Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:25-11-2015 02
Uruchomiony przez Anna (administrator)  ANNA-KOMPUTER (26-11-2015 09:50:45)
Uruchomiony z C:\Users\Anna\Downloads
Załadowane profile: Anna (Dostępne profile: Anna)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgcsrvx.exe
() C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgwdsvcx.exe
() C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgemcx.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(AVG Secure Search) C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\40.2.1\ToolbarUpdater.exe
() C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\40.2.1\loggingserver.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe
() C:\Program Files\Phoenix Technologies Ltd\FailSafe\FailSafeLauncher.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgui.exe
() C:\Program Files\AVG Web TuneUp\vprot.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\dfsvc.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Program Files\Samsung\Samsung Update Plus\SUPNotifier.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8092192 2009-11-21] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1578280 2009-10-10] (Synaptics Incorporated)
HKLM\...\Run: [UpdateLBPShortCut] => C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer] => C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM\...\Run: [UpdateP2GoShortCut] => C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM\...\Run: [UpdatePDRShortCut] => C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2008-01-04] (CyberLink Corp.)
HKLM\...\Run: [RemoteControl8] => C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-04-15] (CyberLink Corp.)
HKLM\...\Run: [PDVD8LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [50472 2009-04-15] (CyberLink Corp.)
HKLM\...\Run: [UpdatePPShortCut] => C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)
HKLM\...\Run: [UpdatePSTShortCut] => C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2009-07-21] (CyberLink Corp.)
HKLM\...\Run: [APLangApp] => C:\Program Files\AnyPC Client\APLangApp.exe [13312 2009-10-20] (DoctorSoft)
HKLM\...\Run: [fsi] => C:\Program Files\Phoenix Technologies Ltd\FailSafe\FailSafeLauncher.exe [9728 2009-09-09] ()
HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguix.exe [1136552 2015-11-12] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\Av\avgui.exe [3826600 2015-10-30] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [vProt] => C:\Program Files\AVG Web TuneUp\vprot.exe [2819984 2015-11-25] ()
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\windows\System32\SPReview\SPReview.exe [280576 2015-09-02] (Microsoft Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 62.21.99.94 62.21.99.95
Tcpip\..\Interfaces\{42BEF7EB-13E5-4D60-BA22-572C7AC8F720}: [DhcpNameServer] 62.21.99.94 62.21.99.95

Internet Explorer:
==================
HKU\S-1-5-21-2789141661-186915839-826018185-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={063C849E-E97C-4D9B-B2B7-B425B7E60FFC}&mid=25aaede485be47cca8dad16d12811f00-20f572c0ff2910cfb1f78ea8285112bf9578b499&lang=pl&ds=AVG&coid=avgtbavg&cmpid=0615piz&pr=fr&d=2015-11-25 19:48:47&v=4.2.1.951&pid=wtu&sg=&sap=hp
HKU\S-1-5-21-2789141661-186915839-826018185-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
SearchScopes: HKLM -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN
SearchScopes: HKU\S-1-5-21-2789141661-186915839-826018185-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={063C849E-E97C-4D9B-B2B7-B425B7E60FFC}&mid=25aaede485be47cca8dad16d12811f00-20f572c0ff2910cfb1f78ea8285112bf9578b499&lang=pl&ds=AVG&coid=avgtbavg&cmpid=0615piz&pr=fr&d=2015-11-25 19:48:47&v=4.2.1.951&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: Pomocnik rejestracji usługi Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.2.1.951\AVG Web TuneUp.dll [2015-11-25] (AVG)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-09] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)

FireFox:
========
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-26] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-26] (Google Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxp://google.pl/
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=1440948188&z=a53bf358f62fceb58322431gez2zbe0t1z7beefq5g&from=cmi&uid=SAMSUNGXHM500JI_S20CJ9FZ106080"
CHR Session Restore: Default -> [funkcja włączona]
CHR Profile: C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-26]
CHR Extension: (Dokumenty Google) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-26]
CHR Extension: (Dysk Google) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-26]
CHR Extension: (YouTube) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-26]
CHR Extension: (Adblock Plus) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-11-26]
CHR Extension: (Google Search) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-26]
CHR Extension: (Arkusze Google) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-26]
CHR Extension: (Dokumenty Google offline) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-26]
CHR Extension: (AdBlock) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-11-26]
CHR Extension: (Poczta o2) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdhkhehdcicfckijbllglgdkegdnhplm [2015-11-26]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-26]
CHR Extension: (AdBlock Pro) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch [2015-11-26]
CHR Extension: (Gmail) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-26]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AvgAMPS; C:\Program Files\AVG\Av\avgamps.exe [595376 2015-10-30] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\Av\avgidsagent.exe [3815648 2015-10-30] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [862632 2015-11-12] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\Av\avgwdsvcx.exe [579776 2015-10-30] (AVG Technologies CZ, s.r.o.)
R2 OberonGameConsoleService; C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [44312 2009-08-13] ()
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] ()
R2 vToolbarUpdater40.2.1; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\40.2.1\ToolbarUpdater.exe [1926544 2015-11-25] (AVG Secure Search)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
R2 WtuSystemSupport; C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe [1164688 2015-11-25] ()

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 Avgdiskx; C:\windows\System32\DRIVERS\avgdiskx.sys [156080 2015-08-10] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\windows\System32\DRIVERS\avgidsdriverx.sys [256432 2015-10-19] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\windows\System32\DRIVERS\avgidshx.sys [231344 2015-08-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\windows\System32\DRIVERS\avgidsshimx.sys [31664 2015-08-14] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\windows\System32\DRIVERS\avgldx86.sys [229296 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\windows\System32\DRIVERS\avglogx.sys [308656 2015-08-14] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\windows\System32\DRIVERS\avgmfx86.sys [192944 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\windows\System32\DRIVERS\avgrkx86.sys [36784 2015-08-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\windows\System32\DRIVERS\avgtdix.sys [231856 2015-10-08] (AVG Technologies CZ, s.r.o.)
R3 yukonw7; C:\windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-26 09:50 - 2015-11-26 09:50 - 00013916 _____ C:\Users\Anna\Downloads\FRST.txt
2015-11-26 09:47 - 2015-11-26 09:47 - 00002207 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-11-26 09:47 - 2015-11-26 09:47 - 00001032 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-26 09:47 - 2015-11-26 09:47 - 00001028 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-26 09:47 - 2015-11-26 09:47 - 00000000 ____D C:\Users\Anna\AppData\Local\Google
2015-11-26 09:47 - 2015-11-26 09:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-26 09:39 - 2015-11-26 09:40 - 00003412 _____ C:\Users\Anna\Downloads\Fixlog.txt
2015-11-25 20:45 - 2015-11-26 09:47 - 00000000 ____D C:\Program Files\Google
2015-11-25 20:33 - 2015-11-25 20:33 - 00006472 _____ C:\Users\Anna\Desktop\tata bookmarks_25.11.2015.html
2015-11-25 19:49 - 2015-11-26 09:39 - 00000000 ____D C:\ProgramData\AVG Security Toolbar
2015-11-25 19:49 - 2015-11-25 19:57 - 00000000 ____D C:\Users\Anna\AppData\Local\AVG Web TuneUp
2015-11-25 19:49 - 2015-11-25 19:49 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-11-25 19:48 - 2015-11-25 19:49 - 00000000 ____D C:\ProgramData\AVG Web TuneUp
2015-11-25 19:48 - 2015-11-25 19:48 - 00000000 ____D C:\ProgramData\AVG Secure Search
2015-11-25 19:48 - 2015-11-25 19:48 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search
2015-11-25 19:48 - 2015-11-25 19:48 - 00000000 ____D C:\Program Files\AVG Web TuneUp
2015-11-25 19:45 - 2015-11-25 19:45 - 00000000 ____D C:\Users\Anna\AppData\Roaming\AVG
2015-11-25 19:44 - 2015-11-25 19:44 - 00000000 ____D C:\Users\Anna\AppData\Roaming\TuneUp Software
2015-11-25 19:44 - 2015-11-25 19:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-11-25 19:44 - 2015-11-25 19:44 - 00000000 ____D C:\Program Files\Common Files\AV
2015-11-25 19:43 - 2015-11-25 19:43 - 00000000 ___HD C:\$AVG
2015-11-25 19:41 - 2015-11-26 09:43 - 00000000 ____D C:\ProgramData\MFAData
2015-11-25 19:41 - 2015-11-25 19:41 - 00000000 ____D C:\Users\Anna\AppData\Local\MFAData
2015-11-25 19:40 - 2015-11-25 19:43 - 00000000 ____D C:\ProgramData\Avg
2015-11-25 19:40 - 2015-11-25 19:42 - 00000000 ____D C:\Program Files\AVG
2015-11-25 19:40 - 2015-11-25 19:40 - 00000900 _____ C:\Users\Public\Desktop\AVG.lnk
2015-11-25 19:40 - 2015-11-25 19:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2015-11-25 19:38 - 2015-11-25 19:44 - 00000000 ____D C:\Users\Anna\AppData\Local\Avg
2015-11-25 19:38 - 2015-11-25 19:40 - 00000000 ____D C:\Users\Anna\AppData\Local\AvgSetupLog
2015-11-25 19:15 - 2015-11-25 19:16 - 02924680 _____ (AVG Technologies) C:\Users\Anna\Downloads\AVG_Protection_Free_1064.exe
2015-11-23 19:45 - 2015-11-23 19:45 - 402173565 _____ C:\windows\MEMORY.DMP
2015-11-23 19:45 - 2015-11-23 19:45 - 00160192 _____ C:\windows\Minidump\112315-26223-01.dmp
2015-11-23 19:45 - 2015-11-23 19:45 - 00000000 ____D C:\windows\Minidump
2015-11-23 19:33 - 2015-10-29 18:50 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\shimeng.dll
2015-11-23 19:33 - 2015-10-29 18:49 - 00295936 _____ (Microsoft Corporation) C:\windows\system32\apphelp.dll
2015-11-23 19:33 - 2015-10-29 18:49 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\aelupsvc.dll
2015-11-23 19:33 - 2015-10-29 18:49 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\sdbinst.exe
2015-11-23 19:33 - 2015-10-20 01:52 - 03991488 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2015-11-23 19:33 - 2015-10-20 01:52 - 03935680 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-11-23 19:33 - 2015-10-20 01:52 - 00138176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-11-23 19:33 - 2015-10-20 01:52 - 00067520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-11-23 19:33 - 2015-10-20 01:48 - 01308160 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 01061376 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00655360 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00552960 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-11-23 19:33 - 2015-10-20 01:45 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00251392 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00223232 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00100352 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-11-23 19:33 - 2015-10-20 01:45 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-11-23 19:33 - 2015-10-20 01:45 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-11-23 19:33 - 2015-10-20 01:44 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-11-23 19:33 - 2015-10-20 01:44 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-11-23 19:33 - 2015-10-20 01:39 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-11-23 19:33 - 2015-10-20 01:39 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-11-23 19:33 - 2015-10-20 01:35 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-11-23 19:33 - 2015-10-20 01:35 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-11-23 19:33 - 2015-10-20 00:29 - 00225792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2015-11-23 19:33 - 2015-10-20 00:28 - 00124416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-11-23 19:33 - 2015-10-20 00:28 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-11-23 19:33 - 2015-10-13 17:31 - 00338944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2015-11-23 19:33 - 2015-10-13 17:31 - 00074752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys
2015-11-23 19:32 - 2015-11-03 22:51 - 00342728 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-11-23 19:32 - 2015-11-03 18:46 - 02386944 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-11-23 19:32 - 2015-10-30 23:58 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-11-23 19:32 - 2015-10-30 23:58 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-11-23 19:32 - 2015-10-30 23:52 - 20331520 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-11-23 19:32 - 2015-10-30 23:47 - 00504832 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-11-23 19:32 - 2015-10-30 23:46 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-11-23 19:32 - 2015-10-30 23:45 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-11-23 19:32 - 2015-10-30 23:45 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-11-23 19:32 - 2015-10-30 23:44 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-11-23 19:32 - 2015-10-30 23:42 - 02279936 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-11-23 19:32 - 2015-10-30 23:39 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-11-23 19:32 - 2015-10-30 23:39 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-11-23 19:32 - 2015-10-30 23:37 - 00480256 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-11-23 19:32 - 2015-10-30 23:36 - 00663552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-11-23 19:32 - 2015-10-30 23:36 - 00620032 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-11-23 19:32 - 2015-10-30 23:36 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-11-23 19:32 - 2015-10-30 23:36 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-11-23 19:32 - 2015-10-30 23:31 - 00667648 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-11-23 19:32 - 2015-10-30 23:28 - 00416256 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-11-23 19:32 - 2015-10-30 23:23 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-11-23 19:32 - 2015-10-30 23:21 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-11-23 19:32 - 2015-10-30 23:19 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-11-23 19:32 - 2015-10-30 23:18 - 00279040 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-11-23 19:32 - 2015-10-30 23:17 - 00130048 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2015-11-23 19:32 - 2015-10-30 23:16 - 04527616 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-11-23 19:32 - 2015-10-30 23:11 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2015-11-23 19:32 - 2015-10-30 23:10 - 00689152 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-11-23 19:32 - 2015-10-30 23:09 - 12854272 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-11-23 19:32 - 2015-10-30 23:09 - 02052608 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-11-23 19:32 - 2015-10-30 23:09 - 01155072 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-11-23 19:32 - 2015-10-30 23:09 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-11-23 19:32 - 2015-10-30 22:51 - 02011136 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-11-23 19:32 - 2015-10-30 22:48 - 01311744 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-11-23 19:32 - 2015-10-30 22:46 - 00710144 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-11-23 19:32 - 2015-10-13 05:50 - 00712640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys
2015-11-23 19:32 - 2015-09-23 14:09 - 00371920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2015-11-23 19:32 - 2015-09-23 14:09 - 00251000 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll
2015-11-23 19:31 - 2015-10-20 18:46 - 02955776 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-11-23 19:31 - 2015-10-20 18:46 - 02061824 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-11-23 19:31 - 2015-10-20 18:46 - 00566784 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-11-23 19:31 - 2015-10-20 18:46 - 00174080 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-11-23 19:31 - 2015-10-20 18:46 - 00093696 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-11-23 19:31 - 2015-10-20 18:46 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-11-23 19:31 - 2015-10-20 18:46 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-11-23 19:31 - 2015-10-20 18:45 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-11-23 19:31 - 2015-10-20 18:45 - 00073728 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-11-23 19:31 - 2015-10-20 18:45 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-11-23 19:31 - 2015-10-20 18:45 - 00011776 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-11-23 19:31 - 2015-10-01 18:50 - 00216064 _____ (Microsoft Corporation) C:\windows\system32\InkEd.dll
2015-11-23 19:31 - 2015-10-01 18:50 - 00019968 _____ (Microsoft Corporation) C:\windows\system32\jnwmon.dll
2015-11-23 19:07 - 2015-11-26 09:50 - 00000000 ____D C:\FRST
2015-11-23 19:07 - 2015-11-25 21:56 - 01719296 _____ (Farbar) C:\Users\Anna\Downloads\FRST.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-26 09:47 - 2015-08-30 21:07 - 00000000 ____D C:\Users\Anna\AppData\Local\Deployment
2015-11-26 09:46 - 2009-07-14 03:37 - 00000000 ____D C:\windows\rescache
2015-11-26 09:43 - 2010-02-28 13:17 - 00000000 ____D C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2015-11-26 09:42 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-11-26 08:57 - 2015-09-16 22:32 - 00000930 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-11-26 08:52 - 2009-07-14 05:34 - 00014512 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-26 08:52 - 2009-07-14 05:34 - 00014512 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-25 22:55 - 2009-12-22 02:34 - 00000000 ____D C:\windows\system32\XPSViewer
2015-11-25 22:55 - 2009-12-22 02:29 - 00000000 ____D C:\Program Files\Windows Journal
2015-11-25 22:55 - 2009-07-14 05:56 - 00000000 ____D C:\windows\system32\winrm
2015-11-25 22:55 - 2009-07-14 05:56 - 00000000 ____D C:\windows\system32\WCN
2015-11-25 22:55 - 2009-07-14 05:56 - 00000000 ____D C:\windows\system32\slmgr
2015-11-25 22:55 - 2009-07-14 05:56 - 00000000 ____D C:\windows\system32\Printing_Admin_Scripts
2015-11-25 22:55 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Sidebar
2015-11-25 22:55 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Defender
2015-11-25 22:55 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\MUI
2015-11-25 22:55 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\migwiz
2015-11-25 22:55 - 2009-07-14 03:37 - 00000000 ____D C:\windows\servicing
2015-11-25 22:55 - 2009-07-14 03:37 - 00000000 ____D C:\windows\inf
2015-11-25 22:55 - 2009-07-14 03:37 - 00000000 ____D C:\Windows
2015-11-25 22:54 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-11-25 22:54 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\DVD Maker
2015-11-25 22:54 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\sysprep
2015-11-25 22:54 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\Setup
2015-11-25 22:54 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\oobe
2015-11-25 22:54 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\Dism
2015-11-25 22:54 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\com
2015-11-25 22:54 - 2009-07-14 03:37 - 00000000 ____D C:\windows\IME
2015-11-25 22:54 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\System
2015-11-25 22:49 - 2015-10-14 21:55 - 00000000 ____D C:\Users\Anna\AppData\Local\osu!
2015-11-25 20:37 - 2010-02-28 13:18 - 00000000 ____D C:\Users\Anna\AppData\Local\Adobe
2015-11-25 20:37 - 2010-02-28 13:18 - 00000000 ____D C:\ProgramData\Adobe
2015-11-24 19:43 - 2009-12-22 02:34 - 00739932 _____ C:\windows\system32\perfh015.dat
2015-11-24 19:43 - 2009-12-22 02:34 - 00155474 _____ C:\windows\system32\perfc015.dat
2015-11-24 19:43 - 2009-07-26 21:06 - 03435478 _____ C:\windows\system32\PerfStringBackup.INI
2015-11-24 19:29 - 2009-07-14 05:33 - 00347384 _____ C:\windows\system32\FNTCACHE.DAT
2015-11-24 19:21 - 2010-02-28 13:24 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-11-23 19:12 - 2015-09-08 09:28 - 00000660 _____ C:\Users\Anna\Desktop\Nowy dokument tekstowy.txt
2015-11-23 13:57 - 2015-09-16 22:32 - 00780488 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2015-11-23 13:57 - 2015-09-16 22:32 - 00142536 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl

==================== Pliki w katalogu głównym wybranych folderów =======

2015-09-02 19:20 - 2015-09-02 19:26 - 0000046 _____ () C:\Users\Anna\AppData\Roaming\wklnhst.dat
2010-02-28 13:18 - 2009-08-17 05:16 - 0131368 _____ () C:\ProgramData\FullRemove.exe
2009-12-21 22:59 - 2009-12-21 22:59 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2009-12-21 22:57 - 2009-12-21 22:58 - 0000106 _____ () C:\ProgramData\{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}.log
2009-12-21 22:54 - 2009-12-21 22:55 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2009-12-21 22:58 - 2009-12-21 22:59 - 0000110 _____ () C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log
2009-12-21 22:54 - 2009-12-21 22:54 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
2009-12-21 22:55 - 2009-12-21 22:57 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\windows\explorer.exe => Plik podpisany cyfrowo
C:\windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\windows\system32\services.exe => Plik podpisany cyfrowo
C:\windows\system32\User32.dll => Plik podpisany cyfrowo
C:\windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-11-25 21:08

==================== Koniec  FRST.txt ============================