Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:09-05-2016
Uruchomiony przez Paweł (administrator)  KOMPUTER (10-05-2016 15:55:52)
Uruchomiony z C:\Users\Paweł\Desktop
Załadowane profile: Paweł (Dostępne profile: Paweł)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\IOMonitorSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Palit Microsystems Ltd.) C:\Program Files (x86)\Thunder Master\THPanel.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(MY.COM B.V.) C:\Users\Paweł\AppData\Local\MyComGames\MyComGames.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-21] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-01] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-12-20] (Intel Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKU\S-1-5-21-933518959-968290592-3554862803-1000\...\Run: [ASRock A-Tuning] => [X]
HKU\S-1-5-21-933518959-968290592-3554862803-1000\...\Run: [THPanel] => C:\Program Files (x86)\Thunder Master\THPanel.exe [2197472 2015-05-29] (Palit Microsystems Ltd.)
HKU\S-1-5-21-933518959-968290592-3554862803-1000\...\Run: [MyComGames] => C:\Users\Paweł\AppData\Local\MyComGames\MyComGames.exe [4888432 2016-04-29] (MY.COM B.V.)
HKU\S-1-5-21-933518959-968290592-3554862803-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [51656320 2016-04-08] (Skype Technologies S.A.)
HKU\S-1-5-21-933518959-968290592-3554862803-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3077712 2016-04-30] (Valve Corporation)
HKU\S-1-5-21-933518959-968290592-3554862803-1000\...\Run: [Tok-Cirrhatus] => 0
HKU\S-1-5-21-933518959-968290592-3554862803-1000\...\Policies\system: [DisableRegistryTools] 1
HKU\S-1-5-21-933518959-968290592-3554862803-1000\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-21-933518959-968290592-3554862803-1000\...\Policies\Explorer: [NoFolderOptions] 1
HKU\S-1-5-21-933518959-968290592-3554862803-1000\...\MountPoints2: {3b258545-81d5-11e5-971a-806e6f6e6963} - D:\ASRSetup.exe
Startup: C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk [2016-05-10]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
AlternateShell: 

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 194.204.152.34 194.204.159.1
Tcpip\..\Interfaces\{50481529-6039-4A8B-A113-D383AAA14B3F}: [DhcpNameServer] 194.204.152.34 194.204.159.1

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-933518959-968290592-3554862803-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Brak nazwy -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> Brak pliku
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-04-29] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: Brak nazwy -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> Brak pliku
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\IPS\IPSBHO.DLL => Brak pliku
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-04-29] (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-933518959-968290592-3554862803-1000 -> Brak nazwy - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Brak pliku
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-04-29] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-04-29] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-05-28] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-05-28] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin HKU\S-1-5-21-933518959-968290592-3554862803-1000: @my.com/Games -> C:\Users\Paweł\AppData\Local\MyComGames\NPMyComDetector.dll [2016-01-26] (MY.COM B.V.)

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.94\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.94\ppGoogleNaClPluginChrome.dll => Brak pliku
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.94\pdf.dll => Brak pliku
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll => Brak pliku
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Profile: C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Skype) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-05-07]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Paweł\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-04-29]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ASRockIOMon; C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\IOMonitorSrv.exe [454656 2013-07-25] () [Brak podpisu cyfrowego]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-04-29] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-04-29] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-01] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Brak podpisu cyfrowego]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-06-01] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-06-01] (NVIDIA Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 AsrDrv101; C:\Windows\SysWOW64\Drivers\AsrDrv101.sys [22280 2015-11-02] (ASRock Incorporation)
R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [40200 2013-08-02] (ASRock Inc.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-21] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-01] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-06-01] (NVIDIA Corporation)
S3 AsrSetupDrv; \??\C:\Windows\SysWOW64\Drivers\AsrSetupDrv.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-05-10 15:55 - 2016-05-10 15:56 - 00013857 _____ C:\Users\Paweł\Desktop\FRST.txt
2016-05-10 15:48 - 2016-05-10 15:48 - 00593952 _____ (Duplex Secure Ltd) C:\Users\Paweł\Downloads\SPTDinst-v189-x64.exe
2016-05-10 15:48 - 2016-05-10 15:46 - 00380928 _____ C:\Users\Paweł\Desktop\gn2t6jss.exe
2016-05-10 15:46 - 2016-05-10 15:46 - 00380928 _____ C:\Users\Paweł\Downloads\gn2t6jss.exe
2016-05-10 15:40 - 2016-05-10 15:55 - 00000000 ____D C:\FRST
2016-05-10 15:40 - 2016-05-10 15:40 - 02381312 _____ (Farbar) C:\Users\Paweł\Desktop\FRST64.exe
2016-05-10 14:17 - 2016-05-10 14:17 - 00000000 ____D C:\Users\Paweł\Documents\Notesy programu OneNote
2016-05-10 14:04 - 2016-05-10 14:04 - 00002117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2016-05-10 14:04 - 2016-05-10 14:04 - 00001912 _____ C:\Windows\epplauncher.mif
2016-05-10 14:04 - 2016-05-10 14:04 - 00000000 ____D C:\Program Files\Microsoft Security Client
2016-05-10 14:04 - 2016-05-10 14:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2016-05-10 14:03 - 2016-05-10 14:04 - 00000000 ____D C:\ae02acc2903526c5993ec9ba7cfacd
2016-05-10 14:03 - 2016-05-10 14:03 - 00040894 _____ C:\Users\Paweł\AppData\Local\Update.16.Bron.Tok.bin
2016-05-10 13:58 - 2016-05-10 13:58 - 14346432 _____ (Microsoft Corporation) C:\Users\Paweł\Downloads\mseinstall.exe
2016-05-10 12:03 - 2016-05-10 12:03 - 00000000 ____D C:\Users\Paweł\AppData\Local\Bron.tok-16-10
2016-05-09 23:32 - 2016-05-09 23:32 - 00003046 _____ C:\Windows\System32\Tasks\{0F5D21E0-7785-4DBE-94A1-22478C066C2E}
2016-05-09 23:22 - 2016-05-09 23:22 - 00040894 _____ C:\Users\Paweł\AppData\Local\Bron.tok.A16.em.bin
2016-05-09 21:11 - 2016-05-09 21:11 - 00000000 ____D C:\Users\Paweł\AppData\Local\Ok-SendMail-Bron-tok
2016-05-09 21:09 - 2016-05-09 21:19 - 00000000 ____D C:\Users\Paweł\AppData\Local\Loc.Mail.Bron.Tok
2016-05-09 21:09 - 2016-05-09 21:09 - 00000051 _____ C:\Users\Paweł\AppData\Local\Kosong.Bron.Tok.txt
2016-05-09 21:03 - 2016-05-09 21:03 - 00000000 ____D C:\Users\Paweł\AppData\Local\Bron.tok-16-9
2016-05-09 00:58 - 2016-05-10 14:02 - 00002966 _____ C:\Windows\System32\Tasks\AsrSP.exe
2016-05-08 16:35 - 2016-05-08 16:38 - 17832960 _____ C:\Users\Paweł\Downloads\IKEA Home Planner - Kitchen 1.9.9.1 PL.exe
2016-05-08 16:33 - 2016-05-08 16:33 - 20488704 _____ C:\Users\Paweł\Downloads\IKEA_Home_Planner_FY10.exe
2016-05-04 21:30 - 2016-05-04 21:30 - 02103864 _____ C:\Users\Paweł\Downloads\201306PKE.zip
2016-05-02 19:30 - 2016-05-02 19:30 - 00000000 ____D C:\Users\Paweł\AppData\Local\EIDOS
2016-05-02 19:17 - 2016-05-02 19:17 - 00000000 ____D C:\Program Files (x86)\Eidos
2016-05-02 18:30 - 2016-05-02 18:30 - 00098304 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt.dll
2016-05-02 18:26 - 2016-05-02 18:26 - 00566616 _____ C:\Users\Paweł\Downloads\dontlinkthefile_3danalyzer-v236.exe
2016-05-02 18:21 - 2016-05-02 18:21 - 00000000 ____D C:\Users\Paweł\Downloads\lego1_patch2
2016-04-26 16:04 - 2016-04-26 16:04 - 00468478 _____ C:\Users\Paweł\Downloads\pkla_schematy_bmp.zip
2016-04-25 21:16 - 2016-04-25 21:16 - 00462354 ____N C:\Users\Paweł\Downloads\06.11.2012 Raport płacowy Polska i Świat.pdf
2016-04-24 22:27 - 2016-04-24 22:27 - 00494133 ____N C:\Users\Paweł\Downloads\BC147_CEMI_elenota.pl.pdf
2016-04-24 22:15 - 2016-04-24 22:15 - 00052395 ____N C:\Users\Paweł\Downloads\BD140-16.pdf
2016-04-22 12:28 - 2016-04-22 12:28 - 00000000 ____D C:\Users\Paweł\Downloads\Gothic_1-2_fullscreen_fixes (1)
2016-04-22 12:27 - 2016-04-22 12:27 - 00002061 _____ C:\Users\Paweł\Downloads\Gothic_1-2_fullscreen_fixes (1).zip
2016-04-22 12:21 - 2016-04-22 12:21 - 00000000 ____D C:\Users\Paweł\Downloads\Gothic_1-2_fullscreen_fixes
2016-04-22 12:20 - 2016-04-22 12:20 - 00002061 _____ C:\Users\Paweł\Downloads\Gothic_1-2_fullscreen_fixes.zip
2016-04-19 22:24 - 2016-04-19 22:24 - 01629271 ____N C:\Users\Paweł\Downloads\Temat9 - Projektowanie dla ucznia.pdf
2016-04-17 20:10 - 2016-04-17 20:10 - 00069288 _____ C:\Users\Paweł\Downloads\Cw4.pkt
2016-04-17 18:15 - 2016-04-17 18:15 - 00001320 _____ C:\Users\Paweł\Downloads\Gothic-borderless.sdb
2016-04-17 00:06 - 2016-04-17 00:06 - 00001027 _____ C:\Users\Paweł\Desktop\Q-typing 1.3.lnk
2016-04-17 00:06 - 2016-04-17 00:06 - 00000000 ____D C:\Users\Paweł\Downloads\q-typing
2016-04-17 00:06 - 2016-04-17 00:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Q-Typing
2016-04-17 00:06 - 2016-04-17 00:06 - 00000000 ____D C:\Program Files (x86)\Q-Typing
2016-04-10 21:08 - 2016-04-10 21:08 - 00401998 _____ C:\Users\Paweł\Downloads\PrtScr.rar
2016-04-10 21:08 - 2016-04-10 21:08 - 00000000 ____D C:\Users\Paweł\Downloads\PrtScr

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-05-10 15:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2016-05-10 15:23 - 2016-02-06 00:20 - 00000000 ____D C:\Users\Paweł\Documents\Mount&Blade Warband
2016-05-10 15:23 - 2009-07-14 20:09 - 00000000 ____D C:\Windows\ShellNew
2016-05-10 15:21 - 2015-11-02 23:18 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-10 15:00 - 2015-12-19 20:32 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Skype
2016-05-10 14:09 - 2009-07-14 06:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-05-10 14:09 - 2009-07-14 06:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-05-10 14:08 - 2009-07-14 19:55 - 00740732 _____ C:\Windows\system32\perfh015.dat
2016-05-10 14:08 - 2009-07-14 19:55 - 00155804 _____ C:\Windows\system32\perfc015.dat
2016-05-10 14:08 - 2009-07-14 07:13 - 01671648 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-10 14:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-05-10 14:02 - 2016-02-11 15:35 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2016-05-10 14:02 - 2016-02-03 23:04 - 00000000 ____D C:\Program Files (x86)\Steam
2016-05-10 14:02 - 2015-11-06 00:37 - 00000000 ____D C:\Users\Paweł\AppData\Local\MyComGames
2016-05-10 14:02 - 2015-11-02 23:38 - 00000000 ____D C:\ProgramData\NVIDIA
2016-05-10 14:02 - 2015-11-02 23:22 - 00000000 ____D C:\ProgramData\Norton
2016-05-10 14:02 - 2015-11-02 23:18 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-10 14:02 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-10 13:58 - 2015-11-06 18:00 - 00000000 ____D C:\Windows\System32\Tasks\Remediation
2016-05-10 12:21 - 2016-02-23 00:47 - 00000188 _____ C:\Users\Paweł\.packettracer
2016-05-09 23:31 - 2016-03-31 23:11 - 00004016 _____ C:\Users\Paweł\AppData\Roaming\LTspiceIV.ini
2016-05-09 21:18 - 2015-11-02 22:54 - 00000000 ____D C:\Users\Paweł\AppData\Local\VirtualStore
2016-05-07 10:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-05-06 18:11 - 2015-12-19 20:32 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-05-03 11:23 - 2015-11-02 23:18 - 00002201 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-03 11:23 - 2015-11-02 23:18 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-02 19:22 - 2015-11-02 23:12 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-05-02 19:19 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-05-02 18:12 - 2015-12-22 20:36 - 00000000 ____D C:\Users\Paweł\AppData\Local\CrashDumps
2016-04-30 17:12 - 2015-12-22 19:14 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-04-29 22:16 - 2015-11-23 20:00 - 00000000 ____D C:\Users\Paweł\AppData\LocalLow\Temp
2016-04-27 16:30 - 2015-12-19 20:31 - 00000000 ____D C:\ProgramData\Skype
2016-04-22 09:57 - 2016-02-01 22:44 - 00453288 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-04-20 22:51 - 2015-11-03 22:01 - 00000000 ____D C:\Users\Paweł\Desktop\różne
2016-04-16 13:13 - 2016-03-31 18:05 - 00019446 _____ C:\Users\Paweł\Desktop\gothic.ini

==================== Pliki w katalogu głównym wybranych folderów =======

2016-03-31 23:11 - 2016-05-09 23:31 - 0004016 _____ () C:\Users\Paweł\AppData\Roaming\LTspiceIV.ini
2016-05-09 23:22 - 2016-05-09 23:22 - 0040894 _____ () C:\Users\Paweł\AppData\Local\Bron.tok.A16.em.bin
2016-05-09 21:09 - 2016-05-09 21:09 - 0000051 _____ () C:\Users\Paweł\AppData\Local\Kosong.Bron.Tok.txt
2016-05-10 14:03 - 2016-05-10 14:03 - 0040894 _____ () C:\Users\Paweł\AppData\Local\Update.16.Bron.Tok.bin
2015-11-02 23:12 - 2015-11-02 23:12 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Niektóre pliki w TEMP:
====================
C:\Users\Paweł\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Paweł\AppData\Local\Temp\ose00000.exe
C:\Users\Paweł\AppData\Local\Temp\_is492.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-05-09 15:35

==================== Koniec  FRST.txt ============================