Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:10-01-2015 01
Uruchomiony przez Paweł (administrator)  PAWEŁ-KOMPUTER (15-01-2016 15:26:05)
Uruchomiony z C:\Users\Paweł\Desktop
Załadowane profile: Paweł (Dostępne profile: Paweł)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ALWIL Software) C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ALWIL Software) C:\Program Files\Alwil Software\Avast4\ashServ.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(ALWIL Software) C:\Program Files\Alwil Software\Avast4\ashDisp.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files (x86)\EagleGet\EGMonitor.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files (x86)\EagleGet\EGMonitor.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(ALWIL Software) C:\Program Files\Alwil Software\Avast4\ashWebSv.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-07-18] (Intel Corporation)
HKLM-x32\...\Run: [avast!] => C:\Program Files\Alwil Software\Avast4\ashDisp.exe [81000 2008-11-26] (ALWIL Software)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [406328 2013-09-09] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [205624 2013-05-30] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-13] (Adobe Systems Incorporated)
HKU\S-1-5-21-2721992571-1799665139-3652400201-1000\...\Run: [GG] => "C:\Users\Paweł\AppData\Local\GG\Application\gghub.exe"
HKU\S-1-5-21-2721992571-1799665139-3652400201-1000\...\Policies\Explorer: [NoDriveAutoRun] 0xFFFFFFFF
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast4\ashShA64.dll [2008-03-31] (ALWIL Software)
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll Brak pliku
AlternateShell: 
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.100.1
Tcpip\..\Interfaces\{2D2F5F65-144A-45E9-8DE1-04EFFD15F24C}: [DhcpNameServer] 192.168.100.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\S-1-5-21-2721992571-1799665139-3652400201-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2721992571-1799665139-3652400201-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2721992571-1799665139-3652400201-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.pl/
SearchScopes: HKU\S-1-5-21-2721992571-1799665139-3652400201-1000 -> {081576CE-6612-4598-9993-30D812477790} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll => Brak pliku
BHO-x32: EGet Class -> {1E871FF8-029C-4732-8AA7-39E3D3872057} -> C:\Program Files (x86)\EagleGet\eagleSniffer.dll [2015-10-24] (EagleGet.com)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-28] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-28] (Oracle Corporation)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll => Brak pliku
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.24.0.cab

FireFox:
========
FF ProfilePath: C:\Users\Paweł\AppData\Roaming\Mozilla\Firefox\Profiles\oa0iiodm.default
FF NewTab: google.pl
FF Homepage: google.pl
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2015-12-29] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-29] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-28] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-12-17] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2721992571-1799665139-3652400201-1000: eagleget.com/EagleGet32 -> C:\Program Files (x86)\EagleGet\npEagleget.dll [2015-10-24] (EagleGet)
FF Plugin HKU\S-1-5-21-2721992571-1799665139-3652400201-1000: eagleget.com/EagleGet64_x86_64 -> C:\Program Files (x86)\EagleGet\npEagleget64.dll [2015-10-24] (EagleGet)
FF Extension: Multirow Bookmarks Toolbar Plus - C:\Users\Paweł\AppData\Roaming\Mozilla\Firefox\Profiles\oa0iiodm.default\extensions\{4c7097f7-08f2-4ef2-9b9f-f95fa4cbb064}.xpi [2015-11-10]
FF Extension: Downloads Window - C:\Users\Paweł\AppData\Roaming\Mozilla\Firefox\Profiles\oa0iiodm.default\Extensions\{a7213cf2-fa1e-4373-88ff-255d0abd3020}.xpi [2015-11-11]
FF Extension: Adblock Plus - C:\Users\Paweł\AppData\Roaming\Mozilla\Firefox\Profiles\oa0iiodm.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-11-11]

Chrome: 
=======
CHR HKU\S-1-5-21-2721992571-1799665139-3652400201-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kaebhgioafceeldhgjmendlfhbfjefmo] - C:\Program Files (x86)\EagleGet\addon\eagleget_cext@eagleget.com.crx [2015-11-24]
CHR HKLM-x32\...\Chrome\Extension: [kaebhgioafceeldhgjmendlfhbfjefmo] - C:\Program Files (x86)\EagleGet\addon\eagleget_cext@eagleget.com.crx [2015-11-24]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 aswUpdSv; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [18752 2008-11-26] (ALWIL Software)
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [155160 2008-11-26] (ALWIL Software)
S3 avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [254040 2008-11-26] (ALWIL Software)
R3 avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [352920 2008-11-26] (ALWIL Software)
R2 egGetSvc; C:\Program Files (x86)\EagleGet\EGMonitor.exe [236544 2015-10-24] () [Brak podpisu cyfrowego]
R2 HPSLPSVC; C:\Users\PAWE~1\AppData\Local\Temp\7zS0E1F\hpslpsvc64.dll [1039360 2012-11-14] (Hewlett-Packard Co.) [Brak podpisu cyfrowego]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315352 2014-09-04] (Intel Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
S2 Crypkey License; crypserv.exe [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2012-05-17] (AnvSoft Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswFsBlk; C:\Windows\System32\DRIVERS\aswFsBlk.sys [22096 2008-11-26] (ALWIL Software)
R2 aswMonFlt; C:\Windows\System32\DRIVERS\aswMonFlt.sys [64592 2008-11-26] (ALWIL Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswRdr.sys [27216 2008-11-26] (ALWIL Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [89168 2008-11-26] (ALWIL Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [57936 2008-11-26] (ALWIL Software)
R3 eagleGet; C:\Windows\System32\Drivers\eagleGet.sys [77624 2015-10-22] (eagleGet)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [17280 2012-08-05] ( )
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-09-04] (Intel Corporation)
U5 RTSPER; C:\Windows\System32\Drivers\RTSPER.sys [465624 2014-01-03] (Realsil Semiconductor Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
S1 NetworkX; \SystemRoot\system32\ckldrv.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X]
S3 VirtualDVD; system32\DRIVERS\VirtualDVD.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-15 15:26 - 2016-01-15 15:26 - 00014017 _____ C:\Users\Paweł\Desktop\FRST.txt
2016-01-15 15:24 - 2016-01-15 15:26 - 00000000 ____D C:\FRST
2016-01-15 15:24 - 2016-01-15 15:24 - 02370560 _____ (Farbar) C:\Users\Paweł\Desktop\FRST64.exe
2016-01-15 15:23 - 2016-01-15 15:23 - 00000000 ____D C:\Users\Paweł\Desktop\Nowy folder (6)
2016-01-15 13:37 - 2016-01-15 13:37 - 00000953 _____ C:\tmp1
2016-01-15 13:37 - 2016-01-15 13:37 - 00000128 _____ C:\tmp2
2016-01-15 10:32 - 2016-01-15 10:32 - 00000000 ____D C:\Users\Paweł\Desktop\autostart z karty SD
2016-01-15 09:38 - 2016-01-15 14:41 - 00000000 ____D C:\Users\Paweł\Desktop\MIO
2016-01-14 22:47 - 2007-07-26 18:12 - 00303616 _____ C:\Users\Paweł\Desktop\auto.exe
2016-01-14 21:59 - 2016-01-14 21:59 - 00103140 _____ C:\mcgsat.exe
2016-01-14 17:52 - 2016-01-14 17:52 - 00000000 ____D C:\Users\Paweł\AppData\Local\MiTAC_International_Corpo
2016-01-14 17:32 - 2016-01-14 17:32 - 00000000 ____D C:\Users\Paweł\Documents\00022AC1FC92020045012850A8E3AD20
2016-01-14 16:46 - 2016-01-14 16:46 - 00001180 _____ C:\Users\Paweł\Desktop\MioMore Desktop 7.50.lnk
2016-01-14 16:46 - 2016-01-14 16:46 - 00000000 ____D C:\Users\Public\Downloads\Maps
2016-01-14 16:46 - 2016-01-14 16:46 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mio
2016-01-14 16:46 - 2016-01-14 16:46 - 00000000 ____D C:\Program Files (x86)\Mio
2016-01-11 15:03 - 2016-01-11 15:03 - 00062268 _____ C:\Users\Paweł\ia_remove.sh3085.tmp
2016-01-11 15:02 - 2016-01-11 15:02 - 00000070 _____ C:\Windows\Crypkey.ini
2016-01-11 15:02 - 2006-09-22 00:33 - 00069632 _____ (CrypKey (Canada) Ltd.) C:\Windows\SysWOW64\Crypserv.exe
2016-01-11 15:02 - 2006-01-10 03:47 - 00031846 _____ C:\Windows\SysWOW64\Ckldrv.sys
2016-01-11 15:02 - 1999-06-18 22:49 - 00165888 _____ (Kenonic Controls) C:\Windows\Ckconfig.exe
2016-01-11 15:02 - 1996-05-03 18:21 - 00027648 ____R C:\Windows\Setup_ck.exe
2016-01-11 15:02 - 1996-05-03 16:36 - 00018432 _____ C:\Windows\Setup_ck.dll
2016-01-11 15:02 - 1995-07-04 19:33 - 00011776 _____ C:\Windows\Ckrfresh.exe
2016-01-11 14:56 - 2016-01-11 14:56 - 00062268 _____ C:\Users\Paweł\ia_remove.sh3005.tmp
2016-01-11 14:35 - 2016-01-11 14:35 - 00062268 _____ C:\Users\Paweł\ia_remove.sh1453.tmp
2016-01-11 14:34 - 2016-01-11 14:34 - 00000000 ____D C:\usr
2016-01-11 14:25 - 2016-01-11 14:34 - 00000000 ___HD C:\Users\Paweł\Zero G Registry
2016-01-11 14:25 - 2016-01-11 14:25 - 00000000 ____D C:\Users\Paweł\750843.tmp
2016-01-11 14:25 - 2016-01-11 14:25 - 00000000 _____ C:\Users\Paweł\cbe.f4ab760715230dc9e51
2016-01-11 14:24 - 2016-01-11 14:57 - 00000016 _____ C:\Users\Paweł\persistent_state
2016-01-11 14:24 - 2016-01-11 14:25 - 00022880 _____ C:\Users\Paweł\2f0b5dfe15230dc62a0.details
2016-01-11 14:24 - 2016-01-11 14:24 - 00000000 _____ C:\Users\Paweł\2f0b5dfe15230dc62a0.notes
2016-01-11 14:21 - 2016-01-11 14:37 - 00000000 ____D C:\Users\Paweł\Downloads\FOTA INFO-TECH 2007
2016-01-11 10:07 - 2016-01-11 10:07 - 00000000 ____D C:\Temp
2016-01-01 14:41 - 2016-01-01 00:04 - 65589010 ____N C:\Users\Paweł\Desktop\20160101_000341.mp4
2015-12-30 16:23 - 2015-12-30 16:23 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
2015-12-30 14:15 - 2015-12-30 14:15 - 00001908 _____ C:\Windows\diagwrn.xml
2015-12-30 14:15 - 2015-12-30 14:15 - 00001908 _____ C:\Windows\diagerr.xml
2015-12-30 12:48 - 2015-12-30 12:48 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nero
2015-12-30 12:48 - 2015-12-30 12:48 - 00000000 ____D C:\Users\Paweł\AppData\Local\Ahead
2015-12-30 12:45 - 2015-12-30 12:45 - 00000000 ____D C:\Users\Paweł\Downloads\pl_windows_10_multiple_editions_version_1511_x86_dvd_7223773.iso(1)
2015-12-20 12:18 - 2015-12-20 12:18 - 00287814 _____ C:\Users\Paweł\Downloads\wniosek_kk.pdf

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-15 15:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2016-01-15 15:20 - 2014-09-04 07:10 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-15 15:12 - 2009-07-14 05:45 - 00022752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-15 15:12 - 2009-07-14 05:45 - 00022752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-15 14:47 - 2014-10-09 16:33 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2016-01-15 14:44 - 2014-11-20 09:24 - 00000000 ____D C:\Program Files (x86)\ipla
2016-01-15 14:38 - 2009-07-14 18:55 - 00740970 _____ C:\Windows\system32\perfh015.dat
2016-01-15 14:38 - 2009-07-14 18:55 - 00156010 _____ C:\Windows\system32\perfc015.dat
2016-01-15 14:38 - 2009-07-14 06:13 - 01671648 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-15 14:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-01-15 14:14 - 2015-10-28 20:13 - 00176799 _____ C:\AutoMapaSetupLog.txt
2016-01-15 13:47 - 2014-11-22 20:32 - 00002896 _____ C:\Windows\System32\Tasks\AutoKMS
2016-01-15 13:47 - 2014-11-22 20:32 - 00000266 _____ C:\Windows\Tasks\AutoKMS.job
2016-01-15 13:47 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-14 16:45 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-01-13 22:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2016-01-13 14:50 - 2014-09-04 12:28 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2016-01-13 14:49 - 2014-12-24 19:04 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-01-11 15:07 - 2014-09-03 20:10 - 00000000 ____D C:\Users\Paweł
2016-01-10 20:08 - 2014-12-08 19:43 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\uTorrent
2016-01-03 11:42 - 2014-09-04 07:10 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-01-03 11:41 - 2014-09-04 07:10 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-01-03 11:41 - 2014-09-04 07:10 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-30 14:20 - 2014-10-04 19:44 - 00000000 ____D C:\Users\Paweł\Documents\Euro Truck Simulator 2
2015-12-22 15:54 - 2015-09-26 19:28 - 00000000 ____D C:\Users\Paweł\Downloads\Helios

==================== Pliki w katalogu głównym wybranych folderów =======

2015-02-28 01:37 - 2015-10-14 10:04 - 0049961 _____ () C:\Program Files (x86)\AutoMapa EU.md5
2014-10-09 09:10 - 2014-10-09 09:10 - 0000004 _____ () C:\Users\Paweł\AppData\Roaming\pid.txt
2014-10-09 09:10 - 2014-10-09 09:10 - 0000107 _____ () C:\Users\Paweł\AppData\Roaming\pidloc.txt
2015-08-26 18:32 - 2015-08-26 18:32 - 0003584 _____ () C:\Users\Paweł\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-12-27 13:02 - 2014-12-27 13:02 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-01-11 14:25 - 2015-01-11 14:25 - 0004934 _____ () C:\ProgramData\flwjycbm.bab

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-12-11 10:58

==================== Koniec  FRST.txt ============================