Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:05-03-2016 01
Uruchomiony przez Pc (administrator)  PC-C10F478E272D (10-03-2016 21:21:59)
Uruchomiony z G:\Narzedzia\Diagnostyka dla Picasso
Załadowane profile: Pc (Dostępne profile: Pc)
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) Język: Polski
Internet Explorer Wersja 8 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(ATI Technologies Inc.) G:\WINDOWS\system32\ati2evxx.exe
(ATI Technologies Inc.) G:\WINDOWS\system32\ati2evxx.exe
(ABBYY) G:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(ArcSoft Inc.) G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Google Inc.) G:\Program Files\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Realtek Semiconductor Corp.) G:\WINDOWS\RTHDCPL.EXE
(Hewlett-Packard Company) G:\Program Files\HP\hpcoretech\hpcmpmgr.exe
(HP) G:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
(Hewlett-Packard Company) G:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd2.exe
(ArcSoft Inc.) G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(SEIKO EPSON CORPORATION) G:\Program Files\Epson Software\Event Manager\EEventManager.exe
(ArcSoft Inc.) G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
() G:\Program Files\Winamp\winampa.exe
(Nuance Communications, Inc.) G:\Program Files\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
(Brother Industries, Ltd.) G:\Program Files\Browny02\Brother\BrStMonW.exe
() G:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) G:\Program Files\Common Files\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) G:\Program Files\ControlCenter4\BrCtrlCntr.exe
(Sony) G:\Program Files\Sony\Sony PC Companion\PCCompanion.exe
() G:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
(Hewlett-Packard Company) G:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
(Brother Industries, Ltd.) G:\Program Files\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) G:\Program Files\ControlCenter4\BrCcUxSys.exe
(Microsoft Corporation) G:\WINDOWS\system32\wscntfy.exe
(Mozilla Corporation) G:\Program Files\Mozilla Firefox\firefox.exe
(Oracle Corporation) G:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) G:\Program Files\Mozilla Firefox\plugin-container.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDCPL] => G:\WINDOWS\RTHDCPL.EXE [20117648 2012-10-30] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Adobe ARM] => G:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [HP Component Manager] => G:\Program Files\HP\hpcoretech\hpcmpmgr.exe [241664 2003-12-22] (Hewlett-Packard Company)
HKLM\...\Run: [HPDJ Taskbar Utility] => G:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe [172032 2004-03-04] (HP)
HKLM\...\Run: [HP Software Update] => G:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe [49152 2004-02-18] (Hewlett-Packard Company)
HKLM\...\Run: [BCSSync] => G:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [ArcSoft Connection Service] => G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM\...\Run: [EEventManager] => G:\Program Files\Epson Software\Event Manager\EEventManager.exe [976832 2009-12-17] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [APSDaemon] => G:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] => G:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [WinampAgent] => G:\Program Files\Winamp\winampa.exe [33792 2003-12-13] ()
HKLM\...\Run: [NeroCheck] => G:\WINDOWS\system32\NeroCheck.exe [155648 2001-08-06] (Ahead Software Gmbh)
HKLM\...\Run: [PDFHook] => G:\Program Files\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.)
HKLM\...\Run: [PDF5 Registry Controller] => G:\Program Files\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.)
HKLM\...\Run: [ControlCenter4] => G:\Program Files\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => G:\Program Files\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM\...\Run: [DivXMediaServer] => G:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-08-19] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] => G:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM\...\Run: [SunJavaUpdateSched] => G:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
Winlogon\Notify\AtiExtEvent: G:\WINDOWS\system32\Ati2evxx.dll [2010-04-07] (ATI Technologies Inc.)
HKU\S-1-5-21-1275210071-117609710-839522115-1003\...\Run: [Sony PC Companion] => G:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-1275210071-117609710-839522115-1003\...\Run: [UpdateAdmin] => G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\UpdateAdmin\UpdateAdmin.exe [237840 2015-09-14] ()
HKU\S-1-5-18\...\Run: [DWQueuedReporting] => G:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [520424 2013-03-06] (Microsoft Corporation)
Startup: G:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk [2013-10-30]
ShortcutTarget: Adobe Gamma Loader.lnk -> G:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\Parameters: [NameServer] 82.163.143.171 82.163.142.173
Tcpip\..\Interfaces\{748514DC-E955-4044-B0F5-42DC469CF715}: [NameServer] 82.163.143.171 82.163.142.173
Tcpip\..\Interfaces\{748514DC-E955-4044-B0F5-42DC469CF715}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E3F40742-A55E-4A7D-ADBF-B43015DE7D4D}: [NameServer] 82.163.143.171 82.163.142.173
Tcpip\..\Interfaces\{E3F40742-A55E-4A7D-ADBF-B43015DE7D4D}: [DhcpNameServer] 82.163.143.171
ManualProxies: 

Internet Explorer:
==================
HKU\S-1-5-21-1275210071-117609710-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.pl/
HKU\S-1-5-21-1275210071-117609710-839522115-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://services.eshield.com/general/newhometab.php?hometab=home&partner=11433&guid={3D7E5B06-BE35-4AB7-B0E8-FEDB431AEE6C}&i=
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxp://services.eshield.com/general/newhometab.php?hometab=home&partner=11433&guid={3D7E5B06-BE35-4AB7-B0E8-FEDB431AEE6C}&i=" <======= UWAGA
SearchScopes: HKU\S-1-5-21-1275210071-117609710-839522115-1003 -> DefaultScope {D92D7B3A-0652-4C14-83DF-A2FAC6F5ED86} URL = hxxp://search.eshield.com/serp?guid={3D7E5B06-BE35-4AB7-B0E8-FEDB431AEE6C}&action=default_search&k={searchTerms}
SearchScopes: HKU\S-1-5-21-1275210071-117609710-839522115-1003 -> {94EE9434-973C-439B-97C8-AB9E98B3DCE1} URL = hxxp://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=11433
SearchScopes: HKU\S-1-5-21-1275210071-117609710-839522115-1003 -> {D92D7B3A-0652-4C14-83DF-A2FAC6F5ED86} URL = hxxp://search.eshield.com/serp?guid={3D7E5B06-BE35-4AB7-B0E8-FEDB431AEE6C}&action=default_search&k={searchTerms}
BHO: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> G:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll [2009-02-06] (Zeon Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> G:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> G:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-09-11] (Oracle Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> G:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-18] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> G:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> G:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-11] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - G:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-18] (Google Inc.)
Toolbar: HKLM - eShield - {31A9A778-DC20-4EAD-8988-3E02208DD175} - G:\Program Files\TNT2\2.0.0.2030\IEToolbar.dll [2015-12-26] (Eshield)
Toolbar: HKU\S-1-5-21-1275210071-117609710-839522115-1003 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - G:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-18] (Google Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/products/plugin/autodl/jinstall-170-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA} hxxp://java.sun.com/products/plugin/autodl/jinstall-170-windows-i586.cab
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - G:\Program Files\HP\hpcoretech\comp\hpuiprot.dll [2003-12-22] (Hewlett-Packard Company)

FireFox:
========
FF ProfilePath: G:\Documents and Settings\Pc\Dane aplikacji\Mozilla\Firefox\Profiles\4k1hv6ne.default-1451153016750
FF Homepage: www.google.pl
FF Plugin: @adobe.com/FlashPlayer -> G:\WINDOWS\system32\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> G:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> G:\Program Files\DivX\DivX Web Player\npdivx32.dll [2014-08-13] (DivX, LLC)
FF Plugin: @Google.com/GoogleEarthPlugin -> G:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> G:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> G:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-11] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> g:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> G:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> G:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> g:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> G:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> G:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin: Adobe Reader -> G:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1275210071-117609710-839522115-1003: @tnt2npapi.com/Plugin -> G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\TNT2\2.0.0.2030\npTNT2.dll [2015-12-26] (Eshield)

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [dkmjljdbbgogihjcapfhgkonfmccbffp] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; G:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 ACDaemon; G:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 AppleChargerSrv; G:\WINDOWS\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R3 BrYNSvc; G:\Program Files\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Brak podpisu cyfrowego]
S2 KMService; G:\WINDOWS\system32\srvany.exe [8192 2013-10-31] () [Brak podpisu cyfrowego]
S3 Sony PC Companion; G:\Program Files\Sony\Sony PC Companion\PCCService.exe [155520 2015-06-10] (Avanquest Software)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 Afc; G:\WINDOWS\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.)
S3 Ambfilt; G:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R1 AmdPPM; G:\WINDOWS\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
R1 AppleCharger; G:\WINDOWS\System32\DRIVERS\AppleCharger.sys [19608 2012-10-25] ()
R3 AR9271; G:\WINDOWS\System32\DRIVERS\athuw.sys [1763584 2012-10-18] (Atheros Communications, Inc.)
S3 BrScnUsb; G:\WINDOWS\System32\DRIVERS\BrScnUsb.sys [15295 2010-03-16] (Brother Industries Ltd.)
R3 L1c; G:\WINDOWS\System32\DRIVERS\l1c51x86.sys [82032 2012-04-25] (Atheros Communications, Inc.)
S3 Monfilt; G:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
R0 PxHelp20; G:\WINDOWS\System32\DRIVERS\PxHelp20.sys [20016 2003-10-28] (Sonic Solutions) [Brak podpisu cyfrowego]
S3 s0017bus; G:\WINDOWS\System32\DRIVERS\s0017bus.sys [86824 2008-10-21] (MCCI Corporation)
S3 s0017mdfl; G:\WINDOWS\System32\DRIVERS\s0017mdfl.sys [15016 2008-10-21] (MCCI Corporation)
S3 s0017mdm; G:\WINDOWS\System32\DRIVERS\s0017mdm.sys [114600 2008-10-21] (MCCI Corporation)
S3 s0017mgmt; G:\WINDOWS\System32\DRIVERS\s0017mgmt.sys [108328 2008-10-21] (MCCI Corporation)
S3 s0017nd5; G:\WINDOWS\System32\DRIVERS\s0017nd5.sys [26024 2008-10-21] (MCCI Corporation)
S3 s0017obex; G:\WINDOWS\System32\DRIVERS\s0017obex.sys [104616 2008-10-21] (MCCI Corporation)
S3 s0017unic; G:\WINDOWS\System32\DRIVERS\s0017unic.sys [109736 2008-10-21] (MCCI Corporation)
R2 Sentinel; G:\WINDOWS\System32\Drivers\SENTINEL.SYS [76288 2011-11-18] (Rainbow Technologies, Inc.) [Brak podpisu cyfrowego]
S3 Sntnlusb; G:\WINDOWS\System32\DRIVERS\SNTNLUSB.SYS [26120 2011-11-18] (Rainbow Technologies Inc.)
S3 SONYPVU1; G:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS [7552 2001-08-17] (Sony Corporation)
R2 {C5F942FD-1110-4664-86CE-0C6BDA305235}; G:\Program Files\CyberLink\PowerDVD14\Common\NavFilter\000.fcl [26824 2014-08-12] (CyberLink Corp.)
S4 IntelIde; Brak ImagePath
U5 ScsiPort; G:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-03-10 21:17 - 2016-03-10 21:21 - 00000000 ____D G:\FRST
2016-02-21 18:49 - 2016-02-21 18:49 - 00094208 _____ G:\WINDOWS\Minidump\Mini022116-01.dmp
2016-02-20 14:00 - 2016-03-04 21:24 - 00000000 ____D G:\Documents and Settings\All Users\Dane aplikacji\89cae59f-2601-0
2016-02-19 20:31 - 2016-02-19 20:33 - 00000000 ____D G:\Documents and Settings\All Users\Dane aplikacji\7db22c9a-23a7-0
2016-02-19 20:31 - 2016-02-19 20:31 - 00000000 ____D G:\Documents and Settings\All Users\Dane aplikacji\7db22c9a-38b1-1
2016-02-19 19:43 - 2016-03-04 21:24 - 00000000 ____D G:\Documents and Settings\All Users\Dane aplikacji\89cae59f-2131-0
2016-02-19 19:43 - 2016-02-28 14:29 - 00000430 _____ G:\WINDOWS\Tasks\{01ED11CC-E6D2-7E7D-9FE5-CA893C318F6E}.job
2016-02-19 19:43 - 2016-02-19 19:43 - 00000000 ____D G:\Documents and Settings\All Users\Dane aplikacji\23400041
2016-02-19 19:43 - 2016-02-19 19:43 - 00000000 ____D G:\Documents and Settings\All Users\Dane aplikacji\{09f200ae-012c-1}
2016-02-19 19:43 - 2016-02-19 19:43 - 00000000 ____D G:\Documents and Settings\All Users\Dane aplikacji\{008c2af4-212c-0}

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-03-10 21:22 - 2013-10-29 15:47 - 00000000 ____D G:\Documents and Settings\Pc\Ustawienia lokalne\Temp
2016-03-10 20:50 - 2013-10-29 16:21 - 00000930 _____ G:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-03-10 20:45 - 2013-10-29 16:21 - 00001036 _____ G:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-10 19:54 - 2013-10-29 23:31 - 01265788 _____ G:\WINDOWS\system32\PerfStringBackup.INI
2016-03-10 19:54 - 2004-08-04 13:00 - 00559526 _____ G:\WINDOWS\system32\perfh015.dat
2016-03-10 19:54 - 2004-08-04 13:00 - 00106464 _____ G:\WINDOWS\system32\perfc015.dat
2016-03-10 19:51 - 2016-01-17 21:14 - 00000474 _____ G:\WINDOWS\Tasks\Opera scheduled Autoupdate 1453061642.job
2016-03-10 19:50 - 2014-03-09 14:26 - 00000216 _____ G:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job
2016-03-10 19:50 - 2013-10-29 16:21 - 00001032 _____ G:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-10 19:50 - 2013-10-29 15:47 - 00000006 ____H G:\WINDOWS\Tasks\SA.DAT
2016-03-10 19:50 - 2004-08-04 13:00 - 00013646 _____ G:\WINDOWS\system32\wpa.dbl
2016-03-10 16:05 - 2013-10-29 15:47 - 00032620 _____ G:\WINDOWS\SchedLgU.Txt
2016-03-10 16:05 - 2013-10-29 15:47 - 00000188 ___SH G:\Documents and Settings\Pc\ntuser.ini
2016-03-10 07:19 - 2013-10-31 21:40 - 00000000 ____D G:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
2016-03-10 07:18 - 2013-11-28 18:43 - 00000000 ____D G:\WINDOWS\system32\MRT
2016-03-10 07:13 - 2013-11-03 01:13 - 141270216 _____ (Microsoft Corporation) G:\WINDOWS\system32\MRT.exe
2016-03-10 06:46 - 2016-01-17 21:11 - 00000000 ____D G:\Program Files\Opera
2016-03-10 00:17 - 2013-10-31 21:44 - 00131072 _____ G:\WINDOWS\system32\config\OAlerts.evt
2016-03-09 22:19 - 2014-09-29 08:01 - 00000000 ____D G:\Documents and Settings\Pc\Moje dokumenty\Pliki programu Outlook
2016-03-08 19:26 - 2014-02-06 19:00 - 00000000 ____D G:\Tymczasowe
2016-03-06 22:30 - 2013-10-31 21:53 - 00002493 _____ G:\Documents and Settings\Pc\Pulpit\Excel 2010.lnk
2016-03-06 21:18 - 2013-10-30 21:21 - 00000000 ____D G:\Zdjęcia
2016-03-02 06:50 - 2013-10-29 15:47 - 00000000 ___HD G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji
2016-02-29 21:41 - 2013-10-31 21:52 - 00002499 _____ G:\Documents and Settings\Pc\Pulpit\Word 2010.lnk
2016-02-28 21:21 - 2013-11-03 11:21 - 00000000 ____D G:\Obrazy
2016-02-28 14:00 - 2015-12-26 18:08 - 00019834 _____ G:\WINDOWS\Tasks\{0D780C47-7D7A-0D78-7E11-090B0B791109}.job
2016-02-20 14:00 - 2013-10-29 23:30 - 00000000 __RHD G:\Documents and Settings\All Users\Dane aplikacji
2016-02-19 23:33 - 2013-11-03 11:10 - 00000000 ____D G:\Muzyka
2016-02-19 20:40 - 2016-01-31 14:26 - 00284266 _____ G:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
2016-02-19 20:40 - 2016-01-31 14:26 - 00284266 _____ G:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-1275210071-117609710-839522115-1003-0.dat
2016-02-19 20:31 - 2013-10-29 23:31 - 00000000 ___RD G:\Documents and Settings\All Users\Menu Start\Programy
2016-02-19 20:31 - 2013-10-29 23:31 - 00000000 ____D G:\Documents and Settings\All Users\Pulpit
2016-02-19 20:31 - 2013-10-29 15:47 - 00000000 __RHD G:\Documents and Settings\Pc\Dane aplikacji
2016-02-19 19:44 - 2016-02-07 14:00 - 00000000 ____D G:\Documents and Settings\All Users\Dane aplikacji\7db22c9a-4831-1
2016-02-19 19:44 - 2016-02-07 14:00 - 00000000 ____D G:\Documents and Settings\All Users\Dane aplikacji\7db22c9a-18e7-0
2016-02-18 22:31 - 2013-11-01 22:30 - 00000055 _____ G:\WINDOWS\hcomw32.ini
2016-02-18 22:24 - 2013-11-11 23:01 - 00000384 _____ G:\WINDOWS\dload32.INI
2016-02-18 22:24 - 2013-11-11 23:01 - 00000059 _____ G:\WINDOWS\COMWRK32.INI
2016-02-13 10:14 - 2014-01-09 20:34 - 00000000 ____D G:\Program Files\Mozilla Maintenance Service
2016-02-13 10:14 - 2014-01-09 20:34 - 00000000 ____D G:\Program Files\Mozilla Firefox
2016-02-13 00:06 - 2014-05-04 19:08 - 00000000 ____D G:\Documents and Settings\Pc\Dane aplikacji\BitTorrent
2016-02-13 00:06 - 2013-10-29 15:47 - 00000000 ____D G:\Documents and Settings\Pc\Pulpit
2016-02-11 06:52 - 2004-08-04 13:00 - 00000654 _____ G:\WINDOWS\win.ini
2016-02-10 20:23 - 2013-11-25 23:00 - 00002827 _____ G:\WINDOWS\WINCMD.INI
2016-02-10 08:50 - 2013-10-29 16:21 - 00796864 _____ (Adobe Systems Incorporated) G:\WINDOWS\system32\FlashPlayerApp.exe
2016-02-10 08:50 - 2013-10-29 16:21 - 00142528 _____ (Adobe Systems Incorporated) G:\WINDOWS\system32\FlashPlayerCPLApp.cpl

==================== Pliki w katalogu głównym wybranych folderów =======

2013-10-30 20:55 - 2015-07-31 18:44 - 0008192 _____ () G:\Documents and Settings\Pc\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-11-26 23:12 - 2014-11-26 23:12 - 0003817 _____ () G:\Documents and Settings\All Users\Dane aplikacji\lpm.dat

Pliki do przeniesienia lub usunięcia:
====================
G:\Windows\Tasks\{01ED11CC-E6D2-7E7D-9FE5-CA893C318F6E}.job
G:\Windows\Tasks\{0D780C47-7D7A-0D78-7E11-090B0B791109}.job


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

G:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
G:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
G:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
G:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
G:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
G:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
G:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
G:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
G:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

==================== Koniec  FRST.txt ============================