Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:05-12-2015
Uruchomiony przez Lisqui (administrator)  LISQUI-KOMPUTER (06-12-2015 22:39:40)
Uruchomiony z C:\Users\Lisqui\Downloads
Załadowane profile: Lisqui (Dostępne profile: Lisqui)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe
(DeviceVM, Inc.) C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(DeviceVM, Inc.) C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\ProgramData\wget.exe
(BitTorrent Inc.) C:\Users\Lisqui\AppData\Roaming\uTorrent\uTorrent.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [BCU] => C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe [375000 2009-10-26] (DeviceVM, Inc.)
HKU\S-1-5-21-3357052344-2897467679-35886000-1000\...\MountPoints2: {008601e3-c300-11e4-be00-4c0010244ca3} - G:\setup.exe
HKU\S-1-5-21-3357052344-2897467679-35886000-1000\...\MountPoints2: {446a9e19-daa8-11e4-a9fe-4c0010244ca3} - G:\setup.exe
HKU\S-1-5-21-3357052344-2897467679-35886000-1000\...\MountPoints2: {fc972265-c434-11e4-a4f3-4c0010244ca3} - H:\Setup.exe
HKU\S-1-5-21-3357052344-2897467679-35886000-1000\...\MountPoints2: {fc972266-c434-11e4-a4f3-4c0010244ca3} - I:\RunGame.exe
HKU\S-1-5-21-3357052344-2897467679-35886000-1000\...\MountPoints2: {fc972267-c434-11e4-a4f3-4c0010244ca3} - J:\Setup.exe

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63
Tcpip\..\Interfaces\{9C0D6046-D489-41E8-B593-2578B6488328}: [DhcpNameServer] 62.179.1.62 62.179.1.63
Tcpip\..\Interfaces\{9ED84A0E-9BBB-4854-917E-5D90478E0520}: [DhcpNameServer] 62.179.1.62 62.179.1.63

Internet Explorer:
==================
URLSearchHook: HKU\S-1-5-21-3357052344-2897467679-35886000-1000 - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
SearchScopes: HKU\S-1-5-21-3357052344-2897467679-35886000-1000 -> {B9C3FD9C-B7E6-4fc2-9BCE-A1291F5C54C5} URL = hxxp://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB
SearchScopes: HKU\S-1-5-21-3357052344-2897467679-35886000-1000 -> {DD18385B-81E9-4569-B0D8-661ECA1902D2} URL = hxxp://www.google.com/custom?client=pub-3794288947762788&forid=1&channel=5369970905&ie=UTF-8&oe=UTF-8&safe=active&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1&hl=pl&q={searchTerms}
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-03-02] (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2014-04-20] (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2014-04-20] (Kaspersky Lab ZAO)

FireFox:
========
FF ProfilePath: C:\Users\Lisqui\AppData\Roaming\Mozilla\Firefox\Profiles\bwd06fxs.default-1445621495842
FF Homepage: hxxp://www.onet.pl/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-28] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-10-08] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin: @kaspersky.com/content_blocker -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2015-03-02] ()
FF Plugin: @kaspersky.com/online_banking -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2015-03-02] ()
FF Plugin: @kaspersky.com/virtual_keyboard -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2015-03-02] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-19] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-19] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-03-17] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Lisqui\AppData\Roaming\Mozilla\Firefox\Profiles\bwd06fxs.default-1445621495842\user.js [2015-10-23]
FF Extension: Dangerous Websites Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2015-03-02] [Brak podpisu cyfrowego]
FF Extension: Virtual Keyboard - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2015-03-02] [Brak podpisu cyfrowego]
FF Extension: Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com [2015-03-02] [Brak podpisu cyfrowego]
FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2015-03-02] [Brak podpisu cyfrowego]
FF Extension: Kaspersky URL Advisor - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com [2015-03-02] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-10-09]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - hxxps://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AVP15.0.0; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R2 BCUService; C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [223464 2009-10-26] (DeviceVM, Inc.)
S2 dbupdate; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [136048 2015-08-26] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [136048 2015-08-26] (Dropbox, Inc.)
R3 LMS; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144 2009-09-30] (Intel Corporation) [Brak podpisu cyfrowego]
R2 UNS; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240 2009-09-30] (Intel Corporation) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 AsIO; C:\Windows\System32\drivers\AsIO.sys [11296 2009-08-04] ()
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135264 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [112136 2015-03-02] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [34400 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [644808 2015-03-02] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [24672 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [145888 2014-03-26] (Kaspersky Lab ZAO)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [13216 2009-07-16] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [329384 2015-03-27] (Duplex Secure Ltd.)
S3 V0220Dev; C:\Windows\System32\DRIVERS\V0220Dev.sys [146112 2006-06-29] (Creative Technology Ltd.)
S3 V0220Vfx; C:\Windows\System32\DRIVERS\V0220Vfx.sys [6272 2006-06-08] (EyePower Games Pte. Ltd.)
R3 cpuz134; \??\C:\Users\Lisqui\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-06 22:39 - 2015-12-06 22:40 - 00012318 _____ C:\Users\Lisqui\Downloads\FRST.txt
2015-12-06 22:38 - 2015-12-06 22:39 - 00000000 ____D C:\FRST
2015-12-06 22:31 - 2015-12-06 22:31 - 01719808 _____ (Farbar) C:\Users\Lisqui\Downloads\FRST.exe
2015-12-06 22:18 - 2015-12-06 22:19 - 00000148 _____ C:\Windows\Reimage.ini
2015-12-06 22:17 - 2015-12-06 22:17 - 00772016 _____ (Reimage®) C:\Users\Lisqui\Downloads\ReimageRepair.exe
2015-12-06 22:17 - 2015-12-06 22:17 - 00340136 _____ (PC Drivers HeadQuarters LP) C:\Users\Lisqui\Downloads\DriverDetective.exe
2015-12-06 22:03 - 2015-07-15 03:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-12-06 22:00 - 2015-12-06 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Odkurzacz
2015-12-06 21:56 - 2015-12-06 21:56 - 03029290 _____ C:\Users\Lisqui\Downloads\P7H55-M-ASUS-1302.zip
2015-12-06 21:22 - 2015-12-06 21:22 - 01646536 _____ ( ) C:\Users\Lisqui\Downloads\cpu-z_1.74-en.exe
2015-12-06 17:04 - 2015-12-06 17:04 - 00000000 ____D C:\Users\Lisqui\AppData\LocalLow\uTorrent
2015-11-24 15:31 - 2015-11-24 15:31 - 00010960 _____ C:\Users\Lisqui\Documents\Bez tytułu 1.odt
2015-11-19 22:25 - 2015-11-19 22:25 - 00476288 _____ C:\Users\Lisqui\Documents\Scan0002.pdf
2015-11-19 22:24 - 2015-11-19 22:24 - 00474698 _____ C:\Users\Lisqui\Documents\Scan0001.pdf
2015-11-19 22:23 - 2015-11-19 22:23 - 00461081 _____ C:\Users\Lisqui\Documents\Scan0003.pdf
2015-11-15 22:21 - 2015-11-15 22:21 - 00002687 _____ C:\Users\Public\Desktop\Skype.lnk
2015-11-15 22:21 - 2015-11-15 22:21 - 00000000 ___RD C:\Program Files\Skype
2015-11-15 22:21 - 2015-11-15 22:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-11-15 22:21 - 2015-11-15 22:21 - 00000000 ____D C:\Program Files\Common Files\Skype
2015-11-10 23:00 - 2015-11-10 23:00 - 101553128 _____ (BioWare) C:\Users\Lisqui\Downloads\DragonAge1.05(1).exe
2015-11-10 22:59 - 2015-11-10 22:59 - 101553128 _____ (BioWare) C:\Users\Lisqui\Downloads\DragonAge1.05.exe
2015-11-10 22:57 - 2015-11-10 22:57 - 03997215 _____ C:\Users\Lisqui\Downloads\Dragon Age Ultimate Edition - spolszczenie 1.0.2.zip

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-06 22:39 - 2015-03-06 18:47 - 00000000 ____D C:\Users\Lisqui\AppData\Roaming\uTorrent
2015-12-06 22:38 - 2009-07-14 03:37 - 00000000 ____D C:\Windows
2015-12-06 22:33 - 2015-03-05 08:53 - 00000000 ____D C:\Program Files\DAEMON Tools Pro
2015-12-06 22:33 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2015-12-06 22:31 - 2015-08-26 22:22 - 00000000 ____D C:\Users\Lisqui\AppData\Local\Dropbox
2015-12-06 22:31 - 2015-08-26 22:22 - 00000000 ____D C:\Program Files\Dropbox
2015-12-06 22:27 - 2015-08-26 22:22 - 00001140 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2015-12-06 22:26 - 2015-03-03 22:08 - 00000000 ____D C:\Windows\system32\MRT
2015-12-06 22:17 - 2015-03-02 18:52 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2015-12-06 22:13 - 2015-03-02 19:41 - 00000000 ____D C:\Users\Lisqui\AppData\Local\ElevatedDiagnostics
2015-12-06 22:02 - 2015-04-04 20:15 - 00000000 ____D C:\ProgramData\Skype
2015-12-06 22:00 - 2015-03-02 22:33 - 00001017 _____ C:\Users\Lisqui\Desktop\Odkurzacz.lnk
2015-12-06 22:00 - 2015-03-02 22:33 - 00000000 ____D C:\Program Files\Odkurzacz
2015-12-06 21:43 - 2015-03-05 08:53 - 00000000 ____D C:\Users\Lisqui\AppData\Roaming\DAEMON Tools Pro
2015-12-06 21:23 - 2009-07-14 05:34 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-06 21:23 - 2009-07-14 05:34 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-06 20:15 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2015-12-06 16:26 - 2015-03-28 08:50 - 00000000 _____ C:\ProgramData\dat.bmp
2015-12-06 16:20 - 2015-08-26 22:26 - 00000000 ___RD C:\Users\Lisqui\Dropbox
2015-12-06 16:18 - 2011-02-04 15:37 - 00911302 _____ C:\Windows\system32\perfh015.dat
2015-12-06 16:18 - 2011-02-04 15:37 - 00213246 _____ C:\Windows\system32\perfc015.dat
2015-12-06 16:18 - 2010-11-20 22:01 - 00006248 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-06 16:12 - 2015-08-26 22:22 - 00001136 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2015-12-06 16:12 - 2015-03-02 21:05 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-06 16:12 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-28 17:54 - 2015-03-02 21:43 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-11-28 14:06 - 2015-03-05 08:55 - 00000000 ____D C:\Users\Public\Documents\DAEMON Tools Images
2015-11-28 13:29 - 2015-03-02 21:43 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-11-28 13:29 - 2015-03-02 21:43 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-11-21 12:43 - 2015-10-14 19:51 - 00000000 ____D C:\Users\Lisqui\Desktop\klima
2015-11-15 22:56 - 2015-04-04 20:15 - 00000000 ____D C:\Users\Lisqui\AppData\Roaming\Skype
2015-11-12 22:13 - 2015-09-04 09:46 - 00000000 ____D C:\Program Files\Common Files\AV

==================== Pliki w katalogu głównym wybranych folderów =======

2015-03-02 21:17 - 2015-03-02 21:17 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-03-28 08:50 - 2015-12-06 16:26 - 0000000 _____ () C:\ProgramData\dat.bmp
2015-03-27 22:52 - 2015-03-27 22:52 - 0401408 _____ () C:\ProgramData\wget.exe

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\wget.exe


Niektóre pliki w TEMP:
====================
C:\Users\Lisqui\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp0g0pwb.dll
C:\Users\Lisqui\AppData\Local\Temp\ReimagePackage.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-11-30 22:20

==================== Koniec  FRST.txt ============================