Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:09-01-2015 Uruchomiony przez SysOp (administrator) COA12 (09-01-2016 22:22:09) Uruchomiony z C:\Documents and Settings\SysOp\Pulpit\Serwis Załadowane profile: SysOp (Dostępne profile: SysOp) Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) Język: Polski Internet Explorer Wersja 7 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe (Adobe Systems Incorporated) H:\3.2\Apps\apdproxy.exe (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe () C:\Documents and Settings\All Users\Dane aplikacji\Internet w Cyfrowym Polsacie\OnlineUpdate\ouc.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe (Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [Adobe Photo Downloader] => H:\3.2\Apps\apdproxy.exe [63712 2007-03-09] (Adobe Systems Incorporated) HKLM\...\Run: [BluetoothAuthenticationAgent] => rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated) HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [18789920 2009-12-08] (Realtek Semiconductor Corp.) HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-07] (AVAST Software) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation) HKU\S-1-5-19\...\RunOnce: [_nltide_2] => regsvr32 /s /n /i:U shell32 HKU\S-1-5-19\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N HKU\S-1-5-19\...\Policies\Explorer: [NoSMConfigurePrograms] 1 HKU\S-1-5-19\...\Policies\Explorer: [NoRecentDocsMenu] 1 HKU\S-1-5-19\...\Policies\Explorer: [NoRecentDocsHistory] 1 HKU\S-1-5-20\...\RunOnce: [_nltide_2] => regsvr32 /s /n /i:U shell32 HKU\S-1-5-20\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N HKU\S-1-5-20\...\Policies\Explorer: [NoSMConfigurePrograms] 1 HKU\S-1-5-20\...\Policies\Explorer: [NoRecentDocsMenu] 1 HKU\S-1-5-20\...\Policies\Explorer: [NoRecentDocsHistory] 1 HKU\S-1-5-21-73586283-1275210071-682003330-1001\...\Run: [Sony Ericsson PC Companion] => C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [433872 2011-10-21] (Sony Ericsson) HKU\S-1-5-21-73586283-1275210071-682003330-1001\...\Run: [HP DESKJET 1050A] => C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE [180736 2007-03-01] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-73586283-1275210071-682003330-1001\...\Run: [Adobe Reader Synchronizer] => C:\Program Files\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe [746376 2014-05-08] (Adobe Systems Incorporated) HKU\S-1-5-21-73586283-1275210071-682003330-1001\...\Run: [Steam] => C:\Program Files\Steam\steam.exe [3013712 2015-12-14] (Valve Corporation) HKU\S-1-5-21-73586283-1275210071-682003330-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6602152 2015-12-08] (Piriform Ltd) HKU\S-1-5-21-73586283-1275210071-682003330-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0xFF000000 HKU\S-1-5-21-73586283-1275210071-682003330-1001\...\Policies\Explorer: [NoSMConfigurePrograms] 1 HKU\S-1-5-21-73586283-1275210071-682003330-1001\...\Policies\Explorer: [NoRecentDocsMenu] 1 HKU\S-1-5-21-73586283-1275210071-682003330-1001\...\Policies\Explorer: [NoRecentDocsHistory] 1 HKU\S-1-5-21-73586283-1275210071-682003330-1001\...\MountPoints2: {e920d70a-ee02-11e2-b287-001fd0b09325} - K:\AutoRun.exe HKU\S-1-5-18\...\RunOnce: [_nltide_2] => regsvr32 /s /n /i:U shell32 HKU\S-1-5-18\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N HKU\S-1-5-18\...\Policies\Explorer: [NoSMConfigurePrograms] 1 HKU\S-1-5-18\...\Policies\Explorer: [NoRecentDocsMenu] 1 HKU\S-1-5-18\...\Policies\Explorer: [NoRecentDocsHistory] 1 ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-12-07] (AVAST Software) Startup: C:\Documents and Settings\SysOp\Menu Start\Programy\Autostart\Powiadomienia monitorowania tuszu - HP Deskjet 1050 J410 series.lnk [2016-01-09] ShortcutTarget: Powiadomienia monitorowania tuszu - HP Deskjet 1050 J410 series.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{143DCC77-934C-4721-8ACB-8519E2A51FA8}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "www.google.com" <======= UWAGA SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2016-01-04] (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-12-07] (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2016-01-04] (Oracle Corporation) Toolbar: HKU\S-1-5-21-73586283-1275210071-682003330-1001 -> Brak nazwy - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - Brak pliku StartMenuInternet: IEXPLORE.EXE - iexplore.exe FireFox: ======== FF ProfilePath: C:\Documents and Settings\SysOp\Dane aplikacji\Mozilla\Firefox\Profiles\pzf71jhh.default FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-28] () FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1215155.dll [2014-12-02] (Adobe Systems, Inc.) FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2016-01-04] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2016-01-04] (Oracle Corporation) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-08-05] (Adobe Systems Inc.) FF Extension: Adblock Plus - C:\Documents and Settings\SysOp\Dane aplikacji\Mozilla\Firefox\Profiles\pzf71jhh.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-12-26] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-07] Chrome: ======= CHR dev: Chrome dev build wykryto! <======= UWAGA CHR HKLM\...\Chrome\Extension: [aaaaojmikegpiepcfdkkjaplodkpfmlo] - C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\APN\GoogleCRXs\apnorjtoolbar.crx CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-12-07] CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-12-07] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-07] (AVAST Software) S4 ClipSrv; C:\WINDOWS\system32\clipsrv.exe [43008 2008-12-31] (Microsoft Corporation) [Brak podpisu cyfrowego] R2 HWDeviceService.exe; C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe [271712 2011-03-14] () S2 Internet w Cyfrowym Polsacie. RunOuc; C:\Program Files\Internet w Cyfrowym Polsacie\UpdateDog\ouc.exe [246112 2013-07-16] () S3 mnmsrvc; C:\WINDOWS\system32\mnmsrvc.exe [53248 2008-12-31] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 MSDTC; C:\WINDOWS\system32\msdtc.exe [30720 2008-12-31] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 MSIServer; C:\WINDOWS\System32\msiexec.exe [99840 2008-12-31] (Microsoft Corporation) [Brak podpisu cyfrowego] R2 nvsvc; C:\WINDOWS\system32\nvsvc32.exe [172100 2009-09-27] (NVIDIA Corporation) [Brak podpisu cyfrowego] S3 Sony Ericsson PCCompanion; C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [155344 2011-06-29] (Avanquest Software) [Brak podpisu cyfrowego] ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative) R1 AmdK8; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [43520 2006-06-18] (Advanced Micro Devices) R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24016 2015-12-07] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [81168 2015-12-26] (AVAST Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-12-07] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49776 2015-12-07] (AVAST Software) R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [794952 2015-12-07] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [436360 2015-12-26] (AVAST Software) R3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [165104 2015-12-07] (AVAST Software) S3 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [58016 2015-12-07] (AVAST Software) R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [209432 2015-12-07] (AVAST Software) S3 eapihdrv; C:\Documents and Settings\SysOp\Ustawienia lokalne\Temp\ehdrv.sys [135760 2016-01-04] (ESET) S3 gdrv; C:\WINDOWS\gdrv.sys [15600 2010-01-01] (Windows (R) 2000 DDK provider) S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.) R0 PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [46080 2006-05-16] (Sonic Solutions) [Brak podpisu cyfrowego] S3 s0016bus; C:\WINDOWS\System32\DRIVERS\s0016bus.sys [89256 2008-05-16] (MCCI Corporation) S3 s0016mdfl; C:\WINDOWS\System32\DRIVERS\s0016mdfl.sys [15016 2008-05-16] (MCCI Corporation) S3 s0016mdm; C:\WINDOWS\System32\DRIVERS\s0016mdm.sys [120744 2008-05-16] (MCCI Corporation) S3 s0016mgmt; C:\WINDOWS\System32\DRIVERS\s0016mgmt.sys [114216 2008-05-16] (MCCI Corporation) S3 s0016nd5; C:\WINDOWS\System32\DRIVERS\s0016nd5.sys [25512 2008-05-16] (MCCI Corporation) S3 s0016obex; C:\WINDOWS\System32\DRIVERS\s0016obex.sys [110632 2008-05-16] (MCCI Corporation) S3 s0016unic; C:\WINDOWS\System32\DRIVERS\s0016unic.sys [115752 2008-05-16] (MCCI Corporation) R0 Si3112; C:\WINDOWS\system32\Drivers\Si3112.sys [62208 2008-12-31] (Silicon Image, Inc.) [Brak podpisu cyfrowego] R1 Tcpip; C:\WINDOWS\System32\DRIVERS\tcpip.sys [361344 2008-12-31] (Microsoft Corporation) [Brak podpisu cyfrowego] S4 IntelIde; Brak ImagePath S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [X] U3 kgtdqpog; \??\C:\DOCUME~1\SysOp\USTAWI~1\Temp\kgtdqpog.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-01-09 22:18 - 2016-01-09 22:22 - 00000000 ____D C:\FRST 2016-01-09 19:56 - 2016-01-09 19:56 - 00000350 _____ C:\Documents and Settings\SysOp\decoder_log.txt 2016-01-09 19:46 - 2016-01-09 19:56 - 00000000 ____D C:\Documents and Settings\SysOp\Pulpit\zdjęcia z niemiec 2016-01-07 17:14 - 2016-01-07 17:15 - 00000000 ____D C:\Documents and Settings\SysOp\Pulpit\moje zdjęcia 2 2016-01-04 23:27 - 2016-01-09 22:22 - 00000000 ____D C:\Documents and Settings\SysOp\Pulpit\Serwis 2016-01-04 21:48 - 2016-01-04 21:48 - 00000000 ____D C:\Program Files\Common Files\Java 2016-01-04 21:48 - 2016-01-04 21:48 - 00000000 ____D C:\Documents and Settings\SysOp\.oracle_jre_usage 2016-01-04 21:47 - 2016-01-04 21:50 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\Oracle 2016-01-04 21:45 - 2016-01-04 21:45 - 00000000 ____D C:\Documents and Settings\SysOp\Dane aplikacji\Oracle 2016-01-04 21:43 - 2016-01-04 21:43 - 00036426 _____ C:\Documents and Settings\SysOp\Moje dokumenty\cc_20160104_214332.reg 2016-01-04 21:43 - 2016-01-04 21:43 - 00000684 _____ C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk 2016-01-04 21:43 - 2016-01-04 21:43 - 00000000 ____D C:\Program Files\CCleaner 2016-01-04 21:43 - 2016-01-04 21:43 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner 2016-01-02 11:15 - 2016-01-02 11:15 - 01476720 _____ C:\Documents and Settings\SysOp\Moje dokumenty\Garry's Mod [1].exe 2016-01-02 09:53 - 2016-01-02 09:53 - 00597277 _____ C:\Documents and Settings\SysOp\Pulpit\Fossil-Archeology Mod Installer.zip 2015-12-31 20:26 - 2015-12-31 20:26 - 00000000 ____D C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Steam 2015-12-31 20:26 - 2015-12-31 20:26 - 00000000 ____D C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\CEF 2015-12-31 20:21 - 2016-01-09 19:32 - 00000000 ____D C:\Program Files\Steam 2015-12-31 20:21 - 2015-12-31 20:21 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Steam 2015-12-31 20:15 - 2015-12-31 20:15 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat 2015-12-31 18:44 - 2015-12-31 18:45 - 25214976 _____ C:\Documents and Settings\SysOp\Pulpit\DrukiGofin_2.3.41.0_k.msi 2015-12-31 18:44 - 2015-12-31 18:44 - 00177133 _____ C:\Documents and Settings\SysOp\Pulpit\arkusz-spisu-z-natury-20-pozycji.gofin 2015-12-31 18:44 - 2015-12-31 18:44 - 00066559 _____ C:\Documents and Settings\SysOp\Pulpit\arkusz-spisu-z-natury-20-pozycji(1).pdf 2015-12-31 18:43 - 2015-12-31 18:44 - 00066559 _____ C:\Documents and Settings\SysOp\Pulpit\arkusz-spisu-z-natury-20-pozycji.pdf 2015-12-28 18:35 - 2015-12-28 18:35 - 00131984 _____ C:\Documents and Settings\SysOp\Moje dokumenty\520408751215.pdf 2015-12-26 16:50 - 2015-12-28 18:26 - 00000000 ____D C:\Program Files\Mozilla Firefox 2015-12-10 16:56 - 2015-12-10 16:56 - 00000000 ____D C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Temp ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-01-09 22:22 - 2010-01-01 14:26 - 00000000 ____D C:\Documents and Settings\SysOp\Ustawienia lokalne\Temp 2016-01-09 22:19 - 2010-01-01 15:09 - 00000000 ____D C:\WINDOWS 2016-01-09 21:43 - 2012-06-28 09:40 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-01-09 20:40 - 2013-10-28 16:28 - 00000476 _____ C:\WINDOWS\Tasks\At2.job 2016-01-09 19:59 - 2014-12-28 14:15 - 00000000 ____D C:\Documents and Settings\SysOp\Moje dokumenty\Pobrane 2016-01-09 19:56 - 2010-01-01 14:26 - 00000000 ____D C:\Documents and Settings\SysOp 2016-01-09 19:46 - 2010-01-01 14:26 - 00000000 ____D C:\Documents and Settings\SysOp\Pulpit 2016-01-09 19:34 - 2014-12-28 23:10 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job 2016-01-09 19:28 - 2010-01-01 14:26 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-01-09 19:28 - 2009-09-27 18:19 - 00253748 _____ C:\WINDOWS\system32\NvApps.xml 2016-01-09 19:27 - 2001-07-22 00:17 - 00002184 _____ C:\WINDOWS\system32\wpa.dbl 2016-01-07 17:41 - 2010-01-01 14:26 - 00032578 _____ C:\WINDOWS\SchedLgU.Txt 2016-01-07 17:35 - 2010-01-01 14:26 - 00000000 ___SD C:\Documents and Settings\SysOp\Pulpit\Moje obrazy 2016-01-07 17:15 - 2014-12-17 16:47 - 00000000 ____D C:\Documents and Settings\SysOp\Pulpit\moje zdjecia 2016-01-04 22:27 - 2014-12-28 20:16 - 02870984 _____ (ESET) C:\Documents and Settings\SysOp\Pulpit\esetsmartinstaller_plk.exe 2016-01-04 22:27 - 2010-01-01 16:02 - 00000000 ____D C:\Program Files\ESET 2016-01-04 22:26 - 2010-01-01 15:16 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Start\Programy 2016-01-04 22:26 - 2010-01-01 15:16 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit 2016-01-04 22:16 - 2014-10-01 12:16 - 00000266 __RSH C:\Documents and Settings\All Users\ntuser.pol 2016-01-04 22:16 - 2010-01-01 15:15 - 00000000 ____D C:\Documents and Settings\All Users 2016-01-04 22:07 - 2014-12-28 22:44 - 00000000 ____D C:\Program Files\7-Zip 2016-01-04 22:07 - 2010-01-01 16:18 - 00000000 ____D C:\Program Files\Star Defender 4 2016-01-04 21:49 - 2013-06-09 15:38 - 00000000 ____D C:\Program Files\Java 2016-01-04 21:48 - 2014-12-28 19:32 - 00095840 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll 2016-01-04 21:48 - 2014-12-28 19:32 - 00000000 ____D C:\Documents and Settings\All Users\Menu Start\Programy\Java 2016-01-04 21:47 - 2014-12-28 19:32 - 00278624 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2016-01-04 21:47 - 2014-12-28 19:32 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl 2016-01-04 21:47 - 2010-01-01 15:16 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji 2016-01-04 21:45 - 2010-01-01 14:26 - 00000000 __RHD C:\Documents and Settings\SysOp\Dane aplikacji 2016-01-04 21:43 - 2010-01-01 14:26 - 00000000 ___SD C:\Documents and Settings\SysOp\Moje dokumenty 2016-01-04 21:37 - 2010-01-01 15:17 - 00977668 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-01-04 21:37 - 2001-10-26 18:15 - 00446310 _____ C:\WINDOWS\system32\perfh015.dat 2016-01-04 21:37 - 2001-10-26 18:15 - 00073192 _____ C:\WINDOWS\system32\perfc015.dat 2016-01-04 21:27 - 2001-07-22 00:16 - 00000657 _____ C:\WINDOWS\win.ini 2016-01-04 21:24 - 2010-01-01 14:55 - 00000726 _____ C:\Documents and Settings\SysOp\Pulpit\Mozilla Firefox.lnk 2016-01-02 17:07 - 2013-06-09 15:39 - 00000000 ____D C:\Documents and Settings\SysOp\Dane aplikacji\.minecraft 2016-01-02 16:28 - 2013-10-28 16:28 - 00000476 _____ C:\WINDOWS\Tasks\At3.job 2016-01-02 14:00 - 2013-10-28 16:28 - 00000476 _____ C:\WINDOWS\Tasks\At4.job 2016-01-02 10:10 - 2013-10-28 16:28 - 00000476 _____ C:\WINDOWS\Tasks\At1.job 2015-12-31 20:34 - 2014-01-11 12:48 - 00000000 ____D C:\Documents and Settings\SysOp\Pulpit\chomikuj 2015-12-31 20:26 - 2010-01-01 14:26 - 00000000 ___HD C:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji 2015-12-29 15:38 - 2012-05-06 13:27 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2015-12-28 18:43 - 2012-06-28 09:40 - 00796864 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2015-12-28 18:43 - 2012-06-28 09:40 - 00142528 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2015-12-26 15:24 - 2014-12-28 23:10 - 00436360 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys 2015-12-26 15:24 - 2014-12-28 23:10 - 00081168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys ==================== Pliki w katalogu głównym wybranych folderów ======= 2010-01-01 16:18 - 2007-05-26 09:26 - 0403856 _____ (Pantaray Research LTD.) C:\Program Files\un_Star Defender 4_26816.exe 2010-01-01 16:18 - 2010-01-01 16:18 - 0006934 _____ () C:\Program Files\un_Star Defender 4_26816.txt 2013-10-28 16:27 - 2013-10-28 16:27 - 0000057 _____ () C:\Documents and Settings\All Users\Dane aplikacji\Ament.ini 2011-07-18 19:35 - 2011-07-31 14:44 - 0000012 _____ () C:\Documents and Settings\All Users\Dane aplikacji\ReminderNextRun Pliki do przeniesienia lub usunięcia: ==================== C:\Windows\Tasks\At1.job C:\Windows\Tasks\At2.job C:\Windows\Tasks\At3.job C:\Windows\Tasks\At4.job Niektóre pliki w TEMP: ==================== C:\Documents and Settings\SysOp\Ustawienia lokalne\Temp\jre-8u66-windows-au.exe ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\explorer.exe [2008-12-31 18:03] - [2008-12-31 18:03] - 1553408 ____A (Microsoft Corporation) BDA7A4169BF5E1F3EE76B017396E4F47 C:\WINDOWS\system32\winlogon.exe [2008-12-31 18:04] - [2008-12-31 18:04] - 0549888 ____A (Microsoft Corporation) 335813EACD16E84F3047A3326F6E5473 C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll [2007-07-11 05:06] - [2007-07-11 05:06] - 0642560 ____A (Microsoft Corporation) CE594E18FE0D0AF804F1F3694921CE62 C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo ==================== Koniec FRST.txt ============================