Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:12-12-2015 01 Uruchomiony przez Magda (administrator) MAGDA-PC (12-12-2015 22:19:48) Uruchomiony z E:\ Załadowane profile: Magda (Dostępne profile: Magda) Platform: Microsoft® Windows Vista™ Home Basic Service Pack 2 (X86) Język: Polski (Polska) Internet Explorer Wersja 9 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Microsoft Corporation) C:\WINDOWS\System32\SLsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe (Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (InterVideo) C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe (Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (TFuns LIMITED) C:\ProgramData\HWdMH\WdMan.exe (Conexant Systems, Inc.) C:\WINDOWS\System32\drivers\XAudio.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe (Microsoft Corporation) C:\WINDOWS\System32\mobsync.exe (Intel Corporation) C:\WINDOWS\System32\igfxsrvc.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe (Intel Corporation) C:\WINDOWS\System32\igfxtray.exe (Intel Corporation) C:\WINDOWS\System32\hkcmd.exe (Intel Corporation) C:\WINDOWS\System32\igfxpers.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe ( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe (Adobe Systems Inc.) E:\Grafika\Acrobat 9\Acrobat\acrotray.exe (Acronis) C:\Program Files\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe (Acronis) C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe () C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe (Hewlett-Packard) C:\Program Files\Hp\HP Software Update\hpwuschd2.exe (Microsoft Corporation) E:\OFFICE\MS Office 2000\Office\1045\OLFSNT40.EXE ( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe (Microsoft Corporation) C:\WINDOWS\System32\wbem\unsecapp.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-18] (Microsoft Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1045800 2008-03-28] (Synaptics, Inc.) HKLM\...\Run: [hpWirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [472776 2007-03-01] (Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [WAWifiMessage] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [317128 2007-01-10] (Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [HP Health Check Scheduler] => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [71176 2007-06-05] (Hewlett-Packard) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-09] (AVAST Software) HKLM\...\Run: [WatchDog] => C:\Program Files\InterVideo\DVD Check\DVDCheck.exe [184320 2006-09-05] (InterVideo Inc.) HKLM\...\Run: [QlbCtrl.exe] => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [287800 2009-11-11] ( Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [Adobe_ID0EZEHM] => C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3Tray.exe [1884160 2007-04-27] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe Acrobat Speed Launcher] => E:\Grafika\Acrobat 9\Acrobat\Acrobat_sl.exe [37232 2008-06-12] (Adobe Systems Incorporated) HKLM\...\Run: [] => [X] HKLM\...\Run: [Acrobat Assistant 8.0] => E:\Grafika\Acrobat 9\Acrobat\Acrotray.exe [640376 2008-06-11] (Adobe Systems Inc.) HKLM\...\Run: [SAOB Monitor] => C:\Program Files\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe [2536440 2011-05-10] (Acronis) HKLM\...\Run: [TrueImageMonitor.exe] => C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [5550792 2011-05-17] (Acronis) HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [390736 2011-05-17] (Acronis) HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-12-09] (AVAST Software) GroupPolicy: Ograniczenia - Chrome <======= UWAGA CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Winsock: Catalog5 06 C:\Program Files\Bonjour\mdnsNSP.dll [94208 2006-02-28] (Apple Computer, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{1B872A52-44FB-469B-9545-D8CE30C0D662}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449653867&z=517fc3f79fedffe469acf36gdzbz3tfq3wfc6bcm3o&from=ient07021&uid=WDCXWD1200BEVS-60UST0_WD-WXE907G8700487004 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449653867&z=517fc3f79fedffe469acf36gdzbz3tfq3wfc6bcm3o&from=ient07021&uid=WDCXWD1200BEVS-60UST0_WD-WXE907G8700487004&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449653867&z=517fc3f79fedffe469acf36gdzbz3tfq3wfc6bcm3o&from=ient07021&uid=WDCXWD1200BEVS-60UST0_WD-WXE907G8700487004 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449653867&z=517fc3f79fedffe469acf36gdzbz3tfq3wfc6bcm3o&from=ient07021&uid=WDCXWD1200BEVS-60UST0_WD-WXE907G8700487004&q={searchTerms} HKU\S-1-5-21-1690032049-1338340778-4026156367-1006\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449653867&z=517fc3f79fedffe469acf36gdzbz3tfq3wfc6bcm3o&from=ient07021&uid=WDCXWD1200BEVS-60UST0_WD-WXE907G8700487004 HKU\S-1-5-21-1690032049-1338340778-4026156367-1006\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449653867&z=517fc3f79fedffe469acf36gdzbz3tfq3wfc6bcm3o&from=ient07021&uid=WDCXWD1200BEVS-60UST0_WD-WXE907G8700487004 SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449653867&z=517fc3f79fedffe469acf36gdzbz3tfq3wfc6bcm3o&from=ient07021&uid=WDCXWD1200BEVS-60UST0_WD-WXE907G8700487004&q={searchTerms} BHO: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2008-06-11] (Adobe Systems Incorporated) BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-12-09] (AVAST Software) BHO: Brak nazwy -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> Brak pliku BHO: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated) BHO: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated) Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated) Toolbar: HKLM - Brak nazwy - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Brak pliku Toolbar: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006 -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated) Toolbar: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Brak pliku FireFox: ======== FF ProfilePath: C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\nmbodzqa.default FF Homepage: www.google.pl FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.3 -> E:\PLAY\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> E:\PLAY\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.1 -> E:\PLAY\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-09] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-07-25] [Brak podpisu cyfrowego] StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1449653867&z=517fc3f79fedffe469acf36gdzbz3tfq3wfc6bcm3o&from=ient07021&uid=WDCXWD1200BEVS-60UST0_WD-WXE907G8700487004 Chrome: ======= CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-12-09] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [804536 2011-05-17] (Acronis) S3 Adobe Version Cue CS3; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe [153792 2007-04-27] (Adobe Systems Incorporated) R2 afcdpsrv; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [3246040 2014-05-11] (Acronis) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-09] (AVAST Software) S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2014-05-11] (Macrovision Europe Ltd.) [Brak podpisu cyfrowego] R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [61440 2007-06-05] (Hewlett-Packard) [Brak podpisu cyfrowego] R2 hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [135168 2006-05-02] (Hewlett-Packard Development Company, L.P.) [Brak podpisu cyfrowego] S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Brak podpisu cyfrowego] R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes) S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation) S3 stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [73728 2006-11-01] (MicroVision Development, Inc.) [Brak podpisu cyfrowego] R2 WdMan; C:\ProgramData\HWdMH\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Brak podpisu cyfrowego] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-18] (Microsoft Corporation) U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X] ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24016 2015-12-09] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [81168 2015-12-09] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [55200 2015-12-09] (AVAST Software) R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49776 2015-12-09] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [794952 2015-12-09] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [435976 2015-12-09] (AVAST Software) R3 aswStmXP; C:\Windows\system32\drivers\aswStmXP.sys [165104 2015-12-09] (AVAST Software) S3 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [58016 2015-12-09] (AVAST Software) R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209432 2015-12-09] (AVAST Software) S3 HdAudAddService; C:\Windows\System32\drivers\CHDART.sys [159232 2007-02-22] (Conexant Systems Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2015-12-12] (Malwarebytes) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-10-05] (Malwarebytes Corporation) R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [36528 2006-07-24] (Sonic Solutions) [Brak podpisu cyfrowego] S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X] U4 eabfiltr; Brak ImagePath S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X] ========================== MD5 sterowników ======================= C:\Windows\System32\drivers\acpi.sys 82B296AE1892FE3DBEE00C9CF92F8AC7 C:\Windows\system32\drivers\adp94xx.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\adpahci.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\adpu160m.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\adpu320.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\afcdp.sys 53696AD8FFC5FAC51949A525FF65A689 C:\Windows\system32\drivers\afd.sys 4A0978779958D8FE8F5849F452BCC812 C:\Windows\system32\drivers\agp440.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\djsvs.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\aliide.sys 90395B64600EBB4552E26E178C94B2E4 C:\Windows\system32\drivers\amdagp.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\amdide.sys 0577DF1D323FE75A739C787893D300EA C:\Windows\system32\drivers\amdk7.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\amdk8.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\arc.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\arcsas.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\aswHwid.sys 2C3D73CF3776E2A872B92B1ABF24F1D8 C:\Windows\system32\drivers\aswMonFlt.sys 7DB787D628DC900743E2D7C9772C8C0E C:\Windows\system32\drivers\aswRdr.sys E47257FDFEFFFE7FC1ACACF6FEE03FFD C:\Windows\system32\Drivers\aswRvrt.sys 966A26534CDBCA6CD54CCF94A2706E6C C:\Windows\system32\drivers\aswSnx.sys 64AE5F2C832B594DF01E6E2F6138176E C:\Windows\system32\drivers\aswSP.sys EDC16412EE2366C0771184F0E8AD5936 C:\Windows\system32\drivers\aswStmXP.sys 00B3DEF0865A109311BACBA6D0BA48A8 C:\Windows\system32\drivers\aswTdi.sys 22A6F5BA31049C17A455B3CDD47850CC C:\Windows\system32\Drivers\aswVmm.sys B5C181CA3960FA8FC698D76380907713 C:\Windows\System32\DRIVERS\asyncmac.sys 53B202ABEE6455406254444303E87BE1 C:\Windows\System32\drivers\atapi.sys 1F05B78AB91C9075565A9D8A4B880BC4 C:\Windows\System32\DRIVERS\b57nd60x.sys 8E287EB3A52FD30C999482C576F4A61B C:\Windows\System32\DRIVERS\bcmwl6.sys CF6A67C90951E3E763D2135DEDE44B85 C:\Windows\system32\Drivers\Beep.sys 67E506B75BD5326A3EC7B70BD014DFB6 C:\Windows\System32\DRIVERS\bowser.sys 35F376253F687BDE63976CCB3F2108CA C:\Windows\system32\drivers\brfiltlo.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\brfiltup.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\brserid.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\brserwdm.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\brusbmdm.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\brusbser.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\BthEnum.sys A820438255F37AB8BAA2BD59753A8D81 C:\Windows\system32\drivers\bthmodem.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\bthpan.sys B8C3D9DDF85FD197C3E5F849FEF71144 C:\Windows\System32\Drivers\BTHport.sys 4A74BBB2B6761789F42A6613479BDB1D C:\Windows\System32\Drivers\BTHUSB.sys 1A407F9B707A06F55AA150F9AA072B09 C:\Windows\System32\DRIVERS\cdfs.sys 7ADD03E75BEB9E6DD102C3081D29840A C:\Windows\System32\DRIVERS\cdrom.sys 6B4BFFB9BECD728097024276430DB314 C:\Windows\system32\drivers\circlass.sys ==> MD5 jest poprawne C:\Windows\System32\CLFS.sys 5D9311526801643000D7032A83B18B12 C:\Windows\System32\DRIVERS\CmBatt.sys 99AFC3795B58CC478FBBBCDC658FCB56 C:\Windows\system32\drivers\cmdide.sys 45201046C776FFDAF3FC8A0029C581C8 C:\Windows\System32\drivers\CHDRT32.sys B6E7991E3D6146C04C85CD31AF22A381 C:\Windows\System32\DRIVERS\compbatt.sys 6AFEF0B60FA25DE07C0968983EE4F60A C:\Windows\System32\drivers\crcdisk.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\crusoe.sys ==> MD5 jest poprawne C:\Windows\System32\Drivers\dfsc.sys 622C41A07CA7E6DD91770F50D532CB6C C:\Windows\System32\drivers\disk.sys 5D4AEFC3386920236A548271F8F1AF6A C:\Windows\System32\drivers\drmkaud.sys 97FEF831AB90BEE128C9AF390E243F80 C:\Windows\System32\drivers\dxgkrnl.sys 5C2C209CDEFBC51D83D66E8A53B2BE89 C:\Windows\System32\DRIVERS\e100b325.sys 5C940A174DFB2C42B9F6BA6EDC2BAA0B C:\Windows\System32\DRIVERS\E1G60I32.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\ecache.sys 9BAB89DBB27891DEEF6E1F1B589A6ED4 C:\Windows\system32\drivers\elxstor.sys ==> MD5 jest poprawne C:\Windows\system32\Drivers\exfat.sys 22B408651F9123527BCEE54B4F6C5CAE C:\Windows\system32\Drivers\fastfat.sys 4E404505B3F62ECFBDBCBBCF0A72DBC5 C:\Windows\System32\DRIVERS\fdc.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\fileinfo.sys A8C0139A884861E3AAE9CFE73B208A9F C:\Windows\System32\drivers\filetrace.sys 0AE429A696AECBC5970E3CF2C62635AE C:\Windows\System32\DRIVERS\flpydisk.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\fltmgr.sys 01334F9EA68E6877C4EF05D3EA8ABB05 C:\Windows\system32\Drivers\Fs_Rec.sys B972A66758577E0BFD1DE0F91AAA27B5 C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\cpqbttn.sys 93AEE3434935FC2F805FEFD8DC5ED1B4 C:\Windows\System32\drivers\CHDART.sys 07EEE11D6E2B78122E17DB3878B4C687 C:\Windows\System32\DRIVERS\HDAudBus.sys 062452B7FFD68C8C042A6261FE8DFF4A C:\Windows\system32\drivers\hidbth.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\hidir.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\hidusb.sys CCA4B519B17E23A00B826C55716809CC C:\Windows\system32\drivers\hpcisss.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\HpqKbFiltr.sys 1210960FF8928950D2A786895B0C424A C:\Windows\System32\DRIVERS\VSTAZL3.SYS 46D67209550973257601A533E2AC5785 C:\Windows\System32\DRIVERS\HSX_DPV.sys 1882827F41DEE51C70E24C567C35BFB5 C:\Windows\System32\DRIVERS\HSXHWAZL.sys A44DDF3BA83E4664BF4DE9220097578C C:\Windows\System32\drivers\HTTP.sys 0EEECA26C8D4BDE2A4664DB058A81937 C:\Windows\system32\drivers\i2omp.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\i8042prt.sys 22D56C8184586B7A1F6FA60BE5F5A2BD C:\Windows\System32\DRIVERS\igdkmd32.sys BBACE0293B73BF8C7CB591F2D06F26FA C:\Windows\system32\drivers\iastorv.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\igdkmd32.sys BBACE0293B73BF8C7CB591F2D06F26FA C:\Windows\system32\drivers\iirsp.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\intelide.sys 83AA759F3189E6370C30DE5DC5590718 C:\Windows\System32\DRIVERS\intelppm.sys 224191001E78C89DFA78924C3EA595FF C:\Windows\System32\DRIVERS\ipfltdrv.sys 62C265C38769B864CB25B4BCF62DF6C3 C:\Windows\system32\drivers\ipmidrv.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\ipnat.sys 8793643A67B42CEC66490B2A0CF92D68 C:\Windows\System32\drivers\irenum.sys 109C0DFB82C3632FBD11949B73AEEAC9 C:\Windows\system32\drivers\isapnp.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\msiscsi.sys 232FA340531D940AAC623B121A595034 C:\Windows\system32\drivers\iteatapi.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\iteraid.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\kbdclass.sys 37605E0A8CF00CBBA538E753E4344C6E C:\Windows\System32\DRIVERS\kbdhid.sys EDE59EC70E25C24581ADD1FBEC7325F7 C:\Windows\System32\Drivers\ksecdd.sys C89E473697B67F0E3AE9211ADBD43278 C:\Windows\System32\DRIVERS\lltdio.sys D1C5883087A0C3F1344D9D55A44901F6 C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\luafv.sys 8F5C7426567798E62A3B3614965D62CC C:\Windows\system32\drivers\mbam.sys 40C7F4B63337414F967AC53E0520B06B C:\Windows\system32\drivers\MBAMSwissArmy.sys 5023F594D5448E16F920157174C61358 C:\Windows\system32\drivers\mwac.sys E45E2CB9A7902B3A94DF049CB3452586 C:\Windows\System32\DRIVERS\mdmxsdk.sys 0CEA2D0D3FA284B85ED5B68365114F76 C:\Windows\system32\drivers\megasas.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\modem.sys E13B5EA0F51BA5B1512EC671393D09BA C:\Windows\System32\DRIVERS\monitor.sys 0A9BB33B56E294F686ABB7C1E4E2D8A8 C:\Windows\System32\DRIVERS\mouclass.sys 5BF6A1326A335C5298477754A506D263 C:\Windows\System32\DRIVERS\mouhid.sys 93B8D4869E12CFBE663915502900876F C:\Windows\System32\drivers\mountmgr.sys 3EAE06B0D9E32A3D45DC3E07F1FBFA97 C:\Windows\system32\drivers\mpio.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\mpsdrv.sys 22241FEBA9B2DEFA669C8CB0A8DD7D2E C:\Windows\system32\drivers\mraid35x.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\mrxdav.sys B0584CA7DEF55929FDB5169BD28B2484 C:\Windows\System32\DRIVERS\mrxsmb.sys 1B864548B2ACEC1C0BB29B615CC42978 C:\Windows\System32\DRIVERS\mrxsmb10.sys 3F39B02EEDC5B8A0ED896EA1CDF7245F C:\Windows\System32\DRIVERS\mrxsmb20.sys D0670EC8E5AD3FA5BE372BF70AC0EABF C:\Windows\System32\drivers\msahci.sys 742AED7939E734C36B7E8D6228CE26B7 C:\Windows\system32\drivers\msdsm.sys ==> MD5 jest poprawne C:\Windows\system32\Drivers\Msfs.sys A9927F4A46B816C92F461ACB90CF8515 C:\Windows\System32\drivers\msisadrv.sys 0F400E306F385C56317357D6DEA56F62 C:\Windows\System32\drivers\MSKSSRV.sys D8C63D34D9C9E56C059E24EC7185CC07 C:\Windows\System32\drivers\MSPCLOCK.sys 1D373C90D62DDB641D50E55B9E78D65E C:\Windows\System32\drivers\MSPQM.sys B572DA05BF4E098D4BBA3A4734FB505B C:\Windows\system32\Drivers\MsRPC.sys B49456D70555DE905C311BCDA6EC6ADB C:\Windows\System32\DRIVERS\mssmbios.sys E384487CB84BE41D09711C30CA79646C C:\Windows\System32\drivers\MSTEE.sys 7199C1EEC1E4993CAF96B8C0A26BD58A C:\Windows\System32\Drivers\mup.sys 6A57B5733D4CB702C8EA4542E836B96C C:\Windows\System32\DRIVERS\nwifi.sys 85C44FDFF9CF7E72A40DCB7EC06A4416 C:\Windows\System32\drivers\ndis.sys DEC4B200C459FA929B0A764E79904B79 C:\Windows\System32\DRIVERS\ndistapi.sys 0E186E90404980569FB449BA7519AE61 C:\Windows\System32\DRIVERS\ndisuio.sys D6973AA34C4D5D76C0430B181C3CD389 C:\Windows\System32\DRIVERS\ndiswan.sys 818F648618AE34F729FDB47EC68345C3 C:\Windows\system32\Drivers\NDProxy.sys 71DAB552B41936358F3B541AE5997FB3 C:\Windows\System32\DRIVERS\netbios.sys BCD093A5A6777CF626434568DC7DBA78 C:\Windows\System32\DRIVERS\netbt.sys ECD64230A59CBD93C85F1CD1CAB9F3F6 C:\Windows\System32\DRIVERS\NETw3v32.sys A15F219208843A5A210C8CB391384453 C:\Windows\System32\DRIVERS\NETw4v32.sys 1D73499A6664B4DA05D750FF83FDB274 C:\Windows\System32\DRIVERS\NETw5v32.sys 8DE67BD902095A13329FD82C85A1FA09 C:\Windows\system32\drivers\nfrd960.sys ==> MD5 jest poprawne C:\Windows\system32\Drivers\Npfs.sys D36F239D7CCE1931598E8FB90A0DBC26 C:\Windows\System32\drivers\nsiproxy.sys 609773E344A97410CE4EBF74A8914FCF C:\Windows\system32\Drivers\Ntfs.sys 2C1121F2B87E9A6B12485DF53CD848C7 C:\Windows\system32\drivers\ntrigdigi.sys ==> MD5 jest poprawne C:\Windows\system32\Drivers\Null.sys C5DBBCDA07D780BDA9B685DF333BB41E C:\Windows\system32\drivers\nvraid.sys E69E946F80C1C31C53003BFBF50CBB7C C:\Windows\system32\drivers\nvstor.sys 9E0BA19A28C498A6D323D065DB76DFFC C:\Windows\system32\drivers\nv_agp.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\ohci1394.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\parport.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\partmgr.sys B9C2B89F08670E159F7181891E449CD9 C:\Windows\System32\DRIVERS\parvdm.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\pci.sys 941DC1D19E7E8620F40BBC206981EFDB C:\Windows\System32\DRIVERS\pciide.sys 3B1901E401473E03EB8C874271E50C26 C:\Windows\System32\DRIVERS\pcmcia.sys 3BB2244F343B610C29C98035504C9B75 C:\Windows\System32\drivers\peauth.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\raspptp.sys ECFFFAEC0C1ECD8DBC77F39070EA1DB1 C:\Windows\system32\drivers\processr.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\pacer.sys 99514FAA8DF93D34B5589187DB3AA0BA C:\Windows\System32\Drivers\PxHelp20.sys FEFFCFDC528764A04C8ED63D5FA6E711 C:\Windows\system32\drivers\ql2300.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\ql40xx.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\qwavedrv.sys 9F5E0E1926014D17486901C88ECA2DB7 C:\Windows\System32\DRIVERS\atikmdag.sys E642B131FB74CAF4BB8A014F31113142 C:\Windows\System32\DRIVERS\rasacd.sys 147D7F9C556D259924351FEB0DE606C3 C:\Windows\System32\DRIVERS\rasl2tp.sys A214ADBAF4CB47DD2728859EF31F26B0 C:\Windows\System32\DRIVERS\raspppoe.sys 509A98DD18AF4375E1FC40BC175F1DEF C:\Windows\System32\DRIVERS\rassstp.sys 2005F4A1E05FA09389AC85840F0A9E4D C:\Windows\System32\DRIVERS\rdbss.sys B14C9D5B9ADD2F84F70570BBBFAA7935 C:\Windows\System32\DRIVERS\RDPCDD.sys 89E59BE9A564262A3FB6C4F4F1CD9899 C:\Windows\system32\drivers\rdpdr.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\rdpencdd.sys 9D91FE5286F748862ECFFA05F8A0710C C:\Windows\system32\Drivers\RDPWD.sys C127EBD5AFAB31524662C48DFCEB773A C:\Windows\System32\DRIVERS\rfcomm.sys 7EC90C316177BA3F1BCE92005264B447 C:\Windows\System32\DRIVERS\rspndr.sys 9C508F4074A39E8B4B31D27198146FAD C:\Windows\system32\drivers\sbp2port.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\sdbus.sys 4339A2585708C7D9B0C0CE5AAD3DD6FF C:\Windows\system32\Drivers\secdrv.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\serenum.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\serial.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sermouse.sys 8AF3D28A879BF75DB53A0EE7A4289624 C:\Windows\system32\drivers\sffdisk.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sfloppy.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sisagp.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sisraid2.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sisraid4.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\smb.sys 7B75299A4D201D6A6533603D6914AB04 C:\Windows\System32\DRIVERS\snapman.sys EB49860E776CE860DC3CFB9EDB1BA517 C:\Windows\system32\Drivers\spldr.sys 7AEBDEEF071FE28B0EEF2CDD69102BFF C:\Windows\System32\DRIVERS\srv.sys DC7E6FCD8C51AEF8FF3F2E23C786014A C:\Windows\System32\DRIVERS\srv2.sys FF33AFF99564B1AA534F58868CBE41EF C:\Windows\System32\DRIVERS\srvnet.sys 8AE0783E3EDCED90D4B2961887056A2B C:\Windows\System32\DRIVERS\swenum.sys 7BA58ECF0C0A9A69D44B3DCA62BECF56 C:\Windows\system32\drivers\symc8xx.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sym_hi.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\sym_u3.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\SynTP.sys F5D926807BD9BC0AF68F9376144DE425 C:\Windows\System32\drivers\tcpip.sys C7B0746FCD576D7EEBA6A2530B0B2966 C:\Windows\System32\DRIVERS\tcpip.sys C7B0746FCD576D7EEBA6A2530B0B2966 C:\Windows\System32\drivers\tcpipreg.sys 608C345A255D82A6289C2D468EB41FD7 C:\Windows\System32\drivers\tdpipe.sys 5DCF5E267BE67A1AE926F2DF77FBCC56 C:\Windows\System32\DRIVERS\tdrpm273.sys 431801FCC97034E04A6EFF81136578D7 C:\Windows\System32\drivers\tdtcp.sys 389C63E32B3CEFED425B61ED92D3F021 C:\Windows\System32\DRIVERS\tdx.sys EC565DFA3D9C45D8083B72DEC5B33710 C:\Windows\System32\DRIVERS\termdd.sys 3CAD38910468EAB9A6479E2F01DB43C7 C:\Windows\System32\DRIVERS\timntr.sys A34D7024BB7140EC785C86BC065D4F60 C:\Windows\System32\drivers\tpm.sys 6D9AD3534A9CF7E4B86C6EAE8BC335F6 C:\Windows\System32\DRIVERS\tssecsrv.sys F4EAA7ECBCB25DE901C9B7F2CDCDA0B3 C:\Windows\System32\DRIVERS\tunmp.sys CAECC0120AC49E3D2F758B9169872D38 C:\Windows\System32\DRIVERS\tunnel.sys 300DB877AC094FEAB0BE7688C3454A9C C:\Windows\system32\drivers\uagp35.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\udfs.sys D9728AF68C4C7693CB100B8441CBDEC6 C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\uliahci.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\ulsata.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\ulsata2.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\umbus.sys 32CFF9F809AE9AED85464492BF3E32D2 C:\Windows\System32\DRIVERS\usbccgp.sys AAB0B5F72D2D726FBFDC895A2902DE1D C:\Windows\system32\drivers\usbcir.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\usbehci.sys 153E8515CB86F8BB5D1A8B478EBF4BB2 C:\Windows\System32\DRIVERS\usbhub.sys 2AE6BCEBD85D31317E433733DAF25888 C:\Windows\System32\DRIVERS\usbohci.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\usbprint.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\USBSTOR.SYS BE3DA31C191BC222D9AD503C5224F2AD C:\Windows\System32\DRIVERS\usbuhci.sys 44056325428A8E4C755830426E29878F C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\vga.sys 2E93AC0A1D8C79D019DB6C51F036636C C:\Windows\system32\drivers\viaagp.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\viac7.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\viaide.sys FD2E3175FCADA350C7AB4521DCA187EC C:\Windows\System32\drivers\volmgr.sys 69503668AC66C77C6CD7AF86FBDF8C43 C:\Windows\System32\drivers\volmgrx.sys 23E41B834759917BFD6B9A0D625D0C28 C:\Windows\System32\drivers\volsnap.sys 786DB5771F05EF300390399F626BF30A C:\Windows\system32\drivers\vsmraid.sys ==> MD5 jest poprawne C:\Windows\system32\drivers\wacompen.sys ==> MD5 jest poprawne C:\Windows\System32\DRIVERS\wanarp.sys 55201897378CCA7AF8B5EFD874374A26 C:\Windows\System32\DRIVERS\wanarp.sys 55201897378CCA7AF8B5EFD874374A26 C:\Windows\system32\drivers\wd.sys ==> MD5 jest poprawne C:\Windows\System32\drivers\Wdf01000.sys 25944D2CC49E0A6C581D02A74B7D6645 C:\Windows\System32\DRIVERS\wimfltr.sys F9AD3A5E3FD7E0BDB18B8202B0FDD4E4 C:\Windows\System32\DRIVERS\HSX_CNXT.sys E096FFB754F1E45AE1BDDAC1275AE2C5 C:\Windows\System32\DRIVERS\wmiacpi.sys 2E7255D172DF0B8283CDFB7B433B864E C:\Windows\System32\DRIVERS\wpdusb.sys DE9D36F91A4DF3D911626643DEBF11EA C:\Windows\system32\drivers\ws2ifsl.sys E3A3CB253C0EC2494D4A61F5E43A389C C:\Windows\System32\drivers\WudfPf.sys 06E6F32C8D0A3F66D956F57B43A2E070 C:\Windows\System32\DRIVERS\WUDFRd.sys 867C301E8B790040AE9CF6486E8041DF C:\Windows\System32\DRIVERS\xaudio.sys 19E7C173B6242AD7521E537AE54768BF ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Trzy miesiące - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-12 22:16 - 2015-12-12 22:19 - 00000000 ____D C:\FRST 2015-12-10 10:52 - 2015-11-06 18:05 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2015-12-10 10:52 - 2015-11-06 17:32 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2015-12-10 10:52 - 2015-11-06 17:32 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2015-12-10 10:52 - 2015-11-06 17:32 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2015-12-10 10:52 - 2015-11-06 17:32 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2015-12-10 10:52 - 2015-11-06 16:27 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2015-12-10 10:52 - 2015-11-06 16:26 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2015-12-10 10:52 - 2015-11-06 16:24 - 02068480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-12-10 10:52 - 2015-11-06 16:20 - 01073152 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-12-10 10:52 - 2015-11-06 16:20 - 00682496 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2015-12-10 10:52 - 2015-11-06 16:19 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2015-12-10 10:50 - 2015-11-02 18:04 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\els.dll 2015-12-10 10:47 - 2015-11-05 08:26 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2015-12-10 10:45 - 2015-11-10 18:03 - 01208832 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll 2015-12-10 10:45 - 2015-11-10 18:03 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll 2015-12-10 10:43 - 2015-11-05 08:34 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2015-12-09 23:38 - 2015-12-09 23:38 - 00042419 _____ C:\Users\Magda\Desktop\zaburzenia.odt 2015-12-09 23:37 - 2015-12-09 23:37 - 00007334 _____ C:\Users\Magda\Desktop\Nowy OpenDocument Dokument tekstowy.odt 2015-12-09 14:19 - 2015-11-12 21:39 - 01814528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-12-09 14:19 - 2015-11-12 21:37 - 12389376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-12-09 14:19 - 2015-11-12 21:36 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-12-09 14:19 - 2015-11-12 21:34 - 09753088 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-12-09 14:19 - 2015-11-12 21:34 - 01140224 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-12-09 14:19 - 2015-11-12 21:33 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 01804288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-12-09 14:19 - 2015-11-12 21:32 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-12-09 14:19 - 2015-11-12 21:32 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2015-12-09 14:19 - 2015-11-12 21:31 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-12-09 14:19 - 2015-11-12 21:31 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-12-09 14:19 - 2015-11-12 21:31 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-12-09 14:19 - 2015-11-12 21:31 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-12-09 14:19 - 2015-11-12 21:31 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-12-09 14:19 - 2015-11-12 21:31 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2015-12-09 13:24 - 2015-12-12 21:07 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-12-09 13:22 - 2015-12-09 13:22 - 00000899 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2015-12-09 13:22 - 2015-12-09 13:22 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware 2015-12-09 13:22 - 2015-10-05 09:50 - 00094936 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-12-09 13:22 - 2015-10-05 09:50 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-12-09 13:22 - 2015-10-05 09:50 - 00023256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2015-12-09 13:21 - 2015-12-09 13:21 - 22908888 _____ (Malwarebytes ) C:\mbam-setup-2.2.0.1024.exe 2015-12-09 13:05 - 2015-12-09 13:05 - 00007323 _____ C:\Users\fixlist.txt 2015-12-09 12:02 - 2015-12-09 12:02 - 00000000 ____D C:\Program Files\Google 2015-12-09 11:54 - 2015-12-09 11:54 - 00322760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2015-12-09 11:54 - 2015-12-09 11:54 - 00165104 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStmXP.sys 2015-12-09 11:54 - 2015-12-09 11:54 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr 2015-12-09 11:33 - 2015-12-09 11:33 - 00053804 _____ C:\Users\Magda\Documents\cc_20151209_113326.reg 2015-12-09 10:39 - 2015-12-09 10:40 - 00000001 _____ C:\Windows\system32\pl.html 2015-12-04 15:26 - 2015-12-04 15:26 - 00000000 _____ C:\Users\Magda\Desktop\Nowy dokument tekstowy (3).txt 2015-12-01 19:28 - 2015-12-01 19:28 - 00000000 ____D C:\Users\Public\Książeczka 2015 2015-11-22 21:51 - 2015-11-23 23:45 - 00000000 ____D C:\Users\Public\bell 2015-11-12 22:43 - 2015-11-12 22:43 - 00000000 ____D C:\Users\Public\muza 50 2015-11-12 10:02 - 2015-10-13 15:31 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2015-11-12 10:02 - 2015-10-13 15:31 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2015-11-12 10:01 - 2015-10-17 17:01 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-11-12 10:00 - 2015-10-14 21:22 - 01206192 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-11-12 10:00 - 2015-10-14 17:01 - 03606464 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2015-11-12 10:00 - 2015-10-14 17:01 - 03554752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-11-12 09:56 - 2015-10-10 17:02 - 00526272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2015-11-12 09:50 - 2015-09-26 17:05 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-11-12 09:50 - 2015-09-26 17:04 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-11-12 09:50 - 2015-09-26 14:21 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2015-11-12 09:50 - 2015-09-22 14:11 - 00440768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-11-11 23:41 - 2015-11-11 23:41 - 00000778 _____ C:\Users\Magda\Desktop\Bridge — skrót.lnk 2015-11-09 22:23 - 2015-11-11 23:47 - 00000000 ____D C:\Users\Public\voynich 2015-11-06 19:45 - 2015-11-07 20:35 - 00000000 ____D C:\Program Files\Mozilla Firefox 2015-11-03 21:57 - 2015-11-03 21:57 - 00000000 ____D C:\Users\Public\ramki 2015-10-30 21:18 - 2015-10-30 21:57 - 00000000 ____D C:\Users\Public\zbiór 2015-10-30 14:45 - 2015-10-30 14:45 - 03194873 _____ C:\Users\Magda\Downloads\szpiedzy na moscie_23,5mm_okl.pdf 2015-10-28 19:05 - 2015-10-28 19:05 - 00000275 _____ C:\Users\Magda\Downloads\index(3).djvu 2015-10-28 19:05 - 2015-10-28 19:05 - 00000275 _____ C:\Users\Magda\Downloads\index(2).djvu 2015-10-28 19:03 - 2015-10-28 19:03 - 00000278 _____ C:\Users\Magda\Downloads\index(1).djvu 2015-10-28 19:02 - 2015-10-28 19:02 - 00000278 _____ C:\Users\Magda\Downloads\index.djvu 2015-10-28 18:56 - 2015-10-28 18:56 - 00000000 ____D C:\Program Files\WinDjView 2015-10-28 18:54 - 2015-10-28 18:54 - 00000000 ____D C:\Users\Magda\AppData\Roaming\Opera Software 2015-10-28 18:54 - 2015-10-28 18:54 - 00000000 ____D C:\Users\Magda\AppData\Local\Opera Software 2015-10-28 18:51 - 2015-10-28 18:51 - 00000000 ____D C:\Users\Magda\AppData\Roaming\Shortcut 2015-10-28 18:49 - 2015-10-28 18:58 - 00000000 ____D C:\Program Files\Opera 2015-10-28 18:49 - 2015-10-28 18:48 - 02933474 _____ (Andrew Zhezherun) C:\Users\Magda\Downloads\WinDjView-2.1-Setup.exe 2015-10-27 18:17 - 2015-10-27 18:18 - 00001033 _____ C:\Users\Magda\Desktop\dopisek.txt 2015-10-18 14:50 - 2015-11-12 22:40 - 00000278 _____ C:\Users\Magda\Desktop\Nowy dokument tekstowy (2).txt 2015-10-14 15:57 - 2015-07-18 14:14 - 00901264 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00015200 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00011104 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-14 15:57 - 2015-07-18 14:14 - 00011104 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-10-14 15:52 - 2015-07-29 01:46 - 11588096 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-10-13 01:29 - 2015-10-13 01:29 - 00875720 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll 2015-10-13 01:29 - 2015-10-13 01:29 - 00536768 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll 2015-09-27 17:19 - 2015-09-28 20:05 - 00000000 ____D C:\Users\Public\Donovan ==================== Trzy miesiące - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-12 22:16 - 2006-11-02 12:18 - 00000000 ____D C:\WINDOWS 2015-12-12 22:07 - 2014-05-11 14:52 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-12-12 22:07 - 2014-05-11 14:52 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-12-12 21:06 - 2006-11-02 13:58 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-12-12 21:06 - 2006-11-02 13:45 - 00003168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2015-12-12 21:06 - 2006-11-02 13:45 - 00003168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2015-12-12 00:26 - 2007-01-09 10:24 - 00000012 _____ C:\Windows\bthservsdp.dat 2015-12-12 00:26 - 2006-11-02 13:58 - 00032532 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-12-10 14:54 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache 2015-12-10 14:34 - 2006-11-02 13:44 - 01750232 _____ C:\Windows\system32\FNTCACHE.DAT 2015-12-10 14:32 - 2014-12-25 18:50 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-12-10 12:06 - 2006-11-02 13:35 - 00000000 ____D C:\Windows\system32\XPSViewer 2015-12-10 12:06 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\inf 2015-12-10 10:31 - 2014-05-11 16:20 - 00000000 ____D C:\Windows\system32\MRT 2015-12-10 10:04 - 2006-11-02 11:24 - 137798368 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2015-12-09 22:54 - 2014-08-18 14:07 - 00303616 ___SH C:\Users\Public\Thumbs.db 2015-12-09 17:59 - 2014-10-18 17:51 - 00000000 ____D C:\AdwCleaner 2015-12-09 13:54 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Registration 2015-12-09 12:20 - 2014-05-11 20:06 - 00000537 _____ C:\Users\Public\Desktop\VLC media player.lnk 2015-12-09 12:18 - 2014-09-07 22:47 - 00000000 ____D C:\Program Files\7-Zip 2015-12-09 11:54 - 2014-05-11 14:51 - 00435976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2015-12-09 11:54 - 2014-05-11 14:51 - 00209432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2015-12-09 11:54 - 2014-05-11 14:51 - 00081168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2015-12-09 11:54 - 2014-05-11 14:51 - 00058016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2015-12-09 11:54 - 2014-05-11 14:51 - 00055200 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys 2015-12-09 11:54 - 2014-05-11 14:51 - 00049776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2015-12-09 11:54 - 2014-05-11 14:51 - 00024016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys 2015-12-09 11:53 - 2014-05-11 14:51 - 00794952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2015-12-09 10:37 - 2014-07-23 15:40 - 00001265 _____ C:\Users\Magda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-12-09 10:37 - 2014-05-11 15:09 - 00001162 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-12-06 16:31 - 2006-12-05 06:19 - 00774504 _____ C:\Windows\system32\perfh015.dat 2015-12-06 16:31 - 2006-12-05 06:19 - 00175996 _____ C:\Windows\system32\perfc015.dat 2015-12-06 16:31 - 2006-11-02 11:33 - 01784286 _____ C:\Windows\system32\PerfStringBackup.INI 2015-12-02 13:25 - 2014-05-11 14:34 - 00247976 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2015-12-01 21:59 - 2014-05-11 20:07 - 00000000 ____D C:\Users\Magda\AppData\Roaming\vlc 2015-11-18 18:31 - 2014-05-11 14:09 - 00109968 _____ C:\Users\Magda\AppData\Local\GDIPFONTCACHEV1.DAT 2015-11-12 11:34 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\PolicyDefinitions ==================== Pliki w katalogu głównym wybranych folderów ======= 1999-05-17 13:58 - 1999-05-17 13:58 - 0099840 _____ (Symantec Corp.) C:\Program Files\Common Files\IRAABOUT.DLL 1998-12-09 02:53 - 1998-12-09 02:53 - 0048640 _____ (Symantec Corp., Peter Norton Computing Group) C:\Program Files\Common Files\IRALPTTR.DLL 1998-12-09 02:53 - 1998-12-09 02:53 - 0070144 _____ (Symantec Corp., Peter Norton Computing Group) C:\Program Files\Common Files\IRAMDMTR.DLL 1998-12-09 02:53 - 1998-12-09 02:53 - 0186368 _____ (Symantec Corp., Peter Norton Computing Group) C:\Program Files\Common Files\IRAREG.DLL 1998-12-09 02:53 - 1998-12-09 02:53 - 0017920 _____ (Symantec Corp.) C:\Program Files\Common Files\IRASRIAL.DLL 1998-12-09 02:53 - 1998-12-09 02:53 - 0031744 _____ (Symantec Corp., Peter Norton Computing Group) C:\Program Files\Common Files\IRAWEBTR.DLL 2014-05-11 14:09 - 2014-05-11 14:09 - 0000000 _____ () C:\Users\Magda\AppData\Local\AtStart.txt 2014-05-11 18:17 - 2015-10-19 18:29 - 0015872 _____ () C:\Users\Magda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-05-11 14:09 - 2014-05-11 14:09 - 0000000 _____ () C:\Users\Magda\AppData\Local\DSwitch.txt 2014-05-11 14:09 - 2014-05-11 14:09 - 0000000 _____ () C:\Users\Magda\AppData\Local\QSwitch.txt 2015-04-19 22:05 - 2015-04-19 22:05 - 0003202 _____ () C:\Users\Magda\AppData\Local\unins000.dat 2015-04-19 22:05 - 2015-04-19 22:04 - 0707744 _____ () C:\Users\Magda\AppData\Local\unins000.exe 2015-04-19 22:05 - 2015-04-19 22:05 - 0011761 _____ () C:\Users\Magda\AppData\Local\unins000.msg Pliki do przeniesienia lub usunięcia: ==================== C:\Users\Public\AdwCleaner.exe ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo ==================== BCD ================================ Menedľer rozruchu systemu Windows --------------------------------- Identyfikator {bootmgr} device partition=C: description Windows Boot Manager locale pl-PL inherit {globalsettings} default {current} resumeobject {b4a72669-9fca-11db-b8ff-0002a55e6116} displayorder {current} toolsdisplayorder {memdiag} timeout 30 resume No Moduˆ ˆadujĄcy rozruchu systemu Windows --------------------------------------- Identyfikator {31e79892-ec2b-11da-a725-001641277633} device ramdisk=[C:]\windows\sources\softthinks.wim,{ramdiskoptions} path \windows\system32\boot\winload.exe description ram_drive osdevice ramdisk=[C:]\windows\sources\softthinks.wim,{ramdiskoptions} systemroot \windows nx OptIn detecthal Yes winpe Yes Moduˆ ˆadujĄcy rozruchu systemu Windows --------------------------------------- Identyfikator {current} device partition=C: path \Windows\system32\winload.exe description Microsoft Windows Vista locale pl-PL inherit {bootloadersettings} osdevice partition=C: systemroot \Windows resumeobject {b4a72669-9fca-11db-b8ff-0002a55e6116} nx OptIn Wznawianie ze stanu hibernacji ------------------------------ Identyfikator {b4a72669-9fca-11db-b8ff-0002a55e6116} device partition=C: path \Windows\system32\winresume.exe description Windows Resume Application locale pl-PL inherit {resumeloadersettings} filedevice partition=C: filepath \hiberfil.sys pae Yes debugoptionenabled No Moduˆ testujĄcy pami©† systemu Windows -------------------------------------- Identyfikator {memdiag} device partition=C: path \boot\memtest.exe description Diagnostyka pami©ci systemu Windows locale pl-PL inherit {globalsettings} badmemoryaccess Yes Ustawienia usˆug EMS -------------------- Identyfikator {emssettings} bootems Yes Ustawienia debugera ------------------- Identyfikator {dbgsettings} debugtype Serial debugport 1 baudrate 115200 Uszkodzenia pami©ci RAM ----------------------- Identyfikator {badmemory} Ustawienia globalne ------------------- Identyfikator {globalsettings} inherit {dbgsettings} {emssettings} {badmemory} Ustawienia moduˆu ˆadujĄcego rozruchu ------------------------------------- Identyfikator {bootloadersettings} inherit {globalsettings} Ustawienia moduˆu ˆadujĄcego wznawiania --------------------------------------- Identyfikator {resumeloadersettings} inherit {globalsettings} Opcje instalacji urzĄdzenia Ramdisk ----------------------------------- Identyfikator {ramdiskoptions} description Ramdisk Options ramdisksdidevice partition=C: ramdisksdipath \boot\boot.sdi LastRegBack: 2015-12-12 21:42 ==================== Koniec FRST.txt ============================