Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:27-01-2016 Uruchomiony przez Maaciek (administrator) ELA-KOMPUTER (06-02-2016 15:08:13) Uruchomiony z C:\Users\Maaciek\Downloads Załadowane profile: Maaciek (Dostępne profile: Ela & Maaciek) Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (Flux Software LLC) C:\Users\Maaciek\AppData\Local\FluxSoftware\Flux\flux.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1594664 2010-04-19] (Synaptics Incorporated) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12111576 2015-02-21] (Realtek Semiconductor) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139768 2016-02-06] (AVAST Software) HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2015-01-16] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap.dll,ShadowPlayOnSystemStart HKU\S-1-5-21-2744727062-2866847131-1637843027-1011\...\Run: [F.lux] => C:\Users\Maaciek\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-16] (Flux Software LLC) HKU\S-1-5-21-2744727062-2866847131-1637843027-1011\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Tropix.scr ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2016-02-06] (AVAST Software) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{202A691E-1362-4D23-A6CF-A3F52596334F}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{333B64B9-2473-4623-9935-B502B2A6CA9B}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{34929617-FC0D-4C95-844E-540C6808516F}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{3F12CE70-9157-405A-AE1D-D735C2891407}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKU\S-1-5-21-2744727062-2866847131-1637843027-1011\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com HKU\S-1-5-21-2744727062-2866847131-1637843027-1011\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://eeepc.asus.com BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll => Brak pliku BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-06] (AVAST Software) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) FireFox: ======== FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-02-06] FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-02-06] Chrome: ======= CHR Profile: C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Dokumenty Google) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-06] CHR Extension: (Dysk Google) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23] CHR Extension: (YouTube) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27] CHR Extension: (Adblock Plus) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-04] CHR Extension: (Google Search) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28] CHR Extension: (Dokumenty Google offline) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-22] CHR Extension: (AdBlock) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-05] CHR Extension: (Avast Online Security) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-09] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-21] CHR Extension: (Gmail) - C:\Users\Maaciek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-31] CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-02-06] ==================== Usługi (Wszystkie) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 AeLookupSvc; C:\windows\System32\aelupsvc.dll [62464 2009-07-14] (Microsoft Corporation) S3 ALG; C:\windows\System32\alg.exe [59392 2009-07-14] (Microsoft Corporation) S3 AppIDSvc; C:\windows\System32\appidsvc.dll [27648 2009-07-14] (Microsoft Corporation) R3 Appinfo; C:\windows\System32\appinfo.dll [47104 2013-02-27] (Microsoft Corporation) S3 aspnet_state; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [45744 2014-04-11] (Microsoft Corporation) R2 AudioEndpointBuilder; C:\windows\System32\Audiosrv.dll [473600 2010-11-20] (Microsoft Corporation) R2 Audiosrv; C:\windows\System32\Audiosrv.dll [473600 2010-11-20] (Microsoft Corporation) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-02-06] (AVAST Software) S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4403136 2016-02-06] (Avast Software) S4 AxInstSV; C:\windows\System32\AxInstSV.dll [88064 2010-11-20] (Microsoft Corporation) S3 BDESVC; C:\windows\System32\bdesvc.dll [76800 2009-07-14] (Microsoft Corporation) R2 BFE; C:\windows\System32\bfe.dll [494592 2010-11-20] (Microsoft Corporation) R2 BITS; C:\windows\system32\qmgr.dll [585728 2010-11-20] (Microsoft Corporation) S3 Browser; C:\windows\System32\browser.dll [102912 2012-07-04] (Microsoft Corporation) S4 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [Brak podpisu cyfrowego] S3 bthserv; C:\windows\system32\bthserv.dll [64512 2009-07-14] (Microsoft Corporation) S4 btwdins; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [582944 2009-08-03] (Broadcom Corporation.) S4 CertPropSvc; C:\windows\System32\certprop.dll [67584 2010-11-20] (Microsoft Corporation) S4 clr_optimization_v2.0.50727_32; C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [66384 2009-06-10] (Microsoft Corporation) S2 clr_optimization_v4.0.30319_32; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [103608 2014-04-11] (Microsoft Corporation) R2 CryptSvc; C:\windows\system32\cryptsvc.dll [140288 2013-08-18] (Microsoft Corporation) R2 DcomLaunch; C:\windows\system32\rpcss.dll [376832 2010-11-20] (Microsoft Corporation) S3 defragsvc; C:\windows\System32\defragsvc.dll [218624 2009-07-14] (Microsoft Corporation) R2 Dhcp; C:\windows\system32\dhcpcore.dll [254464 2010-11-20] (Microsoft Corporation) R2 Dnscache; C:\windows\System32\dnsrslvr.dll [132608 2011-03-03] (Microsoft Corporation) S3 dot3svc; C:\windows\System32\dot3svc.dll [214016 2010-11-20] (Microsoft Corporation) R2 DPS; C:\windows\system32\dps.dll [144384 2010-11-20] (Microsoft Corporation) R3 EapHost; C:\windows\System32\eapsvc.dll [98304 2009-07-14] (Microsoft Corporation) S3 EFS; C:\windows\System32\lsass.exe [22016 2014-02-18] (Microsoft Corporation) S3 ehRecvr; C:\windows\ehome\ehRecvr.exe [556544 2010-11-20] (Microsoft Corporation) S3 ehSched; C:\windows\ehome\ehsched.exe [94720 2009-07-14] (Microsoft Corporation) R2 eventlog; C:\windows\System32\wevtsvc.dll [1086976 2010-11-20] (Microsoft Corporation) R2 EventSystem; C:\windows\system32\es.dll [271360 2009-07-14] (Microsoft Corporation) S3 Fax; C:\windows\system32\fxssvc.exe [523264 2010-11-20] (Microsoft Corporation) S3 fdPHost; C:\windows\system32\fdPHost.dll [12800 2009-07-14] (Microsoft Corporation) R2 FDResPub; C:\windows\system32\fdrespub.dll [28160 2009-07-14] (Microsoft Corporation) R3 FontCache; C:\windows\system32\FntCache.dll [906240 2013-01-13] (Microsoft Corporation) S3 FontCache3.0.0.0; C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [42856 2009-06-10] (Microsoft Corporation) S3 fsssvc; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [1493352 2010-09-22] (Microsoft Corporation) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [915600 2015-01-16] (NVIDIA Corporation) R2 gpsvc; C:\windows\System32\gpsvc.dll [593408 2010-11-20] (Microsoft Corporation) S4 gupdate; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc.) S4 gupdatem; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc.) S4 gusvc; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [136120 2011-05-09] (Google) R3 hidserv; C:\windows\System32\hidserv.dll [49152 2009-07-14] (Microsoft Corporation) S3 hkmsvc; C:\windows\system32\kmsvc.dll [71168 2010-11-20] (Microsoft Corporation) S3 HomeGroupListener; C:\windows\system32\ListSvc.dll [194560 2010-11-20] (Microsoft Corporation) S3 HomeGroupProvider; C:\windows\system32\provsvc.dll [165376 2010-11-20] (Microsoft Corporation) S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [Brak podpisu cyfrowego] S3 idsvc; C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [878416 2010-11-05] (Microsoft Corporation) S3 IEEtwCollectorService; C:\windows\system32\IEEtwCollector.exe [108032 2014-02-22] (Microsoft Corporation) R2 IKEEXT; C:\windows\System32\ikeext.dll [679424 2014-02-18] (Microsoft Corporation) S3 IPBusEnum; C:\windows\system32\ipbusenum.dll [78848 2009-07-14] (Microsoft Corporation) S4 iphlpsvc; C:\windows\System32\iphlpsvc.dll [499712 2012-10-03] (Microsoft Corporation) R3 KeyIso; C:\windows\system32\lsass.exe [22016 2014-02-18] (Microsoft Corporation) S3 KtmRm; C:\windows\system32\msdtckrm.dll [308736 2009-07-14] (Microsoft Corporation) R2 LanmanServer; C:\windows\System32\srvsvc.dll [168960 2010-11-20] (Microsoft Corporation) R2 LanmanWorkstation; C:\windows\System32\wkssvc.dll [84480 2010-11-20] (Microsoft Corporation) S4 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2724128 2015-01-16] (IObit) S3 lltdsvc; C:\windows\System32\lltdsvc.dll [189952 2009-07-14] (Microsoft Corporation) R2 lmhosts; C:\windows\System32\lmhsvc.dll [18432 2009-07-14] (Microsoft Corporation) S3 Mcx2Svc; C:\windows\system32\Mcx2Svc.dll [68096 2010-11-20] (Microsoft Corporation) S3 Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [30785672 2012-09-20] (Microsoft Corporation) S2 MMCSS; C:\windows\system32\mmcss.dll [49664 2009-07-14] (Microsoft Corporation) R2 MpsSvc; C:\windows\system32\mpssvc.dll [566272 2010-11-20] (Microsoft Corporation) S4 MSDTC; C:\windows\System32\msdtc.exe [134144 2009-07-14] (Microsoft Corporation) S4 MSiSCSI; C:\windows\system32\iscsiexe.dll [114688 2009-07-14] (Microsoft Corporation) S3 msiserver; C:\windows\System32\msiexec.exe [73216 2010-11-20] (Microsoft Corporation) S3 napagent; C:\windows\system32\qagentRT.dll [330240 2010-11-20] (Microsoft Corporation) R2 Net Driver HPZ12; C:\windows\system32\HPZinw12.dll [44032 2009-05-15] (Hewlett-Packard) [Brak podpisu cyfrowego] S4 Netlogon; C:\windows\system32\lsass.exe [22016 2014-02-18] (Microsoft Corporation) R3 Netman; C:\windows\System32\netman.dll [280576 2009-07-14] (Microsoft Corporation) S4 NetMsmqActivator; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [139944 2014-04-12] (Microsoft Corporation) S4 NetPipeActivator; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [139944 2014-04-12] (Microsoft Corporation) R3 netprofm; C:\windows\System32\netprofm.dll [360448 2009-07-14] (Microsoft Corporation) S4 NetTcpActivator; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [139944 2014-04-12] (Microsoft Corporation) S3 NetTcpPortSharing; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [139944 2014-04-12] (Microsoft Corporation) R2 NlaSvc; C:\windows\System32\nlasvc.dll [242176 2012-10-03] (Microsoft Corporation) S3 npggsvc; C:\windows\system32\GameMon.des [3758336 2015-11-29] (INCA Internet Co., Ltd.) R2 nsi; C:\windows\system32\nsisvc.dll [19456 2009-07-14] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-01-16] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19775632 2015-01-16] (NVIDIA Corporation) R2 nvsvc; C:\windows\system32\nvvsvc.exe [670552 2014-07-02] (NVIDIA Corporation) S3 ose; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [149352 2010-01-09] (Microsoft Corporation) S3 osppsvc; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [4640000 2010-01-09] (Microsoft Corporation) S4 p2pimsvc; C:\windows\system32\pnrpsvc.dll [269824 2009-07-14] (Microsoft Corporation) S4 p2psvc; C:\windows\system32\p2psvc.dll [327680 2009-07-14] (Microsoft Corporation) R3 PcaSvc; C:\windows\System32\pcasvc.dll [154624 2009-07-14] (Microsoft Corporation) S3 pla; C:\windows\system32\pla.dll [1508864 2010-11-20] (Microsoft Corporation) R2 PlugPlay; C:\windows\system32\umpnpmgr.dll [293376 2011-05-24] (Microsoft Corporation) R2 Pml Driver HPZ12; C:\windows\system32\HPZipm12.dll [53760 2009-05-15] (Hewlett-Packard) [Brak podpisu cyfrowego] S3 PNRPAutoReg; C:\windows\system32\pnrpauto.dll [20480 2009-07-14] (Microsoft Corporation) S4 PNRPsvc; C:\windows\system32\pnrpsvc.dll [269824 2009-07-14] (Microsoft Corporation) S3 PolicyAgent; C:\windows\System32\ipsecsvc.dll [350208 2010-11-20] (Microsoft Corporation) R2 Power; C:\windows\system32\umpo.dll [119808 2010-11-20] (Microsoft Corporation) R2 ProfSvc; C:\windows\system32\profsvc.dll [164352 2012-05-01] (Microsoft Corporation) S3 ProtectedStorage; C:\windows\system32\lsass.exe [22016 2014-02-18] (Microsoft Corporation) S3 QWAVE; C:\windows\system32\qwave.dll [210944 2009-07-14] (Microsoft Corporation) S3 RasAuto; C:\windows\System32\rasauto.dll [90624 2009-07-14] (Microsoft Corporation) R3 RasMan; C:\windows\System32\rasmans.dll [286208 2010-11-20] (Microsoft Corporation) S3 RemoteAccess; C:\windows\System32\mprdim.dll [75264 2009-07-14] (Microsoft Corporation) S4 RemoteRegistry; C:\windows\system32\regsvc.dll [112640 2009-07-14] (Microsoft Corporation) R2 RpcEptMapper; C:\windows\System32\RpcEpMap.dll [43520 2009-07-14] (Microsoft Corporation) S3 RpcLocator; C:\windows\system32\locator.exe [9216 2009-07-14] (Microsoft Corporation) R2 RpcSs; C:\windows\system32\rpcss.dll [376832 2010-11-20] (Microsoft Corporation) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [252632 2015-02-21] (Realtek Semiconductor) S4 RzKLService; C:\Program Files\Razer\Razer Game Booster\RzKLService.exe [105448 2013-11-22] (Razer Inc.) R2 SamSs; C:\windows\system32\lsass.exe [22016 2014-02-18] (Microsoft Corporation) S4 SCardSvr; C:\windows\System32\SCardSvr.dll [132608 2009-07-14] (Microsoft Corporation) R2 Schedule; C:\windows\system32\schedsvc.dll [750592 2010-11-20] (Microsoft Corporation) S4 SCPolicySvc; C:\windows\System32\certprop.dll [67584 2010-11-20] (Microsoft Corporation) S3 SDRSVC; C:\windows\System32\SDRSVC.dll [125952 2010-11-20] (Microsoft Corporation) R2 seclogon; C:\windows\system32\seclogon.dll [21504 2009-07-14] (Microsoft Corporation) R2 SENS; C:\windows\system32\sens.dll [49664 2009-07-14] (Microsoft Corporation) S3 SensrSvc; C:\windows\system32\sensrsvc.dll [25088 2009-07-14] (Microsoft Corporation) S3 SessionEnv; C:\windows\system32\sessenv.dll [113664 2010-11-20] (Microsoft Corporation) S2 SharedAccess; C:\windows\System32\ipnathlp.dll [300544 2009-07-14] (Microsoft Corporation) R2 ShellHWDetection; C:\windows\System32\shsvcs.dll [328192 2010-11-20] (Microsoft Corporation) S4 SkypeUpdate; C:\Program Files\Skype\Updater\Updater.exe [327296 2015-07-09] (Skype Technologies) S4 SNMPTRAP; C:\windows\System32\snmptrap.exe [12800 2009-07-14] (Microsoft Corporation) R2 Spooler; C:\windows\System32\spoolsv.exe [317440 2012-02-11] (Microsoft Corporation) S2 sppsvc; C:\windows\system32\sppsvc.exe [3179520 2010-11-20] (Microsoft Corporation) S3 sppuinotify; C:\windows\system32\sppuinotify.dll [53760 2010-11-20] (Microsoft Corporation) R3 SSDPSRV; C:\windows\System32\ssdpsrv.dll [162816 2009-07-14] (Microsoft Corporation) R3 SstpSvc; C:\windows\system32\sstpsvc.dll [90112 2009-07-14] (Microsoft Corporation) S4 Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [563624 2013-08-28] (Valve Corporation) R2 Stereo Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [413128 2014-07-02] (NVIDIA Corporation) R2 StiSvc; C:\windows\System32\wiaservc.dll [463360 2010-11-20] (Microsoft Corporation) R3 swprv; C:\windows\System32\swprv.dll [313856 2009-07-14] (Microsoft Corporation) R2 SysMain; C:\windows\system32\sysmain.dll [1159168 2010-11-20] (Microsoft Corporation) S3 TabletInputService; C:\windows\System32\TabSvc.dll [73216 2010-11-20] (Microsoft Corporation) S3 TapiSrv; C:\windows\System32\tapisrv.dll [242176 2010-11-20] (Microsoft Corporation) S3 TBS; C:\windows\System32\tbssvc.dll [55808 2009-07-14] (Microsoft Corporation) S4 TermService; C:\windows\System32\termsrv.dll [521216 2010-11-20] (Microsoft Corporation) S4 Themes; C:\windows\system32\themeservice.dll [37376 2009-07-14] (Microsoft Corporation) S3 THREADORDER; C:\windows\system32\mmcss.dll [49664 2009-07-14] (Microsoft Corporation) S3 TrkWks; C:\windows\System32\trkwks.dll [77312 2009-07-14] (Microsoft Corporation) R3 TrustedInstaller; C:\windows\servicing\TrustedInstaller.exe [204800 2010-11-20] (Microsoft Corporation) S3 UI0Detect; C:\windows\system32\UI0Detect.exe [35840 2009-07-14] (Microsoft Corporation) S4 upnphost; C:\windows\System32\upnphost.dll [266752 2009-07-14] (Microsoft Corporation) S3 UxSms; C:\windows\System32\uxsms.dll [29696 2009-07-14] (Microsoft Corporation) S3 VaultSvc; C:\windows\system32\lsass.exe [22016 2014-02-18] (Microsoft Corporation) S3 vds; C:\windows\System32\vds.exe [453632 2010-11-20] (Microsoft Corporation) S3 VSS; C:\windows\system32\vssvc.exe [1025536 2010-11-20] (Microsoft Corporation) S3 W32Time; C:\windows\system32\w32time.dll [288768 2009-07-14] (Microsoft Corporation) S3 WatAdminSvc; C:\windows\system32\Wat\WatAdminSvc.exe [1343400 2011-06-26] (Microsoft Corporation) S3 wbengine; C:\windows\system32\wbengine.exe [1203200 2010-11-20] (Microsoft Corporation) S3 WbioSrvc; C:\windows\System32\wbiosrvc.dll [151552 2009-07-14] (Microsoft Corporation) S3 wcncsvc; C:\windows\System32\wcncsvc.dll [276992 2010-11-20] (Microsoft Corporation) S3 WcsPlugInService; C:\windows\System32\WcsPlugInService.dll [32768 2009-07-14] (Microsoft Corporation) R3 WdiServiceHost; C:\windows\system32\wdi.dll [76288 2009-07-14] (Microsoft Corporation) R3 WdiSystemHost; C:\windows\system32\wdi.dll [76288 2009-07-14] (Microsoft Corporation) S4 WebClient; C:\windows\System32\webclnt.dll [205824 2014-02-18] (Microsoft Corporation) S3 Wecsvc; C:\windows\system32\wecsvc.dll [147968 2009-07-14] (Microsoft Corporation) R3 wercplsupport; C:\windows\System32\wercplsupport.dll [61440 2009-07-14] (Microsoft Corporation) S4 WerSvc; C:\windows\System32\WerSvc.dll [65024 2009-07-14] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-07-13] (Microsoft Corporation) S4 WinHttpAutoProxySvc; C:\windows\system32\winhttp.dll [351232 2010-11-20] (Microsoft Corporation) R2 Winmgmt; C:\windows\system32\wbem\WMIsvc.dll [168960 2009-07-14] (Microsoft Corporation) S4 WinRM; C:\windows\system32\WsmSvc.dll [1175040 2010-11-20] (Microsoft Corporation) R2 Wlansvc; C:\windows\System32\wlansvc.dll [829440 2009-07-14] (Microsoft Corporation) S4 wlcrasvc; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [51040 2010-09-22] (Microsoft Corporation) S3 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [1710464 2010-09-21] (Microsoft Corp.) S3 wmiApSrv; C:\windows\system32\wbem\WmiApSrv.exe [136192 2009-07-14] (Microsoft Corporation) S3 WMPNetworkSvc; C:\Program Files\Windows Media Player\wmpnetwk.exe [1121792 2010-11-20] (Microsoft Corporation) S3 WPCSvc; C:\windows\System32\wpcsvc.dll [10752 2009-07-14] (Microsoft Corporation) S3 WPDBusEnum; C:\windows\system32\wpdbusenum.dll [85504 2010-11-20] (Microsoft Corporation) R2 wscsvc; C:\windows\system32\wscsvc.dll [73728 2009-07-14] (Microsoft Corporation) R2 WSearch; C:\windows\system32\SearchIndexer.exe [427520 2011-05-04] (Microsoft Corporation) R2 wuauserv; C:\windows\system32\wuaueng.dll [1933848 2012-06-02] (Microsoft Corporation) S3 wudfsvc; C:\windows\System32\WUDFSvc.dll [73216 2012-07-26] (Microsoft Corporation) S3 WwanSvc; C:\windows\System32\wwansvc.dll [186368 2013-06-11] (Microsoft Corporation) S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R1 ACEDRV05; C:\windows\system32\drivers\ACEDRV05.sys [97792 2013-10-07] (Protect Software GmbH) [Brak podpisu cyfrowego] S3 andnetadb; C:\windows\System32\Drivers\lgandnetadb.sys [25856 2014-03-28] (Google Inc) S3 AndNetDiag; C:\windows\System32\DRIVERS\lgandnetdiag.sys [23168 2014-03-28] (LG Electronics Inc.) S3 ANDNetModem; C:\windows\System32\DRIVERS\lgandnetmodem.sys [27776 2014-03-28] (LG Electronics Inc.) S3 andnetndis; C:\windows\System32\DRIVERS\lgandnetndis.sys [74240 2014-03-28] (LG Electronics Inc.) R1 AsUpIO; C:\windows\System32\drivers\AsUpIO.sys [11832 2011-02-09] () R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [32792 2016-02-06] (AVAST Software) R1 aswKbd; C:\windows\system32\drivers\aswKbd.sys [35096 2016-02-06] (AVAST Software) R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [91168 2016-02-06] (AVAST Software) R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [91232 2016-02-06] (AVAST Software) R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [58776 2016-02-06] (AVAST Software) R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [812720 2016-02-06] (AVAST Software) R1 aswSP; C:\windows\system32\drivers\aswSP.sys [447848 2016-02-06] (AVAST Software) R2 aswStm; C:\windows\system32\drivers\aswStm.sys [127432 2016-02-06] (AVAST Software) R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [221240 2016-02-06] (AVAST Software) S3 CEDRIVER60; C:\Program Files\Cheat Engine 6.1\dbk32.sys [72576 2011-06-11] () [Brak podpisu cyfrowego] S3 epmntdrv; C:\windows\system32\epmntdrv.sys [14216 2011-07-29] () [Brak podpisu cyfrowego] S3 EuGdiDrv; C:\windows\system32\EuGdiDrv.sys [8456 2011-07-29] () [Brak podpisu cyfrowego] S3 ggsomc; C:\windows\System32\DRIVERS\ggsomc.sys [26328 2014-08-04] (Sony Mobile Communications) S3 HPMo4DE3; C:\windows\System32\DRIVERS\HPMo4DE3.sys [20992 2011-03-09] (TPMX Electronics Ltd.) S3 HPub4DE3; C:\windows\System32\Drivers\HPub4DE3.sys [13824 2011-04-12] (TPMX Electronics Ltd.) R1 HWiNFO32; C:\windows\system32\drivers\HWiNFO32.SYS [23840 2015-02-19] (REALiX(tm)) R3 kbfiltr; C:\windows\System32\DRIVERS\kbfiltr.sys [13880 2010-04-19] ( ) R0 ngvss; C:\windows\system32\Drivers\ngvss.sys [129144 2016-02-06] (AVAST Software) S3 NPPTNT2; C:\windows\system32\npptNT2.sys [4682 2004-12-30] (INCA Internet Co., Ltd.) [Brak podpisu cyfrowego] R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18576 2015-01-16] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\windows\System32\drivers\nvvad32v.sys [32912 2014-11-22] (NVIDIA Corporation) R3 rtsuvc; C:\windows\System32\DRIVERS\rtsuvc.sys [7091416 2015-02-21] (Realtek Semiconductor Corp.) R0 SmartDefragDriver; C:\windows\System32\Drivers\SmartDefragDriver.sys [15672 2013-05-22] () S3 ssm_bus; C:\windows\System32\DRIVERS\ssm_bus.sys [58320 2005-08-30] (MCCI) S3 usbrndis6; C:\windows\System32\DRIVERS\usb80236.sys [15872 2013-03-16] (Microsoft Corporation) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [252152 2016-02-06] (Avast Software) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-02-06 15:08 - 2016-02-06 15:11 - 00027904 _____ C:\Users\Maaciek\Downloads\FRST.txt 2016-02-06 15:07 - 2013-11-27 00:29 - 05693440 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll 2016-02-06 14:58 - 2016-02-06 14:58 - 00001078 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk 2016-02-06 14:58 - 2016-02-06 14:58 - 00001078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk 2016-02-06 14:55 - 2016-02-06 14:53 - 00129144 _____ (AVAST Software) C:\windows\system32\Drivers\ngvss.sys 2016-02-06 14:55 - 2016-02-06 14:53 - 00035096 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys 2016-02-06 14:54 - 2016-02-06 14:54 - 00334280 _____ (AVAST Software) C:\windows\system32\aswBoot.exe 2016-02-06 14:54 - 2016-02-06 14:54 - 00052184 _____ (AVAST Software) C:\windows\avastSS.scr 2016-02-06 14:15 - 2016-02-06 14:36 - 00035548 _____ C:\Users\Maaciek\Downloads\Fixlog.txt 2016-02-06 13:08 - 2016-02-06 13:08 - 00000000 ____D C:\ProgramData\Atheros 2016-02-06 12:59 - 2012-07-05 21:06 - 00772544 _____ (Oracle Corporation) C:\windows\system32\npDeployJava1.dll 2016-02-06 12:59 - 2012-07-05 21:06 - 00687544 _____ (Oracle Corporation) C:\windows\system32\deployJava1.dll 2016-02-05 19:58 - 2016-02-05 19:58 - 00000948 _____ C:\Users\Ela\Desktop\FIRMA2016 — skrót.lnk 2016-02-05 18:31 - 2016-02-05 18:31 - 00000000 _____ C:\windows\BcdLog.txt 2016-02-05 13:49 - 2016-02-05 13:50 - 01721856 _____ (Farbar) C:\Users\Maaciek\Downloads\FRST.exe 2016-02-05 13:48 - 2016-02-05 13:48 - 00380416 _____ C:\Users\Maaciek\Downloads\qt54ptx8.exe 2016-02-05 13:38 - 2016-02-05 13:38 - 00001955 _____ C:\Users\Maaciek\Desktop\epm0 — skrót.lnk 2016-02-05 10:01 - 2016-02-05 10:01 - 00029723 _____ C:\Users\Ela\Downloads\bilet_KA02399225_2016-02-10.pdf 2016-02-04 21:35 - 2016-02-04 21:35 - 00998400 _____ C:\Users\Maaciek\Downloads\MicrosoftFixit50814.msi 2016-02-04 20:51 - 2016-02-04 20:52 - 04190144 _____ (Crystal Dew World ) C:\Users\Maaciek\Downloads\CrystalDiskInfo6_7_5-en.exe 2016-02-04 20:49 - 2016-02-04 20:50 - 02512567 _____ C:\Users\Maaciek\Downloads\SystemExplorerPortable_700.zip 2016-02-04 20:46 - 2016-02-04 20:47 - 04202240 _____ C:\Users\Maaciek\Downloads\memtest86-iso.zip 2016-02-04 17:38 - 2016-02-06 15:08 - 00000000 ____D C:\FRST 2016-02-04 16:17 - 2015-11-29 09:02 - 03758336 _____ (INCA Internet Co., Ltd.) C:\windows\system32\GameMon.des 2016-02-04 16:17 - 2004-12-30 13:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\windows\system32\npptNT2.sys 2016-02-04 16:17 - 2003-07-15 22:17 - 00005174 _____ C:\windows\system32\nppt9x.vxd 2016-02-04 13:36 - 2016-02-06 15:02 - 00000000 ____D C:\Users\Maaciek\Downloads\Gameforge Live 2016-02-04 13:36 - 2016-02-04 13:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live 2016-02-04 13:36 - 2016-02-04 13:36 - 00000000 ____D C:\Users\Maaciek\AppData\Local\Gameforge4d 2016-02-03 22:08 - 2016-02-03 22:08 - 00000490 _____ C:\Users\Maaciek\Downloads\Speedhack.CT 2016-02-03 21:59 - 2016-02-03 21:59 - 01406404 _____ C:\Users\Maaciek\Downloads\Hack Elsword [8.0].rar 2016-02-03 21:58 - 2016-02-03 21:59 - 06538663 _____ C:\Users\Maaciek\Downloads\Hack Elsword VOID [8.8].rar 2016-02-03 21:58 - 2016-02-03 21:58 - 06589276 _____ C:\Users\Maaciek\Downloads\Hack Elsword NA [8.9.2].rar 2016-02-02 11:52 - 2016-02-02 11:52 - 00065438 _____ C:\Users\Ela\Downloads\braki magazynowe (6).pdf 2016-02-02 11:51 - 2016-02-02 11:51 - 00635459 _____ C:\Users\Ela\Downloads\promocja DR 02.pdf 2016-02-02 11:47 - 2016-02-02 11:47 - 00029962 _____ C:\Users\Ela\Downloads\transfer_20160202.pdf 2016-02-02 10:53 - 2016-02-02 10:53 - 16997032 _____ C:\Users\Ela\Downloads\SM_DCP130C_DCP330C_DCP540CN.pdf 2016-02-02 10:37 - 1620-12-01 01:32 - 00000000 ____D C:\Users\Ela\Desktop\newsletter_ALL 2016-02-02 10:35 - 2016-02-02 10:35 - 00344152 _____ C:\Users\Ela\Downloads\newsletter_ALL.zip 2016-02-01 13:15 - 2016-02-01 13:15 - 02891760 _____ C:\Users\Ela\Downloads\09.01.2014.09.24.08_program_funkcjonalno_uzytkowy.pdf 2016-02-01 12:19 - 2016-02-01 12:19 - 01161933 _____ C:\Users\Ela\Downloads\file_5.pdf 2016-02-01 12:16 - 2016-02-01 12:16 - 02479974 _____ C:\Users\Ela\Downloads\file_6.pdf 2016-02-01 12:14 - 2016-02-01 12:14 - 02233908 _____ C:\Users\Ela\Downloads\file_8.pdf 2016-02-01 12:11 - 2016-02-01 12:11 - 00954775 _____ C:\Users\Ela\Downloads\file_14.pdf 2016-02-01 10:03 - 2016-02-01 10:03 - 00003828 _____ C:\Users\Ela\Downloads\CreatePDF417BarcodeEncodedPayload (2).aspx 2016-02-01 10:02 - 2016-02-01 10:02 - 00003828 _____ C:\Users\Ela\Downloads\CreatePDF417BarcodeEncodedPayload (1).pdf.aspx 2016-02-01 09:58 - 2016-02-01 09:58 - 00287609 _____ C:\Users\Ela\Downloads\CD4YVK_Beczkowski (1).pdf 2016-02-01 09:56 - 2016-02-01 09:56 - 00003828 _____ C:\Users\Ela\Downloads\CreatePDF417BarcodeEncodedPayload.aspx 2016-02-01 09:55 - 2016-02-01 09:55 - 00090700 _____ C:\Users\Ela\Downloads\004535951Z (1).pdf 2016-02-01 09:48 - 2016-02-01 09:48 - 00090700 _____ C:\Users\Ela\Downloads\004535951Z.pdf 2016-01-31 15:18 - 2016-01-31 15:18 - 00000000 ____D C:\Users\Ela\Downloads\SkySales BILET LOTNICZY DLA rOMKA.html 2016-01-31 15:17 - 2016-01-31 15:17 - 00287609 _____ C:\Users\Ela\Downloads\CD4YVK_Beczkowski.pdf 2016-01-31 15:11 - 2016-01-31 15:11 - 00129866 _____ C:\Users\Ela\Downloads\List_of_prohibited_articles_in_cabin_baggage.pdf 2016-01-28 13:24 - 2016-01-28 13:25 - 00032935 _____ C:\Users\Ela\Downloads\promocjastyczeń_koniec miesiąca.pdf 2016-01-27 21:51 - 2016-01-27 21:51 - 00025061 _____ C:\Users\Maaciek\Downloads\3716.mid 2016-01-27 21:44 - 2016-01-27 21:38 - 00038443 _____ C:\Users\Ela\Desktop\plan nauczycieli 3lo.pdf 2016-01-27 21:44 - 2016-01-27 21:38 - 00034162 _____ C:\Users\Ela\Desktop\plan klas 3lo.pdf 2016-01-27 21:38 - 2016-01-27 21:38 - 00038443 _____ C:\Users\Maaciek\Downloads\plan nauczycieli 3lo.pdf 2016-01-27 21:38 - 2016-01-27 21:38 - 00034162 _____ C:\Users\Maaciek\Downloads\plan klas 3lo.pdf 2016-01-27 21:29 - 2016-01-02 21:01 - 04218880 _____ C:\Users\Maaciek\Desktop\videoplayback[1].mp4 2016-01-27 12:14 - 2016-01-27 12:14 - 00057845 _____ C:\Users\Ela\Downloads\43090741_F_50010832_01_16_F.pdf 2016-01-23 10:54 - 2016-01-23 10:54 - 00000000 ____D C:\Users\Ela\AppData\Local\Microsoft Help 2016-01-22 00:46 - 2016-01-22 00:46 - 00809197 _____ C:\Users\Ela\Downloads\wydruk_dokumentu_prowizji (15).pdf 2016-01-22 00:45 - 2016-01-22 00:45 - 00132566 _____ C:\Users\Ela\Downloads\wydruk_struktury_z_obrotami (7).pdf 2016-01-22 00:40 - 2016-01-22 00:41 - 00809241 _____ C:\Users\Ela\Downloads\wydruk_dokumentu_prowizji (14).pdf 2016-01-22 00:39 - 2016-01-22 00:39 - 00809187 _____ C:\Users\Ela\Downloads\wydruk_dokumentu_prowizji (13).pdf 2016-01-22 00:38 - 2016-01-22 00:38 - 00132481 _____ C:\Users\Ela\Downloads\wydruk_struktury_z_obrotami (6).pdf 2016-01-22 00:38 - 2016-01-22 00:38 - 00132481 _____ C:\Users\Ela\Downloads\wydruk_struktury_z_obrotami (5).pdf 2016-01-22 00:37 - 2016-01-22 00:37 - 00809157 _____ C:\Users\Ela\Downloads\wydruk_dokumentu_prowizji (12).pdf 2016-01-22 00:16 - 2016-01-22 00:16 - 00053272 _____ C:\Users\Ela\Downloads\promocjastyczeń_dzieńbabcidziadka.pdf 2016-01-22 00:01 - 2016-01-22 00:01 - 00132535 _____ C:\Users\Ela\Downloads\wydruk_struktury_z_obrotami (4).pdf 2016-01-22 00:01 - 2016-01-22 00:01 - 00132535 _____ C:\Users\Ela\Downloads\wydruk_struktury_z_obrotami (3).pdf 2016-01-22 00:00 - 2016-01-22 00:01 - 00809154 _____ C:\Users\Ela\Downloads\wydruk_dokumentu_prowizji (11).pdf 2016-01-20 10:29 - 2016-01-20 11:15 - 00616031 _____ C:\Users\Maaciek\Desktop\Stalingrad.pptx 2016-01-12 09:23 - 2016-01-12 09:23 - 00637649 _____ C:\Users\Ela\Downloads\promocja DR 01.pdf 2016-01-12 09:23 - 2016-01-12 09:23 - 00368937 _____ C:\Users\Ela\Downloads\braki magazynowe (2).pdf 2016-01-12 09:23 - 2016-01-12 09:23 - 00038421 _____ C:\Users\Ela\Downloads\cennik oferta pozakatalogowa.pdf 2016-01-11 21:59 - 2016-01-11 21:59 - 01487838 _____ C:\Users\Ela\Downloads\biuletyn 1-2016.pdf 2016-01-08 01:30 - 2016-01-08 01:30 - 00030282 _____ C:\Users\Ela\Downloads\transfer_20160108.pdf ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-02-06 15:05 - 2009-07-14 05:34 - 00009920 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-02-06 15:05 - 2009-07-14 05:34 - 00009920 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-02-06 14:58 - 2012-05-07 12:54 - 00001032 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-02-06 14:57 - 2010-04-26 01:17 - 00000000 ____D C:\ProgramData\NVIDIA 2016-02-06 14:57 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT 2016-02-06 14:54 - 2014-07-30 09:19 - 00032792 _____ (AVAST Software) C:\windows\system32\Drivers\aswHwid.sys 2016-02-06 14:54 - 2014-02-22 20:00 - 00127432 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys 2016-02-06 14:54 - 2013-04-30 20:18 - 00447848 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys 2016-02-06 14:54 - 2013-04-30 20:18 - 00221240 _____ (AVAST Software) C:\windows\system32\Drivers\aswVmm.sys 2016-02-06 14:54 - 2013-04-30 20:18 - 00091232 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys 2016-02-06 14:54 - 2013-04-30 20:18 - 00091168 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys 2016-02-06 14:54 - 2013-04-30 20:18 - 00058776 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys 2016-02-06 14:54 - 2013-04-21 08:49 - 00000000 ____D C:\ProgramData\AVAST Software 2016-02-06 14:53 - 2013-04-30 20:18 - 00812720 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys 2016-02-06 14:53 - 2013-04-30 20:17 - 00000000 ____D C:\Program Files\AVAST Software 2016-02-06 14:47 - 2013-07-13 21:42 - 00123304 _____ C:\Users\Maaciek\AppData\Local\GDIPFONTCACHEV1.DAT 2016-02-06 14:39 - 2009-07-14 05:33 - 00512136 _____ C:\windows\system32\FNTCACHE.DAT 2016-02-06 14:36 - 2012-09-15 13:14 - 00000000 ____D C:\Users\Ela\Documents\Scores 2016-02-06 14:36 - 2012-07-22 17:44 - 00000000 ____D C:\windows\pss 2016-02-06 14:36 - 2011-12-28 21:10 - 00000000 ____D C:\Users\Ela\Desktop\Programy 2016-02-06 14:34 - 2012-05-07 12:54 - 00001036 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-02-06 13:13 - 2010-04-26 01:17 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2016-02-06 13:08 - 2009-07-14 03:37 - 00000000 ____D C:\windows\inf 2016-02-06 13:02 - 2013-10-04 17:59 - 00000000 ____D C:\Users\Maaciek\AppData\LocalLow\id Software 2016-02-06 12:57 - 2012-05-07 20:13 - 00000000 ___RD C:\Program Files\Skype 2016-02-06 12:54 - 2014-09-22 15:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mad Cars 2016-02-06 12:54 - 2013-01-10 19:25 - 00000000 ____D C:\ProgramData\Razer 2016-02-06 12:54 - 2011-12-17 22:48 - 00000000 ____D C:\ProgramData\IObit 2016-02-06 12:54 - 2011-12-17 22:48 - 00000000 ____D C:\Program Files\IObit 2016-02-06 12:50 - 2010-04-26 01:25 - 00000000 ____D C:\windows\system32\Macromed 2016-02-06 12:47 - 2011-07-08 19:06 - 00000000 ____D C:\Program Files\Common Files\Adobe 2016-02-06 12:47 - 2010-04-26 01:42 - 00000000 ____D C:\ProgramData\Adobe 2016-02-06 12:43 - 2013-07-13 21:42 - 00000000 ____D C:\Users\Maaciek\AppData\Roaming\Adobe 2016-02-06 12:43 - 2013-07-13 21:42 - 00000000 ____D C:\Users\Maaciek\AppData\Local\Adobe 2016-02-05 22:53 - 2011-06-16 19:35 - 00000000 ____D C:\Users\Ela\AppData\Roaming\Skype 2016-02-05 18:34 - 2012-11-09 22:34 - 00001519 ____H C:\windows\EPMBatch.ept 2016-02-05 12:42 - 2010-04-26 01:16 - 01643124 _____ C:\windows\system32\PerfStringBackup.INI 2016-02-05 12:42 - 2009-06-20 20:25 - 00740672 _____ C:\windows\system32\perfh015.dat 2016-02-05 12:42 - 2009-06-20 20:25 - 00156214 _____ C:\windows\system32\perfc015.dat 2016-02-04 22:40 - 2014-07-30 22:34 - 00002124 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-02-04 22:40 - 2014-07-30 22:34 - 00002095 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-02-04 17:21 - 2014-12-16 20:36 - 00000000 ____D C:\Users\Maaciek\AppData\Local\screenSHU 2016-02-04 16:08 - 2013-08-09 06:19 - 00000000 ____D C:\Users\Maaciek\Documents\My Games 2016-02-03 13:26 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\NDF 2016-02-01 14:41 - 2015-10-20 00:55 - 00000000 ____D C:\Users\Maaciek\Downloads\stare 2016-01-31 21:59 - 2015-09-05 21:06 - 00001067 _____ C:\Users\Ela\Desktop\filmy.txt 2016-01-27 17:30 - 2015-09-12 08:22 - 00001686 _____ C:\Users\Ela\Desktop\linki do przejżenia.txt 2016-01-27 09:55 - 2010-04-26 01:44 - 00000000 ____D C:\ProgramData\Skype 2016-01-23 10:55 - 2015-06-25 09:45 - 00000000 ___RD C:\Users\Ela\Documents\Scanned Documents 2016-01-20 10:18 - 2009-07-14 05:53 - 00032604 _____ C:\windows\Tasks\SCHEDLGU.TXT 2016-01-17 23:51 - 2014-09-15 22:00 - 00000000 ___HD C:\Users\Maaciek\Desktop\.picasaoriginals ==================== Pliki w katalogu głównym wybranych folderów ======= 2013-08-08 10:25 - 2013-08-08 10:25 - 0138056 _____ () C:\Users\Maaciek\AppData\Roaming\PnkBstrK.sys 2015-11-23 00:05 - 2015-11-23 00:05 - 0001985 _____ () C:\Users\Maaciek\AppData\Local\recently-used.xbel 2014-01-04 18:58 - 2014-07-03 21:52 - 0007595 _____ () C:\Users\Maaciek\AppData\Local\resmon.resmoncfg 2011-06-16 19:36 - 2011-06-16 19:36 - 0000056 ____H () C:\ProgramData\ezsidmv.dat 2010-04-26 01:51 - 2010-04-29 03:38 - 0131984 _____ () C:\ProgramData\FullRemove.exe ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\windows\explorer.exe => Plik podpisany cyfrowo C:\windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\windows\system32\wininit.exe => Plik podpisany cyfrowo C:\windows\system32\svchost.exe => Plik podpisany cyfrowo C:\windows\system32\services.exe => Plik podpisany cyfrowo C:\windows\system32\User32.dll => Plik podpisany cyfrowo C:\windows\system32\userinit.exe => Plik podpisany cyfrowo C:\windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2016-01-29 10:01 ==================== Koniec FRST.txt ============================