Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:27-04-2016 Uruchomiony przez Paulina (administrator) FINALKA (27-04-2016 18:57:47) Uruchomiony z C:\Users\Paulina\Downloads Załadowane profile: Paulina & UpdatusUser & (Dostępne profile: Paulina & UpdatusUser) Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (COMODO) C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (Podatnik.info Sp. z o.o.) C:\Program Files (x86)\Podatnik.info\PIT pro 2015\pproupd.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Wacom Technology, Corp.) C:\Windows\System32\Wacom_Tablet.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Wacom Technology, Corp.) C:\Windows\System32\WTablet\Wacom_TabletUser.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe (Wacom Technology, Corp.) C:\Windows\System32\Wacom_Tablet.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Intel Corporation) C:\Windows\System32\hkcmd.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Sony Computer Entertainment Inc.) C:\Program Files (x86)\Sony\Content Manager Assistant\CMA.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Sony Computer Entertainment Inc.) C:\Program Files (x86)\Sony\Content Manager Assistant\CMAWatcher.exe (CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE () C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\OFFICEVIRT.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE () Q:\140066.plk\Office14\WINWORDC.EXE () Q:\140066.plk\Office14\OffSpon.EXE (Microsoft Corporation) C:\Windows\splwow64.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe () C:\Program Files\Gramblr\gramblr.exe () C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\TAOFrame.exe () C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QQPCRTP.exe (COMODO) C:\Program Files\COMODO\COMODO GeekBuddy\CLPS.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe (Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-09] (Realtek Semiconductor) HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1796200 2011-02-23] (Acer Incorporated) HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1610936 2016-04-09] (COMODO) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-14] (Intel Corporation) HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-02-15] (NTI Corporation) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1081424 2011-03-14] (Dritek System Inc.) HKLM-x32\...\Run: [ArcadeMovieService] => C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-02-19] (CyberLink Corp.) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [CPA] => C:\Program Files\COMODO\COMODO GeekBuddy\VALA.exe [184120 2011-11-23] (COMODO) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-01-07] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [23248560 2016-04-16] (Dropbox, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595480 2016-03-24] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-459723227-2305396002-3096522437-1000\...\Run: [Google Update] => C:\Users\Paulina\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc.) HKU\S-1-5-21-459723227-2305396002-3096522437-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-27] (Piriform Ltd) HKU\S-1-5-21-459723227-2305396002-3096522437-1000\...\MountPoints2: E - E:\setup.exe HKU\S-1-5-21-459723227-2305396002-3096522437-1000\...\MountPoints2: {4b721f0e-75b0-11e2-b359-ba0e4a5657d7} - E:\Autorun.exe HKU\S-1-5-21-459723227-2305396002-3096522437-1000\...\MountPoints2: {73fe7875-096c-11e1-a959-b870f4898fd9} - F:\autorun.exe HKU\S-1-5-21-459723227-2305396002-3096522437-1000\...\MountPoints2: {e8f74e52-f7c8-11e0-986c-b870f4898fd9} - E:\autorun.exe HKU\S-1-5-21-459723227-2305396002-3096522437-1000\...\MountPoints2: {f17e8554-2abe-11e3-bd40-b870f4898fd9} - F:\CMADownloader.exe HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Google Update] => C:\Users\Paulina\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc.) HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-27] (Piriform Ltd) HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: E - E:\setup.exe HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {4b721f0e-75b0-11e2-b359-ba0e4a5657d7} - E:\Autorun.exe HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {73fe7875-096c-11e1-a959-b870f4898fd9} - F:\autorun.exe HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {e8f74e52-f7c8-11e0-986c-b870f4898fd9} - E:\autorun.exe HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {f17e8554-2abe-11e3-bd40-b870f4898fd9} - F:\CMADownloader.exe HKU\S-1-5-21-459723227-2305396002-3096522437-1007\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-459723227-2305396002-3096522437-1007\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [456224 2010-07-29] () HKU\S-1-5-21-459723227-2305396002-3096522437-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-459723227-2305396002-3096522437-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [456224 2010-07-29] () HKU\S-1-5-21-459723227-2305396002-3096522437-1008\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-459723227-2305396002-3096522437-1008\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [456224 2010-07-29] () HKU\S-1-5-21-459723227-2305396002-3096522437-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-459723227-2305396002-3096522437-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [456224 2010-07-29] () HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [245432 2012-12-03] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [201136 2012-12-03] (NVIDIA Corporation) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-12-19] () ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Asystent menedżera zawartości dla PlayStation(R).lnk [2013-11-09] ShortcutTarget: Asystent menedżera zawartości dla PlayStation(R).lnk -> C:\Program Files (x86)\Sony\Content Manager Assistant\CMA.exe (Sony Computer Entertainment Inc.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{2DFCC146-12CB-4249-802B-2B422CA814AD}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{4CED5600-3CB5-405E-92D4-447F7EF68DAE}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{63FA0F38-EBCE-4C09-BD10-6442CD07F67C}: [DhcpNameServer] 192.168.42.129 Internet Explorer: ================== HKU\S-1-5-21-459723227-2305396002-3096522437-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://pl.yahoo.com?fr=fp-comodo HKU\S-1-5-21-459723227-2305396002-3096522437-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com HKU\S-1-5-21-459723227-2305396002-3096522437-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie HKU\S-1-5-21-459723227-2305396002-3096522437-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://pl.yahoo.com?fr=fp-comodo HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie URLSearchHook: HKU\S-1-5-21-459723227-2305396002-3096522437-1000 - (Brak nazwy) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - Brak pliku URLSearchHook: HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 - (Brak nazwy) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - Brak pliku SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {F5FB678A-5B7B-4CA7-8CB7-55E512888C88} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-459723227-2305396002-3096522437-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://startsear.ch/?aff=1&src=sp&cf=4aedb90c-2c1e-11e1-a865-b870f4898fd9&q={searchTerms} SearchScopes: HKU\S-1-5-21-459723227-2305396002-3096522437-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://startsear.ch/?aff=1&src=sp&cf=4aedb90c-2c1e-11e1-a865-b870f4898fd9&q={searchTerms} SearchScopes: HKU\S-1-5-21-459723227-2305396002-3096522437-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear SearchScopes: HKU\S-1-5-21-459723227-2305396002-3096522437-1000 -> {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo SearchScopes: HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://startsear.ch/?aff=1&src=sp&cf=4aedb90c-2c1e-11e1-a865-b870f4898fd9&q={searchTerms} SearchScopes: HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://startsear.ch/?aff=1&src=sp&cf=4aedb90c-2c1e-11e1-a865-b870f4898fd9&q={searchTerms} SearchScopes: HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear SearchScopes: HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = hxxp://pl.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO: PrivDog Extension -> {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} -> C:\Program Files\AdTrustMedia\PrivDog\1.8.0.15\trustedads.dll [2013-11-15] (AdTrustMedia) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\ssv.dll [2016-03-24] (Oracle Corporation) BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-03-24] (Oracle Corporation) BHO-x32: PrivDog Extension -> {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} -> C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.15\trustedads.dll [2013-11-15] (AdTrustMedia) Toolbar: HKLM-x32 - &Tłumaczenie - {0D704FAD-66E9-4F0A-BFED-4F665770DDB3} - C:\Program Files (x86)\Techland\Common\InternetTranslator\InternetTranslator.dll [2005-11-05] (Techland) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - Brak pliku Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - Brak pliku Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) FireFox: ======== FF ProfilePath: C:\Users\Paulina\AppData\Roaming\Mozilla\Firefox\Profiles\6wtfu01g.default FF Homepage: hxxp://startskins.com/4890709456/# FF Session Restore: -> [funkcja włączona] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-08] () FF Plugin: @java.com/DTPlugin,version=10.5.0 -> C:\Windows\system32\npDeployJava1.dll [2012-07-23] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2011-10-16] (Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-01-07] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-08] () FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-03-24] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-03-24] (Oracle Corporation) FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll [Brak pliku] FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2011-10-16] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-30] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-30] (Google Inc.) FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2009-09-25] (Wacom, Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-01-07] (Adobe Systems) FF Plugin HKU\S-1-5-21-459723227-2305396002-3096522437-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Paulina\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.) FF Plugin HKU\S-1-5-21-459723227-2305396002-3096522437-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Paulina\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.) FF Plugin HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @tools.google.com/Google Update;version=3 -> C:\Users\Paulina\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.) FF Plugin HKU\S-1-5-21-459723227-2305396002-3096522437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @tools.google.com/Google Update;version=9 -> C:\Users\Paulina\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2013-05-08] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\Paulina\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google) FF Plugin ProgramFiles/Appdata: C:\Users\Paulina\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-01-27] (Google) FF Extension: WOT - C:\Users\Paulina\AppData\Roaming\Mozilla\Firefox\Profiles\6wtfu01g.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-12-11] FF Extension: X-notifier - C:\Users\Paulina\AppData\Roaming\Mozilla\Firefox\Profiles\6wtfu01g.default\extensions\{37fa1426-b82d-11db-8314-0800200c9a66}.xpi [2016-01-15] FF Extension: Bitdefender QuickScan - C:\Users\Paulina\AppData\Roaming\Mozilla\Firefox\Profiles\6wtfu01g.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2016-04-27] FF Extension: PrivDog - C:\Users\Paulina\AppData\Roaming\Mozilla\Firefox\Profiles\6wtfu01g.default\Extensions\PrivDog@AdTrustMedia.com [2014-06-20] [Brak podpisu cyfrowego] FF Extension: Adblock Plus - C:\Users\Paulina\AppData\Roaming\Mozilla\Firefox\Profiles\6wtfu01g.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-02-24] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor => nie znaleziono Chrome: ======= CHR Profile: C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Prezentacje Google) - C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-03-30] CHR Extension: (Dokumenty Google) - C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-03-30] CHR Extension: (Dysk Google) - C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-30] CHR Extension: (YouTube) - C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-30] CHR Extension: (PrivDog) - C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja [2016-03-31] CHR Extension: (Arkusze Google) - C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-03-30] CHR Extension: (Dokumenty Google offline) - C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-31] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-27] CHR Extension: (Gmail) - C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-30] CHR HKLM-x32\...\Chrome\Extension: [cmaiofennmphjldldcpphcechfnnohja] - C:\Program Files (x86)\AdTrustMedia\PrivDog\PrivDog_chrome.crx [2014-04-04] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 CLPSLS; C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe [1267000 2011-11-23] (COMODO) R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5799552 2016-04-09] (COMODO) R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2271928 2016-04-09] (COMODO) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-03] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-03] (Dropbox, Inc.) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [257344 2011-02-15] (NTI Corporation) R2 pproupd; C:\Program Files (x86)\Podatnik.info\PIT pro 2015\pproupd.exe [42704 2016-02-25] (Podatnik.info Sp. z o.o.) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Brak podpisu cyfrowego] R2 TabletServiceWacom; C:\Windows\system32\Wacom_Tablet.exe [5521192 2016-04-13] (Wacom Technology, Corp.) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 1394hub; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [31648 2016-04-06] (COMODO) R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [823848 2016-04-06] (COMODO) R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [56464 2016-04-06] (COMODO) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [116248 2016-04-06] (COMODO) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-04-27] (Malwarebytes) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [526392 2011-10-16] () [Brak podpisu cyfrowego] S3 AthBTPort; system32\DRIVERS\btath_flt.sys [X] S3 BTATH_A2DP; system32\drivers\btath_a2dp.sys [X] S3 BTATH_BUS; system32\DRIVERS\btath_bus.sys [X] S3 BTATH_HCRP; system32\DRIVERS\btath_hcrp.sys [X] S3 BTATH_LWFLT; system32\DRIVERS\btath_lwflt.sys [X] S3 BTATH_RCP; system32\DRIVERS\btath_rcp.sys [X] S3 BtFilter; system32\DRIVERS\btfilter.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-04-27 18:57 - 2016-04-27 19:00 - 00033850 _____ C:\Users\Paulina\Downloads\FRST.txt 2016-04-27 18:55 - 2016-04-27 18:57 - 00000000 ____D C:\FRST 2016-04-27 18:54 - 2016-04-27 18:54 - 02376704 _____ (Farbar) C:\Users\Paulina\Downloads\FRST64.exe 2016-04-27 18:52 - 2016-04-27 18:52 - 01728000 _____ (Farbar) C:\Users\Paulina\Downloads\FRST.exe 2016-04-27 17:29 - 2016-04-27 17:29 - 00000218 _____ C:\Users\Paulina\AppData\Local\recently-used.xbel 2016-04-27 17:18 - 2016-04-27 17:18 - 65230358 _____ C:\Users\Paulina\Desktop\Logo.pdf 2016-04-27 16:39 - 2016-04-27 16:39 - 00048370 _____ C:\Users\Paulina\Desktop\Kamayu.pdf 2016-04-27 14:55 - 2016-04-27 14:55 - 00000899 _____ C:\Users\Public\Desktop\Inkscape 0.91.lnk 2016-04-27 14:54 - 2016-04-27 14:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inkscape 0.91 2016-04-27 14:54 - 2016-04-27 14:55 - 00000000 ____D C:\Program Files\Inkscape 2016-04-27 14:40 - 2016-04-27 14:40 - 03744984 _____ C:\Users\Paulina\Desktop\K.pdf 2016-04-27 13:30 - 2016-04-27 14:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-04-25 23:36 - 2016-04-27 12:52 - 00000000 ____D C:\Users\Paulina\Desktop\Praga 2016-04-21 21:21 - 2016-04-21 21:28 - 00000000 ____D C:\Users\Paulina\Desktop\Ekran 2016-04-16 11:15 - 2016-04-16 11:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-04-14 22:57 - 2016-04-23 21:50 - 00000000 ____D C:\Users\Paulina\Desktop\14.04 2016-04-14 13:28 - 2016-04-14 13:28 - 00067584 _____ C:\Users\Paulina\Desktop\PLAN.xls 2016-04-14 13:25 - 2016-04-14 13:25 - 00060416 _____ C:\Users\Paulina\Desktop\RDX 2 GRUPY 13.04.16_po zmianie_DOBRY.xls 2016-04-13 16:53 - 2016-04-13 17:02 - 00000000 ____D C:\Users\Paulina\AppData\Roaming\WTablet 2016-04-13 16:51 - 2016-04-13 16:52 - 00000000 ____D C:\Program Files (x86)\TabletPlugins 2016-04-13 16:51 - 2016-04-13 16:51 - 00015656 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomvhid.sys 2016-04-13 16:51 - 2016-04-13 16:51 - 00012848 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacommousefilter.sys 2016-04-13 16:51 - 2016-04-13 16:51 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet Wacom 2016-04-13 16:51 - 2016-04-13 16:51 - 00000000 ____D C:\Windows\system32\WTablet 2016-04-13 16:51 - 2009-11-24 11:25 - 09104680 _____ (Wacom Technology, Corp.) C:\Windows\system32\WacomTablet.cpl 2016-04-13 16:51 - 2009-09-17 13:42 - 01653980 _____ C:\Windows\system32\WacomTablet.znc 2016-04-13 16:50 - 2016-04-13 16:51 - 00000000 ____D C:\Program Files (x86)\Tablet 2016-04-13 16:50 - 2016-04-13 16:50 - 05521192 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Tablet.exe 2016-04-13 16:50 - 2009-11-24 11:25 - 00486184 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Tablet.dll 2016-04-13 16:50 - 2009-11-24 11:25 - 00412456 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Tablet.dll 2016-04-13 16:50 - 2009-11-24 11:20 - 00285184 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wintab32.dll 2016-04-13 16:50 - 2009-11-24 11:16 - 00350208 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wintab32.dll 2016-04-13 16:49 - 2016-04-13 16:49 - 13784360 _____ C:\Users\Paulina\Desktop\pro612-5_int.exe 2016-04-12 22:26 - 2016-04-18 19:12 - 00000000 ____D C:\Users\Paulina\Desktop\Freciuszki 2016-04-07 17:14 - 2016-04-07 17:17 - 00000000 ____D C:\Users\Paulina\Desktop\Muzyka 2016-04-07 17:13 - 2016-04-07 17:13 - 00000000 ____D C:\Users\Paulina\Desktop\Egzemplarze 2016-04-07 14:28 - 2013-03-02 09:39 - 88234528 _____ C:\Users\Paulina\Desktop\blackout.mov 2016-04-06 19:09 - 2016-04-06 19:09 - 00392528 _____ C:\Users\Paulina\Desktop\Parrots.mp4 2016-04-02 23:35 - 2016-04-02 23:54 - 4069134530 _____ C:\Users\Paulina\Desktop\schubert_spektakl.mp4 2016-03-31 14:44 - 2016-04-13 17:00 - 00000000 ____D C:\Users\Paulina\AppData\Local\FSDART 2016-03-31 14:44 - 2016-03-31 14:52 - 00000000 ____D C:\ProgramData\F-Secure 2016-03-31 14:44 - 2016-03-31 14:44 - 00002982 _____ C:\Windows\System32\Tasks\{59B2622A-2399-40BF-A55E-30DE4C9CE930} 2016-03-31 14:23 - 2016-03-31 14:23 - 06218784 _____ (Facebook Inc.) C:\Users\Paulina\Desktop\Fsecure_T10206167836976275T_.exe 2016-03-30 23:15 - 2016-03-30 23:15 - 00002976 _____ C:\Windows\System32\Tasks\{C3445296-D258-43E4-9B97-011E81BDE1CE} 2016-03-30 23:08 - 2016-04-11 21:33 - 00002205 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-03-30 23:07 - 2016-04-27 18:12 - 00001050 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-03-30 23:07 - 2016-04-26 23:12 - 00001046 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-03-30 23:07 - 2016-03-30 23:07 - 00004046 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-03-30 23:07 - 2016-03-30 23:07 - 00003794 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-03-30 22:19 - 2016-03-30 22:19 - 00121344 ____H C:\Users\Paulina\Desktop\~WRL0002.tmp ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-04-27 18:53 - 2011-11-16 22:45 - 00000000 ____D C:\Users\Paulina\AppData\Roaming\FileZilla 2016-04-27 18:52 - 2011-11-07 20:01 - 01474832 _____ C:\Windows\system32\Drivers\sfi.dat 2016-04-27 18:51 - 2014-12-12 15:06 - 01766822 _____ C:\Windows\system32\Drivers\fvstore.dat 2016-04-27 18:36 - 2014-04-07 18:52 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-04-27 18:35 - 2014-01-09 21:00 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-459723227-2305396002-3096522437-1000UA.job 2016-04-27 18:34 - 2014-04-07 18:51 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-04-27 18:34 - 2014-04-07 18:51 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-04-27 18:34 - 2014-04-07 18:51 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-04-27 18:34 - 2014-04-07 18:51 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2016-04-27 18:34 - 2014-04-07 18:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2016-04-27 18:32 - 2015-06-03 17:48 - 00001154 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job 2016-04-27 18:21 - 2014-06-12 10:38 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-04-27 17:51 - 2009-07-14 06:45 - 00024608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-04-27 17:51 - 2009-07-14 06:45 - 00024608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-04-27 17:46 - 2011-11-07 20:16 - 00000000 ____D C:\Users\Public\Documents\COMODO 2016-04-27 14:26 - 2012-07-07 12:35 - 00000000 ____D C:\Users\Paulina\AppData\Roaming\QuickScan 2016-04-27 14:24 - 2014-02-07 22:31 - 00007944 _____ C:\Windows\wininit.ini 2016-04-27 14:24 - 2012-04-26 23:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-04-27 08:32 - 2015-06-03 17:48 - 00001150 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job 2016-04-26 23:32 - 2011-10-15 22:47 - 00000000 ____D C:\Users\Paulina\AppData\Local\CrashDumps 2016-04-26 20:51 - 2014-01-09 21:00 - 00001014 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-459723227-2305396002-3096522437-1000Core.job 2016-04-23 21:52 - 2015-02-20 01:40 - 00000000 ____D C:\Users\Paulina\Desktop\Kamayu-Art 2016-04-23 21:49 - 2015-06-25 22:20 - 00000000 ____D C:\Users\Paulina\Desktop\zdj 2016-04-18 19:12 - 2012-06-07 21:25 - 00000132 _____ C:\Users\Paulina\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG 2016-04-16 11:15 - 2015-06-03 17:48 - 00000000 ____D C:\Program Files (x86)\Dropbox 2016-04-15 02:00 - 2014-08-15 23:19 - 00000000 ____D C:\Users\Paulina\AppData\Local\Adobe 2016-04-13 17:07 - 2015-06-03 17:51 - 00000000 ___RD C:\Users\Paulina\Dropbox 2016-04-13 17:07 - 2011-10-15 16:44 - 00000000 ____D C:\ProgramData\clear.fi 2016-04-13 17:06 - 2015-06-03 17:48 - 00000000 ____D C:\Users\Paulina\AppData\Local\Dropbox 2016-04-13 17:02 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-04-13 16:58 - 2011-10-17 18:56 - 00000000 ____D C:\Users\Paulina\AppData\Roaming\SoftGrid Client 2016-04-13 16:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-04-13 16:43 - 2012-03-19 16:57 - 00000000 ____D C:\Users\Paulina\Documents\foobar2000 2016-04-09 13:37 - 2011-06-04 17:01 - 01259910 _____ C:\Windows\system32\perfh015.dat 2016-04-09 13:37 - 2011-06-04 17:01 - 00436200 _____ C:\Windows\system32\perfc015.dat 2016-04-09 10:11 - 2012-02-18 01:54 - 00000000 ____D C:\Users\Paulina\AppData\Local\ChomikBox 2016-04-08 15:21 - 2014-06-12 10:38 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-04-08 15:21 - 2012-05-14 12:33 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-04-08 15:21 - 2011-10-15 21:58 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-04-08 14:40 - 2012-02-18 01:55 - 00000000 ____D C:\Users\Paulina\.gstreamer-0.10 2016-04-07 14:28 - 2009-07-14 07:13 - 01814416 _____ C:\Windows\system32\PerfStringBackup.INI 2016-04-06 14:19 - 2011-10-07 19:48 - 00116248 _____ (COMODO) C:\Windows\system32\Drivers\inspect.sys 2016-04-06 14:19 - 2011-10-07 19:47 - 00056464 _____ (COMODO) C:\Windows\system32\Drivers\cmdhlp.sys 2016-04-06 14:18 - 2011-10-07 19:47 - 00823848 _____ (COMODO) C:\Windows\system32\Drivers\cmdGuard.sys 2016-04-06 14:18 - 2011-10-07 19:47 - 00031648 _____ (COMODO) C:\Windows\system32\Drivers\cmderd.sys 2016-04-06 14:17 - 2011-10-07 19:47 - 00051800 _____ (COMODO) C:\Windows\system32\cmdcsr.dll 2016-04-06 14:16 - 2011-10-07 19:47 - 00596232 _____ (COMODO) C:\Windows\system32\guard64.dll 2016-04-06 14:16 - 2011-10-07 19:47 - 00461648 _____ (COMODO) C:\Windows\SysWOW64\guard32.dll 2016-04-06 14:14 - 2014-04-04 21:39 - 00365752 _____ (COMODO) C:\Windows\system32\cmdvrt64.dll 2016-04-06 14:14 - 2014-04-04 21:39 - 00051896 _____ (COMODO) C:\Windows\system32\cmdkbd64.dll 2016-04-06 14:12 - 2014-04-04 21:39 - 00296120 _____ (COMODO) C:\Windows\SysWOW64\cmdvrt32.dll 2016-04-06 14:11 - 2014-04-04 21:39 - 00046776 _____ (COMODO) C:\Windows\SysWOW64\cmdkbd32.dll 2016-03-31 01:46 - 2011-12-18 14:49 - 00000000 ____D C:\Program Files (x86)\DownVision 2016-03-30 23:47 - 2012-11-11 15:56 - 00000000 ____D C:\Users\Paulina\AppData\Local\Google 2016-03-30 23:08 - 2012-11-11 15:56 - 00000000 ____D C:\Program Files (x86)\Google ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-02-02 19:42 - 2015-10-04 19:24 - 0000034 _____ () C:\Users\Paulina\AppData\Roaming\AdobeWLCMCache.dat 2015-03-22 12:08 - 2015-03-22 12:08 - 0000132 _____ () C:\Users\Paulina\AppData\Roaming\Preferencje Adobe CS5 dla formatu AIFF 2013-02-11 02:09 - 2016-02-29 15:58 - 0000132 _____ () C:\Users\Paulina\AppData\Roaming\Preferencje Adobe CS5 dla formatu BMP 2014-02-11 02:35 - 2015-12-01 13:12 - 0000132 _____ () C:\Users\Paulina\AppData\Roaming\Preferencje Adobe CS5 dla formatu GIF 2012-06-07 21:25 - 2016-04-18 19:12 - 0000132 _____ () C:\Users\Paulina\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG 2015-02-11 22:00 - 2015-10-12 16:22 - 0001496 _____ () C:\Users\Paulina\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs 2012-11-13 16:20 - 2012-11-13 16:32 - 0004608 _____ () C:\Users\Paulina\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2016-04-27 17:29 - 2016-04-27 17:29 - 0000218 _____ () C:\Users\Paulina\AppData\Local\recently-used.xbel 2014-02-08 00:41 - 2014-02-08 00:41 - 0007597 _____ () C:\Users\Paulina\AppData\Local\Resmon.ResmonCfg 2011-06-04 16:30 - 2011-06-04 16:33 - 0015211 _____ () C:\ProgramData\ArcadeDeluxe5.log 2012-02-09 02:07 - 2012-02-09 02:07 - 0000008 __RSH () C:\ProgramData\FFB2F0490C.sys 2011-04-06 12:36 - 2010-03-02 23:59 - 0131984 _____ () C:\ProgramData\FullRemove.exe 2012-02-09 02:07 - 2013-10-09 20:22 - 0001890 ___SH () C:\ProgramData\KGyGaAvL.sys 2015-11-06 14:31 - 2015-11-06 14:31 - 0000016 _____ () C:\ProgramData\mntemp 2012-06-08 14:58 - 2012-06-08 14:58 - 0000032 _____ () C:\ProgramData\Temp.log ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2016-04-19 18:30 ==================== Koniec FRST.txt ============================