Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:14-12-2015 Uruchomiony przez Magda (administrator) MAGDA-PC (14-12-2015 18:30:58) Uruchomiony z E:\FRST Załadowane profile: Magda (Dostępne profile: Magda) Platform: Microsoft® Windows Vista™ Home Basic Service Pack 2 (X86) Język: Polski (Polska) Internet Explorer Wersja 9 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Microsoft Corporation) C:\WINDOWS\System32\SLsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe (Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (InterVideo) C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Conexant Systems, Inc.) C:\WINDOWS\System32\drivers\XAudio.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe (Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe (Intel Corporation) C:\WINDOWS\System32\igfxtray.exe (Intel Corporation) C:\WINDOWS\System32\hkcmd.exe (Intel Corporation) C:\WINDOWS\System32\igfxsrvc.exe (Intel Corporation) C:\WINDOWS\System32\igfxpers.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe ( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe (Acronis) C:\Program Files\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe (Acronis) C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe (Hewlett-Packard) C:\Program Files\Hp\HP Software Update\hpwuschd2.exe ( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe (Microsoft Corporation) E:\OFFICE\MS Office 2000\Office\1045\OLFSNT40.EXE (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe () C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe (Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe (Microsoft Corporation) C:\WINDOWS\System32\wbem\unsecapp.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-18] (Microsoft Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1045800 2008-03-28] (Synaptics, Inc.) HKLM\...\Run: [hpWirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [472776 2007-03-01] (Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [WAWifiMessage] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [317128 2007-01-10] (Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [HP Health Check Scheduler] => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [71176 2007-06-05] (Hewlett-Packard) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-09] (AVAST Software) HKLM\...\Run: [WatchDog] => C:\Program Files\InterVideo\DVD Check\DVDCheck.exe [184320 2006-09-05] (InterVideo Inc.) HKLM\...\Run: [QlbCtrl.exe] => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [287800 2009-11-11] ( Hewlett-Packard Development Company, L.P.) HKLM\...\Run: [Adobe_ID0EZEHM] => C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3Tray.exe [1884160 2007-04-27] (Adobe Systems Incorporated) HKLM\...\Run: [SAOB Monitor] => C:\Program Files\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe [2536440 2011-05-10] (Acronis) HKLM\...\Run: [TrueImageMonitor.exe] => C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [5550792 2011-05-17] (Acronis) HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [390736 2011-05-17] (Acronis) HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-12-09] (AVAST Software) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Winsock: Catalog5 06 C:\Program Files\Bonjour\mdnsNSP.dll [94208 2006-02-28] (Apple Computer, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{1B872A52-44FB-469B-9545-D8CE30C0D662}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-12-09] (AVAST Software) Toolbar: HKU\S-1-5-21-1690032049-1338340778-4026156367-1006 -> Brak nazwy - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Brak pliku FireFox: ======== FF ProfilePath: C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\nmbodzqa.default FF Homepage: www.google.pl FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.3 -> E:\PLAY\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> E:\PLAY\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.1 -> E:\PLAY\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-09] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF Chrome: ======= CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-12-09] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [804536 2011-05-17] (Acronis) S3 Adobe Version Cue CS3; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe [153792 2007-04-27] (Adobe Systems Incorporated) R2 afcdpsrv; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [3246040 2014-05-11] (Acronis) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-09] (AVAST Software) S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2014-05-11] (Macrovision Europe Ltd.) [Brak podpisu cyfrowego] R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [61440 2007-06-05] (Hewlett-Packard) [Brak podpisu cyfrowego] R2 hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [135168 2006-05-02] (Hewlett-Packard Development Company, L.P.) [Brak podpisu cyfrowego] S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Brak podpisu cyfrowego] R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes) S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation) S3 stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [73728 2006-11-01] (MicroVision Development, Inc.) [Brak podpisu cyfrowego] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-18] (Microsoft Corporation) U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X] ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24016 2015-12-09] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [81168 2015-12-09] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [55200 2015-12-09] (AVAST Software) R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49776 2015-12-09] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [794952 2015-12-09] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [435976 2015-12-09] (AVAST Software) R3 aswStmXP; C:\Windows\system32\drivers\aswStmXP.sys [165104 2015-12-09] (AVAST Software) S3 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [58016 2015-12-09] (AVAST Software) R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209432 2015-12-09] (AVAST Software) S3 HdAudAddService; C:\Windows\System32\drivers\CHDART.sys [159232 2007-02-22] (Conexant Systems Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2015-12-14] (Malwarebytes) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-10-05] (Malwarebytes Corporation) R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [36528 2006-07-24] (Sonic Solutions) [Brak podpisu cyfrowego] S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-14 17:58 - 2015-12-14 17:58 - 00000000 ____D C:\Users\Magda\AppData\Local\ElevatedDiagnostics 2015-12-14 17:57 - 2015-12-14 18:05 - 00000000 ____D C:\MATS 2015-12-12 22:16 - 2015-12-14 18:30 - 00000000 ____D C:\FRST 2015-12-10 10:52 - 2015-11-06 18:05 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2015-12-10 10:52 - 2015-11-06 17:32 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2015-12-10 10:52 - 2015-11-06 17:32 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2015-12-10 10:52 - 2015-11-06 17:32 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2015-12-10 10:52 - 2015-11-06 17:32 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2015-12-10 10:52 - 2015-11-06 16:27 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2015-12-10 10:52 - 2015-11-06 16:26 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2015-12-10 10:52 - 2015-11-06 16:24 - 02068480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-12-10 10:52 - 2015-11-06 16:20 - 01073152 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-12-10 10:52 - 2015-11-06 16:20 - 00682496 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2015-12-10 10:52 - 2015-11-06 16:19 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2015-12-10 10:50 - 2015-11-02 18:04 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\els.dll 2015-12-10 10:47 - 2015-11-05 08:26 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2015-12-10 10:45 - 2015-11-10 18:03 - 01208832 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll 2015-12-10 10:45 - 2015-11-10 18:03 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll 2015-12-10 10:43 - 2015-11-05 08:34 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2015-12-09 23:38 - 2015-12-09 23:38 - 00042419 _____ C:\Users\Magda\Desktop\zaburzenia.odt 2015-12-09 23:37 - 2015-12-09 23:37 - 00007334 _____ C:\Users\Magda\Desktop\Nowy OpenDocument Dokument tekstowy.odt 2015-12-09 14:19 - 2015-11-12 21:39 - 01814528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-12-09 14:19 - 2015-11-12 21:37 - 12389376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-12-09 14:19 - 2015-11-12 21:36 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-12-09 14:19 - 2015-11-12 21:34 - 09753088 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-12-09 14:19 - 2015-11-12 21:34 - 01140224 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-12-09 14:19 - 2015-11-12 21:33 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 01804288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-12-09 14:19 - 2015-11-12 21:32 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-12-09 14:19 - 2015-11-12 21:32 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2015-12-09 14:19 - 2015-11-12 21:32 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2015-12-09 14:19 - 2015-11-12 21:31 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-12-09 14:19 - 2015-11-12 21:31 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-12-09 14:19 - 2015-11-12 21:31 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-12-09 14:19 - 2015-11-12 21:31 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-12-09 14:19 - 2015-11-12 21:31 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-12-09 14:19 - 2015-11-12 21:31 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2015-12-09 13:24 - 2015-12-14 18:25 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-12-09 13:22 - 2015-12-09 13:22 - 00000899 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2015-12-09 13:22 - 2015-12-09 13:22 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware 2015-12-09 13:22 - 2015-10-05 09:50 - 00094936 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-12-09 13:22 - 2015-10-05 09:50 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-12-09 13:22 - 2015-10-05 09:50 - 00023256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2015-12-09 13:21 - 2015-12-09 13:21 - 22908888 _____ (Malwarebytes ) C:\mbam-setup-2.2.0.1024.exe 2015-12-09 13:05 - 2015-12-09 13:05 - 00007323 _____ C:\Users\fixlist.txt 2015-12-09 11:54 - 2015-12-09 11:54 - 00322760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2015-12-09 11:54 - 2015-12-09 11:54 - 00165104 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStmXP.sys 2015-12-09 11:54 - 2015-12-09 11:54 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr 2015-12-09 11:33 - 2015-12-09 11:33 - 00053804 _____ C:\Users\Magda\Documents\cc_20151209_113326.reg 2015-12-04 15:26 - 2015-12-04 15:26 - 00000000 _____ C:\Users\Magda\Desktop\Nowy dokument tekstowy (3).txt 2015-12-01 19:28 - 2015-12-01 19:28 - 00000000 ____D C:\Users\Public\Książeczka 2015 2015-11-22 21:51 - 2015-11-23 23:45 - 00000000 ____D C:\Users\Public\bell ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-12-14 18:23 - 2006-11-02 13:58 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-12-14 18:23 - 2006-11-02 13:45 - 00003168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2015-12-14 18:23 - 2006-11-02 13:45 - 00003168 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2015-12-14 18:22 - 2006-11-02 13:58 - 00032532 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-12-14 18:21 - 2007-01-09 10:24 - 00000012 _____ C:\Windows\bthservsdp.dat 2015-12-14 18:13 - 2014-07-23 15:40 - 00001003 _____ C:\Users\Magda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-12-14 18:13 - 2014-05-11 15:09 - 00000846 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-12-14 18:13 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\GroupPolicy 2015-12-14 17:42 - 2007-09-29 00:50 - 00000000 ____D C:\Program Files\Common Files\Adobe 2015-12-14 17:36 - 2014-05-11 14:09 - 00108240 _____ C:\Users\Magda\AppData\Local\GDIPFONTCACHEV1.DAT 2015-12-14 17:33 - 2006-11-02 13:44 - 01752184 _____ C:\Windows\system32\FNTCACHE.DAT 2015-12-14 17:32 - 2006-11-02 12:18 - 00000000 ____D C:\WINDOWS 2015-12-14 17:23 - 2014-06-17 22:53 - 00000000 ____D C:\Users\Magda\AppData\Local\Adobe 2015-12-10 14:54 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache 2015-12-10 14:32 - 2014-12-25 18:50 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-12-10 12:06 - 2006-11-02 13:35 - 00000000 ____D C:\Windows\system32\XPSViewer 2015-12-10 12:06 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\inf 2015-12-10 10:31 - 2014-05-11 16:20 - 00000000 ____D C:\Windows\system32\MRT 2015-12-10 10:04 - 2006-11-02 11:24 - 137798368 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2015-12-09 22:54 - 2014-08-18 14:07 - 00303616 ___SH C:\Users\Public\Thumbs.db 2015-12-09 13:54 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\Registration 2015-12-09 12:20 - 2014-05-11 20:06 - 00000537 _____ C:\Users\Public\Desktop\VLC media player.lnk 2015-12-09 12:18 - 2014-09-07 22:47 - 00000000 ____D C:\Program Files\7-Zip 2015-12-09 11:54 - 2014-05-11 14:51 - 00435976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2015-12-09 11:54 - 2014-05-11 14:51 - 00209432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2015-12-09 11:54 - 2014-05-11 14:51 - 00081168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2015-12-09 11:54 - 2014-05-11 14:51 - 00058016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2015-12-09 11:54 - 2014-05-11 14:51 - 00055200 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr.sys 2015-12-09 11:54 - 2014-05-11 14:51 - 00049776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2015-12-09 11:54 - 2014-05-11 14:51 - 00024016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys 2015-12-09 11:53 - 2014-05-11 14:51 - 00794952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2015-12-06 16:31 - 2006-12-05 06:19 - 00774504 _____ C:\Windows\system32\perfh015.dat 2015-12-06 16:31 - 2006-12-05 06:19 - 00175996 _____ C:\Windows\system32\perfc015.dat 2015-12-06 16:31 - 2006-11-02 11:33 - 01784286 _____ C:\Windows\system32\PerfStringBackup.INI 2015-12-02 13:25 - 2014-05-11 14:34 - 00247976 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2015-12-01 21:59 - 2014-05-11 20:07 - 00000000 ____D C:\Users\Magda\AppData\Roaming\vlc ==================== Pliki w katalogu głównym wybranych folderów ======= 2014-05-11 14:09 - 2014-05-11 14:09 - 0000000 _____ () C:\Users\Magda\AppData\Local\AtStart.txt 2014-05-11 18:17 - 2015-10-19 18:29 - 0015872 _____ () C:\Users\Magda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-05-11 14:09 - 2014-05-11 14:09 - 0000000 _____ () C:\Users\Magda\AppData\Local\DSwitch.txt 2014-05-11 14:09 - 2014-05-11 14:09 - 0000000 _____ () C:\Users\Magda\AppData\Local\QSwitch.txt 2015-04-19 22:05 - 2015-04-19 22:05 - 0003202 _____ () C:\Users\Magda\AppData\Local\unins000.dat 2015-04-19 22:05 - 2015-04-19 22:04 - 0707744 _____ () C:\Users\Magda\AppData\Local\unins000.exe 2015-04-19 22:05 - 2015-04-19 22:05 - 0011761 _____ () C:\Users\Magda\AppData\Local\unins000.msg ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-12-14 18:29 ==================== Koniec FRST.txt ============================