Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:18-01-2016
Uruchomiony przez Dariusz Michalewicz (administrator)  WELLNESSKLUB (21-01-2016 15:44:11)
Uruchomiony z C:\Users\Dariusz Michalewicz\Desktop\LOGI i AKCJE
Załadowane profile: Dariusz Michalewicz (Dostępne profile: Dariusz Michalewicz)
Platform: Windows 10 Home Wersja 1511 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Edge)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
() C:\ProgramData\MobileBrServ\mbbService.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Pokki) C:\Users\Dariusz Michalewicz\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acer) C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\NetworkUXBroker.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Pokki) C:\Users\Dariusz Michalewicz\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
(Pokki) C:\Users\Dariusz Michalewicz\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
(Pokki) C:\Users\Dariusz Michalewicz\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.15731.0_x64__8wekyb3d8bbwe\Video.UI.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3242696 2015-10-22] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13550152 2013-05-30] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161728 2015-11-12] (IvoSoft)
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2016-01-12] (AVAST Software)
HKLM-x32\...\RunOnce: [20150107] => C:\Program Files\AVAST Software\Avast\setup\emupdate\629dcb16-4bf6-447b-8454-2331ed1aa77e.exe [168336 2016-01-21] (AVAST Software)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
HKU\S-1-5-21-1577448770-2244367386-2187014298-1001\...\Run: [AcerPortal] => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2732760 2015-11-19] (Acer)
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-11-19] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-11-19] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-11-19] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Dariusz Michalewicz\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64\FileSyncShell64.dll [2015-12-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Dariusz Michalewicz\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64\FileSyncShell64.dll [2015-12-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Dariusz Michalewicz\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64\FileSyncShell64.dll [2015-12-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-01-12] (AVAST Software)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Dariusz Michalewicz\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileSyncShell.dll [2015-12-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Dariusz Michalewicz\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileSyncShell.dll [2015-12-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Dariusz Michalewicz\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileSyncShell.dll [2015-12-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12] (IvoSoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-11-02]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 10.17.0.1
Tcpip\..\Interfaces\{7ed25125-6566-4906-9b19-0e82bfd8d86f}: [DhcpNameServer] 10.17.0.1
Tcpip\..\Interfaces\{b381bf8f-75dd-48f7-b9a5-5ff4fb0bd73b}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{b41f9cb8-eacf-43f0-a40a-0c008907b4d8}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1577448770-2244367386-2187014298-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-12-15] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12] (IvoSoft)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-01-12] (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-01-21] (Microsoft Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2015-11-12] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12] (IvoSoft)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-01-12] (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2015-11-12] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12] (IvoSoft)
DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} hxxps://herbalifemeetings.webex.com/client/WBXclient-T29L10NSP13EP50-10011/webex/ieatgpc1.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-12-02] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-12-02] (McAfee, Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-12-02] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-12-02] (McAfee, Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-09-28] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-09-28] (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-01-15] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2016-01-12] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2016-01-12] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-15] ()
FF Plugin HKU\S-1-5-21-1577448770-2244367386-2187014298-1001: SkypePlugin -> C:\Users\Dariusz Michalewicz\AppData\Local\SkypePlugin\7.6.0.295\npGatewayNpapi.dll [2015-09-14] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-1577448770-2244367386-2187014298-1001: SkypePlugin64 -> C:\Users\Dariusz Michalewicz\AppData\Local\SkypePlugin\7.6.0.295\npGatewayNpapi-x64.dll [2015-09-14] (Skype Technologies S.A.)
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-11-23]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-01-21]
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-01-21]

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Dariusz Michalewicz\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Dariusz Michalewicz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-12]
CHR Extension: (Dysk Google) - C:\Users\Dariusz Michalewicz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-12]
CHR Extension: (YouTube) - C:\Users\Dariusz Michalewicz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-12]
CHR Extension: (Google Search) - C:\Users\Dariusz Michalewicz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-12]
CHR Extension: (Arkusze Google) - C:\Users\Dariusz Michalewicz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-12]
CHR Extension: (SiteAdvisor) - C:\Users\Dariusz Michalewicz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2016-01-12]
CHR Extension: (Dokumenty Google offline) - C:\Users\Dariusz Michalewicz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-12]
CHR Extension: (Avast Online Security) - C:\Users\Dariusz Michalewicz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-01-12]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Dariusz Michalewicz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-12]
CHR Extension: (Gmail) - C:\Users\Dariusz Michalewicz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-12]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-12]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-12]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-01-12]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2016-01-12] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109520 2016-01-12] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2860760 2015-11-17] (Acer Incorporated)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2787512 2015-12-22] (Microsoft Corporation)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [470056 2013-05-01] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-16] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [144072 2015-10-22] (ELAN Microelectronics Corp.)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [373824 2015-05-12] (WildTangent)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [24888 2015-07-26] (Hewlett-Packard Company)
R2 Huawei E3272; C:\ProgramData\MobileBrServ\mbbservice.exe [240720 2013-12-03] ()
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-10-22] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165336 2013-01-14] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [431656 2013-06-18] (Acer Incorporate)
R2 McAfee SiteAdvisor Service; c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [157928 2015-12-02] (McAfee, Inc.)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4230016 2013-01-28] (Symantec Corporation)
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2016-01-12] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2016-01-12] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2016-01-21] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [466400 2016-01-12] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2016-01-12] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2016-01-12] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065208 2016-01-21] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [464256 2016-01-21] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2016-01-12] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2016-01-12] (AVAST Software)
S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0403000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [37960 2015-12-02] (McAfee, Inc.)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-21 15:39 - 2016-01-21 15:44 - 00000000 ____D C:\FRST
2016-01-21 13:52 - 2016-01-21 15:39 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\ClassicShell
2016-01-21 13:52 - 2016-01-21 13:52 - 00000000 ____D C:\ProgramData\ClassicShell
2016-01-21 13:52 - 2016-01-21 13:51 - 00002142 _____ C:\Users\Dariusz Michalewicz\AppData\Roaming\Microsoft\Windows\Start Menu\startscreen.lnk
2016-01-21 13:51 - 2016-01-21 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2016-01-21 13:51 - 2016-01-21 13:51 - 00000000 ____D C:\Program Files\Classic Shell
2016-01-21 13:50 - 2016-01-21 15:44 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\LOGI i AKCJE
2016-01-21 11:49 - 2016-01-21 11:49 - 00285012 _____ C:\WINDOWS\Minidump\012116-28453-01.dmp
2016-01-21 11:49 - 2016-01-21 11:49 - 00000000 ____D C:\WINDOWS\Minidump
2016-01-21 11:45 - 2016-01-21 11:45 - 00001971 _____ C:\Users\Public\Desktop\Avast Internet Security.lnk
2016-01-21 11:45 - 2016-01-21 11:45 - 00001086 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2016-01-21 11:42 - 2016-01-12 12:24 - 00386096 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-01-21 10:48 - 2016-01-21 10:48 - 05490160 _____ C:\Users\Dariusz Michalewicz\Downloads\DSC00001.JPG (1).ymestvd
2016-01-21 10:20 - 2016-01-21 10:20 - 05490160 _____ C:\Users\Dariusz Michalewicz\Downloads\DSC00001.JPG.ymestvd
2016-01-21 10:18 - 2016-01-21 10:18 - 00000000 ____D C:\$SysReset
2016-01-21 10:15 - 2016-01-21 10:15 - 00129168 _____ C:\Users\Dariusz Michalewicz\Downloads\Nagroda 1.DOCX.ymestvd
2016-01-21 09:52 - 2016-01-21 09:52 - 02234016 _____ C:\Users\Dariusz Michalewicz\Downloads\Akademia_sukcesu2015.ZIP.ymestvd
2016-01-21 08:26 - 2016-01-21 08:27 - 06100720 _____ C:\Users\Dariusz Michalewicz\Downloads\DSC00569.JPG.ymestvd
2016-01-20 18:24 - 2016-01-21 10:30 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-01-20 18:24 - 2016-01-20 18:24 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Roaming\Dropbox
2016-01-20 18:23 - 2016-01-21 09:56 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\Dropbox
2016-01-20 18:23 - 2016-01-20 18:23 - 00000000 ____D C:\ProgramData\Dropbox
2016-01-19 15:18 - 2016-01-19 15:20 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\MP4Wwa-szk.SV-16.1.16
2016-01-19 08:51 - 2016-01-19 09:25 - 01174859 _____ C:\ProgramData\xzjyiwi.html
2016-01-15 21:27 - 2016-01-15 21:27 - 00003388 _____ C:\WINDOWS\System32\Tasks\AcerCloud
2016-01-15 21:27 - 2016-01-15 21:27 - 00000000 ____D C:\Users\Dariusz Michalewicz\abBox
2016-01-15 21:25 - 2016-01-19 09:24 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\AcerCloud
2016-01-15 21:24 - 2016-01-15 21:24 - 00003404 _____ C:\WINDOWS\System32\Tasks\abDocsDllLoader
2016-01-15 21:18 - 2016-01-19 09:24 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\Doc
2016-01-15 20:50 - 2016-01-19 09:24 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\ClearfiMedia
2016-01-15 20:48 - 2016-01-15 21:23 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\Acer
2016-01-15 20:48 - 2016-01-15 20:48 - 00003418 _____ C:\WINDOWS\System32\Tasks\BacKGroundAgent
2016-01-15 20:47 - 2016-01-15 20:47 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\AOP SDK
2016-01-15 20:43 - 2016-01-15 20:43 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Roaming\acer
2016-01-15 20:40 - 2016-01-19 09:24 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\ClearfiPhoto
2016-01-13 14:10 - 2016-01-05 02:59 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-01-13 14:09 - 2016-01-05 03:51 - 07477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-01-13 14:09 - 2016-01-05 03:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-01-13 14:09 - 2016-01-05 03:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-01-13 14:09 - 2016-01-05 03:50 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-01-13 14:09 - 2016-01-05 03:50 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-01-13 14:09 - 2016-01-05 03:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-01-13 14:09 - 2016-01-05 03:49 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-01-13 14:09 - 2016-01-05 03:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2016-01-13 14:09 - 2016-01-05 03:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-01-13 14:09 - 2016-01-05 03:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-01-13 14:09 - 2016-01-05 03:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-01-13 14:09 - 2016-01-05 03:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-01-13 14:09 - 2016-01-05 03:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-01-13 14:09 - 2016-01-05 03:37 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-01-13 14:09 - 2016-01-05 03:37 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-01-13 14:09 - 2016-01-05 03:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-01-13 14:09 - 2016-01-05 03:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2016-01-13 14:09 - 2016-01-05 03:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-01-13 14:09 - 2016-01-05 03:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-01-13 14:09 - 2016-01-05 03:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-01-13 14:09 - 2016-01-05 03:33 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-01-13 14:09 - 2016-01-05 03:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-01-13 14:09 - 2016-01-05 03:33 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-01-13 14:09 - 2016-01-05 03:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2016-01-13 14:09 - 2016-01-05 03:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-01-13 14:09 - 2016-01-05 03:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-01-13 14:09 - 2016-01-05 03:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-01-13 14:09 - 2016-01-05 03:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-01-13 14:09 - 2016-01-05 03:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-01-13 14:09 - 2016-01-05 03:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-01-13 14:09 - 2016-01-05 03:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-01-13 14:09 - 2016-01-05 03:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-01-13 14:09 - 2016-01-05 03:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-01-13 14:09 - 2016-01-05 03:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-01-13 14:09 - 2016-01-05 03:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-01-13 14:09 - 2016-01-05 02:57 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-13 14:09 - 2016-01-05 02:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-01-13 14:09 - 2016-01-05 02:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2016-01-13 14:09 - 2016-01-05 02:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-01-13 14:09 - 2016-01-05 02:54 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthLEEnum.sys
2016-01-13 14:09 - 2016-01-05 02:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-01-13 14:09 - 2016-01-05 02:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2016-01-13 14:09 - 2016-01-05 02:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-01-13 14:09 - 2016-01-05 02:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-01-13 14:09 - 2016-01-05 02:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-01-13 14:09 - 2016-01-05 02:50 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-01-13 14:09 - 2016-01-05 02:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-01-13 14:09 - 2016-01-05 02:49 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-01-13 14:09 - 2016-01-05 02:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-01-13 14:09 - 2016-01-05 02:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-01-13 14:09 - 2016-01-05 02:49 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-01-13 14:09 - 2016-01-05 02:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-01-13 14:09 - 2016-01-05 02:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll
2016-01-13 14:09 - 2016-01-05 02:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-01-13 14:09 - 2016-01-05 02:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-01-13 14:09 - 2016-01-05 02:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2016-01-13 14:09 - 2016-01-05 02:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-01-13 14:09 - 2016-01-05 02:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-01-13 14:09 - 2016-01-05 02:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-01-13 14:09 - 2016-01-05 02:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-01-13 14:09 - 2016-01-05 02:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-01-13 14:09 - 2016-01-05 02:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2016-01-13 14:09 - 2016-01-05 02:43 - 00953856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-01-13 14:09 - 2016-01-05 02:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-01-13 14:09 - 2016-01-05 02:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-01-13 14:09 - 2016-01-05 02:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-01-13 14:09 - 2016-01-05 02:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-01-13 14:09 - 2016-01-05 02:41 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-01-13 14:09 - 2016-01-05 02:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-01-13 14:09 - 2016-01-05 02:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-01-13 14:09 - 2016-01-05 02:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-01-13 14:09 - 2016-01-05 02:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll
2016-01-13 14:09 - 2016-01-05 02:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-01-13 14:09 - 2016-01-05 02:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-01-13 14:09 - 2016-01-05 02:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-01-13 14:09 - 2016-01-05 02:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2016-01-13 14:09 - 2016-01-05 02:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-01-13 14:09 - 2016-01-05 02:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2016-01-13 14:09 - 2016-01-05 02:33 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-01-13 14:09 - 2016-01-05 02:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-01-13 14:09 - 2016-01-05 02:30 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-01-13 14:09 - 2016-01-05 02:29 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-01-13 14:09 - 2016-01-05 02:28 - 07826432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-01-13 14:09 - 2016-01-05 02:28 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-01-13 14:09 - 2016-01-05 02:28 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-01-13 14:09 - 2016-01-05 02:25 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-01-13 14:08 - 2016-01-05 02:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-01-13 14:08 - 2016-01-05 02:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-01-12 14:00 - 2016-01-12 14:01 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\WARSZTATY 2016-ILONN
2016-01-12 12:44 - 2016-01-12 12:44 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk
2016-01-12 12:44 - 2016-01-12 12:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-01-12 12:33 - 2016-01-21 11:45 - 00003242 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1452598400
2016-01-12 12:33 - 2016-01-21 11:45 - 00001086 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-01-12 12:32 - 2016-01-12 12:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-01-12 12:29 - 2016-01-21 12:42 - 00001078 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-12 12:29 - 2016-01-12 12:37 - 00004140 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-01-12 12:29 - 2016-01-12 12:37 - 00003908 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-01-12 12:29 - 2016-01-12 12:37 - 00001082 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-12 12:29 - 2016-01-12 12:33 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\Google
2016-01-12 12:29 - 2016-01-12 12:31 - 00000000 ____D C:\Program Files (x86)\Google
2016-01-12 12:28 - 2016-01-12 12:28 - 00028144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2016-01-12 12:25 - 2016-01-21 11:45 - 00001983 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Internet Security.lnk
2016-01-12 12:25 - 2016-01-12 12:25 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Roaming\AVAST Software
2016-01-12 12:24 - 2016-01-21 11:43 - 01065208 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2016-01-12 12:24 - 2016-01-21 11:43 - 00464256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2016-01-12 12:24 - 2016-01-21 11:43 - 00097648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys
2016-01-12 12:24 - 2016-01-21 11:43 - 00004006 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-01-12 12:24 - 2016-01-12 12:24 - 00273784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2016-01-12 12:24 - 2016-01-12 12:24 - 00155304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2016-01-12 12:24 - 2016-01-12 12:24 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2016-01-12 12:24 - 2016-01-12 12:24 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-01-12 12:24 - 2016-01-12 12:24 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-01-12 12:24 - 2016-01-12 12:24 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-01-12 12:23 - 2016-01-12 12:23 - 00466400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdisFlt.sys
2016-01-12 12:22 - 2016-01-12 12:28 - 00000000 ____D C:\Program Files\AVAST Software
2016-01-12 12:21 - 2016-01-12 12:28 - 00000000 ____D C:\ProgramData\AVAST Software
2016-01-09 08:09 - 2016-01-09 08:12 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\MP4 do opisu, list,gru
2016-01-04 14:39 - 2016-01-19 08:58 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\PZU-polisaVW
2015-12-29 23:14 - 2015-12-29 23:14 - 00003734 _____ C:\Users\Dariusz Michalewicz\Desktop\Faktura.htm-BILET Wwa 16.1.16.htm
2015-12-29 23:14 - 2015-12-29 23:14 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\Faktura.htm-BILET Wwa 16.1.16_pliki
2015-12-29 14:57 - 2016-01-19 08:58 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\oświadczeniadla Herbalife na 2016
2015-12-23 08:09 - 2015-12-23 08:09 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\TempTaskUpdateDetection07F039AF-DCD8-4C4C-9C85-E3E5523C2FBE

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-21 15:39 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2016-01-21 14:24 - 2014-12-29 15:36 - 00004248 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{ACD94826-FDA9-4636-BD33-0D284BB13E07}
2016-01-21 13:50 - 2014-12-29 16:00 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-01-21 11:57 - 2015-10-30 20:19 - 00818302 _____ C:\WINDOWS\system32\perfh015.dat
2016-01-21 11:57 - 2015-10-30 20:19 - 00157970 _____ C:\WINDOWS\system32\perfc015.dat
2016-01-21 11:57 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-01-21 11:57 - 2015-10-22 11:38 - 01845594 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-21 11:50 - 2015-12-11 14:15 - 00000000 ____D C:\Users\Dariusz Michalewicz
2016-01-21 11:50 - 2014-11-08 00:26 - 00000000 __SHD C:\Users\Dariusz Michalewicz\IntelGraphicsProfiles
2016-01-21 11:49 - 2015-12-11 14:37 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-21 11:49 - 2015-12-01 07:22 - 458132940 _____ C:\WINDOWS\MEMORY.DMP
2016-01-21 11:47 - 2013-10-15 09:05 - 00000000 ____D C:\ProgramData\McAfee
2016-01-21 11:47 - 2013-10-15 09:05 - 00000000 ____D C:\Program Files\mcafee
2016-01-21 11:47 - 2013-10-15 09:05 - 00000000 ____D C:\Program Files\Common Files\mcafee
2016-01-21 11:47 - 2013-10-15 09:05 - 00000000 ____D C:\Program Files (x86)\McAfee
2016-01-21 11:46 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-01-21 11:44 - 2015-11-20 15:25 - 00000000 ____D C:\Users\Dariusz Michalewicz\Documents\ŚLUB KAROLI
2016-01-21 11:38 - 2014-08-11 21:40 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\clear.fi
2016-01-21 07:59 - 2014-08-01 17:50 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\SweetLabs App Platform
2016-01-20 18:21 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-01-20 18:21 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-01-19 14:57 - 2014-08-03 22:48 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\CrashDumps
2016-01-19 09:59 - 2015-10-30 08:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-01-19 09:57 - 2015-07-10 10:47 - 00000000 ____D C:\Users\Default.migrated
2016-01-19 09:30 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-01-19 09:25 - 2015-11-20 15:31 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\MATERIAŁY KLUBOWE
2016-01-19 09:24 - 2015-11-26 15:21 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\ROZWÓJ OSOBISTY
2016-01-19 09:24 - 2015-11-06 09:28 - 00000000 ____D C:\Users\Dariusz Michalewicz\Documents\do przeczytania
2016-01-19 09:24 - 2015-09-21 15:31 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\WnO
2016-01-19 09:23 - 2015-09-10 20:11 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\LETNIE wARSZTATY-Simon
2016-01-19 09:22 - 2015-11-23 14:41 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\FOTO FIESTA list.2015
2016-01-19 09:13 - 2015-10-21 21:14 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\zdj do wywołania
2016-01-19 09:11 - 2015-09-10 12:34 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\FOTO-Klub 2015
2016-01-19 09:06 - 2015-06-02 15:03 - 00000000 ____D C:\Users\Dariusz Michalewicz\Documents\KLUB PRAWIDŁOWEGO ODŻYWIANIA
2016-01-19 09:06 - 2015-04-02 15:48 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\zdj klientów marzec2015
2016-01-19 09:00 - 2015-07-09 10:33 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\Prezentacje 2015
2016-01-19 08:59 - 2015-07-09 10:31 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\BIAŁORUŚ-wnioski wizowe
2016-01-19 08:58 - 2015-12-18 11:31 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\ANIA-do wywałania
2016-01-19 08:58 - 2015-12-07 22:22 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\święta
2016-01-19 08:58 - 2015-11-02 22:11 - 00000000 ____D C:\Users\Dariusz Michalewicz\Documents\Moje skanowanie
2016-01-19 08:58 - 2015-10-09 09:13 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\program ćwiczeń- uda, biodra pośladki
2016-01-19 08:57 - 2015-11-26 15:14 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\FIESTA
2016-01-19 08:57 - 2015-10-05 15:14 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\alejagwiazd
2016-01-19 08:57 - 2015-09-17 10:06 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\Bartek-rejestr
2016-01-19 08:57 - 2015-09-15 15:33 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\Jacek Gołąb
2016-01-19 08:57 - 2015-07-09 10:57 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\SKRYPTY DO SEMINARIUM
2016-01-19 08:57 - 2015-07-07 19:13 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\DIETA DLA SERCA-przepisy
2016-01-19 08:52 - 2015-06-22 15:18 - 00000000 ____D C:\Users\Public\Documents\Y3300_Data
2016-01-19 08:49 - 2013-10-15 09:08 - 00000000 ___HD C:\OEM
2016-01-19 08:49 - 2013-10-15 09:08 - 00000000 ____D C:\ProgramData\Nero
2016-01-18 16:56 - 2014-08-09 19:49 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-01-18 16:47 - 2014-08-09 19:49 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-01-17 11:20 - 2014-08-08 21:30 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-01-15 21:33 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-01-15 21:30 - 2015-11-26 14:59 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\APLIKACJE
2016-01-15 21:27 - 2014-03-04 07:26 - 00000000 ____D C:\ProgramData\OEM
2016-01-15 21:27 - 2013-10-15 09:08 - 00000000 ____D C:\Program Files (x86)\Acer
2016-01-15 21:26 - 2013-10-15 09:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2016-01-15 04:08 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-01-13 13:26 - 2014-03-04 07:30 - 00424816 _____ C:\Users\Dariusz Michalewicz\Desktop\SzkolaSP_styczen_20151210_newpin_2.PDF.ymestvd
2016-01-13 13:11 - 2015-07-09 10:27 - 00000000 ____D C:\Users\Dariusz Michalewicz\Desktop\WNIOSKI PARTNERSKIE-KLUB od czerwiec2015
2016-01-13 09:38 - 2015-12-12 07:46 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\Deployment
2016-01-12 15:18 - 2014-08-08 21:30 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Roaming\Skype
2016-01-12 12:45 - 2014-08-08 21:30 - 00000000 ____D C:\ProgramData\Skype
2016-01-12 12:44 - 2014-08-08 21:30 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\Skype
2016-01-12 12:34 - 2014-08-01 17:50 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\VirtualStore
2016-01-11 20:27 - 2014-08-01 17:50 - 00000000 ____D C:\Users\Dariusz Michalewicz\AppData\Local\Packages
2016-01-03 02:40 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-01-03 02:40 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-29 23:07 - 2014-03-04 07:30 - 00039600 _____ C:\Users\Dariusz Michalewicz\Desktop\bilet_na_szkolenie-supervisorow-1448727738_tel_48501209466.PDF.ymestvd
2015-12-23 09:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF

==================== Pliki w katalogu głównym wybranych folderów =======

2015-11-02 21:53 - 2015-12-17 10:00 - 0001364 _____ () C:\ProgramData\hpzinstall.log
2016-01-19 08:51 - 2016-01-19 09:25 - 1174859 _____ () C:\ProgramData\xzjyiwi.html

Niektóre pliki w TEMP:
====================
C:\Users\Dariusz Michalewicz\AppData\Local\Temp\oct57AF.tmp.exe
C:\Users\Dariusz Michalewicz\AppData\Local\Temp\octB8C4.tmp.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-01-20 18:41

==================== Koniec  FRST.txt ============================