Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:20-12-2015
Uruchomiony przez fff (administrator)  LOLO (21-12-2015 17:05:48)
Uruchomiony z C:\
Załadowane profile: fff (Dostępne profile: fff)
Platform: Windows 8.1 Connected (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(GG Network S.A.) C:\Users\fff\AppData\Local\GG\Application\gghub.exe
(GG Network S.A.) C:\Users\fff\AppData\Local\GG\Application\ggapp.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-21] (Realtek Semiconductor)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-26] (Atheros Communications)
HKU\S-1-5-21-1296088152-1995581241-2128387976-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3638256 2015-10-23] (Electronic Arts)
HKU\S-1-5-21-1296088152-1995581241-2128387976-1001\...\Run: [GG] => C:\Users\fff\AppData\Local\GG\Application\gghub.exe [4078144 2015-11-16] (GG Network S.A.)
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 213.241.79.38 208.67.220.220
Tcpip\..\Interfaces\{370A509D-358C-49CF-B9C4-60654869EF22}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{DB0E7124-1850-4FB9-9D71-002D771C5F0A}: [DhcpNameServer] 213.241.79.38 208.67.220.220
Tcpip\..\Interfaces\{F735A4E4-EDF3-4DD8-975C-A6DFA8041326}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================

FireFox:
========
FF ProfilePath: C:\Users\fff\AppData\Roaming\Mozilla\Firefox\Profiles\sy79acpw.default-1450712979414
FF Homepage: google.pl
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Extension: uBlock Origin - C:\Users\fff\AppData\Roaming\Mozilla\Firefox\Profiles\sy79acpw.default-1450712979414\Extensions\uBlock0@raymondhill.net.xpi [2015-12-21]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-26] (Windows (R) Win 7 DDK provider) [Brak podpisu cyfrowego]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-02] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-02] (Intel(R) Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2099208 2015-10-23] (Electronic Arts)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 ALCATELUSB; C:\Windows\System32\Drivers\AlcatelUsb.sys [25088 2010-06-09] (Windows (R) Codename Longhorn DDK provider)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-26] (Qualcomm Atheros)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 GPIO; C:\Windows\System32\drivers\iaiogpioe.sys [31232 2013-11-11] (Intel Corporation)
R3 iaioi2c; C:\Windows\System32\drivers\iaioi2ce.sys [67584 2013-11-11] (Intel Corporation)
S3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
S3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44024 2015-02-04] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [264000 2015-02-04] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-21 17:05 - 2015-12-21 17:05 - 00000000 ____D C:\MATS
2015-12-21 17:03 - 2015-12-21 17:03 - 00000000 ____D C:\Users\fff\AppData\Local\ElevatedDiagnostics
2015-12-21 17:02 - 2015-12-21 17:02 - 00347816 _____ (Microsoft Corporation) C:\Users\fff\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.Run.exe
2015-12-21 16:57 - 2015-12-21 16:57 - 00005277 _____ C:\Users\fff\Desktop\RepairDNS.txt
2015-12-21 16:53 - 2015-12-21 16:53 - 01190912 _____ C:\Users\fff\Downloads\RepairDNS.exe
2015-12-21 16:45 - 2015-12-21 16:45 - 00003096 _____ C:\Windows\System32\Tasks\{10A7449D-6C38-4704-89B4-86FCD2629ED7}
2015-12-21 16:29 - 2015-12-21 04:32 - 00048776 _____ (StdLib) C:\Windows\system32\Drivers\{1792ab0b-c92b-49ed-ad87-bb9f82f84827}Gw64.sys
2015-12-21 16:27 - 2015-12-21 16:36 - 02857235 _____ C:\Fixlog.txt
2015-12-21 16:27 - 2015-12-21 16:27 - 00000000 ____D C:\FRST-OlderVersion
2015-12-21 16:26 - 2015-12-21 16:26 - 00017788 _____ C:\Users\fff\Documents\fixlist.txt
2015-12-20 22:13 - 2015-12-20 22:13 - 00001193 _____ C:\Users\fff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
2015-12-20 22:13 - 2015-12-20 22:13 - 00001185 _____ C:\Users\fff\Desktop\GG.lnk
2015-12-20 21:47 - 2015-12-20 21:48 - 00400744 _____ C:\Users\fff\Downloads\gg-install(1).exe
2015-12-20 11:50 - 2015-12-20 11:50 - 00000912 _____ C:\Users\fff\Documents\gmer.txt
2015-12-20 11:28 - 2015-12-20 11:28 - 00038194 _____ C:\Shortcut.txt
2015-12-20 11:26 - 2015-12-20 11:28 - 00042076 _____ C:\Addition.txt
2015-12-20 11:25 - 2015-12-21 17:06 - 00007695 _____ C:\FRST.txt
2015-12-20 11:25 - 2015-12-21 17:05 - 00000000 ____D C:\FRST
2015-12-20 11:23 - 2015-12-20 11:23 - 00000000 ____D C:\Windows\pss
2015-12-20 11:17 - 2015-12-21 16:27 - 02370560 _____ (Farbar) C:\FRST64.exe
2015-12-20 11:14 - 2015-12-20 11:13 - 00380416 _____ C:\lhq11jj2.exe
2015-12-20 11:12 - 2015-12-20 11:16 - 02370048 _____ (Farbar) C:\Users\fff\Downloads\FRST64.exe
2015-12-20 11:12 - 2015-12-20 11:13 - 00380416 _____ C:\Users\fff\Downloads\lhq11jj2.exe
2015-12-20 11:09 - 2015-12-20 14:04 - 00000000 ____D C:\Users\fff\AppData\Local\CrashDumps
2015-12-20 11:03 - 2015-12-20 11:03 - 00000000 ____D C:\AdwCleaner
2015-12-20 11:00 - 2015-12-20 11:02 - 01740288 _____ C:\Users\fff\Downloads\adwcleaner_5.025.exe
2015-12-20 11:00 - 2015-12-20 11:01 - 02032072 _____ (Bleeping Computer, LLC) C:\Users\fff\Downloads\rkill.exe
2015-12-20 10:53 - 2015-07-12 10:42 - 00380416 _____ C:\Users\fff\Desktop\48z28tmn.exe
2015-12-20 10:53 - 2015-02-27 22:38 - 02126848 _____ C:\Users\fff\Desktop\AdwCleaner.exe
2015-12-20 10:50 - 2015-12-20 10:50 - 00000000 ____D C:\Users\fff\AppData\Local\VirtualStore
2015-11-26 19:57 - 2015-12-21 16:49 - 00000000 ____D C:\Users\fff\Desktop\Old Firefox Data
2015-11-26 19:57 - 2015-12-21 16:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-26 19:57 - 2015-12-21 16:28 - 00001041 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-11-26 19:57 - 2015-12-21 16:28 - 00001029 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-11-26 19:57 - 2015-12-21 16:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-11-26 19:57 - 2015-11-26 19:57 - 00000000 ____D C:\ProgramData\Mozilla
2015-11-25 18:34 - 2015-11-25 18:34 - 00002010 _____ C:\Users\Public\Desktop\Airbox.lnk
2015-11-25 18:34 - 2015-11-25 18:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Airbox
2015-11-25 18:34 - 2015-11-25 18:34 - 00000000 ____D C:\Program Files (x86)\Airbox
2015-11-25 18:34 - 2013-06-18 11:33 - 00123776 _____ (TCT International Mobile Ltd.) C:\Windows\system32\Drivers\jrdusbser.sys
2015-11-25 18:34 - 2010-06-09 18:15 - 00025088 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\Drivers\AlcatelUsb.sys
2015-11-23 19:40 - 2015-11-23 19:41 - 00000006 _____ C:\Users\fff\Documents\Dokument.txt

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-21 17:05 - 2014-07-29 15:05 - 00807160 _____ C:\Windows\system32\perfh015.dat
2015-12-21 17:05 - 2014-07-29 15:05 - 00163478 _____ C:\Windows\system32\perfc015.dat
2015-12-21 17:05 - 2014-03-18 10:47 - 01825074 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-21 17:05 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2015-12-21 17:00 - 2014-12-26 15:44 - 00000000 ____D C:\Users\fff\AppData\Roaming\GG
2015-12-21 17:00 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-21 16:56 - 2014-11-27 06:24 - 00003960 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{20DBC035-980D-4D13-8856-D4E7C529F9B0}
2015-12-21 16:41 - 2015-11-08 12:50 - 00000266 __RSH C:\ProgramData\ntuser.pol
2015-12-21 16:37 - 2014-11-27 06:18 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1296088152-1995581241-2128387976-1001
2015-12-21 16:36 - 2015-10-25 19:37 - 00000000 ____D C:\Users\fff\Documents\zdrowie publiczne
2015-12-21 16:36 - 2015-10-11 17:15 - 00000000 ____D C:\Users\fff\Desktop\pop
2015-12-21 16:36 - 2015-08-05 17:23 - 00000000 ____D C:\Users\fff\Desktop\pufka
2015-12-21 16:36 - 2015-07-29 12:30 - 00000000 ____D C:\Users\fff\Desktop\piosenki
2015-12-21 16:36 - 2015-07-23 16:39 - 00000000 ____D C:\Users\fff\Downloads\Originals
2015-12-21 16:36 - 2015-07-15 19:11 - 00000000 ____D C:\Users\Public\Foxit Software
2015-12-21 16:36 - 2015-05-19 18:59 - 00000000 ____D C:\Users\fff\Desktop\Originals
2015-12-21 16:36 - 2015-04-22 19:30 - 00000000 ____D C:\Users\fff\Tracing
2015-12-21 16:36 - 2014-12-26 15:46 - 00000000 ___SD C:\Users\fff\GG dysk
2015-12-21 16:36 - 2014-12-09 20:25 - 00000000 ____D C:\Users\fff\Documents\Electronic Arts
2015-12-21 16:36 - 2014-12-09 14:28 - 00000000 ____D C:\Users\fff\Documents\Optimizer Pro
2015-12-21 16:36 - 2014-12-05 14:04 - 00000000 ____D C:\Users\fff\Documents\CyberLink
2015-12-21 16:36 - 2014-11-30 19:13 - 00000000 ____D C:\Users\Public\OEM
2015-12-21 16:36 - 2014-11-30 19:13 - 00000000 ____D C:\Users\fff\Documents\clear.fi
2015-12-21 16:36 - 2014-11-27 06:17 - 00000000 ____D C:\Users\Public\Pokki
2015-12-21 16:36 - 2014-11-27 06:14 - 00000000 ____D C:\Users\fff\PicStream
2015-12-21 16:36 - 2014-11-27 06:12 - 00000000 __SHD C:\Users\fff\IntelGraphicsProfiles
2015-12-21 16:36 - 2014-11-27 06:08 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-12-21 16:36 - 2014-07-29 15:07 - 00000000 ____D C:\Users\Public\CyberLink
2015-12-21 16:36 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries
2015-12-21 16:35 - 2015-11-11 21:36 - 00000000 ____D C:\ProgramData\Sun
2015-12-21 16:35 - 2015-11-06 18:42 - 00000000 ____D C:\Users\fff\AppData\LocalLow\Company
2015-12-21 16:35 - 2015-11-06 18:42 - 00000000 ____D C:\uninst
2015-12-21 16:35 - 2015-11-06 18:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Software Informer
2015-12-21 16:35 - 2015-10-19 18:47 - 00000000 ____D C:\Users\fff\AppData\Local\Foxit Reader
2015-12-21 16:35 - 2015-10-02 18:36 - 00000000 ____D C:\Users\fff\Desktop\fizjologia
2015-12-21 16:35 - 2015-09-10 09:13 - 00000000 ____D C:\Users\fff\Desktop\Nowy folder
2015-12-21 16:35 - 2015-07-29 12:38 - 00000000 ____D C:\Users\fff\Desktop\karina
2015-12-21 16:35 - 2015-07-25 12:52 - 00000000 ____D C:\ProgramData\Origin
2015-12-21 16:35 - 2015-07-23 16:49 - 00000000 ____D C:\Users\fff\AppData\Roaming\ImgBurn
2015-12-21 16:35 - 2015-07-15 19:43 - 00000000 ____D C:\Users\fff\AppData\LocalLow\Oracle
2015-12-21 16:35 - 2015-07-15 19:24 - 00000000 ____D C:\Users\fff\AppData\Roaming\PotPlayerMini64
2015-12-21 16:35 - 2015-07-15 19:18 - 00000000 ____D C:\Users\fff\AppData\Roaming\AIMP3
2015-12-21 16:35 - 2015-07-15 19:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3
2015-12-21 16:35 - 2015-07-15 19:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2015-12-21 16:35 - 2015-07-15 19:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Daum
2015-12-21 16:35 - 2015-07-15 19:11 - 00000000 ____D C:\Users\fff\AppData\Roaming\Foxit Software
2015-12-21 16:35 - 2015-07-15 19:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2015-12-21 16:35 - 2015-07-15 19:07 - 00000000 ____D C:\ProgramData\Unchecky
2015-12-21 16:35 - 2015-07-15 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unchecky
2015-12-21 16:35 - 2015-07-15 19:06 - 00000000 ____D C:\Users\fff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PrivaZer
2015-12-21 16:35 - 2015-07-15 19:06 - 00000000 ____D C:\Users\fff\AppData\Local\PrivaZer
2015-12-21 16:35 - 2015-07-15 19:06 - 00000000 ____D C:\ProgramData\privazer
2015-12-21 16:35 - 2015-07-15 18:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-12-21 16:35 - 2015-07-15 18:46 - 00000000 ____D C:\ProgramData\OEM
2015-12-21 16:35 - 2015-05-16 11:58 - 00000000 ____D C:\Users\fff\Desktop\bzdety z pulpitu
2015-12-21 16:35 - 2015-04-21 13:50 - 00000000 ____D C:\Users\fff\AppData\Local\Macromedia
2015-12-21 16:35 - 2015-04-20 11:01 - 00000000 ____D C:\Users\fff\AppData\Local\Mozilla
2015-12-21 16:35 - 2015-01-04 04:22 - 00000000 ____D C:\Users\fff\AppData\Roaming\OpenFM
2015-12-21 16:35 - 2014-12-26 15:45 - 00000000 ____D C:\Users\fff\AppData\Roaming\Mozilla
2015-12-21 16:35 - 2014-12-26 15:44 - 00000000 ____D C:\Users\fff\AppData\Local\OpenFM
2015-12-21 16:35 - 2014-12-26 15:44 - 00000000 ____D C:\Users\fff\AppData\Local\GG
2015-12-21 16:35 - 2014-12-25 09:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4
2015-12-21 16:35 - 2014-12-15 19:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-21 16:35 - 2014-12-09 19:47 - 00000000 ____D C:\Users\fff\AppData\Roaming\Origin
2015-12-21 16:35 - 2014-12-09 19:47 - 00000000 ____D C:\Users\fff\AppData\Local\Origin
2015-12-21 16:35 - 2014-12-09 19:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-12-21 16:35 - 2014-12-09 14:20 - 00000000 __SHD C:\Users\fff\AppData\LocalLow\EmieBrowserModeList
2015-12-21 16:35 - 2014-12-09 14:20 - 00000000 __SHD C:\Users\fff\AppData\Local\EmieBrowserModeList
2015-12-21 16:35 - 2014-12-05 14:04 - 00000000 ____D C:\Users\fff\AppData\Roaming\CyberLink
2015-12-21 16:35 - 2014-12-05 14:04 - 00000000 ____D C:\Users\fff\AppData\Local\CyberLink
2015-12-21 16:35 - 2014-12-04 08:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Huawei E3372
2015-12-21 16:35 - 2014-12-02 20:27 - 00000000 ____D C:\Users\fff\AppData\Local\Acer
2015-12-21 16:35 - 2014-12-01 22:00 - 00000000 ____D C:\Users\fff\AppData\Roaming\PhotoScape
2015-12-21 16:35 - 2014-12-01 21:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape
2015-12-21 16:35 - 2014-12-01 09:41 - 00000000 ____D C:\Users\fff\AppData\Roaming\Skype
2015-12-21 16:35 - 2014-12-01 09:41 - 00000000 ____D C:\Users\fff\AppData\Local\Skype
2015-12-21 16:35 - 2014-11-30 21:58 - 00000000 ____D C:\Users\fff\AppData\LocalLow\Adobe
2015-12-21 16:35 - 2014-11-30 21:58 - 00000000 ____D C:\Users\fff\AppData\Local\Adobe
2015-12-21 16:35 - 2014-11-30 19:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-21 16:35 - 2014-11-29 22:57 - 00000000 ____D C:\Users\fff\AppData\LocalLow\Sun
2015-12-21 16:35 - 2014-11-27 08:52 - 00000000 ____D C:\Users\fff\AppData\Local\Acer Aspire R7 Tutorial
2015-12-21 16:35 - 2014-11-27 08:43 - 00000000 ____D C:\Users\fff\AppData\Roaming\Macromedia
2015-12-21 16:35 - 2014-11-27 06:24 - 00000000 __SHD C:\Users\fff\AppData\LocalLow\EmieUserList
2015-12-21 16:35 - 2014-11-27 06:24 - 00000000 __SHD C:\Users\fff\AppData\Local\EmieUserList
2015-12-21 16:35 - 2014-11-27 06:24 - 00000000 __SHD C:\Users\fff\AppData\Local\EmieSiteList
2015-12-21 16:35 - 2014-11-27 06:23 - 00000000 __SHD C:\Users\fff\AppData\LocalLow\EmieSiteList
2015-12-21 16:35 - 2014-11-27 06:13 - 00000000 ____D C:\Users\fff\AppData\Roaming\Atheros
2015-12-21 16:35 - 2014-11-27 06:12 - 00000000 ____D C:\Users\fff\AppData\Roaming\Adobe
2015-12-21 16:35 - 2014-11-27 06:12 - 00000000 ____D C:\Users\fff\AppData\Local\Packages
2015-12-21 16:35 - 2014-04-21 10:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-12-21 16:35 - 2013-08-22 16:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2015-12-21 16:34 - 2015-11-06 18:20 - 00000000 ____D C:\ProgramData\Informer Technologies, Inc
2015-12-21 16:34 - 2015-11-06 18:20 - 00000000 ____D C:\Program Files\Software Informer
2015-12-21 16:34 - 2015-11-04 17:53 - 00000000 ____D C:\ProgramData\GG
2015-12-21 16:34 - 2015-07-25 12:56 - 00000000 ____D C:\ProgramData\Electronic Arts
2015-12-21 16:34 - 2015-07-15 19:20 - 00000000 ____D C:\Program Files\UltraDefrag
2015-12-21 16:34 - 2015-07-15 19:12 - 00000000 ____D C:\Program Files\DAUM
2015-12-21 16:34 - 2015-07-15 18:57 - 00000000 ____D C:\Program Files\7-Zip
2015-12-21 16:34 - 2015-07-15 18:44 - 00000000 ____D C:\ProgramData\AVAST Software
2015-12-21 16:34 - 2015-07-15 18:42 - 00000000 ____D C:\ProgramData\Intel
2015-12-21 16:34 - 2015-07-15 18:42 - 00000000 ____D C:\ProgramData\Atheros
2015-12-21 16:34 - 2014-12-15 19:56 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-21 16:34 - 2014-12-01 21:59 - 00000000 ____D C:\Program Files\Google
2015-12-21 16:34 - 2014-11-27 06:12 - 00000000 ____D C:\Program Files\Accessory Store
2015-12-21 16:34 - 2014-07-29 14:50 - 00000000 ____D C:\Program Files\Acer
2015-12-21 16:34 - 2014-07-29 14:43 - 00000000 ____D C:\Program Files\Common Files\QCA_Bluetooth
2015-12-21 16:34 - 2014-07-29 14:34 - 00000000 ____D C:\Program Files\Realtek
2015-12-21 16:34 - 2014-07-29 14:12 - 00000000 ____D C:\Program Files\Intel
2015-12-21 16:34 - 2014-04-21 11:35 - 00000000 ___HD C:\OEM
2015-12-21 16:34 - 2014-04-21 11:09 - 00000000 ____D C:\Program Files\Common Files\mcafee
2015-12-21 16:34 - 2014-04-21 10:48 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-12-21 16:34 - 2014-04-21 10:48 - 00000000 ____D C:\Program Files\MSBuild
2015-12-21 16:34 - 2014-03-18 10:33 - 00000000 ____D C:\Program Files\Windows Journal
2015-12-21 16:34 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-12-21 16:34 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Portable Devices
2015-12-21 16:34 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-12-21 16:34 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT
2015-12-21 16:34 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2015-12-21 16:34 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-12-21 16:34 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\System
2015-12-21 16:34 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\Services
2015-12-21 16:34 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-21 16:34 - 2013-08-22 16:36 - 00000000 ____D C:\PerfLogs
2015-12-21 16:29 - 2013-08-22 16:36 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-12-21 16:29 - 2013-08-22 14:25 - 00000226 _____ C:\Windows\win.ini
2015-12-21 16:28 - 2014-11-27 06:12 - 00001078 _____ C:\Users\fff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-21 16:28 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2015-12-20 11:27 - 2013-08-22 14:36 - 00000000 ____D C:\Windows
2015-12-20 11:18 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-12-20 10:43 - 2015-01-12 17:01 - 00000000 ____D C:\Users\fff\AppData\LocalLow\Temp
2015-12-20 10:41 - 2014-11-27 06:11 - 00000000 ____D C:\Users\fff
2015-11-27 19:32 - 2015-10-07 07:06 - 00751616 ___SH C:\Users\fff\Downloads\Thumbs.db
2015-11-27 13:42 - 2015-10-07 14:51 - 00990208 ___SH C:\Users\fff\Desktop\Thumbs.db

Niektóre pliki w TEMP:
====================
C:\Users\fff\AppData\Local\Temp\dnsapi.dll
C:\Users\fff\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-12-20 14:11

==================== Koniec  FRST.txt ============================