Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:18-11-2015 Uruchomiony przez Witek (administrator) WITEK-KOMPUTER (18-11-2015 19:45:24) Uruchomiony z C:\Users\Witek\Downloads Załadowane profile: Witek (Dostępne profile: Witek) Platform: Windows 7 Home Premium (X64) Język: Polski (Polska) Internet Explorer Wersja 9 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe () C:\ProgramData\DatacardService\DCService.exe () C:\ProgramData\MobileBrServ\mbbService.exe () C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe (SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe (Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10144288 2010-04-07] (Realtek Semiconductor) HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [2703752 2010-03-25] (ELAN Microelectronics Corp.) HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation) HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation) HKLM-x32\...\Run: [UCam_Menu] => C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [DataCardMonitor] => C:\Program Files (x86)\blueconnect\DataCardMonitor.exe [253952 2011-01-28] (Huawei Technologies Co., Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-4141374535-311919606-3590139362-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation) HKU\S-1-5-21-4141374535-311919606-3590139362-1000\...\Run: [HW_OPENEYE_OUC_] => C:\Program Files (x86)\blueconnect\UpdateDog\ouc.exe [110592 2009-12-31] (Huawei Technologies Co., Ltd.) HKU\S-1-5-21-4141374535-311919606-3590139362-1000\...\Run: [Agent Portfela Bitdefender] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790880 2015-01-15] (Bitdefender) HKU\S-1-5-21-4141374535-311919606-3590139362-1000\...\MountPoints2: F - F:\AutoRun.exe HKU\S-1-5-21-4141374535-311919606-3590139362-1000\...\MountPoints2: {d6ced667-2b1d-11e0-ac64-e811320e23b7} - F:\AutoRun.exe HKU\S-1-5-21-4141374535-311919606-3590139362-1000\...\MountPoints2: {dee699e8-e839-11e1-9a76-e811320e23b7} - F:\AutoRun.exe HKU\S-1-5-21-4141374535-311919606-3590139362-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Ribbons.scr [241664 2009-07-14] (Microsoft Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Brak pliku Startup: C:\Users\Witek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fjoby.lnk [2014-04-04] ShortcutTarget: fjoby.lnk -> ybojf.dll,work (Brak pliku) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{33254751-58ED-4700-B2B5-5E5C57B2712D}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{38534C9C-C4F3-4C29-83E9-8A388C2AF22C}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{BD3BA20C-DB4B-459F-A784-C2F316674832}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{E37BFF3E-184B-4C5B-BB8D-8663E4CA416A}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-4141374535-311919606-3590139362-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-4141374535-311919606-3590139362-1000 -> DefaultScope {1DCA5C1D-8D6C-41F4-B03C-D46548D61502} URL = hxxp://www.google.com/search?hl=pl&q={searchTerms} SearchScopes: HKU\S-1-5-21-4141374535-311919606-3590139362-1000 -> {1DCA5C1D-8D6C-41F4-B03C-D46548D61502} URL = hxxp://www.google.com/search?hl=pl&q={searchTerms} BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2009-01-29] () BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-11-08] (Oracle Corporation) BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation) BHO-x32: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies S.A.) BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2009-01-29] () BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-11-08] (Oracle Corporation) Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2009-01-29] () Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2009-01-29] () Toolbar: HKU\S-1-5-21-4141374535-311919606-3590139362-1000 -> Brak nazwy - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - Brak pliku DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2009-01-29] () Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2009-01-29] () Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies S.A.) FireFox: ======== FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-11-08] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-11-08] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-20] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-20] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [{B7082FAA-CB62-4872-9106-E42DD88EDE45}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2015-11-06] [Brak podpisu cyfrowego] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.com CHR StartupUrls: Default -> "hxxp://interia.pl/" CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\PepperFlash\pepflashplayer.dll () CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\ppGoogleNaClPluginChrome.dll => Brak pliku CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\pdf.dll => Brak pliku CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll => Brak pliku CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll => Brak pliku CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll => Brak pliku CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll => Brak pliku CHR Profile: C:\Users\Witek\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (YouTube) - C:\Users\Witek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-26] CHR Extension: (TrafficLight) - C:\Users\Witek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfnpidifppmenkapgihekkeednfoenal [2015-04-05] CHR Extension: (Google Search) - C:\Users\Witek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-30] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Witek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-01] CHR Extension: (Gmail) - C:\Users\Witek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2014-12-09] (Bitdefender) R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-08-19] () [Brak podpisu cyfrowego] R2 Huawei E3372; C:\ProgramData\MobileBrServ\mbbservice.exe [240720 2014-03-07] () R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [203280 2009-01-23] () R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [67320 2014-10-27] (Bitdefender) S4 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1547936 2015-03-16] (Bitdefender) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) S2 Winmgmt; C:\PROGRA~3\2992199F9A\fjoby.faa [X] ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2014-12-15] (BitDefender LLC) S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [250368 2010-04-07] (Huawei Technologies Co., Ltd.) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [160544 2015-11-07] (BitDefender LLC) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation) S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2011-01-06] (Windows (R) 2003 DDK 3790 provider) R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] () ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-11-18 19:45 - 2015-11-18 19:46 - 00017142 _____ C:\Users\Witek\Downloads\FRST.txt 2015-11-18 19:12 - 2015-11-18 19:45 - 00000000 ____D C:\FRST 2015-11-18 19:11 - 2015-11-18 19:11 - 02008576 _____ (Farbar) C:\Users\Witek\Downloads\FRST64.exe 2015-11-08 21:57 - 2015-11-18 19:08 - 00000000 ____D C:\Users\Witek\AppData\Local\{C0861E68-FB0B-4786-AB67-8B790BE14939} 2015-11-08 17:23 - 2015-11-08 17:23 - 00059468 _____ C:\Users\Witek\Desktop\Extras.Txt 2015-11-08 17:23 - 2015-11-08 17:23 - 00029690 _____ C:\Users\Witek\Downloads\Addition.txt 2015-11-08 17:22 - 2015-11-08 17:22 - 00067406 _____ C:\Users\Witek\Desktop\OTL.Txt 2015-11-08 16:57 - 2015-11-08 17:21 - 00059468 _____ C:\Users\Witek\Downloads\Extras.Txt 2015-11-08 16:44 - 2015-11-08 16:44 - 00602112 _____ (OldTimer Tools) C:\Users\Witek\Downloads\OTL (1).exe 2015-11-08 16:29 - 2015-11-08 17:19 - 00067406 _____ C:\Users\Witek\Downloads\OTL.Txt 2015-11-08 14:49 - 2015-11-08 14:49 - 00003161 _____ C:\Users\Witek\Downloads\FSS.txt 2015-11-08 14:46 - 2015-11-08 14:47 - 00899072 _____ (Farbar) C:\Users\Witek\Downloads\FSS.exe 2015-11-08 14:29 - 2015-11-08 14:30 - 00000000 ____D C:\Users\Public\Desktop\CC Support 2015-11-08 14:27 - 2015-11-08 14:28 - 04009167 _____ C:\Users\Witek\Downloads\ServicesRepair.exe 2015-11-08 13:03 - 2015-11-08 13:03 - 01059840 _____ C:\Users\Witek\Downloads\MicrosoftFixit50981.msi 2015-11-08 10:06 - 2015-11-08 10:06 - 00000000 ____D C:\Users\Witek\AppData\Roaming\Sun 2015-11-08 10:06 - 2015-11-08 10:06 - 00000000 ____D C:\Users\Witek\.oracle_jre_usage 2015-11-07 14:37 - 2015-11-07 14:37 - 01306464 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys 2015-11-07 14:37 - 2015-11-07 14:37 - 00677104 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys 2015-11-07 14:37 - 2015-11-07 14:37 - 00452040 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys 2015-11-07 14:37 - 2015-11-07 14:37 - 00262544 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys 2015-11-07 14:37 - 2015-11-07 14:37 - 00082824 _____ (BitDefender SRL) C:\Windows\system32\Drivers\bdsandbox.sys 2015-11-07 14:37 - 2015-11-07 14:37 - 00076944 _____ (BitDefender) C:\Windows\system32\Drivers\bdvedisk.sys 2015-11-07 14:07 - 2015-11-08 09:56 - 00000000 ____D C:\Users\Witek\AppData\Local\{D8A2BE84-5664-4C21-8058-27F1C309BFD5} 2015-11-06 23:41 - 2015-11-06 23:48 - 00000000 ____D C:\Users\Witek\AppData\Roaming\Bitdefender 2015-11-06 23:37 - 2015-11-06 23:37 - 00101675 _____ C:\ProgramData\1446849441.bdinstall.bin 2015-11-06 23:35 - 2015-11-06 23:35 - 00773313 _____ C:\ProgramData\1446849159.bdinstall.bin 2015-11-06 23:21 - 2015-11-07 14:37 - 00160544 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys 2015-11-06 22:53 - 2015-11-06 22:53 - 13155552 _____ (Microsoft Corporation) C:\Users\Witek\Downloads\Silverlight_x64 (1).exe 2015-11-06 22:51 - 2015-11-06 22:52 - 13155552 _____ (Microsoft Corporation) C:\Users\Witek\Downloads\Silverlight_x64.exe 2015-11-06 21:01 - 2015-11-06 21:02 - 00000000 ____D C:\Users\Witek\AppData\Local\{2A0B50FD-96EE-4832-A35E-6D926BE2816F} 2015-11-06 20:50 - 2015-11-06 20:50 - 00002154 _____ C:\Windows\epplauncher.mif 2015-11-06 20:49 - 2015-11-06 23:07 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client 2015-11-06 20:49 - 2015-11-06 20:49 - 00002117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk 2015-11-06 20:48 - 2015-11-06 23:07 - 00000000 ____D C:\Program Files\Microsoft Security Client 2015-11-06 20:48 - 2010-04-09 12:06 - 00374664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2015-11-06 20:46 - 2015-11-06 20:46 - 14262976 _____ (Microsoft Corporation) C:\Users\Witek\Downloads\mseinstall.exe 2015-11-06 00:22 - 2015-11-06 00:25 - 564744309 _____ C:\Users\Witek\Downloads\Windows6.1-KB947821-v34-x64.msu 2015-11-06 00:17 - 2015-11-06 00:17 - 00985600 _____ C:\Users\Witek\Downloads\MicrosoftFixit50123 (1).msi 2015-11-06 00:17 - 2015-11-06 00:17 - 00302011 _____ C:\Users\Witek\Downloads\WindowsUpdateDiagnostic (3).diagcab 2015-11-06 00:17 - 2015-11-06 00:17 - 00302011 _____ C:\Users\Witek\Downloads\WindowsUpdateDiagnostic (2).diagcab 2015-11-06 00:14 - 2015-11-06 00:15 - 00302011 _____ C:\Users\Witek\Downloads\WindowsUpdateDiagnostic (1).diagcab 2015-11-06 00:02 - 2015-11-06 00:02 - 00302011 _____ C:\Users\Witek\Downloads\WindowsUpdateDiagnostic.diagcab 2015-11-05 23:50 - 2015-11-05 23:50 - 00985600 _____ C:\Users\Witek\Downloads\MicrosoftFixit50123.msi 2015-11-05 17:16 - 2015-11-05 17:16 - 00000000 ____D C:\Users\Witek\AppData\Local\{E6620090-DAB5-4E4A-97DE-00AC761D464D} 2015-11-05 16:16 - 2015-11-05 16:16 - 00000000 ____D C:\Users\Witek\AppData\Local\{3ABBE211-5E3F-4387-9CC9-52ED0A9BBB79} 2015-11-03 20:08 - 2015-11-03 20:09 - 00000000 ____D C:\Users\Witek\AppData\Local\{9D1132F2-D902-48EA-8D78-90264BC9447B} 2015-11-02 15:36 - 2015-11-02 15:37 - 00000000 ____D C:\Users\Witek\AppData\Local\{8D587242-F0D6-4A1A-979D-33537CF50019} 2015-10-30 13:13 - 2015-10-30 13:13 - 00000000 ____D C:\Users\Witek\AppData\Local\{A18B6BEE-B45C-4B02-A5DC-3EFC2B548A7C} ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-11-18 19:32 - 2009-07-14 05:45 - 00014144 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-11-18 19:32 - 2009-07-14 05:45 - 00014144 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-11-18 19:29 - 2010-08-06 00:39 - 01265642 _____ C:\Windows\WindowsUpdate.log 2015-11-18 19:24 - 2012-05-11 16:27 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-11-18 19:08 - 2012-05-11 16:27 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-11-18 19:08 - 2012-04-20 08:47 - 00003990 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{FF7E83DE-4D04-4B61-B3E4-A36DAC1F5A64} 2015-11-18 19:07 - 2013-08-01 18:46 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-11-11 10:43 - 2013-08-01 18:46 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-11-11 10:42 - 2013-08-01 18:46 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-11-11 10:42 - 2013-08-01 18:46 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-11-08 14:32 - 2011-02-16 17:49 - 00000000 ____D C:\Users\Witek\Tracing 2015-11-08 14:32 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-11-08 14:31 - 2009-07-14 05:51 - 00116204 _____ C:\Windows\setupact.log 2015-11-08 10:25 - 2014-12-20 13:25 - 00000000 ____D C:\Windows\system32\appraiser 2015-11-08 10:25 - 2014-07-11 17:01 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-11-08 10:11 - 2014-02-18 20:30 - 00000000 ____D C:\ProgramData\Oracle 2015-11-08 10:07 - 2014-02-18 20:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-11-08 10:06 - 2014-02-18 20:29 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2015-11-08 10:06 - 2011-01-28 21:34 - 00000000 ____D C:\Users\Witek 2015-11-08 10:05 - 2014-02-18 20:29 - 00000000 ____D C:\Program Files (x86)\Java 2015-11-06 23:41 - 2014-02-18 22:11 - 00000000 ____D C:\ProgramData\Bitdefender 2015-11-06 23:36 - 2010-08-05 09:36 - 01024602 _____ C:\Windows\PFRO.log 2015-11-06 23:21 - 2014-02-18 22:10 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2015-11-06 23:07 - 2015-08-14 16:40 - 00000000 ____D C:\ProgramData\MobileBrServ 2015-11-06 23:07 - 2015-08-14 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Huawei E3372 2015-11-06 23:07 - 2015-04-18 21:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-11-06 23:07 - 2014-04-08 11:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PIT Format 2013 2015-11-06 23:07 - 2014-04-08 11:21 - 00000000 ____D C:\PIT Format 2013 2015-11-06 23:07 - 2013-03-14 23:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-11-06 23:07 - 2013-03-14 23:11 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-11-06 23:07 - 2013-03-14 23:11 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2015-11-06 23:07 - 2012-05-11 16:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-11-06 23:07 - 2011-01-28 22:02 - 00000000 ____D C:\ProgramData\DatacardService 2015-11-06 23:07 - 2011-01-28 22:02 - 00000000 ____D C:\Program Files (x86)\blueconnect 2015-11-06 23:07 - 2010-08-06 01:11 - 00000000 ____D C:\Program Files\Windows Journal 2015-11-06 23:07 - 2010-08-05 08:53 - 00000000 ____D C:\ProgramData\WinClon 2015-11-06 23:07 - 2010-08-05 08:52 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-11-06 23:07 - 2010-08-05 08:46 - 00000000 ____D C:\Program Files\Elantech 2015-11-06 23:07 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Sidebar 2015-11-06 23:07 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2015-11-06 23:07 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender 2015-11-06 23:07 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\DVD Maker 2015-11-06 23:07 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar 2015-11-06 23:07 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System 2015-11-06 23:07 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Services 2015-11-06 23:06 - 2014-12-20 23:54 - 00000000 ____D C:\Windows\system32\EventProviders 2015-11-06 23:06 - 2013-08-01 18:46 - 00000000 ____D C:\Windows\system32\Macromed 2015-11-06 23:06 - 2011-01-28 22:05 - 00000000 ____D C:\Users\Witek\AppData\Roaming\blueconnect 2015-11-06 23:06 - 2010-08-06 01:24 - 00000000 ____D C:\Windows\SysWOW64\pl 2015-11-06 23:06 - 2010-08-06 01:24 - 00000000 ____D C:\Windows\system32\pl 2015-11-06 23:06 - 2010-08-06 01:11 - 00000000 ____D C:\Windows\ShellNew 2015-11-06 23:06 - 2010-08-05 08:48 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2015-11-06 23:06 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 __RSD C:\Windows\Media 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\uk-UA 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\th-TH 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\sr-Latn-CS 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\sppui 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\sl-SI 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\sk-SK 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Setup 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ro-RO 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ras 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\lv-LV 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\lt-LT 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\hr-HR 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\he-IL 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\et-EE 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\com 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\bg-BG 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\ar-SA 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\zh-HK 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\uk-UA 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\tr-TR 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\th-TH 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sr-Latn-CS 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sppui 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sl-SI 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sk-SK 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Setup 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ro-RO 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ras 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\oobe 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\migwiz 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\lv-LV 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\lt-LT 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ias 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\hr-HR 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\he-IL 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\et-EE 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Dism 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\com 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\bg-BG 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\ar-SA 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\servicing 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\L2Schemas 2015-11-06 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat 2015-11-06 23:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK 2015-11-06 23:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration 2015-11-06 21:53 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\Offline Web Pages 2015-11-06 21:48 - 2014-02-18 22:18 - 00000000 ____D C:\ProgramData\BDLogging 2015-11-02 16:39 - 2013-08-19 20:36 - 00000000 ____D C:\Windows\system32\MRT 2015-11-02 16:29 - 2011-01-30 13:44 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-10-30 13:32 - 2014-02-20 20:13 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-10-30 13:31 - 2015-03-16 18:46 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-11-06 23:35 - 2015-11-06 23:35 - 0773313 _____ () C:\ProgramData\1446849159.bdinstall.bin 2015-11-06 23:37 - 2015-11-06 23:37 - 0101675 _____ () C:\ProgramData\1446849441.bdinstall.bin 2011-02-02 12:55 - 2011-02-02 12:55 - 0000056 ____H () C:\ProgramData\ezsidmv.dat 2011-01-28 21:36 - 2010-01-16 07:18 - 0131368 _____ () C:\ProgramData\FullRemove.exe 2014-01-18 21:36 - 2014-01-21 11:05 - 0000000 _____ () C:\ProgramData\gdq21wl.odd Pliki do przeniesienia lub usunięcia: ==================== C:\ProgramData\gdq21wl.odd Niektóre pliki w TEMP: ==================== C:\Users\Witek\AppData\Local\Temp\jre-8u65-windows-au.exe ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-11-10 03:39 ==================== Koniec FRST.txt ============================