Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:27-02-2016
Uruchomiony przez Łukasz (administrator)  ŁUKASZ-KOMPUTER (01-03-2016 10:38:45)
Uruchomiony z C:\Users\Łukasz\Downloads
Załadowane profile: Łukasz (Dostępne profile: Łukasz)
Platform: Microsoft Windows 7 Home Basic  (X86) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX86\officeclicktorun.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
() C:\Program Files\Gigabyte\EasySaver\essvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe
() C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(BitTorrent Inc.) C:\Users\Łukasz\AppData\Roaming\uTorrent\uTorrent.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(BitTorrent Inc.) C:\Users\Łukasz\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe
(BitTorrent Inc.) C:\Users\Łukasz\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_20_0_0_306.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_20_0_0_306.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11734240 2012-12-13] (Realtek Semiconductor)
HKLM\...\Run: [NeroFilterCheck] => C:\Windows\system32\NeroCheck.exe
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2015-10-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [3117344 2012-03-07] (ESET)
HKLM\...\Run: [BlueStacks Agent] => C:\Program Files\BlueStacks\HD-Agent.exe
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [GG] => "C:\Users\Łukasz\AppData\Local\GG\Application\gghub.exe"
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3907152 2015-08-28] (Tonec Inc.)
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [uTorrent] => C:\Users\Łukasz\AppData\Roaming\uTorrent\uTorrent.exe [2065944 2016-02-20] (BitTorrent Inc.)
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6638296 2016-02-12] (Piriform Ltd)
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: G - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: {33eecd3c-fb8c-11e3-956c-001fd0dfe546} - K:\setup.exe
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: {378b8424-246f-11e5-bec8-001fd0dfe546} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: {b3ed3bcf-c1ad-11e5-90af-001fd0dfe546} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: {c21994c7-aa1a-11e5-8d63-001fd0dfe546} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: {c21994da-aa1a-11e5-8d63-001fd0dfe546} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: {c21994e2-aa1a-11e5-8d63-001fd0dfe546} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\MountPoints2: {d86697eb-aa94-11e5-b7ed-001fd0dfe546} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
ShellIconOverlayIdentifiers: [   IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2015-08-14] (Tonec Inc.)
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{D2025AA0-83D1-45B5-80F9-1CF34D5FBEF5}: [DhcpNameServer] 192.168.0.1
ManualProxies: 0hxxp://stop-block.org/wpad.dat?037165183c99d19f2e407b60bd143bb76387154

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google/
HKU\S-1-5-21-3215043942-3594844569-900473125-1000\Software\Microsoft\Internet Explorer\Main,Start Page Restore = hxxp://www.google.pl/
URLSearchHook: HKLM -> Domyślne = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKU\S-1-5-21-3215043942-3594844569-900473125-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll [2015-08-28] (Internet Download Manager, Tonec Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll [2015-10-20] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2016-02-24] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-20] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-05-08] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Łukasz\AppData\Roaming\Mozilla\Firefox\Profiles\t4af1uqf.default-1436599264032
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] ()
FF Plugin: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-20] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-05-08] (Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3215043942-3594844569-900473125-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Łukasz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-12] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3215043942-3594844569-900473125-1000: ubisoft.com/uplaypc -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [Brak pliku]
FF Extension: Adblock Plus - C:\Users\Łukasz\AppData\Roaming\Mozilla\Firefox\Profiles\t4af1uqf.default-1436599264032\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-02-23]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2016-02-20] [Brak podpisu cyfrowego]
FF HKU\S-1-5-21-3215043942-3594844569-900473125-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
FF Extension: IDM integration - C:\Program Files\Internet Download Manager\idmmzcc2.xpi [2015-08-14]

Chrome: 
=======
CHR Profile: C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2015-07-10]
CHR HKU\S-1-5-21-3215043942-3594844569-900473125-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd] - hxxp://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [1904368 2016-01-20] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [913144 2012-03-07] (ESET)
R2 ES lite Service; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [80392 2008-07-17] ()
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [915600 2015-10-13] (NVIDIA Corporation)
R2 HiSuiteOuc.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe [117552 2015-05-20] ()
R2 HuaweiHiSuiteService.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe [154928 2015-05-20] ()
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-10-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19775632 2015-10-13] (NVIDIA Corporation)
R2 Themes; C:\Windows\system32\themeservice.dll [37376 2015-07-10] (Microsoft Corporation) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-06-24] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [169080 2012-03-14] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [120152 2012-03-14] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [103112 2012-03-14] (ESET)
R3 gdrv; C:\Windows\gdrv.sys [16608 2016-03-01] (Windows (R) 2000 DDK provider)
S3 HWHandSet; C:\Windows\System32\DRIVERS\hw_quusbmdm.sys [195200 2015-05-07] (Huawei Technologies Co., Ltd.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18576 2015-10-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [32912 2015-10-13] (NVIDIA Corporation)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [102272 2015-05-07] (Huawei Technologies Co., Ltd.)
S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [X]
S1 {d0a750c7-0e2e-4426-8c72-dd49c6e52785}Gw; system32\drivers\{d0a750c7-0e2e-4426-8c72-dd49c6e52785}Gw.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-03-01 10:38 - 2016-03-01 10:38 - 00013855 _____ C:\Users\Łukasz\Downloads\FRST.txt
2016-03-01 10:33 - 2016-03-01 10:37 - 00000000 ____D C:\FRST
2016-03-01 10:33 - 2016-03-01 10:33 - 00380416 _____ C:\Users\Łukasz\Downloads\ijq97vow.exe
2016-03-01 10:32 - 2016-03-01 10:32 - 01722368 _____ (Farbar) C:\Users\Łukasz\Downloads\FRST.exe
2016-02-27 09:40 - 2016-02-27 09:46 - 00000098 _____ C:\Users\Łukasz\Desktop\Nowy dokument tekstowy (2).txt
2016-02-26 11:36 - 2016-02-26 11:36 - 00000000 ____D C:\Users\£ukasz\AppData\Local\HiSuite
2016-02-26 10:12 - 2016-02-26 10:12 - 00000965 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-02-26 10:12 - 2016-02-26 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-02-26 10:12 - 2016-02-26 10:12 - 00000000 ____D C:\Program Files\CCleaner
2016-02-25 18:05 - 2016-02-25 18:05 - 01511936 _____ C:\Users\Łukasz\Downloads\adwcleaner_5.036.exe
2016-02-25 17:59 - 2016-02-25 17:59 - 06837784 _____ (Piriform Ltd) C:\Users\Łukasz\Downloads\ccsetup515.exe
2016-02-25 17:50 - 2016-02-25 17:50 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-02-23 16:16 - 2016-02-23 16:16 - 00015285 _____ C:\Users\Łukasz\Desktop\received_178775115833181.jpeg
2016-02-20 17:02 - 2016-02-20 17:02 - 00000000 ____D C:\Users\Łukasz\AppData\Local\Bluestacks
2016-02-20 15:40 - 2016-02-20 15:48 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2016-02-20 15:14 - 2016-02-20 15:39 - 00000000 ____D C:\Users\Łukasz\Desktop\epic
2016-02-20 12:46 - 2016-02-20 12:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2016-02-20 12:46 - 2016-02-20 12:46 - 00000000 ____D C:\ProgramData\ESET
2016-02-20 12:46 - 2016-02-20 12:46 - 00000000 ____D C:\Program Files\ESET
2016-02-18 12:02 - 2016-02-18 12:02 - 00001630 _____ C:\Users\Public\Desktop\SprgFiles.lnk
2016-02-18 12:02 - 2016-02-18 12:02 - 00000000 ____D C:\Program Files\SprgFiles
2016-02-12 12:24 - 2016-03-01 10:33 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-02-02 15:18 - 2016-02-02 15:18 - 00000042 _____ C:\Users\Łukasz\AppData\Roaming\WB.CFG
2016-02-02 14:18 - 2016-02-02 14:20 - 00000000 ____D C:\Users\Łukasz\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
2016-02-02 14:18 - 2016-02-02 14:18 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-02-01 12:33 - 2016-02-01 17:47 - 00000000 ____D C:\ProgramData\Adobe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-03-01 10:37 - 2015-02-09 18:04 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\uTorrent
2016-03-01 10:26 - 2015-11-08 16:44 - 00000000 ____D C:\Users\Łukasz\AppData\LocalLow\uTorrent
2016-03-01 10:26 - 2013-03-23 08:47 - 00016608 _____ (Windows (R) 2000 DDK provider) C:\Windows\gdrv.sys
2016-03-01 10:26 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-29 22:10 - 2012-12-25 21:44 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\DMCache
2016-02-29 22:10 - 2009-07-14 05:34 - 00017104 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-29 22:10 - 2009-07-14 05:34 - 00017104 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-29 21:13 - 2013-03-13 13:02 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-02-27 17:33 - 2012-12-24 21:00 - 00000000 ____D C:\Program Files\Google
2016-02-26 19:45 - 2013-05-30 12:14 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\.minecraft
2016-02-26 13:38 - 2015-12-09 17:06 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\DarkEra
2016-02-26 13:38 - 2015-07-07 18:30 - 00000000 ____D C:\Users\Łukasz\AppData\Roaming\WarThunder
2016-02-26 11:36 - 2015-12-24 21:35 - 00000000 ____D C:\Users\£ukasz
2016-02-26 10:39 - 2015-01-20 19:47 - 00000000 ____D C:\Windows\Minidump
2016-02-26 10:39 - 2012-12-24 20:41 - 00000000 ____D C:\Windows\Panther
2016-02-26 10:39 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2016-02-25 19:44 - 2014-04-22 17:22 - 00000941 _____ C:\Users\Łukasz\Desktop\Mozilla Firefox.lnk
2016-02-25 19:44 - 2013-11-20 17:32 - 00000953 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-02-25 19:44 - 2012-12-24 20:56 - 00001152 _____ C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-02-25 17:51 - 2015-04-14 18:07 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-02-24 16:50 - 2015-04-14 18:07 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-02-24 16:18 - 2009-07-14 05:53 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-02-23 13:27 - 2012-12-24 20:56 - 00215170 _____ C:\Windows\system32\PerfStringBackup.INI
2016-02-23 13:27 - 2009-07-14 09:07 - 00169580 _____ C:\Windows\system32\perfh015.dat
2016-02-23 13:27 - 2009-07-14 09:07 - 00053374 _____ C:\Windows\system32\perfc015.dat
2016-02-20 17:55 - 2015-11-29 11:23 - 00000894 _____ C:\Users\Public\Desktop\The Sims 4.lnk
2016-02-20 17:55 - 2015-11-29 11:23 - 00000894 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4.lnk
2016-02-20 17:07 - 2015-12-14 18:13 - 00000709 _____ C:\Users\Public\Desktop\The Sims 4 - Get to Work.lnk
2016-02-20 17:07 - 2015-12-14 18:13 - 00000709 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4 - Get to Work.lnk
2016-02-20 17:02 - 2015-06-03 12:25 - 00000000 __RHD C:\Users\Public\Libraries
2016-02-19 21:03 - 2012-12-24 20:56 - 00000000 ____D C:\Users\Łukasz
2016-02-10 14:13 - 2013-03-13 13:02 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-02-10 14:13 - 2013-03-13 13:02 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-02-08 17:39 - 2013-01-07 18:07 - 00000000 ____D C:\Users\Łukasz\AppData\Local\ElevatedDiagnostics
2016-02-05 13:59 - 2013-05-23 18:44 - 00000000 ____D C:\Program Files\Common Files\Ahead
2016-02-01 17:50 - 2015-01-06 17:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft
2016-02-01 17:47 - 2013-02-10 20:09 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-02-01 17:47 - 2013-02-09 15:20 - 00000000 ____D C:\Program Files\Adobe
2016-02-01 12:21 - 2013-02-09 15:12 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-01-31 17:17 - 2009-07-14 05:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

==================== Pliki w katalogu głównym wybranych folderów =======

2015-12-06 14:09 - 2011-07-19 03:37 - 0003262 _____ () C:\Program Files\Falco.ico
2015-12-06 14:09 - 2011-07-19 04:05 - 0000046 _____ () C:\Program Files\Falco.url
2013-08-14 08:40 - 2013-09-01 13:32 - 0000000 _____ () C:\Users\Łukasz\AppData\Roaming\.NANotifyHere
2015-07-07 18:32 - 2015-10-30 18:56 - 0000637 _____ () C:\Users\Łukasz\AppData\Roaming\burnaware.ini
2014-10-24 18:27 - 2014-10-24 18:27 - 0000287 _____ () C:\Users\Łukasz\AppData\Roaming\removeAllComponents.bat
2015-01-05 17:02 - 2015-01-05 18:32 - 0000098 _____ () C:\Users\Łukasz\AppData\Roaming\theHunterPrimal_LauncherSettings_live.cfg
2014-10-24 17:06 - 2014-10-24 17:06 - 0000130 _____ () C:\Users\Łukasz\AppData\Roaming\tmp_register.bat
2014-10-24 18:26 - 2014-10-24 18:26 - 0000135 _____ () C:\Users\Łukasz\AppData\Roaming\tmp_unregister.bat
2016-02-02 15:18 - 2016-02-02 15:18 - 0000042 _____ () C:\Users\Łukasz\AppData\Roaming\WB.CFG
2013-03-27 21:37 - 2013-03-27 21:37 - 0007604 _____ () C:\Users\Łukasz\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-02-28 11:27

==================== Koniec  FRST.txt ============================