Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:05-03-2016 01
Uruchomiony przez Johny (administrator)  JOHHNY (30-03-2016 22:00:24)
Uruchomiony z C:\Users\Johny\Desktop\Logi
Załadowane profile: Johny (Dostępne profile: Johny)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6846096 2012-11-19] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [3862440 2016-03-02] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [179624 2016-02-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKU\S-1-5-21-3564243225-2610990644-4089692014-1000\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [908160 2010-03-16] (Microsoft Corporation)
HKU\S-1-5-21-3564243225-2610990644-4089692014-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50605696 2016-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-3564243225-2610990644-4089692014-1000\...\MountPoints2: {43a082b2-1c0f-11e5-8e8f-806e6f6e6963} - E:\Bin\ASSETUP.exe

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{F7C858BC-2CDF-4F2B-87E9-FFBB7C2819D8}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-14] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-14] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.google.pl/"
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Johny\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.823\_platform_specific\win_x86\widevinecdmadapter.dll => Brak pliku
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.110\PepperFlash\pepflashplayer.dll ()
CHR Profile: C:\Users\Johny\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Johny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-14]
CHR Extension: (Dokumenty Google) - C:\Users\Johny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-14]
CHR Extension: (Dysk Google) - C:\Users\Johny\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-24]
CHR Extension: (YouTube) - C:\Users\Johny\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (uBlock Origin) - C:\Users\Johny\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-03-07]
CHR Extension: (Google Search) - C:\Users\Johny\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Arkusze Google) - C:\Users\Johny\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-14]
CHR Extension: (Dokumenty Google offline) - C:\Users\Johny\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Flashcontrol) - C:\Users\Johny\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidmkgnfgnkihnjeklbekckimkipmoe [2016-03-08]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Johny\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-14]
CHR Extension: (Gmail) - C:\Users\Johny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-14]
CHR Extension: (Privacy Badger) - C:\Users\Johny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkehgijcmpdhfbdbbnkijodmdjhbjlgp [2016-03-07]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.01\atkexComSvc.exe [927232 2012-10-29] ()
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [604144 2016-03-02] (AVG Technologies CZ, s.r.o.)
R2 avgfws; C:\Program Files (x86)\AVG\Av\avgfws.exe [1580352 2016-03-02] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3934184 2016-03-02] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1045928 2016-02-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [561104 2016-03-02] (AVG Technologies CZ, s.r.o.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-21] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [184240 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [97208 2015-08-29] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [315312 2016-01-26] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378288 2016-02-03] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [269232 2016-03-02] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-12-04] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [302000 2015-10-08] (AVG Technologies CZ, s.r.o.)
R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [23472 2016-01-08] (AVG Technologies CZ, s.r.o.)
S3 cpuz138; D:\TMP\cpuz138\cpuz138_x64.sys [27320 2016-03-30] (CPUID)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-01-31] (Intel Corporation)
R4 IOMap; C:\Windows\system32\drivers\IOMap64.sys [23680 2013-01-25] (ASUSTeK Computer Inc.)
S3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
S1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [117768 2015-12-18] (Oracle Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-03-30 21:56 - 2016-03-30 22:00 - 00000000 ____D C:\Users\Johny\Desktop\Logi
2016-03-30 18:03 - 2016-03-30 19:13 - 00000000 ____D C:\Users\Johny\Doctor Web
2016-03-30 17:23 - 2016-03-30 17:23 - 00001651 _____ C:\Users\Johny\Desktop\Euro Truck  Simulator 2.lnk
2016-03-30 17:14 - 2016-03-30 17:14 - 00000000 ____D C:\Program Files\Logitech
2016-03-30 17:14 - 2016-03-30 17:14 - 00000000 ____D C:\Program Files\Common Files\Logitech
2016-03-30 17:13 - 2016-03-30 17:13 - 00000000 ____D C:\Users\Johny\AppData\Roaming\Logitech
2016-03-30 17:13 - 2016-03-30 17:13 - 00000000 ____D C:\Users\Johny\AppData\Roaming\Logishrd
2016-03-26 00:11 - 2016-03-26 00:11 - 08109923 _____ C:\Users\Johny\Downloads\56ef406e84b2f_440.rar
2016-03-25 15:25 - 2016-03-25 15:26 - 19167720 _____ C:\Users\Johny\Downloads\54e9fda5554e9_100 (1).7z
2016-03-25 15:24 - 2016-03-25 15:24 - 10855110 _____ C:\Users\Johny\Downloads\56e85db1a1a2b_440.rar
2016-03-25 15:23 - 2016-03-25 15:24 - 19167720 _____ C:\Users\Johny\Downloads\54e9fda5554e9_100.7z
2016-03-24 14:15 - 2016-03-24 14:19 - 08110144 _____ C:\Users\Johny\Downloads\MPV_Pack_Dienstwagenfahrer.rar
2016-03-23 14:56 - 2016-03-23 14:57 - 14322771 _____ C:\Users\Johny\Downloads\56d9fd4ae6557_374.rar
2016-03-23 14:55 - 2016-03-23 14:55 - 13839635 _____ C:\Users\Johny\Downloads\56d9fc5c75645_374.rar
2016-03-18 17:48 - 2016-03-18 17:48 - 00103424 _____ C:\Users\Johny\Downloads\DLFE-115728.xls
2016-03-18 17:46 - 2016-03-18 17:46 - 07776838 _____ C:\Users\Johny\Downloads\56eb927472816_440.rar
2016-03-15 15:33 - 2016-03-15 15:36 - 111797776 _____ (Logitech Inc.) C:\Users\Johny\Downloads\LGS_8.81.15_x64_Logitech.exe
2016-03-14 14:38 - 2016-03-14 14:38 - 00049273 _____ C:\Users\Johny\Downloads\Potwierdzenie wykonania operacji_20160314_133902.pdf
2016-03-13 17:19 - 2016-03-13 17:19 - 00000000 ____D C:\Users\Johny\Documents\My Games
2016-03-13 16:09 - 2016-03-13 16:09 - 00001205 _____ C:\Users\Johny\Desktop\Uplay.lnk
2016-03-13 16:09 - 2016-03-13 16:09 - 00000000 ____D C:\Users\Johny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2016-03-13 16:08 - 2016-03-13 16:08 - 00000103 _____ C:\Users\Public\Desktop\FarCry 4.url
2016-03-13 16:08 - 2016-03-13 16:08 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2016-03-13 15:11 - 2016-03-13 15:12 - 64509088 _____ (Ubisoft) C:\Users\Johny\Downloads\UplayInstaller.exe
2016-03-13 14:18 - 2016-03-13 14:19 - 33814906 _____ C:\Users\Johny\Downloads\T-MST4DEUC_1029.0 (1).exe
2016-03-13 14:02 - 2016-03-13 14:02 - 33814906 _____ C:\Users\Johny\Downloads\T-MST4DEUC_1029.0.exe
2016-03-12 21:59 - 2016-03-13 00:01 - 732233728 _____ C:\Users\Johny\Downloads\The.Revenant.2015.PLSUBBED.LQ.DVDSCR.XViD-OzW (1).avi
2016-03-04 16:36 - 2016-03-04 16:36 - 00103424 _____ C:\Users\Johny\Downloads\DLFE-113783.xls
2016-03-04 16:35 - 2016-03-04 16:35 - 00098816 _____ C:\Users\Johny\Downloads\DLFE-110700.xls
2016-03-03 21:30 - 2016-03-03 21:30 - 07665206 _____ C:\Users\Johny\Downloads\Instrukcja Doblo 1.4 2015.pdf
2016-03-03 15:45 - 2016-03-03 15:45 - 00435525 _____ C:\Users\Johny\Downloads\Oferta_NOWY DOBLO' CARGO_263.12A.1.pdf
2016-03-03 15:45 - 2016-03-03 15:45 - 00435240 _____ C:\Users\Johny\Downloads\Oferta_NOWY DOBLO' CARGO_263.22A.1.pdf
2016-03-03 15:45 - 2016-03-03 15:45 - 00158083 _____ C:\Users\Johny\Downloads\Fiat Doblo 2015 3-miejscowy.pdf
2016-03-03 15:44 - 2016-03-03 15:44 - 00475224 _____ C:\Users\Johny\Downloads\NOWY DOBLO' CARGO 1,4.pdf
2016-03-02 19:22 - 2016-03-02 19:22 - 00097932 _____ C:\Users\Johny\Downloads\27408-fiat-professional-nowy-doblo-cargo (1).pdf
2016-03-02 19:21 - 2016-03-02 19:21 - 00097430 _____ C:\Users\Johny\Downloads\27316-fiat-professional-fiorino.pdf
2016-03-02 18:21 - 2002-03-25 23:59 - 05176025 _____ C:\Users\Johny\Desktop\lokalizacja gniazd diagnostycznych.chm
2016-03-02 18:20 - 2002-03-25 23:59 - 05176025 _____ C:\Users\Johny\Downloads\lokalizacja gniazd diagnostycznych.chm
2016-03-02 18:19 - 2016-03-02 18:19 - 05104507 _____ C:\Users\Johny\Downloads\lokalizacja gniazd diagnostycznych.rar
2016-03-02 18:07 - 2016-03-02 18:10 - 00000000 ____D C:\Program Files (x86)\Multiecuscan
2016-03-02 18:07 - 2016-03-02 18:07 - 00002921 _____ C:\Users\Johny\Desktop\Multiecuscan.lnk
2016-03-02 17:58 - 2016-03-02 18:07 - 00000000 ____D C:\Users\Johny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Multiecuscan
2016-03-02 17:42 - 2016-03-02 17:42 - 00005886 _____ C:\Users\Johny\Downloads\Opis.txt
2016-03-02 11:21 - 2016-03-02 11:21 - 00269232 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-03-30 22:00 - 2015-08-27 16:28 - 00000000 ____D C:\FRST
2016-03-30 22:00 - 2015-07-02 12:48 - 00000000 ____D C:\Users\Johny\AppData\Roaming\Skype
2016-03-30 21:56 - 2009-07-14 06:45 - 00017296 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-30 21:56 - 2009-07-14 06:45 - 00017296 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-30 21:55 - 2015-08-31 19:20 - 00000000 ____D C:\ProgramData\MFAData
2016-03-30 21:54 - 2009-07-14 19:55 - 00741460 _____ C:\Windows\system32\perfh015.dat
2016-03-30 21:54 - 2009-07-14 19:55 - 00156532 _____ C:\Windows\system32\perfc015.dat
2016-03-30 21:54 - 2009-07-14 07:13 - 01673940 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-30 21:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-03-30 21:49 - 2015-11-30 21:02 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-30 21:49 - 2015-08-14 14:58 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-30 21:49 - 2015-06-26 16:28 - 00000000 ____D C:\Users\Johny
2016-03-30 21:49 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-30 20:27 - 2015-08-14 14:58 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-30 20:25 - 2015-10-12 19:22 - 00000000 ____D C:\Users\Johny\AppData\Roaming\AIMP3
2016-03-30 19:40 - 2015-06-29 11:19 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-03-30 19:38 - 2015-06-29 11:18 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-03-30 19:38 - 2015-06-29 11:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-03-30 19:38 - 2015-06-29 11:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-03-30 17:54 - 2016-02-10 13:44 - 00000000 ____D C:\Users\Johny\Documents\Euro Truck Simulator 2
2016-03-30 17:28 - 2015-08-14 14:59 - 00002201 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-30 17:28 - 2015-08-14 14:59 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-03-30 16:10 - 2015-10-15 19:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2016-03-30 16:10 - 2015-08-25 16:55 - 00000000 ____D C:\ProgramData\VS Revo Group
2016-03-30 16:10 - 2015-08-05 18:02 - 00000000 ____D C:\Users\Johny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-03-30 16:10 - 2015-08-05 18:02 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2016-03-30 16:10 - 2015-07-02 12:48 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-03-30 16:10 - 2015-07-02 12:48 - 00000000 ____D C:\ProgramData\Skype
2016-03-30 16:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-03-30 16:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2016-03-15 15:37 - 2015-11-30 16:44 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-14 14:53 - 2009-07-14 07:08 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-03-13 16:10 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-03-11 16:57 - 2015-10-20 20:03 - 00000936 _____ C:\Users\Public\Desktop\AVG Protection.lnk
2016-03-11 16:57 - 2015-08-31 19:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-03-11 13:27 - 2015-06-26 18:35 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-03-10 14:09 - 2015-06-29 11:18 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-03-10 14:08 - 2015-06-29 11:18 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-03-10 14:08 - 2015-06-29 11:18 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys

==================== Pliki w katalogu głównym wybranych folderów =======

2016-01-18 15:12 - 2016-01-18 15:12 - 0000000 _____ () C:\Users\Johny\AppData\Local\{6C685621-B62A-4E23-8AA5-EF172151A23C}

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-03-29 14:39

==================== Koniec  FRST.txt ============================