notifier.lnk [2015-11-12]
ShortcutTarget: Feed Notifier.lnk -> C:\Program Files (x86)\Feed Notifier\notifier.exe ()
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk [2015-11-19]
ShortcutTarget: SmartWeb.lnk -> C:\Users\Admin\AppData\Local\SmartWeb\SmartWebHelper.exe (SoftBrain Technologies Ltd.)
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Winsock: Catalog9 01 C:\WINDOWS\SysWOW64\Wuojeg.dll [289144 2015-11-12] ()
Winsock: Catalog9 02 C:\WINDOWS\SysWOW64\Wuojeg.dll [289144 2015-11-12] ()
Winsock: Catalog9 03 C:\WINDOWS\SysWOW64\Wuojeg.dll [289144 2015-11-12] ()
Winsock: Catalog9 04 C:\WINDOWS\SysWOW64\Wuojeg.dll [289144 2015-11-12] ()
Winsock: Catalog9 17 C:\WINDOWS\SysWOW64\Wuojeg.dll [289144 2015-11-12] ()
Winsock: Catalog9-x64 01 C:\WINDOWS\system32\Wuojeg64.dll [375160 2015-11-12] ()
Winsock: Catalog9-x64 02 C:\WINDOWS\system32\Wuojeg64.dll [375160 2015-11-12] ()
Winsock: Catalog9-x64 03 C:\WINDOWS\system32\Wuojeg64.dll [375160 2015-11-12] ()
Winsock: Catalog9-x64 04 C:\WINDOWS\system32\Wuojeg64.dll [375160 2015-11-12] ()
Winsock: Catalog9-x64 17 C:\WINDOWS\system32\Wuojeg64.dll [375160 2015-11-12] ()
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{4758acd8-08ff-4432-aecf-b67abd3445ec}: [NameServer] 199.203.131.145,82.163.143.167
Tcpip\..\Interfaces\{4758acd8-08ff-4432-aecf-b67abd3445ec}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{635a8fbf-ded3-4342-95e4-40d42957d843}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{87369564-8498-4edb-8927-e7f32f700e82}: [NameServer] 199.203.131.145,82.163.143.167
Tcpip\..\Interfaces\{87369564-8498-4edb-8927-e7f32f700e82}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=130868038469047866&GUID=AFEB1A28-6D52-45D6-8310-758BDD9640B6
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=ds&ts=1426072391&from=smt&uid=ST500LT012-1DG142_S3P0Z5QAXXXXS3P0Z5QA&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1426072391&from=smt&uid=ST500LT012-1DG142_S3P0Z5QAXXXXS3P0Z5QA
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1426072391&from=smt&uid=ST500LT012-1DG142_S3P0Z5QAXXXXS3P0Z5QA&q={searchTerms}
HKU\S-1-5-21-1042416182-98707671-1076778749-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=130868038469347883&GUID=AFEB1A28-6D52-45D6-8310-758BDD9640B6
HKU\S-1-5-21-1042416182-98707671-1076778749-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1426072391&from=smt&uid=ST500LT012-1DG142_S3P0Z5QAXXXXS3P0Z5QA
HKU\S-1-5-21-1042416182-98707671-1076778749-1000\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=pl-PL&Src=MSE&Tid=000328B0&OHP=http%3A%2F%2Fsearch.gboxapp.com%2F&OSP=http%3A%2F%2Fwww.bing.com%2Fsearch%3Fq%3D%7BsearchTerms%7D%26form%3DMSSEDF%26pc%3DMSSE
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-1042416182-98707671-1076778749-1000 -> DefaultScope {22C6696C-705B-41F9-B9EA-38EA23D95EE1} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-1042416182-98707671-1076778749-1000 -> {22C6696C-705B-41F9-B9EA-38EA23D95EE1} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-1042416182-98707671-1076778749-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1426072391&from=smt&uid=ST500LT012-1DG142_S3P0Z5QAXXXXS3P0Z5QA&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1042416182-98707671-1076778749-1000 -> {AA812090-B928-490D-9C28-FF9A6BBD2FBA} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  Brak pliku
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=sc&ts=1447074390&z=aa690d77bc55f85ba253731g9zez7m2e4mfz2gae4t&from=cmi&uid=ST500LT012-1DG142_S3P0Z5QAXXXXS3P0Z5QA

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ldf1dq46.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: istartpageing
FF SearchEngineOrder.3: Bing 
FF SelectedSearchEngine: istartpageing
FF Homepage: hxxp://www.istartsurf.com/?type=hp&ts=1447327434&z=bcd9494f5ea5dcc10bae0bfg8zaz4mbc4o5m4gcz6t&from=face&uid=ST500LT012-1DG142_S3P0Z5QAXXXXS3P0Z5QA
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-13] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2013-03-21] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-13] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-12-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-12-18] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2013-03-21] (Adobe Systems)
FF Plugin HKU\S-1-5-21-1042416182-98707671-1076778749-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [Brak pliku]
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ldf1dq46.default\searchplugins\istartpageing.xml [2015-11-19]
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ldf1dq46.default\searchplugins\istartsurf.xml [2015-11-13]
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ldf1dq46.default\searchplugins\keepmysearch.xml [2014-06-28]
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ldf1dq46.default\searchplugins\mystartsearch.xml [2015-11-13]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mystartsearch.xml [2014-11-18]
FF Extension: deskCut - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ldf1dq46.default\extensions\deskCutv2@gmail.com [2015-11-16] [Brak podpisu cyfrowego]
FF Extension: Default SearchProtected  - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ldf1dq46.default\extensions\defsearchp@gmail.com [2015-11-19] [Brak podpisu cyfrowego]
FF Extension: Adblock Plus - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ldf1dq46.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-11-12]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08]
FF HKLM\...\Firefox\Extensions: [{64996ADF-8D22-4238-8780-A2A729C78CEE}] - C:\Program Files\groover121120151030\Firefox\{64996ADF-8D22-4238-8780-A2A729C78CEE}.xpi => nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ldf1dq46.default\extensions\searchengine@gmail.com => nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ldf1dq46.default\extensions\defsearchp@gmail.com
FF Extension: Default SearchProtected  - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ldf1dq46.default\extensions\defsearchp@gmail.com [2015-11-19] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ldf1dq46.default\extensions\deskCutv2@gmail.com
FF Extension: deskCut - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ldf1dq46.default\extensions\deskCutv2@gmail.com [2015-11-16] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [{64996ADF-8D22-4238-8780-A2A729C78CEE}] - C:\Program Files\groover121120151030\Firefox\{64996ADF-8D22-4238-8780-A2A729C78CEE}.xpi => nie znaleziono
StartMenuInternet: FIREFOX.EXE - c:\program files (x86)\mozilla firefox\firefox.exe hxxp://www.istartsurf.com/?type=sc&ts=1447327434&z=bcd9494f5ea5dcc10bae0bfg8zaz4mbc4o5m4gcz6t&from=face&uid=ST500LT012-1DG142_S3P0Z5QAXXXXS3P0Z5QA
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\prefs.js [2015-11-13] <==== UWAGA (Linkuje do pliku *.cfg)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\cfg [2015-11-13] <==== UWAGA

Chrome: 
=======
CHR dev: Chrome dev build wykryto! <======= UWAGA
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (JIRA assistant for  Chrome) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\afpofdeegmmclngjmadpjaajacebkege [2015-08-12] [UpdateUrl: hxxps://mynamedomain.koko//0service/update2/crx] <==== UWAGA
CHR Extension: (Webpage Screenshot Bar) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\akgpcdalpfphjmfifkmfbpdmgdmeeaeo [2015-01-12] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== UWAGA
CHR Extension: (Brak nazwy) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhnnlgilolbhikgangjeiimcnfbplpki [2015-03-20]
CHR Extension: (Brak nazwy) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcnmaiiahjldikaollhjobhchdbhfhgf [2015-05-19]
CHR Extension: (Brak nazwy) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpnamfpkffldfnlkofbbebcndfdkclpc [2015-04-09]
CHR Extension: (Raven Internet Marketing Tools) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijfnifaophpooekkminfbekpgmanjlcf [2015-01-30] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== UWAGA
CHR Extension: (Brak nazwy) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jffcmkkfbampimhpimhofhhkanhflfce [2015-02-18]
CHR Extension: (the Paper Link for PubMed) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgdcooicefdfjcplcnehfpbngjccncko [2015-01-13] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== UWAGA
CHR Extension: (Instair Speed Dial) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kikeacjcceacohckgiajooneiabebfjj [2015-01-09] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== UWAGA
CHR Extension: (Skype Click to Call) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-12-12] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== UWAGA
CHR Extension: (Brak nazwy) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lnboppjpcdnckcklbmjmdahfkpmgglec [2015-04-29]
CHR Extension: (Click counter) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmchhjebhfcmpjfjlgihgpgfgacoiokk [2014-12-10] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== UWAGA
CHR Extension: (Chrome Web Store) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\noojglkidnpfjbincgijbaiedldjfbhh [2015-02-10] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== UWAGA
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.)
R2 bopihopu; C:\Program Files (x86)\4C4C4544-1447072269-3410-804B-CAC04F575931\knsw18C.tmp [389632 2015-11-18] () [Brak podpisu cyfrowego]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
R2 cbVSCService11; C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe [67584 2013-03-07] (CobianSoft, Luis Cobian) [Brak podpisu cyfrowego]
R2 CobianBackup11; C:\Program Files (x86)\Cobian Backup 11\cbService.exe [1131008 2013-03-07] (Luis Cobian, CobianSoft) [Brak podpisu cyfrowego]
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 hidekoqe; C:\Users\Admin\AppData\Local\4C4C4544-1447928267-3410-804B-CAC04F575931\qnsuCC3E.tmp [142336 2015-10-13] () [Brak podpisu cyfrowego]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [26112 2015-09-29] (Microsoft Corporation)
R2 NetTcpHandler; C:\Users\Admin\AppData\Roaming\NetService\netservice.exe [173088 2015-07-09] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [312056 2015-08-03] (Realtek Semiconductor)
R2 SSFK; C:\Program Files (x86)\SFK\SSFK.exe [170656 2015-11-19] (TODO: <公司名>)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Brak podpisu cyfrowego]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5613328 2015-07-29] (TeamViewer GmbH)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [84480 2015-09-29] (Microsoft Corporation)
S3 w3logsvc; C:\WINDOWS\SysWOW64\inetsrv\w3logsvc.dll [72192 2015-09-29] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [578560 2015-09-29] (Microsoft Corporation)
R2 W3SVC; C:\WINDOWS\SysWOW64\inetsrv\iisw3adm.dll [504832 2015-09-29] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WdsManPro; C:\ProgramData\nWMiniPron\WMiniPro.exe [309384 2015-11-19] (DTools LIMITED)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
R2 wltrysvc; C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe [6170624 2013-10-22] (Dell Inc.) [Brak podpisu cyfrowego]
S2 nejorudu; C:\Program Files (x86)\4C4C4544-1447072269-3410-804B-CAC04F575931\knsx5381.tmp [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [173312 2015-03-27] (Broadcom Corporation.)
R3 BCMWL63A; C:\Windows\system32\DRIVERS\bcmwl63a.sys [11259136 2015-08-13] (Broadcom Corp)
R1 bsdriver; C:\WINDOWS\system32\drivers\bsdriver.sys [34720 2015-11-12] ()
S3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [165376 2015-07-10] (Microsoft Corporation)
S3 BthHFAud; C:\Windows\system32\DRIVERS\BthHfAud.sys [36864 2015-07-10] (Microsoft Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)
R1 cherimoya; C:\Windows\System32\drivers\cherimoya.sys [56736 2015-11-12] (Windows (R) Win 7 DDK provider)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-09-30] (Disc Soft Ltd)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [175104 2015-09-29] (Microsoft Corporation)
R3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Marvell Semiconductor, Inc.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [896744 2015-08-14] (Realtek                                            )
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402960 2015-05-14] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [32136 2012-12-20] (Synaptics Incorporated)
R1 swsedrvr_vw_1_10_0_25; C:\Windows\System32\drivers\swsedrvr_vw_1_10_0_25.sys [57720 2015-09-22] (SS)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
U3 idsvc; Brak ImagePath
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-19 12:01 - 2015-11-19 12:03 - 00027514 _____ C:\Users\Admin\Downloads\FRST.txt
2015-11-19 11:58 - 2015-11-19 12:01 - 00000000 ____D C:\FRST
2015-11-19 11:58 - 2015-11-19 11:58 - 02008576 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2015-11-19 11:47 - 2015-11-19 11:47 - 01503872 _____ (Skype Technologies S.A.) C:\Users\Admin\Downloads\SkypeSetup (3).exe
2015-11-19 11:47 - 2015-11-19 11:47 - 00003230 _____ C:\WINDOWS\System32\Tasks\{6521BC9B-25EB-4D51-A42B-B8BD30A53809}
2015-11-19 11:46 - 2015-11-19 11:46 - 01503872 _____ (Skype Technologies S.A.) C:\Users\Admin\Downloads\SkypeSetup (2).exe
2015-11-19 11:46 - 2015-11-19 11:46 - 00003230 _____ C:\WINDOWS\System32\Tasks\{70639A9C-2AA5-4F94-B2CC-69D24D97AF2A}
2015-11-19 11:45 - 2015-11-19 11:46 - 01503872 _____ (Skype Technologies S.A.) C:\Users\Admin\Downloads\SkypeSetup (1).exe
2015-11-19 11:44 - 2015-11-19 11:44 - 01503872 _____ (Skype Technologies S.A.) C:\Users\Admin\Downloads\SkypeSetup.exe
2015-11-19 11:42 - 2015-11-19 11:42 - 00016148 _____ C:\WINDOWS\system32\ADMIN-KOMPUTER_Admin_HistoryPrediction.bin
2015-11-19 10:18 - 2015-11-19 11:16 - 00000000 ____D C:\Users\Admin\AppData\Local\gmsd_pl_005010150
2015-11-19 10:18 - 2015-11-19 10:18 - 00000000 ____D C:\ProgramData\nWMiniPron
2015-11-19 10:18 - 2015-11-19 10:18 - 00000000 ____D C:\Program Files (x86)\gmsd_pl_005010150
2015-11-19 10:17 - 2015-11-19 10:17 - 00000000 ____D C:\Users\Admin\AppData\Local\4C4C4544-1447928267-3410-804B-CAC04F575931
2015-11-19 10:17 - 2015-11-19 10:17 - 00000000 ____D C:\Program Files (x86)\jogotempo
2015-11-18 16:01 - 2015-11-18 16:08 - 02870984 _____ (ESET) C:\Users\Admin\Downloads\esetsmartinstaller_plk (1).exe
2015-11-18 16:01 - 2015-11-18 16:01 - 00204108 _____ C:\Users\Admin\Downloads\esetsmartinstaller_plk.exe.wgbfbe7.partial
2015-11-18 12:58 - 2015-11-19 09:35 - 00000000 ____D C:\ProgramData\vWMiniProv
2015-11-18 12:58 - 2015-11-18 18:58 - 00000000 ____D C:\Users\Admin\AppData\Local\gmsd_pl_005010149
2015-11-18 12:58 - 2015-11-18 18:52 - 00000000 ____D C:\Program Files (x86)\gmsd_pl_005010149
2015-11-18 12:57 - 2015-11-19 10:18 - 00000368 _____ C:\WINDOWS\SysWOW64\data.bin
2015-11-17 12:58 - 2015-11-18 18:52 - 00000000 ____D C:\ProgramData\5WMiniPro5
2015-11-17 11:16 - 2015-11-17 11:33 - 61599090 _____ C:\Users\Admin\Documents\speeeeeeed.mp4
2015-11-17 11:03 - 2015-11-17 11:05 - 00088232 _____ C:\Users\Admin\Downloads\Funny!!! Lion King Song!!! ( The lion sleeps tonight) [sciagara.pl].mp3.sfk
2015-11-17 10:07 - 2015-11-17 10:12 - 00000000 ____D C:\Users\Admin\Desktop\funpage
2015-11-16 12:59 - 2015-11-18 18:53 - 00000000 ____D C:\ProgramData\pWMiniProp
2015-11-16 12:59 - 2015-11-16 12:59 - 00000000 ____D C:\Users\Admin\AppData\Roaming\istartpageing
2015-11-15 12:25 - 2015-11-18 18:52 - 00000000 ____D C:\ProgramData\gWMiniProg
2015-11-14 12:23 - 2015-11-18 18:54 - 00000000 ____D C:\Users\Admin\AppData\Local\gmsd_pl_005010146
2015-11-14 12:23 - 2015-11-18 18:52 - 00000000 ____D C:\Program Files (x86)\gmsd_pl_005010146
2015-11-14 12:21 - 2015-11-18 18:53 - 00000000 ____D C:\ProgramData\lWMiniProl
2015-11-13 12:24 - 2015-11-18 18:52 - 00000000 ____D C:\ProgramData\3WMiniPro3
2015-11-13 12:21 - 2015-11-13 12:21 - 00004320 _____ C:\WINDOWS\System32\Tasks\SwiftSearch Auto Updater 1.10.0.25 Pending Update
2015-11-13 12:21 - 2015-11-13 12:21 - 00004290 _____ C:\WINDOWS\System32\Tasks\SwiftSearch Auto Updater 1.10.0.25 Core
2015-11-13 12:21 - 2015-11-13 12:21 - 00000000 ____D C:\Program Files (x86)\SwiftSearch_1.10.0.25
2015-11-13 09:49 - 2015-11-13 09:49 - 05286088 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2015-11-12 13:20 - 2015-11-05 06:13 - 00577888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-11-12 13:20 - 2015-11-05 06:06 - 03621248 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-11-12 13:20 - 2015-11-05 05:24 - 02878512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-11-12 13:20 - 2015-11-05 05:20 - 21873664 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-11-12 13:20 - 2015-11-05 05:18 - 24597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-11-12 13:20 - 2015-11-05 05:18 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-11-12 13:20 - 2015-11-05 05:10 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2015-11-12 13:20 - 2015-11-05 05:03 - 02180608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-11-12 13:20 - 2015-11-05 04:59 - 02675200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2015-11-12 13:20 - 2015-11-05 04:58 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-11-12 13:20 - 2015-11-05 04:56 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-11-12 13:20 - 2015-11-05 04:42 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-11-12 13:20 - 2015-11-05 04:35 - 18803712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-11-12 13:20 - 2015-11-05 04:35 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2015-11-12 13:20 - 2015-11-05 04:27 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2015-11-12 13:19 - 2015-11-05 06:15 - 08020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-11-12 13:19 - 2015-11-05 06:15 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2015-11-12 13:19 - 2015-11-05 06:14 - 00459104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2015-11-12 13:19 - 2015-11-05 06:11 - 01392480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-11-12 13:19 - 2015-11-05 06:06 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-11-12 13:19 - 2015-11-05 06:01 - 00607408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-11-12 13:19 - 2015-11-05 05:56 - 01083072 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-11-12 13:19 - 2015-11-05 05:56 - 00116064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-11-12 13:19 - 2015-11-05 05:56 - 00025280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-11-12 13:19 - 2015-11-05 05:30 - 00961376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-11-12 13:19 - 2015-11-05 05:23 - 00762888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-11-12 13:19 - 2015-11-05 05:23 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2015-11-12 13:19 - 2015-11-05 05:18 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-11-12 13:19 - 2015-11-05 05:17 - 02418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-11-12 13:19 - 2015-11-05 05:12 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
2015-11-12 13:19 - 2015-11-05 05:11 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-11-12 13:19 - 2015-11-05 05:10 - 12504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-11-12 13:19 - 2015-11-05 05:07 - 01068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-11-12 13:19 - 2015-11-05 05:06 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2015-11-12 13:19 - 2015-11-05 05:05 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-11-12 13:19 - 2015-11-05 05:05 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-11-12 13:19 - 2015-11-05 05:03 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-11-12 13:19 - 2015-11-05 05:01 - 00949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-11-12 13:19 - 2015-11-05 05:01 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-11-12 13:19 - 2015-11-05 05:01 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-11-12 13:19 - 2015-11-05 04:59 - 03587072 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-11-12 13:19 - 2015-11-05 04:58 - 01383936 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-11-12 13:19 - 2015-11-05 04:55 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2015-11-12 13:19 - 2015-11-05 04:54 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2015-11-12 13:19 - 2015-11-05 04:47 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-11-12 13:19 - 2015-11-05 04:40 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-11-12 13:19 - 2015-11-05 04:34 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2015-11-12 13:19 - 2015-11-05 04:33 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-11-12 13:19 - 2015-11-05 04:33 - 00650240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-11-12 13:19 - 2015-11-05 04:30 - 00767488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-11-12 13:19 - 2015-11-05 04:28 - 11262976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-11-12 13:19 - 2015-11-05 04:27 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-11-12 13:19 - 2015-11-05 04:23 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2015-11-12 12:28 - 2015-11-12 12:28 - 00010565 _____ C:\Users\Admin\Downloads\Fiscal-2015-11-12_12.28.odt
2015-11-12 12:26 - 2015-11-19 06:22 - 00004220 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{EBDEB126-B4D7-421F-810F-7460BC22B723}
2015-11-12 12:25 - 2015-11-19 10:18 - 00000000 ____D C:\Program Files (x86)\SFK
2015-11-12 12:25 - 2015-11-18 18:52 - 00000000 ____D C:\ProgramData\FWMiniProF
2015-11-12 12:25 - 2015-11-12 12:25 - 00000000 ____D C:\Users\Admin\AppData\Roaming\istartsurf
2015-11-12 12:23 - 2015-11-19 09:37 - 00000000 ____D C:\Program Files (x86)\Feed Notifier
2015-11-12 12:23 - 2015-11-12 12:23 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\jogotempo
2015-11-12 12:01 - 2015-11-12 12:01 - 00000000 ____D C:\Users\Admin\AppData\Roaming\shortCutStore
2015-11-12 11:58 - 2015-11-12 11:58 - 00000008 _____ C:\END
2015-11-12 11:26 - 2015-11-12 11:50 - 00004728 _____ C:\WINDOWS\SysWOW64\Wuojeg.ini
2015-11-12 11:26 - 2015-11-12 11:50 - 00002440 _____ C:\WINDOWS\SysWOW64\WuojegOff.ini
2015-11-12 11:26 - 2015-11-12 11:50 - 00002440 _____ C:\WINDOWS\system32\WuojegOff.ini
2015-11-12 11:26 - 2015-11-12 09:32 - 00375160 _____ C:\WINDOWS\system32\Wuojeg64.dll
2015-11-12 11:26 - 2015-11-12 09:32 - 00289144 _____ C:\WINDOWS\SysWOW64\Wuojeg.dll
2015-11-12 11:25 - 2015-11-12 11:26 - 00000000 ____D C:\Users\Admin\AppData\Local\Tempfolder
2015-11-12 11:25 - 2015-11-12 11:25 - 00000000 ____D C:\WINDOWS\system32\cobu
2015-11-12 11:24 - 2015-11-18 18:51 - 00000000 ____D C:\Program Files\groover121120151030
2015-11-12 11:24 - 2015-11-12 11:24 - 00034720 _____ () C:\WINDOWS\system32\Drivers\bsdriver.sys
2015-11-12 11:24 - 2015-11-12 11:24 - 00003420 _____ C:\WINDOWS\System32\Tasks\Kaordauh
2015-11-12 11:24 - 2015-11-12 11:24 - 00000000 ____D C:\Users\Admin\AppData\LocalLow\Company
2015-11-12 11:24 - 2015-11-12 11:24 - 00000000 ____D C:\Users\Admin\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}
2015-11-12 11:24 - 2015-11-12 11:24 - 00000000 ____D C:\uninst
2015-11-12 11:22 - 2015-11-12 11:22 - 00000000 _____ C:\WINDOWS\SysWOW64\Number of results
2015-11-12 11:18 - 2015-11-18 18:53 - 00000000 ____D C:\ProgramData\UWMiniProU
2015-11-12 11:18 - 2015-11-13 12:24 - 00000000 ____D C:\Users\Admin\AppData\Roaming\mystartsearch
2015-11-12 09:32 - 2015-11-12 11:24 - 00056736 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\cherimoya.sys
2015-11-09 14:08 - 2015-11-19 10:18 - 00000098 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-11-09 14:08 - 2015-11-18 18:53 - 00000000 ____D C:\ProgramData\WWMiniProW
2015-11-09 14:08 - 2015-11-16 12:59 - 00000000 ____D C:\Users\Admin\AppData\Roaming\cpuminer
2015-11-09 14:04 - 2015-11-19 11:14 - 00000000 ____D C:\Users\Admin\AppData\LocalLow\SmartWeb
2015-11-09 13:36 - 2015-11-10 09:23 - 00000000 ____D C:\Program Files (x86)\ChilliTorrent
2015-11-09 13:34 - 2015-11-10 08:34 - 00000004 _____ C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-11-09 13:32 - 2015-11-18 18:54 - 00000000 ____D C:\Users\Admin\AppData\Local\4C4C4544-1447075946-3410-804B-CAC04F575931
2015-11-09 13:32 - 2009-06-10 22:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2015-11-09 13:31 - 2015-11-19 09:35 - 00000000 ____D C:\Program Files (x86)\4C4C4544-1447072269-3410-804B-CAC04F575931
2015-11-09 13:31 - 2015-11-16 12:36 - 00000000 ____D C:\Users\Admin\AppData\Roaming\RunDir
2015-11-09 13:31 - 2015-11-09 13:31 - 00000000 ____D C:\Users\Admin\AppData\Roaming\NetService
2015-11-09 11:28 - 2015-11-09 11:38 - 94071282 _____ C:\Users\Admin\Documents\czapla.mp4
2015-11-09 11:16 - 2015-11-09 11:16 - 00265360 _____ C:\Users\Admin\Downloads\Tyga_Glitta.mp3.sfk
2015-11-06 12:53 - 2015-11-06 13:03 - 89545532 _____ C:\Users\Admin\Documents\czap.mp4
2015-10-29 10:09 - 2015-10-29 11:38 - 1104371556 _____ C:\Users\Admin\Documents\cortez.mp4
2015-10-28 16:08 - 2015-10-28 17:19 - 1120312192 _____ C:\Users\Admin\Documents\fikakak.mp4
2015-10-28 14:58 - 2015-10-28 15:00 - 00417592 _____ C:\Users\Admin\Downloads\Ten Typ Mes - LOVEYOURLIFE - Trzeba było zostać dresiarzem [sciagara.pl].mp3.sfk
2015-10-23 10:35 - 2015-10-23 10:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cobian Backup 11
2015-10-23 10:35 - 2015-10-23 10:35 - 00000000 ____D C:\Program Files (x86)\Cobian Backup 11
2015-10-23 09:33 - 2015-10-23 09:33 - 00000000 ____D C:\Users\Admin\Documents\backup
2015-10-23 09:30 - 2015-10-23 09:30 - 00000000 ____D C:\WINDOWS\System32\Tasks\2BrightSparks
2015-10-23 09:30 - 2015-10-23 09:30 - 00000000 ____D C:\Users\Admin\AppData\Roaming\2BrightSparks
2015-10-22 14:34 - 2015-10-22 14:34 - 00000000 ____D C:\Users\Admin\AppData\Local\FileViewPro
2015-10-22 14:33 - 2015-10-22 14:33 - 00000000 ____D C:\Users\Admin\AppData\Roaming\IsolatedStorage
2015-10-22 14:33 - 2015-10-22 14:33 - 00000000 ____D C:\ProgramData\IsolatedStorage
2015-10-22 14:31 - 2015-10-22 14:31 - 00000000 ____D C:\Spacekace

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-19 11:49 - 2014-10-16 08:12 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-11-19 11:44 - 2014-10-30 13:45 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-11-19 11:44 - 2014-05-03 21:09 - 00000000 ____D C:\ProgramData\Skype
2015-11-19 11:15 - 2015-07-30 23:42 - 00000000 ____D C:\WINDOWS\system32\sru
2015-11-19 11:13 - 2014-03-10 07:19 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-11-19 11:12 - 2015-09-09 21:47 - 00032144 _____ C:\WINDOWS\PFRO.log
2015-11-19 11:12 - 2015-07-30 22:52 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-11-19 11:12 - 2015-07-10 10:05 - 00131072 ___SH C:\WINDOWS\system32\config\BBI
2015-11-19 11:11 - 2014-05-03 21:10 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Skype
2015-11-19 10:17 - 2015-02-03 10:31 - 00000000 ____D C:\Users\Admin\AppData\Local\SmartWeb
2015-11-19 09:41 - 2014-09-25 09:44 - 00000830 __RSH C:\ProgramData\ntuser.pol
2015-11-19 09:35 - 2015-08-26 09:12 - 00000000 ____D C:\Program Files (x86)\DNS Unlocker
2015-11-19 09:23 - 2015-07-30 23:42 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-11-19 02:00 - 2014-09-04 10:26 - 00000000 ____D C:\Users\Admin\AppData\Local\Adobe
2015-11-18 18:53 - 2014-12-10 17:22 - 00000000 ____D C:\ProgramData\websaver
2015-11-18 18:53 - 2014-12-10 09:01 - 00000000 ____D C:\ProgramData\Interenet Optimizer
2015-11-18 18:52 - 2015-08-12 09:12 - 00000000 ____D C:\Program Files (x86)\mozilla firefox
2015-11-18 18:52 - 2015-01-09 17:34 - 00000000 ____D C:\ProgramData\bojfndnanloeabobldogokeaigpfhcai
2015-11-18 18:52 - 2014-11-18 11:39 - 00000000 ____D C:\ProgramData\01e58235-010d-43b1-8340-277d43a75321
2015-11-18 18:52 - 2014-11-18 10:25 - 00000000 ____D C:\ProgramData\IePluginServices
2015-11-18 09:39 - 2015-02-02 11:00 - 00000000 ____D C:\ProgramData\Sony
2015-11-17 17:54 - 2015-07-30 23:42 - 00000000 ____D C:\WINDOWS\rescache
2015-11-17 16:48 - 2014-04-25 10:56 - 00000000 ____D C:\Users\Admin\Desktop\felgi
2015-11-17 10:20 - 2015-09-29 13:41 - 02122780 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-17 10:20 - 2015-09-10 06:09 - 00919484 _____ C:\WINDOWS\system32\perfh015.dat
2015-11-17 10:20 - 2015-09-10 06:09 - 00202858 _____ C:\WINDOWS\system32\perfc015.dat
2015-11-17 10:08 - 2014-09-18 15:12 - 00000000 ____D C:\Users\Admin\Desktop\czapla
2015-11-16 16:51 - 2015-07-30 23:42 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-11-16 13:43 - 2015-07-30 23:42 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-11-16 13:11 - 2014-11-03 11:54 - 00000000 ____D C:\Program Files\Adobe
2015-11-16 13:10 - 2014-11-03 11:53 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-11-16 13:05 - 2014-09-04 10:57 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-11-16 13:01 - 2014-05-21 14:05 - 00000000 ____D C:\Users\Admin\AppData\Local\Unity
2015-11-16 12:23 - 2015-07-30 23:42 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-11-16 09:12 - 2015-07-31 10:16 - 00001265 _____ C:\WINDOWS\SysWOW64\TxRx.log
2015-11-12 14:05 - 2015-07-30 23:25 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-11-12 14:03 - 2014-05-01 12:38 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-12 13:53 - 2014-05-01 12:38 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-12 12:23 - 2014-04-17 12:45 - 00001430 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-11-10 14:20 - 2014-09-01 11:29 - 00000000 ____D C:\Users\Admin\AppData\Local\Spotify
2015-11-10 13:39 - 2014-11-18 11:02 - 00000000 ____D C:\Program Files (x86)\globalUpdate
2015-11-10 12:34 - 2014-07-30 12:22 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Spotify
2015-11-09 14:04 - 2015-02-18 09:29 - 00004140 _____ C:\WINDOWS\System32\Tasks\SmartWeb Upgrade Trigger Task
2015-11-03 19:20 - 2015-10-14 08:15 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-11-03 19:20 - 2015-10-14 08:15 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-03 03:34 - 2015-07-30 22:49 - 04943600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-10-29 09:20 - 2015-09-29 14:09 - 00000000 ____D C:\Users\Admin\AppData\Local\Packages
2015-10-28 20:05 - 2015-07-30 22:50 - 00024119 _____ C:\WINDOWS\setupact.log
2015-10-27 11:57 - 2015-06-22 13:10 - 00000000 ____D C:\Users\Admin\Desktop\fora
2015-10-23 15:05 - 2015-02-02 11:33 - 00000132 _____ C:\Users\Admin\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-10-20 15:48 - 2015-09-29 13:43 - 00000000 ____D C:\Users\Admin

==================== Pliki w katalogu głównym wybranych folderów =======

2015-05-06 08:29 - 2015-05-06 08:29 - 0000079 _____ () C:\Program Files (x86)\prefs.js
2015-02-02 11:33 - 2015-10-23 15:05 - 0000132 _____ () C:\Users\Admin\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-02-04 10:40 - 2015-02-04 10:40 - 0000020 _____ () C:\Users\Admin\AppData\Roaming\appdataFr3.bin
2014-11-18 11:01 - 2014-12-01 08:59 - 0000768 _____ () C:\Users\Admin\AppData\Roaming\LiveSupport.exe_log.txt
2014-11-18 11:01 - 2014-12-01 08:59 - 0000092 _____ () C:\Users\Admin\AppData\Roaming\regsvr32.exe_log.txt
2015-02-11 13:56 - 2015-02-11 13:56 - 0005387 _____ () C:\Users\Admin\AppData\Local\recently-used.xbel
2015-09-29 13:38 - 2015-09-29 13:38 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-11-09 14:08 - 2015-11-19 10:18 - 0000098 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


Niektóre pliki w TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\fsd6A02.exe
C:\Users\Admin\AppData\Local\Temp\SpOrder.dll
C:\Users\Admin\AppData\Local\Temp\Uninstall.exe
C:\Users\Admin\AppData\Local\Temp\UninstallModule.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll
[2015-07-10 04:14] - [2015-07-10 04:14] - 0680256 ____A (Microsoft Corporation) 04695E72D448EB1FB845597765372C67

C:\WINDOWS\SysWOW64\dnsapi.dll BRAK <==== UWAGA
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-11-12 13:52

==================== Koniec  FRST.txt ============================