Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:05-03-2016 01
Uruchomiony przez vinohrad (administrator)  TOMASZPC (10-04-2016 14:35:35)
Uruchomiony z C:\Users\vinohrad\Downloads
Załadowane profile: vinohrad (Dostępne profile: vinohrad)
Platform: Windows 8.1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Settings\LenovoSetSvr.exe
(Lenovo(beijing) Limited) C:\Windows\System32\LenovoWiFiHotspotSvr.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe
(Maxthon) C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(PointGrab LTD) C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe
(PointGrab LTD) C:\Program Files (x86)\Lenovo\Motion Control\PG_Service_Launcher.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(PointGrab LTD) C:\Program Files (x86)\Lenovo\Motion Control\WebcamSplitterServer.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Mozilla Corporation) C:\Tools\Mozilla Firefox\firefox.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
() C:\Program Files\Lenovo PhoneCompanion\adb.exe
() C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Updates\LU.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
() C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [6340312 2014-06-10] (Realtek semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3276104 2014-03-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-02-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1379544 2014-03-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1379544 2014-03-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1379544 2014-03-05] (Realtek Semiconductor)
HKLM\...\Run: [PhoneCompanion] => C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe [836592 2014-12-17] (Lenovo)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [16093512 2014-12-17] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [8235848 2014-12-17] (Lenovo(beijing) Limited)
HKLM-x32\...\RunOnce: [SpUninstallCleanUp] => REG delete HKEY_LOCAL_MACHINE\Software\SearchProtect /f
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2014-12-17]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{53966FB0-D8A1-4B7D-A69A-57759A1B4150}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{93C0D8AF-CFF5-420F-8D32-799048356811}: [DhcpNameServer] 150.100.0.10

Internet Explorer:
==================
HKU\S-1-5-21-1044863109-3047369336-1031787426-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-1044863109-3047369336-1031787426-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-1044863109-3047369336-1031787426-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com
HKU\S-1-5-21-1044863109-3047369336-1031787426-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://mystart.lenovo.com

FireFox:
========
FF ProfilePath: C:\Users\vinohrad\AppData\Roaming\Mozilla\Firefox\Profiles\05zv3w7v.default
FF Homepage: onet.pl
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-10] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-10] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
StartMenuInternet: FIREFOX.EXE - C:\Tools\Mozilla Firefox\firefox.exe

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2013-11-14] (Broadcom Corporation.)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [977664 2014-07-10] (Broadcom Corporation.)
R2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [592880 2014-07-09] ()
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [101680 2013-10-15] (ELAN Microelectronics Corp.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [296432 2014-04-16] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-16] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584664 2015-12-14] (LENOVO INCORPORATED.)
R2 LenovoSetSvr; C:\Program Files (x86)\Lenovo\Lenovo Settings\LenovoSetSvr.exe [389680 2014-12-17] (Lenovo(beijing) Limited)
R2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192 2014-12-17] (Lenovo(beijing) Limited)
R2 LUService; C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe [38896 2014-02-17] (Lenovo(beijing) Limited)
R2 MaxthonUpdateSvc; C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe [2451880 2016-04-10] (Maxthon)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 PGService; C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe [167176 2014-02-25] (PointGrab LTD)
R2 PG_Service_Launcher; C:\Program Files (x86)\Lenovo\Motion Control\PG_Service_Launcher.exe [512776 2014-02-25] (PointGrab LTD)
R2 PhoneCompanionPusher; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe [288240 2014-12-17] (Lenovo)
S3 PhoneCompanionVap; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe [308720 2014-12-17] (Lenovo)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe [68880 2014-12-17] ()
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-11-14] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7569624 2014-07-03] (Broadcom Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [24904 2014-03-11] (ELAN Microelectronic Corp.)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [444632 2013-10-24] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [9121496 2014-06-10] (Realtek Semiconductor Corp.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [35856 2014-03-24] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [257880 2014-03-24] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-04-10 14:32 - 2016-04-10 14:35 - 00013747 _____ C:\Users\vinohrad\Downloads\FRST.txt
2016-04-10 14:22 - 2016-04-10 14:22 - 00000000 ____D C:\Users\vinohrad\AppData\Roaming\Maxthon3
2016-04-10 13:55 - 2016-04-10 13:56 - 00435299 _____ C:\Users\vinohrad\Desktop\Fixlog.txt
2016-04-10 10:06 - 2016-04-10 14:35 - 00000000 ____D C:\FRST
2016-04-10 10:05 - 2016-04-10 10:05 - 02374144 _____ (Farbar) C:\Users\vinohrad\Downloads\FRST64.exe
2016-04-10 10:05 - 2016-04-10 10:05 - 00371057 _____ C:\Users\vinohrad\Downloads\gm.zip
2016-04-10 10:02 - 2016-04-10 14:29 - 00001283 _____ C:\Users\vinohrad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wi-FiHotspotChgToast.lnk
2016-04-10 10:02 - 2016-04-10 10:02 - 00000000 ____D C:\Users\vinohrad\AppData\Local\Macromedia
2016-04-10 10:01 - 2016-04-10 10:02 - 00000000 ____D C:\Users\vinohrad\AppData\Local\Adobe
2016-04-10 10:00 - 2016-04-10 10:06 - 00000000 ____D C:\Users\vinohrad\AppData\Local\Mozilla
2016-04-10 10:00 - 2016-04-10 10:00 - 00000859 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-04-10 10:00 - 2016-04-10 10:00 - 00000000 ____D C:\Users\vinohrad\AppData\Roaming\Mozilla
2016-04-10 10:00 - 2016-04-10 10:00 - 00000000 ____D C:\Users\vinohrad\AppData\Roaming\Macromedia
2016-04-10 09:59 - 2016-04-10 09:56 - 00000000 ____D C:\Tools
2016-04-10 09:56 - 2016-04-10 09:58 - 00000000 ____D C:\Users\vinohrad\AppData\Local\Lenovo
2016-04-10 09:54 - 2016-04-10 09:54 - 00000000 ____D C:\Users\vinohrad\AppData\Roaming\Lenovo
2016-04-10 09:49 - 2016-04-10 14:30 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1044863109-3047369336-1031787426-1001
2016-04-10 09:49 - 2016-04-10 09:49 - 960602955 _____ C:\WINDOWS\MEMORY.DMP
2016-04-10 09:49 - 2016-04-10 09:49 - 00296512 _____ C:\WINDOWS\Minidump\041016-20390-01.dmp
2016-04-10 09:49 - 2016-04-10 09:49 - 00000000 ____D C:\WINDOWS\Minidump
2016-04-10 09:45 - 2016-04-10 09:45 - 00000000 ____D C:\Users\vinohrad\AppData\Local\GWX
2016-04-10 09:45 - 2016-04-10 09:45 - 00000000 ____D C:\Users\Public\Pokki
2016-04-10 09:44 - 2016-04-10 09:44 - 00000000 ____D C:\Users\vinohrad\Documents\Bluetooth Exchange Folder
2016-04-10 09:44 - 2016-04-10 09:44 - 00000000 ____D C:\Users\vinohrad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2016-04-10 09:44 - 2016-04-10 09:44 - 00000000 ____D C:\Users\vinohrad\AppData\Local\NVIDIA Corporation
2016-04-10 09:44 - 2016-04-10 09:44 - 00000000 ____D C:\Users\vinohrad\AppData\Local\Broadcom
2016-04-10 09:43 - 2016-04-10 09:44 - 00000000 ____D C:\Users\vinohrad\AppData\Local\Packages
2016-04-10 09:43 - 2016-04-10 09:43 - 00001465 _____ C:\Users\vinohrad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-04-10 09:43 - 2016-04-10 09:43 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-04-10 09:43 - 2016-04-10 09:43 - 00000020 ___SH C:\Users\vinohrad\ntuser.ini
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 _SHDL C:\Users\vinohrad\Ustawienia lokalne
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 _SHDL C:\Users\vinohrad\Szablony
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 _SHDL C:\Users\vinohrad\Moje dokumenty
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 _SHDL C:\Users\vinohrad\Menu Start
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 _SHDL C:\Users\vinohrad\Documents\Moje wideo
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 _SHDL C:\Users\vinohrad\Documents\Moje obrazy
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 _SHDL C:\Users\vinohrad\Documents\Moja muzyka
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 _SHDL C:\Users\vinohrad\Dane aplikacji
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 _SHDL C:\Users\vinohrad\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 _SHDL C:\Users\vinohrad\AppData\Local\Historia
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 _SHDL C:\Users\vinohrad\AppData\Local\Dane aplikacji
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 __SHD C:\Users\vinohrad\IntelGraphicsProfiles
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 ____D C:\Users\vinohrad\AppData\Roaming\Adobe
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 ____D C:\Users\vinohrad\AppData\Local\VirtualStore
2016-04-10 09:43 - 2016-04-10 09:43 - 00000000 ____D C:\Users\vinohrad\AppData\Local\NVIDIA
2016-04-10 09:42 - 2016-04-10 14:18 - 00000000 ____D C:\Users\vinohrad
2016-04-10 09:42 - 2014-03-18 11:55 - 00000369 _____ C:\Users\vinohrad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2016-04-10 09:42 - 2014-03-18 11:55 - 00000369 _____ C:\Users\vinohrad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2016-04-10 09:40 - 2016-04-10 09:56 - 00000000 ___SD C:\WINDOWS\system32\GWX
2016-04-10 09:40 - 2016-04-10 09:40 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2016-04-10 09:39 - 2015-11-14 16:50 - 00133248 _____ (Microsoft Corporation) C:\WINDOWS\system32\RestoreOptIn.exe
2016-04-10 09:39 - 2015-11-14 16:50 - 00114160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RestoreOptIn.exe
2016-04-10 09:39 - 2015-10-20 23:54 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-04-10 09:39 - 2015-10-20 16:53 - 03705856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-04-10 09:39 - 2015-10-20 16:36 - 02243072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2016-04-10 09:39 - 2015-10-20 16:35 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-04-10 09:39 - 2015-10-20 16:34 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2016-04-10 09:39 - 2015-10-20 16:34 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2016-04-10 09:39 - 2015-10-20 16:34 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2016-04-10 09:39 - 2015-10-20 16:33 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2016-04-10 09:39 - 2015-10-20 16:14 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-04-10 09:39 - 2015-10-20 16:13 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2016-04-10 09:39 - 2015-10-20 16:13 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2016-04-10 09:39 - 2015-10-20 16:13 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2016-04-10 09:39 - 2015-08-11 04:47 - 02757072 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-04-10 09:39 - 2015-08-11 04:47 - 02414096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-04-10 09:39 - 2015-07-09 20:40 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2016-04-10 09:39 - 2015-06-27 05:08 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2016-04-10 09:39 - 2015-06-27 05:08 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-04-10 09:39 - 2015-06-27 04:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2016-04-10 09:39 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2016-04-10 09:39 - 2014-10-18 08:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2016-04-10 09:35 - 2016-04-10 09:35 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Public\Documents\Moje wideo
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Public\Documents\Moje obrazy
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Public\Documents\Moja muzyka
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default\Ustawienia lokalne
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default\Szablony
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default\Moje dokumenty
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default\Menu Start
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default\Documents\Moje wideo
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default\Documents\Moje obrazy
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default\Documents\Moja muzyka
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default\Dane aplikacji
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default User\Documents\Moje wideo
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default User\Documents\Moje obrazy
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default User\Documents\Moja muzyka
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\ProgramData\Szablony
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\ProgramData\Pulpit
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\ProgramData\Menu Start
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\ProgramData\Dokumenty
2016-04-10 09:32 - 2016-04-10 09:32 - 00000000 _SHDL C:\ProgramData\Dane aplikacji
2016-04-09 08:10 - 2016-04-01 12:23 - 03102720 _____ C:\Users\vinohrad\Downloads\adwcleaner_5.108.exe
2016-04-09 08:10 - 2016-03-20 18:45 - 00207616 _____ C:\Users\vinohrad\Documents\Garszko HP.pdf
2016-04-09 08:10 - 2016-03-20 18:45 - 00041520 _____ C:\Users\vinohrad\Documents\Tomek garszko.pdf
2016-04-09 08:10 - 2016-03-20 18:45 - 00041520 _____ C:\Users\vinohrad\Documents\Tomek garszko(1).pdf
2016-04-09 08:10 - 2016-03-20 18:45 - 00033920 _____ C:\Users\vinohrad\Documents\transfer_20150618.pdf
2016-04-09 08:10 - 2015-04-09 20:34 - 01709792 _____ (Disc Soft Ltd.) C:\Users\vinohrad\Downloads\DAEMON Tools Lite 5.0.1.0407 [1].exe
2016-04-09 08:10 - 2013-10-06 12:33 - 00448512 _____ (OldTimer Tools) C:\Users\vinohrad\Downloads\TFC.exe
2016-04-09 08:09 - 2016-03-20 18:45 - 00001312 _____ C:\Users\vinohrad\Documents\hasło.txt
2016-04-09 08:09 - 2016-03-20 18:45 - 00000576 _____ C:\Users\vinohrad\Documents\Zupa Fizi.txt
2016-04-09 08:09 - 2016-03-20 18:45 - 00000448 _____ C:\Users\vinohrad\Documents\Skype i GG.txt
2016-04-09 08:09 - 2013-07-19 21:02 - 00000011 _____ C:\Users\vinohrad\Documents\Telefon do Ciotki z Niemiec.txt

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-04-10 14:35 - 2014-12-17 22:42 - 00000000 ____D C:\Program Files\Lenovo
2016-04-10 14:34 - 2014-12-17 23:10 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2016-04-10 14:29 - 2014-12-17 23:21 - 00000000 ____D C:\ProgramData\LU
2016-04-10 14:23 - 2014-12-18 07:12 - 00807160 _____ C:\WINDOWS\system32\perfh015.dat
2016-04-10 14:23 - 2014-12-18 07:12 - 00163478 _____ C:\WINDOWS\system32\perfc015.dat
2016-04-10 14:23 - 2014-03-18 11:53 - 01825074 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-04-10 14:23 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\Inf
2016-04-10 14:19 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-04-10 14:18 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-04-10 14:00 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-04-10 13:55 - 2014-12-17 23:11 - 00002560 _____ C:\WINDOWS\system32\VfService.trf
2016-04-10 09:57 - 2014-12-17 23:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2016-04-10 09:54 - 2014-12-17 22:31 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-04-10 09:54 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-04-10 09:53 - 2014-12-17 23:06 - 00000000 ____D C:\ProgramData\Lenovo
2016-04-10 09:52 - 2014-12-17 23:19 - 00000000 ____D C:\ProgramData\Office2013
2016-04-10 09:52 - 2013-08-22 17:36 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-04-10 09:52 - 2013-08-22 17:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-04-10 09:49 - 2014-12-17 23:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo Photo Master
2016-04-10 09:49 - 2014-12-17 23:17 - 00000000 ____D C:\ProgramData\CyberLink
2016-04-10 09:49 - 2014-12-17 23:08 - 00000000 ____D C:\Program Files (x86)\CyberLink
2016-04-10 09:49 - 2014-12-17 22:48 - 00000000 ____D C:\Program Files (x86)\Lenovo
2016-04-10 09:46 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2016-04-10 09:44 - 2014-04-03 21:15 - 00000000 ____D C:\WINDOWS\Panther
2016-04-10 09:40 - 2013-08-22 17:20 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-04-10 09:39 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2016-04-10 09:32 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2016-04-10 09:32 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows NT
2016-04-10 09:31 - 2013-08-22 16:44 - 00348080 _____ C:\WINDOWS\system32\FNTCACHE.DAT

==================== Pliki w katalogu głównym wybranych folderów =======

2014-12-17 22:47 - 2014-12-17 22:47 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Niektóre pliki w TEMP:
====================
C:\Users\vinohrad\AppData\Local\Temp\nsuC75C.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2014-08-23 23:30

==================== Koniec  FRST.txt ============================