Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:12-12-2015 Uruchomiony przez Igor (administrator) IGOR (12-12-2015 15:50:43) Uruchomiony z C:\Users\Igor\Desktop Załadowane profile: Igor (Dostępne profile: Igor & MSSQLServerOLAPService & ReportServer & MSSQLFDLauncher & SQLSERVERAGENT & MsDtsServer130 & MSSQLSERVER) Platform: Windows 10 Home (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidMonitorSvc.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe () C:\ProgramData\DatacardService\HWDeviceService64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe () C:\ProgramData\Orange Connection\OnlineUpdate\ouc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe () C:\Windows\System32\igfxTray.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek semiconductor) C:\Windows\RTFTrack.exe (Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe () C:\Program Files (x86)\Orange Connection\Orange Connection.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Microsoft Corporation) C:\Windows\System32\NetworkUXBroker.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.4.9926.17994_x64__8wekyb3d8bbwe\glcnd.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [703272 2015-09-09] (Alps Electric Co., Ltd.) HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [6340312 2013-07-19] (Realtek semiconductor) HKLM\...\Run: [IgfxTray] => C:\WINDOWS\system32\igfxtray.exe [396688 2015-07-17] () HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation) HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-14] (Lenovo) HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15813616 2014-06-14] (Lenovo(beijing) Limited) HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80880 2014-06-14] (Lenovo(beijing) Limited) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2655520 2015-10-12] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-06] (CyberLink Corp.) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [408888 2014-10-08] (Power Software Ltd) HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [3855272 2015-11-20] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguix.exe [1136552 2015-11-12] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation) Winlogon\Notify\igfxcui: igfxdev.dll [X] HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-21-4167164286-2800572000-69432135-1002\...\Policies\Explorer: [] HKU\S-1-5-21-4167164286-2800572000-69432135-1002\...\MountPoints2: F - "F:\SETUP.EXE" HKU\S-1-5-21-4167164286-2800572000-69432135-1002\...\MountPoints2: {79d79fa0-4c86-11e5-82bb-28d24498684e} - "H:\startme.exe" HKU\S-1-5-21-4167164286-2800572000-69432135-1002\...\MountPoints2: {d2c9d9a9-e83f-11e4-8282-a0a8cd145ff4} - "F:\AutoRun.exe" HKU\S-1-5-21-4167164286-2800572000-69432135-1002\...\MountPoints2: {d2c9e8ad-e83f-11e4-8282-a0a8cd145ff4} - "F:\AutoRun.exe" HKU\S-1-5-21-4167164286-2800572000-69432135-1002\...\MountPoints2: {d2c9eac8-e83f-11e4-8282-a0a8cd145ff4} - "G:\AutoRun.exe" HKU\S-1-5-21-4167164286-2800572000-69432135-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-13] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-13] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-13] (Microsoft Corporation) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => Brak pliku ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => Brak pliku ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => Brak pliku ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => Brak pliku Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-09-13] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) AutoConfigURL: [S-1-5-21-4167164286-2800572000-69432135-1002] => hxxp://proxy.bg.pwr.wroc.pl/proxy.pac Tcpip\..\Interfaces\{16053382-b3ab-47ce-9906-f4807b49ed01}: [NameServer] 194.204.159.1 194.204.152.34 Tcpip\..\Interfaces\{97fda2f8-4fc4-433e-a90a-5182cae4c7e3}: [NameServer] 194.204.159.1 194.204.152.34 Tcpip\..\Interfaces\{9d3fef78-2edf-4cec-b50f-f307b82441b4}: [NameServer] 194.204.159.1 194.204.152.34 Tcpip\..\Interfaces\{b344c0d8-bae6-436a-a359-295875609c10}: [DhcpNameServer] 150.202.100.1 Tcpip\..\Interfaces\{cbf9bd4a-76d2-46a2-919e-c76ad3d144f7}: [DhcpNameServer] 172.16.0.1 Internet Explorer: ================== HKU\S-1-5-21-4167164286-2800572000-69432135-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB HKU\S-1-5-21-4167164286-2800572000-69432135-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com SearchScopes: HKU\S-1-5-21-4167164286-2800572000-69432135-1002 -> {0B0F0E2C-C2F0-4FE6-98FE-EC72C1BDCBB4} URL = hxxp://www.google.com/search?hl=pl&q={searchTerms} SearchScopes: HKU\S-1-5-21-4167164286-2800572000-69432135-1002 -> {392F592B-8806-4511-811E-92CF55F1A26F} URL = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-10-13] (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-13] (Microsoft Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2015-10-13] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-22] (Oracle Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2015-10-13] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-22] (Oracle Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-10-24] (Microsoft Corporation) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL [2015-10-24] (Microsoft Corporation) FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-09] () FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-10-24] (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-08-19] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-08-19] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-22] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-22] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-10-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL [2015-10-24] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.) Chrome: ======= CHR StartupUrls: Default -> "hxxps://www.google.pl/" CHR Profile: C:\Users\Igor\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Dysk Google) - C:\Users\Igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21] CHR Extension: (YouTube) - C:\Users\Igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Google Search) - C:\Users\Igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (AdBlock) - C:\Users\Igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-12-04] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-23] CHR Extension: (Gmail) - C:\Users\Igor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 ApHidMonitorService; C:\Program Files\Apoint2K\HidMonitorSvc.exe [90440 2015-09-09] (Alps Electric Co., Ltd.) R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [31160 2015-02-05] (Autodesk, Inc.) S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [615584 2015-11-20] (AVG Technologies CZ, s.r.o.) R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3857272 2015-11-20] (AVG Technologies CZ, s.r.o.) R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1046952 2015-11-12] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [579776 2015-11-20] (AVG Technologies CZ, s.r.o.) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2797752 2015-10-13] (Microsoft Corporation) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156384 2015-10-12] (NVIDIA Corporation) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [25800 2015-09-28] (Hewlett-Packard Company) R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2014-01-15] () R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation) R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-07-17] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Brak podpisu cyfrowego] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-08-19] (Intel Corporation) R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [155448 2013-09-20] (Intel Corporation) R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21744 2015-07-09] (Microsoft Corporation) S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-19] (Intel Corporation) S3 MsDtsServer130; C:\Program Files\Microsoft SQL Server\130\DTS\Binn\MsDtsSrvr.exe [216776 2015-07-16] (Microsoft Corporation) S3 MSSQLFDLauncher; C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER400\MSSQL\Binn\fdlauncher.exe [51400 2015-07-16] (Microsoft Corporation) S3 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER400\MSSQL\Binn\sqlservr.exe [398024 2015-07-16] (Microsoft Corporation) S3 MSSQLServerOLAPService; C:\Program Files\Microsoft SQL Server\MSAS13.MSSQLSERVER400\OLAP\bin\msmdsrv.exe [53979336 2015-07-16] (Microsoft Corporation) S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego] R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1873696 2015-10-12] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568288 2015-10-12] (NVIDIA Corporation) S2 Orange Connection. RunOuc; C:\Program Files (x86)\Orange Connection\UpdateDog\ouc.exe [651856 2013-10-26] () S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1931632 2015-04-11] (Electronic Arts) R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego] S3 ReportServer; C:\Program Files\Microsoft SQL Server\MSRS13.MSSQLSERVER400\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2537672 2015-07-16] (Microsoft Corporation) R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] () S3 SQL Server Distributed Replay Client; C:\Program Files (x86)\Microsoft SQL Server\130\Tools\DReplayClient\DReplayClient.exe [121032 2015-07-16] (Microsoft Corporation) S3 SQL Server Distributed Replay Controller; C:\Program Files (x86)\Microsoft SQL Server\130\Tools\DReplayController\DReplayController.exe [350400 2015-07-16] (Microsoft Corporation) S3 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER400\MSSQL\Binn\SQLAGENT.EXE [565960 2015-07-16] (Microsoft Corporation) S3 Te.Service; C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe [134656 2015-07-09] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [52968 2015-07-06] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [23152 2015-09-09] (AVG Technologies CZ, s.r.o.) R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [184240 2015-11-06] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [313776 2015-11-06] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [298416 2015-08-20] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [398256 2015-08-14] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [256432 2015-11-06] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-08-10] (AVG Technologies CZ, s.r.o.) R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [306608 2015-10-08] (AVG Technologies CZ, s.r.o.) S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-09-25] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-09-25] (Windows (R) Win 7 DDK provider) R3 hwusb_cdcacm; C:\Windows\system32\DRIVERS\ew_cdcacm.sys [125952 2014-07-25] (Huawei Technologies Co., Ltd.) R3 hwusb_wwanecm; C:\Windows\System32\drivers\ew_wwanecm.sys [380672 2014-09-30] (Huawei Technologies Co., Ltd.) R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [263952 2015-07-14] (Intel Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-19] (Intel Corporation) R3 NETwNb64; C:\Windows\System32\drivers\Netwbw02.sys [3496216 2015-07-10] (Intel Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20768 2015-10-12] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation) S4 RsFx0400; C:\Windows\System32\DRIVERS\RsFx0400.sys [247496 2015-07-16] (Microsoft Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek ) R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8247640 2013-07-19] (Realtek Semiconductor Corp.) R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [214016 2015-07-10] (Microsoft Corporation) S3 taphss6; C:\Windows\System32\drivers\taphss6.sys [42088 2015-10-12] (Anchorfree Inc.) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () R1 VBoxNetAdp; C:\Windows\System32\drivers\VBoxNetAdp6.sys [117768 2015-08-13] (Oracle Corporation) R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [146072 2015-08-13] (Oracle Corporation) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) S3 VBoxNetFlt; \SystemRoot\system32\DRIVERS\VBoxNetFlt.sys [X] S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-12 15:50 - 2015-12-12 15:52 - 00026241 _____ C:\Users\Igor\Desktop\FRST.txt 2015-12-12 15:50 - 2015-12-12 15:50 - 00000000 ____D C:\FRST 2015-12-12 15:49 - 2015-12-12 15:49 - 02369536 _____ (Farbar) C:\Users\Igor\Desktop\FRST64.exe 2015-12-12 15:35 - 2015-12-12 15:35 - 00016148 _____ C:\WINDOWS\system32\IGOR_Igor_HistoryPrediction.bin 2015-12-10 15:44 - 2015-12-10 15:44 - 00076710 _____ C:\Users\Igor\Desktop\Zadania_dodatkowe_1.pdf 2015-12-10 15:44 - 2015-12-10 15:43 - 00348972 _____ C:\Users\Igor\Desktop\Zadania_2.pdf 2015-11-27 18:52 - 2015-12-03 15:54 - 00000000 ____D C:\Users\Igor\Documents\The Witcher 3 2015-11-27 18:51 - 2015-11-27 18:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Witcher® 3 - Wild Hunt [GOG.com] 2015-11-27 18:08 - 2015-11-27 18:35 - 00000000 ____D C:\GOG Games 2015-11-27 16:12 - 2015-11-27 17:18 - 00000000 ____D C:\Users\Igor\Downloads\The Witcher 3 Wild Hunt 2015-11-27 15:31 - 2015-11-27 15:57 - 00000000 ____D C:\Users\Igor\Downloads\The.Witcher.3.Wild.Hunt.Patch.v1.10-GOG 2015-11-21 21:06 - 2015-11-21 21:06 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2010 2015-11-21 21:06 - 2015-11-21 21:06 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2010 2015-11-20 14:29 - 2015-11-20 14:29 - 851062242 _____ C:\WINDOWS\MEMORY.DMP 2015-11-20 14:29 - 2015-11-20 14:29 - 00334608 _____ C:\WINDOWS\Minidump\112015-43609-01.dmp 2015-11-20 11:48 - 2015-11-20 11:48 - 00000000 ____D C:\Users\Igor\Documents\PassMark 2015-11-18 18:54 - 2015-11-18 18:54 - 00002151 _____ C:\Users\Igor\Desktop\SQL Server 2016 CTP2.2 Configuration Manager.lnk 2015-11-18 18:54 - 2015-11-18 18:54 - 00002070 _____ C:\Users\Igor\Desktop\Microsoft SQL Server Management Studio.lnk 2015-11-17 17:11 - 2015-11-17 17:11 - 00000020 ___SH C:\Users\SQLSERVERAGENT\ntuser.ini 2015-11-17 17:11 - 2015-11-17 17:11 - 00000000 _SHDL C:\Users\SQLSERVERAGENT\Ustawienia lokalne 2015-11-17 17:11 - 2015-11-17 17:11 - 00000000 _SHDL C:\Users\SQLSERVERAGENT\Szablony 2015-11-17 17:11 - 2015-11-17 17:11 - 00000000 _SHDL C:\Users\SQLSERVERAGENT\Moje dokumenty 2015-11-17 17:11 - 2015-11-17 17:11 - 00000000 _SHDL C:\Users\SQLSERVERAGENT\Menu Start 2015-11-17 17:11 - 2015-11-17 17:11 - 00000000 _SHDL C:\Users\SQLSERVERAGENT\Documents\Moje wideo 2015-11-17 17:11 - 2015-11-17 17:11 - 00000000 _SHDL C:\Users\SQLSERVERAGENT\Documents\Moje obrazy 2015-11-17 17:11 - 2015-11-17 17:11 - 00000000 _SHDL C:\Users\SQLSERVERAGENT\Documents\Moja muzyka 2015-11-17 17:11 - 2015-11-17 17:11 - 00000000 _SHDL C:\Users\SQLSERVERAGENT\Dane aplikacji 2015-11-17 17:11 - 2015-11-17 17:11 - 00000000 _SHDL C:\Users\SQLSERVERAGENT\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2015-11-17 17:11 - 2015-11-17 17:11 - 00000000 _SHDL C:\Users\SQLSERVERAGENT\AppData\Local\Historia 2015-11-17 17:11 - 2015-11-17 17:11 - 00000000 _SHDL C:\Users\SQLSERVERAGENT\AppData\Local\Dane aplikacji 2015-11-17 17:10 - 2015-11-20 14:40 - 00000000 ____D C:\Users\SQLSERVERAGENT 2015-11-17 17:10 - 2015-08-01 22:33 - 00000000 ____D C:\Users\SQLSERVERAGENT\AppData\Roaming\TuneUp Software 2015-11-17 17:10 - 2015-08-01 22:33 - 00000000 ____D C:\Users\SQLSERVERAGENT\AppData\Local\Pokki 2015-11-17 17:10 - 2015-08-01 22:33 - 00000000 ____D C:\Users\SQLSERVERAGENT\AppData\Local\Microsoft Help 2015-11-17 17:10 - 2014-03-18 10:55 - 00000369 _____ C:\Users\SQLSERVERAGENT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2015-11-17 17:10 - 2014-03-18 10:55 - 00000369 _____ C:\Users\SQLSERVERAGENT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2015-11-17 17:10 - 2013-02-04 07:18 - 00000189 _____ C:\Users\SQLSERVERAGENT\Desktop\Lenovo Telephony Start Now.url 2015-11-17 16:55 - 2015-11-17 17:25 - 198180864 _____ C:\AdventureWorks2012_Data.mdf 2015-11-16 19:34 - 2015-11-16 19:34 - 00000000 ____D C:\Users\Igor\AppData\Local\CrashRpt 2015-11-13 16:17 - 2015-12-02 21:58 - 00000000 ____D C:\Users\Igor\Documents\OpenTTD 2015-11-13 16:17 - 2015-11-13 16:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenTTD 2015-11-13 16:17 - 2015-11-13 16:17 - 00000000 ____D C:\Program Files\OpenTTD ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-12 15:50 - 2015-07-10 10:05 - 00000000 ____D C:\Windows 2015-12-12 15:34 - 2014-10-10 18:12 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2015-12-12 15:09 - 2014-10-07 18:29 - 00001066 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-12-12 14:09 - 2014-10-07 18:29 - 00001062 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-12-12 13:58 - 2015-10-08 12:33 - 00000000 ____D C:\Users\Igor\AppData\Roaming\CodeBlocks 2015-12-12 11:42 - 2015-08-01 22:44 - 02425614 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-12-12 11:42 - 2015-07-10 17:30 - 01016630 _____ C:\WINDOWS\system32\perfh015.dat 2015-12-12 11:42 - 2015-07-10 17:30 - 00245568 _____ C:\WINDOWS\system32\perfc015.dat 2015-12-12 11:42 - 2015-07-10 12:02 - 00000000 ____D C:\WINDOWS\INF 2015-12-12 11:38 - 2014-10-04 13:24 - 00000000 ____D C:\ProgramData\MFAData 2015-12-12 11:37 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-12-12 11:36 - 2015-08-18 18:13 - 00000631 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics 2015-12-12 11:34 - 2015-08-01 22:21 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-12-12 11:34 - 2015-06-26 11:35 - 00000000 __SHD C:\Users\Igor\IntelGraphicsProfiles 2015-12-12 00:15 - 2014-10-04 13:16 - 00004198 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{AC3EA77D-9905-4FA6-85B3-64AA345C60A1} 2015-12-11 23:38 - 2015-07-10 11:55 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-12-11 18:19 - 2015-07-10 10:05 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2015-12-10 17:49 - 2015-08-16 16:43 - 00000000 ___RD C:\Users\Igor\Desktop\zdjęcia 2015-12-10 11:28 - 2015-07-10 12:04 - 00000000 ___HD C:\Program Files\WindowsApps 2015-12-10 11:28 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-12-09 18:04 - 2015-07-10 10:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2015-12-09 13:56 - 2015-10-26 10:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2015-12-04 22:39 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\NDF 2015-12-02 21:34 - 2015-07-10 12:04 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2015-12-02 21:33 - 2015-10-24 12:22 - 00000000 ____D C:\Program Files\Microsoft Office 15 2015-12-02 14:04 - 2014-10-07 18:29 - 00004124 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-12-02 14:04 - 2014-10-07 18:29 - 00003892 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-12-01 21:42 - 2014-06-14 03:27 - 00000000 ____D C:\ProgramData\Energy Manager 2015-11-29 23:06 - 2015-10-25 20:44 - 00000000 ___RD C:\Users\Igor\Desktop\PWr 2015-11-28 23:05 - 2014-10-05 10:59 - 00000000 ____D C:\ProgramData\Origin 2015-11-27 22:42 - 2015-10-12 21:35 - 00000000 ___RD C:\Users\Igor\Desktop\GAMES 2015-11-27 18:40 - 2014-10-04 19:45 - 00000000 ____D C:\Users\Igor\AppData\Roaming\BitTorrent 2015-11-27 18:25 - 2014-06-14 02:58 - 00000000 ____D C:\ProgramData\Package Cache 2015-11-26 13:54 - 2015-03-25 19:40 - 00000000 ____D C:\Users\Igor\Documents\Euro Truck Simulator 2 2015-11-22 11:19 - 2015-01-05 21:31 - 00000000 ____D C:\ProgramData\Oracle 2015-11-22 11:18 - 2015-08-30 17:04 - 00000000 ____D C:\Users\Igor\.oracle_jre_usage 2015-11-22 11:18 - 2015-01-05 21:31 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2015-11-22 11:18 - 2015-01-05 21:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-11-22 11:18 - 2015-01-05 21:31 - 00000000 ____D C:\Program Files (x86)\Java 2015-11-20 14:40 - 2015-11-02 23:12 - 00000000 ____D C:\Users\ReportServer 2015-11-20 14:40 - 2015-11-02 23:12 - 00000000 ____D C:\Users\MSSQLServerOLAPService 2015-11-20 14:40 - 2015-11-02 23:11 - 00000000 ____D C:\Users\MSSQLFDLauncher 2015-11-20 14:40 - 2015-11-02 23:11 - 00000000 ____D C:\Users\MsDtsServer130 2015-11-20 14:40 - 2015-11-02 23:10 - 00000000 ____D C:\Users\MSSQLSERVER 2015-11-20 14:34 - 2015-08-01 22:27 - 00000000 ____D C:\Users\Igor 2015-11-20 14:29 - 2015-09-09 13:46 - 00000000 ____D C:\WINDOWS\Minidump 2015-11-18 20:25 - 2015-11-02 23:10 - 00000000 ____D C:\Users\Igor\Documents\SQL Server Management Studio 2015-11-17 20:09 - 2015-10-13 22:10 - 00000000 ____D C:\Users\Igor\Documents\Visual Studio 2015 2015-11-15 15:58 - 2015-07-25 18:34 - 00000000 ____D C:\Users\Igor\AppData\Local\ChomikBox 2015-11-15 15:58 - 2015-07-25 18:34 - 00000000 ____D C:\Users\Igor\.gstreamer-0.10 ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-05-07 16:44 - 2015-05-07 16:44 - 0000057 _____ () C:\ProgramData\Ament.ini 2015-08-01 22:20 - 2015-08-01 22:20 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-09-12 22:26 - 2015-09-13 20:56 - 0003246 _____ () C:\ProgramData\hpzinstall.log 2015-10-21 15:08 - 2015-10-21 15:08 - 0000133 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc Niektóre pliki w TEMP: ==================== C:\Users\Igor\AppData\Local\Temp\AcDeltree.exe C:\Users\Igor\AppData\Local\Temp\avg-1556e455-08e7-474a-be9a-5c5661d2c746.exe C:\Users\Igor\AppData\Local\Temp\avguirn_081240716729.exe C:\Users\Igor\AppData\Local\Temp\b-weisy5.dll C:\Users\Igor\AppData\Local\Temp\DLMGuardian.exe C:\Users\Igor\AppData\Local\Temp\ifutwqke.dll C:\Users\Igor\AppData\Local\Temp\jre-8u65-windows-au.exe C:\Users\Igor\AppData\Local\Temp\jre-8u66-windows-au.exe C:\Users\Igor\AppData\Local\Temp\scdrotac.dll C:\Users\Igor\AppData\Local\Temp\v3slmx2z.dll ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-12-07 15:48 ==================== Koniec FRST.txt ============================