Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:14-12-2015
Uruchomiony przez Kasia Rymarska (administrator)  KASIA (15-12-2015 11:47:33)
Uruchomiony z C:\Documents and Settings\Kasia Rymarska\Moje dokumenty\Pobrane
Załadowane profile: Kasia Rymarska (Dostępne profile: Kasia Rymarska & Anusia & Ania)
Platform: Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) Język: Polski
Internet Explorer Wersja 7 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(InterVideo Inc.) C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
(Digital Wave Ltd.) C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe
(tsvr.com) C:\Documents and Settings\Kasia Rymarska\Dane aplikacji\TSv\TSvr.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TODO: <公司名>) C:\Program Files\SFK\SSFK.exe
(TFuns LIMITED) C:\Documents and Settings\All Users\Dane aplikacji\nWdMn\WdMan.exe
(Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Nuance Communications, Inc.) C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
(Macrovision Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
() C:\Program Files\WLAN_Software\ZD1211B\ZDWLan.EXE
() C:\Program Files\AutoInstall\ZD1211B_Auto_Install_CD_Only_Gen_0ACE20FF\AutoEJCD.EXE
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Wondershare) C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\Brmfcmon\BrMfcMon.exe
(Dropbox, Inc.) C:\Program Files\Dropbox\Client\Dropbox.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Logitech Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(OpenOffice.org) C:\Program Files\OpenOffice.ux.pl 2.3.1\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.ux.pl 2.3.1\program\soffice.bin
(Logitech Inc.) C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16855552 2007-10-25] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SkyTel] => C:\WINDOWS\SkyTel.EXE [1826816 2007-10-11] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG)
HKLM\...\Run: [SSBkgdUpdate] => C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM\...\Run: [PaperPort PTD] => C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe [30248 2007-01-29] (Nuance Communications, Inc.)
HKLM\...\Run: [IndexSearch] => C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [46632 2007-01-29] (Nuance Communications, Inc.)
HKLM\...\Run: [PPort11reminder] => C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe [255528 2007-02-01] (Nuance Communications, Inc.)
HKLM\...\Run: [BrMfcWnd] => C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [663552 2007-03-12] (Brother Industries, Ltd.)
HKLM\...\Run: [ControlCenter3] => C:\Program Files\Brother\ControlCenter3\brctrcen.exe [65536 2007-01-26] (Brother Industries, Ltd.)
HKLM\...\Run: [BigDog305] => C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
HKLM\...\Run: [ISUSPM Startup] => C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe [249856 2005-08-11] (Macrovision Corporation)
HKLM\...\Run: [ISUSScheduler] => C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-08-11] (Macrovision Corporation)
HKLM\...\Run: [ZDWLan_Utility] => C:\Program Files\WLAN_Software\ZD1211B\ZDWLan.EXE [487424 2007-11-12] ()
HKLM\...\Run: [AutoEJCD_0ACE20FF] => C:\Program Files\AutoInstall\ZD1211B_Auto_Install_CD_Only_Gen_0ACE20FF\AutoEJCD.EXE [40960 2012-07-24] ()
HKLM\...\Run: [TrayServer] => C:\Program Files\MAGIX\Movie_Edit_Pro_14_PLUS_Download_version\TrayServer.exe
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-01-28] (Apple Inc.)
HKLM\...\Run: [TkBellExe] => C:\program files\real\realplayer\update\realsched.exe [296056 2012-05-22] (RealNetworks, Inc.)
HKLM\...\Run: [Freecorder FLV Service] => "C:\Program Files\Freecorder\FLVSrvc.exe" /run
HKLM\...\Run: [Alcmtr] => C:\WINDOWS\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\qttask.exe [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [7021880 2015-12-12] (AVAST Software)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2020704 2014-08-05] (Wondershare)
HKLM\...\Run: [DelaypluginInstall] => C:\Documents and Settings\All Users\Dane aplikacji\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960336 2014-09-26] ()
HKLM\...\Run: [Logitech Hardware Abstraction Layer] => C:\WINDOWS\KHALMNPR.EXE [56080 2007-04-11] (Logitech Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-12-18] (Oracle Corporation)
HKLM\...\Run: [Dropbox] => C:\Program Files\Dropbox\Client\Dropbox.exe [24952456 2015-12-08] (Dropbox, Inc.)
HKU\S-1-5-21-2052111302-790525478-725345543-1004\...\Run: [Picasa Media Detector] => C:\Program Files\Picasa2\PicasaMediaDetector.exe
HKU\S-1-5-21-2052111302-790525478-725345543-1004\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-06-01] (Nero AG)
HKU\S-1-5-21-2052111302-790525478-725345543-1004\...\Run: [swg] => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
HKU\S-1-5-21-2052111302-790525478-725345543-1004\...\Run: [IncrediMail] => C:\Program Files\IncrediMail\bin\IncMail.exe /c
HKU\S-1-5-21-2052111302-790525478-725345543-1004\...\Run: [SPMTray] => C:\Program Files\PC Speed Maximizer\SPMTray.exe
HKU\S-1-5-21-2052111302-790525478-725345543-1004\...\Run: [SoftonicAssistant] => "C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\SoftonicAssistant\SoftonicAssistant.exe"
HKU\S-1-5-21-2052111302-790525478-725345543-1004\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [50137728 2015-11-17] (Skype Technologies S.A.)
HKU\S-1-5-18\...\Run: [DWQueuedReporting] => C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [434080 2011-07-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShell.dll [2015-12-12] (AVAST Software)
Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Logitech SetPoint.lnk [2014-10-12]
ShortcutTarget: Logitech SetPoint.lnk -> C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech Inc.)
Startup: C:\Documents and Settings\Anusia\Menu Start\Programy\Autostart\OpenOffice.ux.pl 2.3.1.lnk [2009-02-03]
ShortcutTarget: OpenOffice.ux.pl 2.3.1.lnk -> C:\Program Files\OpenOffice.ux.pl 2.3.1\program\quickstart.exe ()
Startup: C:\Documents and Settings\Anusia\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk [2009-01-30]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Documents and Settings\Kasia Rymarska\Menu Start\Programy\Autostart\OpenOffice.ux.pl 2.3.1.lnk [2008-04-01]
ShortcutTarget: OpenOffice.ux.pl 2.3.1.lnk -> C:\Program Files\OpenOffice.ux.pl 2.3.1\program\quickstart.exe ()
Startup: C:\Documents and Settings\Kasia Rymarska\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk [2008-06-20]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62
Tcpip\..\Interfaces\{B8055A58-EB20-48A2-B445-54DF4D6106DE}: [DhcpNameServer] 62.179.1.63 62.179.1.62

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1450077902&z=c40cfb709e4c314e7fce89egcz3wdefe5mdmdbdt7w&from=wpm07173&uid=WDCXWD2500AAKS-00VSA0_WD-WMART144715947159
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1450077902&z=c40cfb709e4c314e7fce89egcz3wdefe5mdmdbdt7w&from=wpm07173&uid=WDCXWD2500AAKS-00VSA0_WD-WMART144715947159&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1450077902&z=c40cfb709e4c314e7fce89egcz3wdefe5mdmdbdt7w&from=wpm07173&uid=WDCXWD2500AAKS-00VSA0_WD-WMART144715947159
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450077902&z=c40cfb709e4c314e7fce89egcz3wdefe5mdmdbdt7w&from=wpm07173&uid=WDCXWD2500AAKS-00VSA0_WD-WMART144715947159&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-2052111302-790525478-725345543-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1450077902&z=c40cfb709e4c314e7fce89egcz3wdefe5mdmdbdt7w&from=wpm07173&uid=WDCXWD2500AAKS-00VSA0_WD-WMART144715947159
HKU\S-1-5-21-2052111302-790525478-725345543-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2052111302-790525478-725345543-1004\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1450077902&z=c40cfb709e4c314e7fce89egcz3wdefe5mdmdbdt7w&from=wpm07173&uid=WDCXWD2500AAKS-00VSA0_WD-WMART144715947159
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450077902&z=c40cfb709e4c314e7fce89egcz3wdefe5mdmdbdt7w&from=wpm07173&uid=WDCXWD2500AAKS-00VSA0_WD-WMART144715947159&q={searchTerms}
SearchScopes: HKLM -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\.DEFAULT -> {2381E4B7-5C04-459E-9D46-2F9AC1608B66} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=ysp
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> {2381E4B7-5C04-459E-9D46-2F9AC1608B66} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=ysp
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> {2381E4B7-5C04-459E-9D46-2F9AC1608B66} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=ysp
SearchScopes: HKU\S-1-5-21-2052111302-790525478-725345543-1004 -> {2381E4B7-5C04-459E-9D46-2F9AC1608B66} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=ysp
SearchScopes: HKU\S-1-5-21-2052111302-790525478-725345543-1004 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450077902&z=c40cfb709e4c314e7fce89egcz3wdefe5mdmdbdt7w&from=wpm07173&uid=WDCXWD2500AAKS-00VSA0_WD-WMART144715947159&q={searchTerms}
BHO: Brak nazwy -> {010e44c0-8bda-476c-9cee-e7a8c632e840} -> Brak pliku
BHO: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2012-05-22] (RealPlayer)
BHO: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\DOCUME~1\ALLUSE~1\DANEAP~1\WONDER~1\VIDEOC~1\WSBROW~1.DLL => Brak pliku
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-12-18] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2015-12-12] (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-12-18] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-2052111302-790525478-725345543-1004 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Brak pliku
DPF: {33564D57-0000-0010-8000-00AA00389B71} hxxp://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINDOWS\system32\Msdxm6.ocx [2000-04-21] (Microsoft Corporation)
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  Brak pliku

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Kasia Rymarska\Dane aplikacji\Mozilla\Firefox\Profiles\iz6yvpd4.default-1450173171343
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-08] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2010-09-01] (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2009-01-05] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-12-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-12-18] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=15.0.4.53 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2012-05-22] (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.4.53 -> c:\program files\real\realplayer\Netscape6\nprjplug.dll [2012-05-22] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 -> C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-05-22] (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.4.53 -> C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-05-22] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=15.0.4.53 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2012-05-22] (RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2052111302-790525478-725345543-1004: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll [Brak pliku]
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npOGAPlugin.dll [2008-02-04] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2012-05-22] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2013-03-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2013-03-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2013-03-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2013-03-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2013-03-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2013-03-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2013-03-28] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprjplug.dll [2012-05-22] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll [2012-05-22] (RealPlayer)
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-11-08] [Brak podpisu cyfrowego]
FF Extension: Brak nazwy - C:\Program Files\Mozilla Firefox\extensions\䍻䙁䕅䅆ⵃ〰㜱〭〰ⴰ〰ㄱ䄭䍂䕄䙆䑅䉃絁 [2015-11-08] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-09-01] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-05-22] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2015-12-12]
FF HKLM\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Documents and Settings\Kasia Rymarska\Dane aplikacji\Mozilla\Firefox\Profiles\q9981sq3.default-1431123977156\extensions\defsearchp@gmail.com => nie znaleziono
FF HKLM\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Documents and Settings\Kasia Rymarska\Dane aplikacji\Mozilla\Firefox\Profiles\q9981sq3.default-1431123977156\extensions\deskCutv2@gmail.com => nie znaleziono
FF HKLM\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Documents and Settings\Kasia Rymarska\Dane aplikacji\Mozilla\Firefox\Profiles\q9981sq3.default-1431123977156\extensions\default_newtabff@gmail.com => nie znaleziono
FF HKLM\...\Firefox\Extensions: [yahooprotected@gmail.com] - C:\Documents and Settings\Kasia Rymarska\Dane aplikacji\Mozilla\Firefox\Profiles\q9981sq3.default-1431123977156\extensions\yahooprotected@gmail.com => nie znaleziono
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1450077902&z=c40cfb709e4c314e7fce89egcz3wdefe5mdmdbdt7w&from=wpm07173&uid=WDCXWD2500AAKS-00VSA0_WD-WMART144715947159

Chrome: 
=======
CHR Profile: C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-07-25]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2015-01-15]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-25]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2015-12-12]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-05-22]
CHR HKLM\...\Chrome\Extension: [jinhmcmpnjkjciebbipoojdnnbmjilog] - C:\Program Files\CertifiedToolbar\chrome\CertifiedToolbar.crx <nie znaleziono>
StartMenuInternet: Google Chrome - C:\Program Files\Google\Chrome\Application\chrome.exe hxxp://www.yoursites123.com/?type=sc&ts=1450077902&z=c40cfb709e4c314e7fce89egcz3wdefe5mdmdbdt7w&from=wpm07173&uid=WDCXWD2500AAKS-00VSA0_WD-WMART144715947159

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [226440 2015-12-12] (AVAST Software)
R2 Capture Device Service; C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe [198168 2007-03-06] (InterVideo Inc.)
S2 dbupdate; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [134512 2015-07-19] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [134512 2015-07-19] (Dropbox, Inc.)
U2 DigitalWave.Update.Service; C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-10-29] (Digital Wave Ltd.)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [Brak podpisu cyfrowego]
R2 IhPul; C:\Documents and Settings\Kasia Rymarska\Dane aplikacji\TSv\TSvr.exe [580752 2015-12-08] (tsvr.com)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-12-18] (Oracle Corporation)
S3 MSSQL$SONY_MEDIAMGR2; c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R2 SSFK; C:\Program Files\SFK\SSFK.exe [170144 2015-11-27] (TODO: <公司名>)
R2 WdMan; C:\Documents and Settings\All Users\Dane aplikacji\nWdMn\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Brak podpisu cyfrowego]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24016 2015-12-12] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\Drivers\aswKbd.sys [20624 2012-10-30] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [81168 2015-12-12] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-12-12] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49776 2015-12-12] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [794952 2015-12-12] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [435976 2015-12-12] (AVAST Software)
R3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [165104 2015-12-12] (AVAST Software)
S3 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [58016 2015-12-12] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [209432 2015-12-12] (AVAST Software)
R3 AtcL001; C:\WINDOWS\System32\DRIVERS\l151x86.sys [37888 2009-08-20] (Atheros Communications, Inc.) [Brak podpisu cyfrowego]
R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [278984 2012-07-14] ()
S3 BRGSp50; C:\WINDOWS\System32\Drivers\BRGSp50.sys [20608 2012-07-24] (Printing Communications Assoc., Inc. (PCAUSA)) [Brak podpisu cyfrowego]
R3 BrScnUsb; C:\WINDOWS\System32\DRIVERS\BrScnUsb.sys [15295 2004-10-15] (Brother Industries Ltd.)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
R3 HssDrv; C:\WINDOWS\System32\DRIVERS\HssDrv.sys [40648 2013-02-12] (AnchorFree Inc.)
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [18048 2008-11-11] () [Brak podpisu cyfrowego]
R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
S3 taphss; C:\WINDOWS\System32\DRIVERS\taphss.sys [33512 2013-02-12] (AnchorFree Inc)
R3 ZD1211BU(Atheros); C:\WINDOWS\System32\DRIVERS\zd1211Bu.sys [500736 2007-06-25] (Atheros Technology Corporation)
S3 ZD1211BU(ZyDAS); C:\WINDOWS\System32\DRIVERS\zd1211Bu.sys [500736 2007-06-25] (Atheros Technology Corporation)
R3 ZDPSp50; C:\WINDOWS\System32\Drivers\ZDPSp50.sys [17664 2012-07-24] (Printing Communications Assoc., Inc. (PCAUSA)) [Brak podpisu cyfrowego]
S4 IntelIde; Brak ImagePath
S3 PCANDIS5; \??\C:\WINDOWS\system32\PCANDIS5.SYS [X]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S3 vvftav; system32\drivers\vvftav.sys [X]
U1 WS2IFSL; Brak ImagePath
S3 ZDCndis5; \??\C:\WINDOWS\system32\ZDCndis5.SYS [X]
S3 ZSMC0305; System32\Drivers\usbVM305.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-15 11:47 - 2015-12-15 11:47 - 00000000 ____D C:\FRST
2015-12-15 10:53 - 2015-12-15 10:53 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Pulpit\Stare dane programu Firefox
2015-12-14 08:33 - 2015-12-15 09:48 - 00000000 ____D C:\Program Files\SFK
2015-12-14 08:32 - 2015-12-14 08:34 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\nWdMn
2015-12-14 08:30 - 2015-12-14 08:30 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Dane aplikacji\TSv
2015-12-14 08:23 - 2015-12-14 08:24 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\JWdMJ
2015-12-13 18:59 - 2015-12-13 18:59 - 00001784 _____ C:\Documents and Settings\Kasia Rymarska\Pulpit\Re__PD__symulcja_planu_zajeć_ALL.zip
2015-12-13 18:59 - 2015-12-13 18:59 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Pulpit\Re__PD__symulcja_planu_zajeć_ALL
2015-12-12 20:55 - 2015-12-12 20:55 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Dropbox
2015-12-12 18:26 - 2015-12-12 21:08 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Pulpit\Metodyka nauczania na odległość
2015-12-12 17:48 - 2015-12-12 17:48 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Moje dokumenty\Lightshot
2015-12-12 17:44 - 2015-12-12 17:44 - 00000412 _____ C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\UserProducts.xml
2015-12-12 17:44 - 2015-12-12 17:44 - 00000000 ____D C:\Program Files\Skillbrains
2015-12-12 17:44 - 2015-12-12 17:44 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Lightshot
2015-12-12 17:07 - 2015-12-12 17:06 - 00322760 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-12-12 17:06 - 2015-12-12 17:06 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-12-12 16:29 - 2015-12-12 16:29 - 00000000 ____D C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Temp
2015-12-11 00:25 - 2015-12-11 00:25 - 00034848 _____ C:\Documents and Settings\Kasia Rymarska\.recently-used.xbel
2015-12-08 23:45 - 2015-12-08 23:45 - 06800865 _____ C:\Documents and Settings\Kasia Rymarska\Pulpit\radość.xcf
2015-12-08 21:12 - 2015-12-08 21:12 - 00262655 _____ C:\Documents and Settings\Kasia Rymarska\Pulpit\m1-obut2012[1].pdf
2015-12-08 21:06 - 2015-12-08 21:06 - 00633262 _____ C:\Documents and Settings\Kasia Rymarska\Pulpit\Obut 2011 m2.pdf
2015-12-05 22:15 - 2015-12-05 23:28 - 00295039 _____ C:\Documents and Settings\Kasia Rymarska\Pulpit\kurs alfa1.xcf
2015-11-26 21:36 - 2015-11-26 21:36 - 10704825 _____ C:\Documents and Settings\Kasia Rymarska\Pulpit\pg projektor3.xcf
2015-11-24 11:39 - 2015-11-24 11:39 - 00000000 ____D C:\Program Files\e-Deklaracje

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-15 11:49 - 2008-03-31 21:18 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Temp
2015-12-15 11:47 - 2014-06-21 20:02 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Moje dokumenty\Pobrane
2015-12-15 11:47 - 2008-03-31 23:00 - 00000000 ____D C:\WINDOWS
2015-12-15 11:44 - 2008-03-31 23:31 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Dane aplikacji\Skype
2015-12-15 11:38 - 2015-07-19 19:51 - 00000000 ___RD C:\Documents and Settings\Kasia Rymarska\Moje dokumenty\Dropbox
2015-12-15 11:38 - 2015-06-19 06:55 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\Dropbox
2015-12-15 11:37 - 2012-07-14 16:51 - 00000366 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-12-15 11:36 - 2008-04-01 22:32 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Dane aplikacji\OpenOffice.ux.pl2
2015-12-15 11:35 - 2012-04-02 21:17 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-15 11:31 - 2015-07-19 19:40 - 00001152 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2015-12-15 11:31 - 2014-12-09 15:33 - 00001032 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-15 11:31 - 2014-03-10 09:01 - 00000240 _____ C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job
2015-12-15 11:31 - 2012-01-17 22:29 - 00000296 _____ C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-790525478-725345543-1004.job
2015-12-15 11:31 - 2012-01-13 21:09 - 00000280 _____ C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-790525478-725345543-1006.job
2015-12-15 11:31 - 2008-03-31 21:18 - 00000000 ___HD C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji
2015-12-15 11:28 - 2008-03-31 21:16 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-15 11:27 - 2008-03-31 21:18 - 00000188 ___SH C:\Documents and Settings\Kasia Rymarska\ntuser.ini
2015-12-15 11:27 - 2008-03-31 21:16 - 00032566 _____ C:\WINDOWS\SchedLgU.Txt
2015-12-15 11:26 - 2015-01-26 23:56 - 00000000 ____D C:\AdwCleaner
2015-12-15 11:26 - 2008-03-31 21:18 - 00000000 __RHD C:\Documents and Settings\Kasia Rymarska\Dane aplikacji
2015-12-15 11:26 - 2008-03-31 21:18 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska
2015-12-15 11:25 - 2014-12-09 15:33 - 00001036 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-15 10:53 - 2015-07-19 19:40 - 00001156 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2015-12-15 10:53 - 2008-03-31 21:18 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Pulpit
2015-12-15 10:33 - 2008-03-31 23:06 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy
2015-12-15 10:33 - 2008-03-31 23:00 - 00000000 ___HD C:\WINDOWS\inf
2015-12-15 10:01 - 2010-03-18 10:07 - 00000288 _____ C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-790525478-725345543-1006.job
2015-12-15 09:43 - 2006-03-02 13:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2015-12-14 08:32 - 2015-11-08 17:24 - 00000146 _____ C:\Documents and Settings\All Users\Dane aplikacji\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-12-14 08:32 - 2008-03-31 23:06 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji
2015-12-14 08:27 - 2014-12-09 15:45 - 00002133 _____ C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
2015-12-14 08:27 - 2013-01-16 15:11 - 00001038 _____ C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
2015-12-14 08:27 - 2008-03-31 21:18 - 00001117 _____ C:\Documents and Settings\Kasia Rymarska\Menu Start\Programy\Internet Explorer.lnk
2015-12-14 08:26 - 2011-05-16 08:39 - 00001044 _____ C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk
2015-12-13 23:59 - 2008-04-26 11:13 - 00002513 _____ C:\Documents and Settings\Kasia Rymarska\Pulpit\Microsoft Office Word 2007.lnk
2015-12-13 23:22 - 2015-09-02 22:02 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Pulpit\szkoła
2015-12-13 22:59 - 2008-05-17 19:21 - 00000151 _____ C:\WINDOWS\PhotoSnapViewer.INI
2015-12-12 20:56 - 2015-05-04 20:39 - 00000000 ____D C:\Program Files\Dropbox
2015-12-12 17:49 - 2008-04-05 15:21 - 06903296 ___SH C:\Documents and Settings\Kasia Rymarska\Pulpit\Thumbs.db
2015-12-12 17:48 - 2008-03-31 21:18 - 00000000 ___RD C:\Documents and Settings\Kasia Rymarska\Moje dokumenty
2015-12-12 17:06 - 2015-08-31 10:15 - 00165104 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStmXP.sys
2015-12-12 17:06 - 2014-05-11 01:46 - 00024016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-12-12 17:06 - 2013-03-28 08:50 - 00209432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-12-12 17:06 - 2013-03-28 08:50 - 00081168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-12-12 17:06 - 2013-03-28 08:50 - 00049776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-12-12 17:06 - 2011-06-22 19:41 - 00794952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-12-12 17:06 - 2008-04-01 00:39 - 00435976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-12-12 17:06 - 2008-04-01 00:39 - 00058016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2015-12-12 17:06 - 2008-04-01 00:39 - 00055200 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2015-12-12 16:29 - 2008-03-31 21:16 - 00000000 ___HD C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji
2015-12-11 00:25 - 2009-10-18 20:09 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\.gimp-2.6
2015-12-11 00:20 - 2009-10-18 20:10 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Dane aplikacji\gtk-2.0
2015-12-10 00:15 - 2008-03-31 21:53 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
2015-12-08 21:36 - 2012-04-02 21:17 - 00796864 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-12-08 21:36 - 2012-04-02 21:17 - 00142528 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-12-08 21:35 - 2015-09-21 20:35 - 09498816 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2015-12-08 20:03 - 2014-03-10 09:01 - 00000234 _____ C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job
2015-12-06 22:42 - 2012-04-03 08:59 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Pulpit\Anusia
2015-11-27 23:08 - 2010-03-18 23:16 - 00000304 _____ C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-790525478-725345543-1004.job
2015-11-26 21:43 - 2009-07-07 13:39 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Pulpit\Backgrounds
2015-11-26 21:40 - 2009-07-07 13:29 - 00000000 ____D C:\Documents and Settings\Kasia Rymarska\Pulpit\Sets
2015-11-24 20:18 - 2010-07-06 17:10 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2015-11-24 20:17 - 2008-03-31 23:31 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Skype
2015-11-24 11:39 - 2012-02-08 20:52 - 00000676 _____ C:\Documents and Settings\All Users\Menu Start\Programy\e-Deklaracje.lnk
2015-11-15 21:32 - 2015-11-14 13:45 - 00437001 _____ C:\Documents and Settings\Kasia Rymarska\Pulpit\gn.xcf

==================== Pliki w katalogu głównym wybranych folderów =======

2010-03-16 21:20 - 2009-11-04 12:44 - 0097981 _____ () C:\Program Files\CHANGELOG.php
2010-03-16 21:20 - 2009-11-04 12:44 - 0003409 _____ () C:\Program Files\configuration.php-dist
2010-03-16 21:20 - 2009-11-04 12:44 - 0001175 _____ () C:\Program Files\COPYRIGHT.php
2010-03-16 21:20 - 2009-11-04 12:44 - 0014894 _____ () C:\Program Files\CREDITS.php
2002-06-21 11:33 - 2002-06-21 11:33 - 0024576 _____ (none) C:\Program Files\EnDeCrypt.dll
2010-03-16 21:20 - 2009-11-04 12:44 - 0002771 _____ () C:\Program Files\htaccess.txt
2010-03-16 21:20 - 2009-11-04 12:44 - 0002052 _____ () C:\Program Files\index.php
2010-03-16 21:20 - 2009-11-04 12:44 - 0000591 _____ () C:\Program Files\index2.php
2010-03-16 21:20 - 2009-11-04 12:44 - 0004344 _____ () C:\Program Files\INSTALL.php
2010-03-16 21:20 - 2009-11-04 12:45 - 0017816 _____ () C:\Program Files\LICENSE.php
2010-03-16 21:20 - 2009-11-04 12:45 - 0027984 _____ () C:\Program Files\LICENSES.php
2003-08-13 10:19 - 2003-08-13 10:19 - 0061440 _____ (none) C:\Program Files\mdMod1.dll
2010-03-16 21:20 - 2009-11-04 12:45 - 0000304 _____ () C:\Program Files\robots.txt
2014-09-27 00:42 - 2014-09-27 00:46 - 0000247 _____ () C:\Documents and Settings\Kasia Rymarska\Dane aplikacji\settings.xml
2008-04-05 15:21 - 2015-07-25 21:01 - 0189952 _____ () C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2008-03-31 23:07 - 2008-03-31 23:07 - 0000139 _____ () C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
2015-02-25 03:11 - 2015-02-25 03:11 - 0043673 _____ () C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\recently-used.xbel
2014-02-01 13:07 - 2014-02-01 13:07 - 0003219 _____ () C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\unins000.dat
2014-02-01 13:07 - 2014-02-01 13:07 - 0707504 _____ () C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\unins000.exe
2014-02-01 13:07 - 2014-02-01 13:07 - 0011761 _____ () C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\unins000.msg
2015-12-12 17:44 - 2015-12-12 17:44 - 0000003 _____ () C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\updater.log
2015-12-12 17:44 - 2015-12-12 17:44 - 0000412 _____ () C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Dane aplikacji\UserProducts.xml

Niektóre pliki w TEMP:
====================
C:\Documents and Settings\Ania\Ustawienia lokalne\Temp\contentDATs.exe
C:\Documents and Settings\Ania\Ustawienia lokalne\Temp\SecurityScan_Release.exe
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\bpuninstall.exe
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\contentDATs.exe
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpnwvgcf.dll
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\GLF69.tmp.ConduitEngineSetup.exe
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\IncrediMail_MediaBar_2.exe
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\jre-6u13-windows-i586-p-iftw.exe
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\jre-6u15-windows-i586-iftw.exe
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\jre-6u17-windows-i586-iftw-rv.exe
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\jre-6u20-windows-i586-iftw-rv.exe
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\jre-6u22-windows-i586-iftw-rv.exe
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\jre-6u23-windows-i586-iftw-rv.exe
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\lowproc.exe
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\MFPL7014.DLL
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\NeroSearchTrayHook_{1B0E1870-655E-4B39-B2E1-F1216BD91BC9}.dll
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\NeroSearchTrayHook_{6C49D0CD-E026-4DE7-A033-A0CB3E4B829E}.dll
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\NeroSearchTrayHook_{D149FE86-5D5A-4332-8E93-54579FEEF755}.dll
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\SCC.dll
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\SecurityScan_Release.exe
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\stubhelper.dll
C:\Documents and Settings\Anusia\Ustawienia lokalne\Temp\tbInc0.dll
C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp828ctc.dll
C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Temp\GUR4.exe
C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Temp\jre-8u51-windows-au.exe
C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Temp\Quarantine.exe
C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Temp\SkypeSetup.exe
C:\Documents and Settings\Kasia Rymarska\Ustawienia lokalne\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

==================== Koniec  FRST.txt ============================