Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:20-11-2015
Uruchomiony przez Mikołaj (administrator)  MIKOŁAJPC (21-11-2015 18:46:57)
Uruchomiony z C:\Users\Mikołaj\Desktop\fixit.pc
Załadowane profile: Mikołaj (Dostępne profile: Mikołaj)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
() C:\Program Files (x86)\CPUCooL\CooLSRV.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Spotify Ltd) C:\Users\Mikołaj\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\Mikołaj\AppData\Roaming\Spotify\Spotify.exe
() C:\Program Files (x86)\screenSHU\screenSHU.exe
(GG Network S.A.) C:\Users\Mikołaj\AppData\Local\GG\Application\gghub.exe
(GG Network S.A.) C:\Users\Mikołaj\AppData\Local\GG\Application\ggapp.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Spotify Ltd) C:\Users\Mikołaj\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Spotify Ltd) C:\Users\Mikołaj\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Mikołaj\AppData\Roaming\Spotify\Spotify.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(GG Network S.A.) C:\Users\Mikołaj\AppData\Local\GG\Application\ggdrive\ggdrive.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
() C:\Program Files (x86)\Opera\29.0.1795.47\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\29.0.1795.47\opera.exe
(Plays.tv, LLC) C:\Program Files (x86)\PlaysTV\plays_service.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-11-20] (Raptr, Inc)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-09-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PlaysTV] => C:\Program Files (x86)\PlaysTV\playstv_launcher.exe [60176 2015-11-19] (Plays.tv, LLC)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-10-26] (LogMeIn Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKU\S-1-5-21-1687086191-1766106099-2116064288-1000\...\Run: [Spotify Web Helper] => C:\Users\Mikołaj\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1959992 2015-03-13] (Spotify Ltd)
HKU\S-1-5-21-1687086191-1766106099-2116064288-1000\...\Run: [Spotify] => C:\Users\Mikołaj\AppData\Roaming\Spotify\Spotify.exe [6611512 2015-03-13] (Spotify Ltd)
HKU\S-1-5-21-1687086191-1766106099-2116064288-1000\...\Run: [screenSHU] => C:\Program Files (x86)\screenSHU\screenSHU.exe [2112000 2013-09-04] ()
HKU\S-1-5-21-1687086191-1766106099-2116064288-1000\...\Run: [GG] => C:\Users\Mikołaj\AppData\Local\GG\Application\gghub.exe [4078144 2015-04-21] (GG Network S.A.)
HKU\S-1-5-21-1687086191-1766106099-2116064288-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5585136 2015-03-31] (Disc Soft Ltd)
HKU\S-1-5-21-1687086191-1766106099-2116064288-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8418584 2015-07-17] (Piriform Ltd)
HKU\S-1-5-21-1687086191-1766106099-2116064288-1000\...\Run: [WTFast Tray] => C:\Program Files (x86)\WTFast\WTFast.exe [5255256 2015-09-14] (AAA Internet Publishing, Inc.)
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2015-11-16]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> D:\TP-Link\TWCU.exe ()

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Winsock: Catalog9 01 C:\Windows\SysWOW64\WTFastDrv.dll [72296 2015-04-08] (Initex)
Winsock: Catalog9 02 C:\Windows\SysWOW64\WTFastDrv.dll [72296 2015-04-08] (Initex)
Winsock: Catalog9 06 C:\Windows\SysWOW64\WTFastDrv.dll [72296 2015-04-08] (Initex)
Winsock: Catalog9 07 C:\Windows\SysWOW64\WTFastDrv.dll [72296 2015-04-08] (Initex)
Winsock: Catalog9 15 C:\Windows\SysWOW64\WTFastDrv.dll [72296 2015-04-08] (Initex)
Winsock: Catalog9-x64 01 C:\Windows\system32\WTFastDrv.dll [79464 2015-04-08] (Initex)
Winsock: Catalog9-x64 02 C:\Windows\system32\WTFastDrv.dll [79464 2015-04-08] (Initex)
Winsock: Catalog9-x64 06 C:\Windows\system32\WTFastDrv.dll [79464 2015-04-08] (Initex)
Winsock: Catalog9-x64 07 C:\Windows\system32\WTFastDrv.dll [79464 2015-04-08] (Initex)
Winsock: Catalog9-x64 15 C:\Windows\system32\WTFastDrv.dll [79464 2015-04-08] (Initex)
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{2F8432F9-CFFF-4F39-9174-258BA9009868}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{57B329C6-0802-4E2D-BCAE-C87122E15916}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{57B329C6-0802-4E2D-BCAE-C87122E15916}: [DhcpNameServer] 8.8.8.8 8.8.4.4

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-1687086191-1766106099-2116064288-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-21] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-21] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-21] (Oracle Corporation)

Chrome: 
=======
CHR Profile: C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-19]
CHR Extension: (Dokumenty Google) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-19]
CHR Extension: (Dysk Google) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-19]
CHR Extension: (YouTube) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-19]
CHR Extension: (Google Search) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-19]
CHR Extension: (Arkusze Google) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-19]
CHR Extension: (Dokumenty Google offline) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-19]
CHR Extension: (Skype Click to Call) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-11-19]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-19]
CHR Extension: (Gmail) - C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-19]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]

Opera: 
=======
OPR Extension: (Stop Reclame) - C:\Users\Mikołaj\AppData\Roaming\Opera Software\Opera Stable\Extensions\fcnodchihpbcjiofidkkeaioejgpijkl [2015-07-24]
OPR Extension: (Adblock Plus) - C:\Users\Mikołaj\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2015-10-17]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [351944 2015-09-30] (Advanced Micro Devices, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
R2 CPUCooLServer; C:\Program Files (x86)\CPUCooL\CooLSrv.exe [743936 2011-12-01] () [Brak podpisu cyfrowego]
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-10-19] (Digital Wave Ltd.)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1277680 2015-03-31] (Disc Soft Ltd)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2078216 2015-10-11] (Electronic Arts)
R2 PlaysService; C:\Program Files (x86)\PlaysTV\plays_service.exe [32528 2015-11-19] (Plays.tv, LLC)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30352 2015-08-04] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-10-05] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R1 ntiopnp; C:\Windows\System32\Drivers\ntiopnp.sys [19544 2010-11-11] ()
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-18 22:00 - 2015-11-21 18:42 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-11-18 14:55 - 2015-11-18 14:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-11-17 21:43 - 2015-11-17 21:43 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Mozilla
2015-11-17 19:27 - 2015-11-21 18:14 - 00000992 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-11-17 19:27 - 2015-11-17 19:27 - 00003992 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-11-17 19:24 - 2015-11-17 19:27 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-11-17 19:24 - 2015-11-17 19:27 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-17 15:47 - 2015-11-17 17:10 - 00004204 _____ C:\Windows\PFRO.log
2015-11-16 23:27 - 2015-11-16 23:30 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\TP-LINK
2015-11-16 23:27 - 2015-11-16 23:27 - 00000561 _____ C:\Users\Public\Desktop\TP-LINK Wireless Configuration Utility.lnk
2015-11-16 23:27 - 2015-11-16 23:27 - 00000561 _____ C:\ProgramData\Desktop\TP-LINK Wireless Configuration Utility.lnk
2015-11-16 23:25 - 2015-11-16 23:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2015-11-16 20:09 - 2015-11-16 20:10 - 00276640 _____ C:\Windows\Minidump\111615-19656-01.dmp
2015-11-16 20:09 - 2015-11-16 20:09 - 957720865 _____ C:\Windows\MEMORY.DMP
2015-11-16 19:43 - 2015-11-21 18:46 - 00000000 ____D C:\Users\Mikołaj\Desktop\fixit.pc
2015-11-15 20:18 - 2015-11-15 20:18 - 00000000 ____D C:\Windows\Sun
2015-11-15 20:16 - 2015-11-21 18:22 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-11-15 20:16 - 2015-11-21 18:22 - 00000000 ____D C:\Users\Mikołaj\.oracle_jre_usage
2015-11-15 20:16 - 2015-11-21 18:22 - 00000000 ____D C:\Program Files (x86)\Java
2015-11-15 20:16 - 2015-11-15 20:16 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Sun
2015-11-15 19:22 - 2014-05-14 17:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-11-15 19:22 - 2014-05-14 17:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-11-15 19:22 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-11-15 19:22 - 2014-05-14 17:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-11-15 19:22 - 2014-05-14 17:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-11-15 19:22 - 2014-05-14 17:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-11-15 19:22 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-11-15 19:22 - 2014-05-14 17:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-11-15 19:22 - 2014-05-14 17:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-11-15 19:22 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-11-15 19:22 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-11-15 19:22 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-11-15 19:22 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-11-15 19:22 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-11-15 19:03 - 2015-11-21 18:42 - 00000784 _____ C:\Windows\setupact.log
2015-11-15 19:03 - 2015-11-15 19:03 - 00000000 _____ C:\Windows\setuperr.log
2015-11-15 16:37 - 2015-11-15 16:37 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\AAA_Internet_Publishing,_
2015-11-15 16:37 - 2015-11-15 16:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WTFast
2015-11-15 16:37 - 2015-11-15 16:37 - 00000000 ____D C:\Program Files (x86)\WTFast
2015-11-15 16:37 - 2015-04-08 15:15 - 00079464 _____ (Initex) C:\Windows\system32\WTFastDrv.dll
2015-11-15 16:37 - 2015-04-08 15:15 - 00072296 _____ (Initex) C:\Windows\SysWOW64\WTFastDrv.dll
2015-11-15 16:37 - 2015-04-08 15:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SPORDER.DLL
2015-11-14 13:09 - 2015-11-14 13:12 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Fallout4
2015-11-12 16:17 - 2015-11-12 16:17 - 00000000 ____D C:\Users\Public\Desktop\i4j_writeperm_test
2015-11-12 16:17 - 2015-11-12 16:17 - 00000000 ____D C:\ProgramData\Desktop\i4j_writeperm_test
2015-11-11 23:00 - 2015-11-15 13:55 - 00000000 ____D C:\Program Files\BitComet
2015-11-11 23:00 - 2015-11-11 23:25 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\BitComet
2015-10-29 15:03 - 2015-10-29 15:03 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2015-10-25 11:18 - 2015-10-25 11:18 - 00003285 _____ C:\stat.txt
2015-10-25 11:18 - 2015-10-25 11:18 - 00002923 _____ C:\FCA9A89B5D3DBEBEA2C244D108AF2BC5.rf
2015-10-25 11:18 - 2015-10-25 11:18 - 00001832 _____ C:\AA88C5DC26DE6F4D341FB90C41DF90DF.rf
2015-10-25 11:18 - 2015-10-25 11:18 - 00001081 _____ C:\63BF7DB19E7833E1D23F2E5434C07C35.rf
2015-10-25 11:18 - 2015-10-25 11:18 - 00000682 _____ C:\0CE56368E40E128F910FCE80AC154429.rf
2015-10-24 11:19 - 2015-11-20 16:41 - 00012463 _____ C:\app_updater.log
2015-10-23 22:30 - 2015-10-23 22:30 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2015-10-23 22:21 - 2015-11-21 18:46 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\PlaysTV
2015-10-23 22:21 - 2015-11-21 18:46 - 00000000 ____D C:\Program Files (x86)\PlaysTV
2015-10-23 22:21 - 2015-10-23 22:21 - 00000000 ____D C:\ProgramData\PlaysTV
2015-10-23 22:21 - 2015-10-23 22:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlaysTV
2015-10-23 20:13 - 2015-10-23 20:13 - 00001481 _____ C:\Users\Public\Desktop\Free MP4 Video Converter.lnk
2015-10-23 20:13 - 2015-10-23 20:13 - 00001481 _____ C:\ProgramData\Desktop\Free MP4 Video Converter.lnk
2015-10-23 20:13 - 2015-10-23 20:13 - 00001245 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2015-10-23 20:13 - 2015-10-23 20:13 - 00001245 _____ C:\ProgramData\Desktop\DVDVideoSoft Free Studio.lnk
2015-10-23 20:13 - 2015-10-23 20:13 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\DVDVideoSoft
2015-10-23 20:13 - 2015-10-23 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-10-23 20:13 - 2015-10-23 20:13 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2015-10-23 19:22 - 2015-10-23 19:22 - 00003704 _____ C:\Windows\System32\Tasks\Java Platform SE Auto Updater
2015-10-23 19:19 - 2015-10-23 19:19 - 00000000 _____ C:\autoexec.bat
2015-10-23 19:07 - 2015-10-23 20:28 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Anvsoft
2015-10-23 19:07 - 2015-10-23 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvsoft
2015-10-23 19:07 - 2015-10-23 19:07 - 00000000 ____D C:\Program Files (x86)\Anvsoft

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-21 18:46 - 2015-01-04 00:34 - 00000000 ____D C:\FRST
2015-11-21 18:45 - 2015-10-11 14:15 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Raptr
2015-11-21 18:45 - 2015-10-11 14:15 - 00000000 ____D C:\Program Files (x86)\Raptr
2015-11-21 18:43 - 2015-03-13 20:44 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Spotify
2015-11-21 18:42 - 2015-09-20 11:58 - 00001046 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-21 18:42 - 2015-07-12 19:38 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\LogMeIn Hamachi
2015-11-21 18:42 - 2015-03-13 20:46 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Spotify
2015-11-21 18:42 - 2015-02-09 18:22 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\screenSHU
2015-11-21 18:42 - 2015-01-19 19:18 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\GG
2015-11-21 18:42 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-21 18:41 - 2014-12-20 12:17 - 01810655 _____ C:\Windows\WindowsUpdate.log
2015-11-21 18:23 - 2015-07-12 19:28 - 00000000 ____D C:\ProgramData\Oracle
2015-11-21 18:22 - 2015-07-12 19:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-11-21 18:09 - 2014-12-20 13:00 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\Skype
2015-11-21 18:03 - 2015-09-20 11:58 - 00001050 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-21 14:18 - 2015-03-14 14:12 - 00000000 ____D C:\Program Files (x86)\Opera
2015-11-21 14:02 - 2014-12-20 20:16 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\TS3Client
2015-11-21 13:10 - 2015-01-04 20:37 - 00012912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-21 13:10 - 2015-01-04 20:37 - 00012912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-18 22:01 - 2009-07-14 18:55 - 00739694 _____ C:\Windows\system32\perfh015.dat
2015-11-18 22:01 - 2009-07-14 18:55 - 00155268 _____ C:\Windows\system32\perfc015.dat
2015-11-18 22:01 - 2009-07-14 06:13 - 01668226 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-18 19:00 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2015-11-17 21:43 - 2015-01-19 19:18 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\GG
2015-11-17 19:27 - 2015-03-06 16:09 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\Adobe
2015-11-17 17:11 - 2015-01-14 14:53 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-11-17 17:08 - 2015-01-28 21:14 - 00000000 ____D C:\Users\Mikołaj\AppData\LocalLow\Temp
2015-11-17 17:08 - 2009-07-14 04:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-11-17 17:03 - 2015-06-28 21:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-11-17 17:03 - 2015-06-28 21:35 - 00000000 ____D C:\Program Files (x86)\Hp
2015-11-17 16:43 - 2015-04-09 18:51 - 00000338 _____ C:\Users\Mikołaj\Desktop\buff.txt
2015-11-17 16:42 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2015-11-17 16:41 - 2014-12-20 12:35 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-11-16 23:24 - 2014-12-20 12:34 - 00000000 ____D C:\ProgramData\TP-LINK
2015-11-16 23:24 - 2014-09-06 16:43 - 00000000 ____D C:\Temp
2015-11-16 21:26 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2015-11-16 20:23 - 2014-12-22 10:22 - 00002161 _____ C:\Users\Mikołaj\Desktop\Nowy dokument tekstowy.txt
2015-11-16 20:09 - 2014-12-31 11:47 - 00000000 ____D C:\Windows\Minidump
2015-11-15 20:16 - 2014-12-20 12:31 - 00000000 ____D C:\Users\Mikołaj
2015-11-15 17:38 - 2015-01-04 15:31 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\DAEMON Tools Lite
2015-11-15 13:55 - 2015-10-11 14:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2015-11-15 13:55 - 2015-09-20 12:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-15 13:55 - 2015-08-04 16:06 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\uTorrent
2015-11-15 13:55 - 2014-12-25 12:29 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\BitTorrent
2015-11-15 13:55 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-11-15 13:55 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2015-11-15 13:55 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2015-11-15 13:54 - 2014-12-20 19:06 - 00000000 ___RD C:\Dokumenty
2015-10-26 11:15 - 2015-07-15 20:00 - 00034720 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
2015-10-25 11:17 - 2014-12-20 13:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2015-10-25 11:17 - 2014-12-20 13:10 - 00000000 ____D C:\Program Files (x86)\ASUS
2015-10-24 11:19 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-10-23 22:39 - 2015-03-05 21:40 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\OBS
2015-10-23 22:31 - 2015-03-05 18:15 - 00000000 ____D C:\Program Files (x86)\OBS
2015-10-23 22:30 - 2015-03-05 18:15 - 00000000 ____D C:\Program Files\OBS
2015-10-23 20:12 - 2009-07-14 05:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-10-23 19:22 - 2015-10-05 17:26 - 00000000 ____D C:\Users\Mikołaj\.thumbnails
2015-10-23 19:22 - 2015-06-28 21:43 - 00000000 ____D C:\Users\Mikołaj\AppData\Roaming\HpUpdate
2015-10-23 19:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sysprep
2015-10-23 18:00 - 2014-12-20 13:14 - 00000000 ____D C:\Users\Mikołaj\AppData\Local\AMD
2015-10-23 16:55 - 2014-12-20 13:00 - 00000000 ____D C:\ProgramData\Skype

==================== Pliki w katalogu głównym wybranych folderów =======

2015-10-05 17:26 - 2015-10-05 17:26 - 0000987 _____ () C:\Users\Mikołaj\AppData\Local\recently-used.xbel
2015-01-03 22:44 - 2015-02-28 14:59 - 0007601 _____ () C:\Users\Mikołaj\AppData\Local\Resmon.ResmonCfg
2015-06-28 21:43 - 2015-06-28 21:43 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-12-20 13:20 - 2014-12-20 13:20 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Niektóre pliki w TEMP:
====================
C:\Users\Mikołaj\AppData\Local\Temp\ggdrive-menu.exe
C:\Users\Mikołaj\AppData\Local\Temp\ggdrive-overlay.exe
C:\Users\Mikołaj\AppData\Local\Temp\installstats.exe
C:\Users\Mikołaj\AppData\Local\Temp\jre-8u66-windows-au.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-11-11 20:15

==================== Koniec  FRST.txt ============================