Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:05-03-2016 01
Uruchomiony przez user (administrator)  USER-KOMPUTER (04-04-2016 21:43:11)
Uruchomiony z C:\Users\user\Downloads\Frrr
Załadowane profile: user (Dostępne profile: user)
Platform: Windows 10 Home (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1601.19020.0_x64__8wekyb3d8bbwe\Calculator.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.325.12390.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-07-24] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-07-17] (Synaptics Incorporated)
HKU\S-1-5-21-3208777371-2295436043-2049818682-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8322328 2015-05-08] (Piriform Ltd)
HKU\S-1-5-21-3208777371-2295436043-2049818682-1000\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATII4E.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3208777371-2295436043-2049818682-1000\...\MountPoints2: {d3624919-aadd-11e4-a801-00271331500c} - "F:\start.exe" 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Brak pliku
GroupPolicy: Ograniczenia - Chrome <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\Parameters: [NameServer] 82.163.143.171 82.163.142.173
Tcpip\..\Interfaces\{2dab2063-87ab-445d-b08a-53fbc60ee0f5}: [NameServer] 82.163.143.171 82.163.142.173
Tcpip\..\Interfaces\{2dab2063-87ab-445d-b08a-53fbc60ee0f5}: [DhcpNameServer] 82.163.143.171
Tcpip\..\Interfaces\{4b31ff13-63c6-4296-8b18-f6417aa595aa}: [NameServer] 82.163.143.171 82.163.142.173
Tcpip\..\Interfaces\{4b31ff13-63c6-4296-8b18-f6417aa595aa}: [DhcpNameServer] 82.163.143.171
Tcpip\..\Interfaces\{91065409-b268-4577-a4cd-6eb2e6d0736f}: [NameServer] 82.163.143.171 82.163.142.173
Tcpip\..\Interfaces\{91065409-b268-4577-a4cd-6eb2e6d0736f}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{e325ae77-ebc4-43ee-87e1-9f3599775999}: [NameServer] 82.163.143.171 82.163.142.173
Tcpip\..\Interfaces\{e325ae77-ebc4-43ee-87e1-9f3599775999}: [DhcpNameServer] 82.163.143.171

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3208777371-2295436043-2049818682-1000\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1me10IE11PLPL/MCM_WCP
SearchScopes: HKLM -> DefaultScope {7456653E-4CC6-49C2-B11B-25FDC751206A} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKLM -> {7456653E-4CC6-49C2-B11B-25FDC751206A} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {7456653E-4CC6-49C2-B11B-25FDC751206A} URL = hxxp://www.bing.com/search?FORM=U220DF&PC=U220&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {7456653E-4CC6-49C2-B11B-25FDC751206A} URL = hxxp://www.bing.com/search?FORM=U220DF&PC=U220&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3208777371-2295436043-2049818682-1000 -> DefaultScope {7456653E-4CC6-49C2-B11B-25FDC751206A} URL = hxxp://www.bing.com/search?FORM=U220DF&PC=U220&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3208777371-2295436043-2049818682-1000 -> 3FCB47A2E12B472BA6195C9D555075C1 URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3208777371-2295436043-2049818682-1000 -> {7456653E-4CC6-49C2-B11B-25FDC751206A} URL = hxxp://www.bing.com/search?FORM=U220DF&PC=U220&q={searchTerms}&src=IE-SearchBox
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-01-08] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2015-01-07] (Oracle Corporation)

Edge: 
======
Edge HomeButtonPage: HKU\S-1-5-21-3208777371-2295436043-2049818682-1000 -> hxxp://www.google.pl/

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fopxgw49.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-03-09] ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-01-08] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-01-08] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-03-09] ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-01-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2015-01-07] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-31] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-31] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Extension: Brak nazwy - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fopxgw49.default\extensions\faststartff@gmail.com [nie znaleziono]
FF Extension: Brak nazwy - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fopxgw49.default\extensions\fftoolbar2014@etech.com [nie znaleziono]
FF Extension: Brak nazwy - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fopxgw49.default\extensions\{76eaa25f-d535-414d-8a8b-4bce0a94d247}.xpi [nie znaleziono]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on => nie znaleziono

Chrome: 
=======
CHR HomePage: Profile 1 -> hxxp://www.google.pl/
CHR StartupUrls: Profile 1 -> "hxxps://www.google.pl/"
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-05]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-05]
CHR Extension: (Adblock Plus) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-03-11]
CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-11]
CHR Extension: (Innovate Direct) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnichmlohdpgajlaogijlnmkbgnnhgp [2016-03-21] [UpdateUrl: hxxp://cdn.innovatedirect.com/update] <==== UWAGA
CHR Extension: (Mini Player for YouTube, Vimeo & Facebook) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lebpfaphdkaekngclmiimpneheenipnn [2015-01-13]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-04]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-04]
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Adblock Plus) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-08]
CHR Extension: (Highlight to Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\floipahigmmkfhkoapmnijnlnboniglg [2015-09-22]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-04]
CHR Extension: (Google Quick Scroll) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2015-09-22]
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Extension: (Dokumenty Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-03-06]
CHR Extension: (Highlight to Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\floipahigmmkfhkoapmnijnlnboniglg [2016-03-06]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-06]
CHR Extension: (Google Quick Scroll) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2016-03-06]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2255064 2013-10-28] (Broadcom Corporation.)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-07-17] (Synaptics Incorporated)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-10-28] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\System32\drivers\bcmwl63al.sys [5170176 2015-07-10] (Broadcom Corporation)
S3 johci; C:\Windows\System32\drivers\johci.sys [26712 2011-02-09] (JMicron Technology Corp.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-07-17] (Synaptics Incorporated)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
U3 idsvc; Brak ImagePath
S3 ohci1394; \SystemRoot\System32\drivers\ohci1394.sys [X]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-04-04 21:42 - 2016-04-04 21:42 - 00000000 ____D C:\Users\user\Downloads\Gmmm
2016-04-04 21:41 - 2016-04-04 21:43 - 00000000 ____D C:\Users\user\Downloads\Frrr
2016-04-04 21:38 - 2016-04-04 21:38 - 00016148 _____ C:\WINDOWS\system32\USER-KOMPUTER_user_HistoryPrediction.bin
2016-04-01 13:55 - 2016-04-01 13:55 - 00149112 _____ C:\Users\user\Downloads\wniosek_500+.pdf
2016-04-01 13:35 - 2016-04-01 13:35 - 00407420 _____ C:\Users\user\Downloads\Application (2).pdf
2016-04-01 13:17 - 2016-04-01 13:17 - 00407407 _____ C:\Users\user\Downloads\Application.pdf
2016-04-01 13:17 - 2016-04-01 13:17 - 00407407 _____ C:\Users\user\Downloads\Application (1).pdf
2016-03-31 22:33 - 2016-04-04 21:40 - 00001084 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-31 22:33 - 2016-04-04 20:08 - 00001080 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-31 22:27 - 2016-03-31 22:27 - 00000000 ____D C:\Users\user\Downloads\policy_templates
2016-03-25 21:35 - 2016-03-25 21:35 - 00000000 ____D C:\Users\user\AppData\Roaming\MAGIX
2016-03-25 21:35 - 2016-03-25 21:35 - 00000000 ____D C:\ProgramData\MAGIX
2016-03-23 22:53 - 2016-03-31 21:09 - 00342712 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-21 22:42 - 2016-03-21 22:42 - 00000000 ____D C:\Users\user\AppData\Local\ESET
2016-03-21 01:45 - 2016-03-25 21:35 - 00000000 ____D C:\ProgramData\simplitec
2016-03-21 01:45 - 2016-03-21 01:45 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-21 01:45 - 2015-05-06 17:54 - 00120200 _____ () C:\WINDOWS\SysWOW64\DLLDEV32i.dll
2016-03-21 01:42 - 2016-03-21 01:42 - 00000000 ____D C:\ProgramData\287f60bb-4cb3-1
2016-03-21 01:42 - 2016-03-21 01:42 - 00000000 ____D C:\ProgramData\287f60bb-1697-0
2016-03-13 21:18 - 2016-03-13 21:18 - 00143354 _____ C:\Users\user\Downloads\Oferta-wiosna-2016_21.pdf
2016-03-08 20:27 - 2016-02-23 16:53 - 01314496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-03-08 20:27 - 2016-02-23 16:52 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-03-08 20:27 - 2016-02-23 16:51 - 00633184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2016-03-08 20:27 - 2016-02-23 16:51 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2016-03-08 20:27 - 2016-02-23 16:50 - 00630160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-03-08 20:27 - 2016-02-23 16:48 - 08022368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-03-08 20:27 - 2016-02-23 16:48 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-03-08 20:27 - 2016-02-23 16:48 - 01123952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-03-08 20:27 - 2016-02-23 16:41 - 01150816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-03-08 20:27 - 2016-02-23 16:41 - 00299600 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMASF.DLL
2016-03-08 20:27 - 2016-02-23 16:41 - 00078040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli.dll
2016-03-08 20:27 - 2016-02-23 16:40 - 00110584 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvcli.dll
2016-03-08 20:27 - 2016-02-23 16:38 - 00272752 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2016-03-08 20:27 - 2016-02-23 16:36 - 00080128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32.dll
2016-03-08 20:27 - 2016-02-23 16:11 - 00781984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-03-08 20:27 - 2016-02-23 16:11 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-03-08 20:27 - 2016-02-23 16:11 - 00103776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-03-08 20:27 - 2016-02-23 16:08 - 03622272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-03-08 20:27 - 2016-02-23 16:07 - 22322624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-03-08 20:27 - 2016-02-23 15:39 - 00607416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-03-08 20:27 - 2016-02-23 15:30 - 01643872 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-03-08 20:27 - 2016-02-23 15:25 - 01085632 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-03-08 20:27 - 2016-02-23 15:23 - 00952968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-03-08 20:27 - 2016-02-23 15:21 - 00529456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-03-08 20:27 - 2016-02-23 15:21 - 00141152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2016-03-08 20:27 - 2016-02-23 15:11 - 00249976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMASF.DLL
2016-03-08 20:27 - 2016-02-23 15:11 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srvcli.dll
2016-03-08 20:27 - 2016-02-23 15:11 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkscli.dll
2016-03-08 20:27 - 2016-02-23 15:09 - 00229352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll
2016-03-08 20:27 - 2016-02-23 15:06 - 00069232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netapi32.dll
2016-03-08 20:27 - 2016-02-23 14:58 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-03-08 20:27 - 2016-02-23 14:50 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-03-08 20:27 - 2016-02-23 14:50 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2016-03-08 20:27 - 2016-02-23 14:42 - 00658536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-03-08 20:27 - 2016-02-23 14:42 - 00467296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-03-08 20:27 - 2016-02-23 14:42 - 00078176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-03-08 20:27 - 2016-02-23 14:39 - 02879024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-03-08 20:27 - 2016-02-23 14:38 - 20858360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-03-08 20:27 - 2016-02-23 14:35 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-03-08 20:27 - 2016-02-23 14:20 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2016-03-08 20:27 - 2016-02-23 14:17 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-03-08 20:27 - 2016-02-23 14:16 - 02237952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-03-08 20:27 - 2016-02-23 14:15 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-03-08 20:27 - 2016-02-23 14:15 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-03-08 20:27 - 2016-02-23 13:59 - 00319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2016-03-08 20:27 - 2016-02-23 13:59 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2016-03-08 20:27 - 2016-02-23 13:57 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-03-08 20:27 - 2016-02-23 13:55 - 24592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-03-08 20:27 - 2016-02-23 13:45 - 12504576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-03-08 20:27 - 2016-02-23 13:45 - 06788608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-08 20:27 - 2016-02-23 13:42 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-03-08 20:27 - 2016-02-23 13:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-03-08 20:27 - 2016-02-23 13:38 - 02663424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-03-08 20:27 - 2016-02-23 13:37 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
2016-03-08 20:27 - 2016-02-23 13:36 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-03-08 20:27 - 2016-02-23 13:25 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-03-08 20:27 - 2016-02-23 13:18 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2016-03-08 20:27 - 2016-02-23 13:17 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll
2016-03-08 20:27 - 2016-02-23 13:17 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\browcli.dll
2016-03-08 20:27 - 2016-02-23 13:14 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-03-08 20:27 - 2016-02-23 13:08 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2016-03-08 20:27 - 2016-02-23 13:04 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2016-03-08 20:27 - 2016-02-23 13:03 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2016-03-08 20:27 - 2016-02-23 13:03 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-03-08 20:27 - 2016-02-23 13:02 - 03587584 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-03-08 20:27 - 2016-02-23 12:55 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-03-08 20:27 - 2016-02-23 12:55 - 14241792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-03-08 20:27 - 2016-02-23 12:51 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2016-03-08 20:27 - 2016-02-23 12:51 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2016-03-08 20:27 - 2016-02-23 12:48 - 21859840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-03-08 20:27 - 2016-02-23 12:48 - 05157376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-03-08 20:27 - 2016-02-23 12:46 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2016-03-08 20:27 - 2016-02-23 12:45 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-03-08 20:27 - 2016-02-23 12:45 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-03-08 20:27 - 2016-02-23 12:45 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-03-08 20:27 - 2016-02-23 12:45 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-03-08 20:27 - 2016-02-23 12:44 - 01821696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-03-08 20:27 - 2016-02-23 12:38 - 07524864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-03-08 20:27 - 2016-02-23 12:29 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browcli.dll
2016-03-08 20:27 - 2016-02-23 12:17 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2016-03-08 20:27 - 2016-02-23 12:17 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-03-08 20:27 - 2016-02-23 12:11 - 12589056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-03-08 20:27 - 2016-02-23 12:03 - 01495040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-03-08 20:27 - 2016-02-23 12:00 - 11263488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-03-08 20:27 - 2016-02-23 12:00 - 05457408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-03-08 20:27 - 2016-02-23 11:58 - 18800640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-03-06 19:55 - 2016-03-06 19:55 - 07756312 _____ C:\Users\user\Downloads\poradnik_hbsystem__automatyczny_system_nawadniania__doborprojektmontaz.pdf
2016-03-06 19:55 - 2016-03-06 19:55 - 01109898 _____ C:\Users\user\Downloads\raibird_zaprojektuj_nawadnianie.pdf
2016-03-06 17:50 - 2016-03-08 22:42 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-06 17:37 - 2016-03-19 00:24 - 00000000 ____D C:\WINDOWS\Minidump

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-04-04 21:43 - 2015-05-17 06:01 - 00000000 ____D C:\FRST
2016-04-04 20:12 - 2016-01-06 02:26 - 00004220 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C1D40790-F0A9-423B-9CBD-7B9A49D6CCE4}
2016-04-04 10:35 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-04-01 12:43 - 2015-07-10 13:04 - 00000000 ___HD C:\Program Files\WindowsApps
2016-04-01 12:41 - 2015-01-10 16:33 - 00002278 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-01 12:41 - 2015-01-10 16:33 - 00002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-03-31 22:35 - 2015-11-16 22:18 - 00004142 _____ C:\WINDOWS\System32\Tasks\googleupdatetaskmachineua
2016-03-31 22:35 - 2015-11-16 22:18 - 00003910 _____ C:\WINDOWS\System32\Tasks\googleupdatetaskmachinecore
2016-03-31 22:24 - 2015-01-19 18:38 - 00000000 ____D C:\KMPlayer
2016-03-31 21:16 - 2015-09-10 11:21 - 02119218 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-31 21:16 - 2015-07-10 18:30 - 00918352 _____ C:\WINDOWS\system32\perfh015.dat
2016-03-31 21:16 - 2015-07-10 18:30 - 00202228 _____ C:\WINDOWS\system32\perfc015.dat
2016-03-31 21:16 - 2015-07-10 13:02 - 00000000 ____D C:\WINDOWS\INF
2016-03-31 21:11 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-03-31 21:10 - 2015-05-16 04:28 - 00000000 ____D C:\Program Files (x86)\360
2016-03-31 21:09 - 2015-07-10 14:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-03-31 21:08 - 2015-07-10 11:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-03-31 20:35 - 2015-02-13 21:23 - 00002259 _____ C:\WINDOWS\epplauncher.mif
2016-03-31 20:22 - 2015-06-01 07:49 - 00000000 ____D C:\AdwCleaner
2016-03-31 20:14 - 2015-02-13 21:18 - 00001268 _____ C:\Users\user\Desktop\Revo Uninstaller.lnk
2016-03-25 22:34 - 2015-09-10 12:10 - 00000000 ___DC C:\WINDOWS\Panther
2016-03-25 22:29 - 2016-02-13 20:45 - 00000000 ___HD C:\$WINDOWS.~BT
2016-03-21 01:44 - 2015-01-19 18:38 - 00000643 _____ C:\Users\user\Desktop\KMPlayer.lnk
2016-03-18 22:31 - 2015-05-16 08:57 - 00000266 __RSH C:\ProgramData\ntuser.pol
2016-03-16 21:29 - 2015-01-10 13:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2016-03-13 16:18 - 2015-07-10 12:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-08 22:59 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Web
2016-03-08 22:58 - 2015-10-15 00:25 - 00000000 __SHD C:\$360Section
2016-03-08 22:58 - 2015-10-15 00:23 - 00000000 ____D C:\ProgramData\360Quarant
2016-03-08 22:50 - 2015-09-10 11:45 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-03-08 22:45 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-03-08 22:45 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-03-08 22:45 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-03-08 22:45 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-03-08 20:45 - 2015-01-06 05:25 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-03-08 20:39 - 2015-01-06 05:25 - 143659408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-03-08 09:10 - 2015-07-10 13:06 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-03-08 09:10 - 2015-07-10 13:06 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Pliki w katalogu głównym wybranych folderów =======

2016-01-10 01:43 - 2016-01-10 01:43 - 0002664 _____ () C:\Users\user\AppData\Local\recently-used.xbel

Niektóre pliki w TEMP:
====================
C:\Users\user\AppData\Local\Temp\KMP_Au_Uninstaller.exe
C:\Users\user\AppData\Local\Temp\{08E5A8F7-747D-42CF-92AA-A9C70990A35E}.dll
C:\Users\user\AppData\Local\Temp\{18ECB84B-C5D3-4844-9143-8AB4047CC249}.dll
C:\Users\user\AppData\Local\Temp\{34ABC4F3-3539-4A94-929E-6C49911D9D76}.dll
C:\Users\user\AppData\Local\Temp\{6B09383D-D408-45C4-B211-16820FCB0DCF}.dll
C:\Users\user\AppData\Local\Temp\{73DD8427-4DF8-4829-900E-1183E7190E64}.dll
C:\Users\user\AppData\Local\Temp\{8065F904-A0BC-4845-AD07-822A09F3D869}.dll
C:\Users\user\AppData\Local\Temp\{8F9405DA-975E-4FC5-9EF4-503D17523320}.dll
C:\Users\user\AppData\Local\Temp\{91EBEA0C-D406-4F75-B80A-498D67DF948F}.dll
C:\Users\user\AppData\Local\Temp\{B30DB390-A041-4363-BBAA-454545CF7695}.dll
C:\Users\user\AppData\Local\Temp\{C41237B2-2C48-4458-B3F7-3039DFA7CD54}.dll
C:\Users\user\AppData\Local\Temp\{C8CD4FD1-972E-4158-A975-EA8C941CDB81}.dll
C:\Users\user\AppData\Local\Temp\{D518E753-410E-4B4D-B042-6F5DFCD0CD42}.dll
C:\Users\user\AppData\Local\Temp\{D691CC9B-9A88-4F6B-ACA9-4A799B3A01B5}.dll
C:\Users\user\AppData\Local\Temp\{E523409E-1028-497A-A1FF-A34326CE24D9}.dll
C:\Users\user\AppData\Local\Temp\{FDEE71B2-B9D5-458A-A676-0A956B5C6FAB}.dll


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-03-31 22:57

==================== Koniec  FRST.txt ============================