Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:15-06-2016 Uruchomiony przez zbyszek (administrator) ASUS (15-06-2016 19:50:41) Uruchomiony z C:\temp Załadowane profile: zbyszek (Dostępne profile: zbyszek & user & Administrator) Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) Język: Polski Internet Explorer Wersja 8 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe (Atheros) C:\WINDOWS\system32\acs.exe () C:\Program Files\Brother\BRAdmin Professional 3\bratimer.exe (InterVideo Inc.) C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe (SafeNet Inc.) C:\WINDOWS\system32\hasplms.exe (Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (Atheros Communications, Inc.) C:\Program Files\Atheros\ACU.exe () C:\Program Files\ASUS\ATK Media\DMedia.exe () C:\Program Files\ATKOSD2\ATKOSD2.exe (CyberLink Corp.) C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\PCMAgent.exe (CyberLink) C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe (CyberLink Corp.) C:\Program Files\ASUS\AI TouchMedia\PlayMovie\PMVService.exe (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE (ASUS) C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe (ASUS) C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe (ASUS) C:\Program Files\ASUS\ATK Hotkey\HControl.exe () C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe (Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Agito d.o.o.) C:\Program Files\HILTI\PROFIS AutoUpdate\Hilti.AutoUpdate.Tray.exe (Nokia) C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe (ASUS) C:\WINDOWS\AsScrPro.exe (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe (Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe (ASUS) C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe (Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe (ASUS) C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files\ASUS\ATK Hotkey\WDC.exe (Nokia) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe (Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe (Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [ACU] => C:\Program Files\Atheros\ACU.exe [450649 2008-07-07] (Atheros Communications, Inc.) HKLM\...\Run: [ATKMEDIA] => C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [61440 2008-02-01] () HKLM\...\Run: [ATKOSD2] => C:\Program Files\ATKOSD2\ATKOSD2.exe [7766016 2008-01-23] () HKLM\...\Run: [PCMAgent] => C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\PCMAgent.exe [212992 2008-06-11] (CyberLink Corp.) HKLM\...\Run: [CLMLServer] => C:\Program Files\ASUS\AI TouchMedia\AI TouchMedia\Kernel\CLML\CLMLSvc.exe [196608 2008-06-11] (CyberLink) HKLM\...\Run: [PlayMovie] => C:\Program Files\ASUS\AI TouchMedia\PlayMovie\PMVService.exe [172032 2008-05-19] (CyberLink Corp.) HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16851968 2008-09-09] (Realtek Semiconductor Corp.) HKLM\...\Run: [MsgTranAgt] => C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe [117304 2008-08-18] (ASUS) HKLM\...\Run: [HControlUser] => C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [98304 2008-08-18] (ASUS) HKLM\...\Run: [ATKHOTKEY] => C:\Program Files\ASUS\ATK Hotkey\HControl.exe [170552 2008-12-29] (ASUS) HKLM\...\Run: [BluetoothAuthenticationAgent] => rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent HKLM\...\Run: [NeroFilterCheck] => C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh) HKLM\...\Run: [Samsung PanelMgr] => C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe [536576 2008-02-21] () HKLM\...\Run: [RemoteControl] => C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [32768 2004-11-02] (Cyberlink Corp.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1024000 2007-12-06] (Synaptics, Inc.) HKLM\...\Run: [InstantAccess] => C:\Program Files\ScannerU\TBRIDGE\BIN\InstantAccess.exe [37376 1998-07-08] () HKLM\...\Run: [RegisterDropHandler] => C:\Program Files\ScannerU\TBRIDGE\BIN\RegisterDropHandler.exe [22528 1998-07-08] () HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2012-02-20] (Apple Inc.) HKLM\...\Run: [PROFIS AutoUpdate] => C:\Program Files\Hilti\PROFIS AutoUpdate\Hilti.AutoUpdate.Tray.exe [474112 2011-09-26] (Agito d.o.o.) HKLM\...\Run: [NokiaMServer] => C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup HKLM\...\Run: [ASUS Screen Saver Protector] => C:\WINDOWS\AsScrPro.exe [3054136 2009-07-03] (ASUS) HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [1753192 2010-11-04] () HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [NSU_agent] => C:\Program Files\Nokia\Nokia Software Updater\nsu3ui_agent.exe [190768 2012-02-28] () HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\qttask.exe [421888 2012-04-18] (Apple Inc.) HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [4513792 2013-12-19] (Brother Industries, Ltd.) HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0 HKLM\...\Policies\Explorer: [HideSCAHealth] 0 HKU\S-1-5-19\...\Policies\Explorer: [TaskbarNoNotification] 0 HKU\S-1-5-19\...\Policies\Explorer: [HideSCAHealth] 0 HKU\S-1-5-20\...\Policies\Explorer: [TaskbarNoNotification] 0 HKU\S-1-5-20\...\Policies\Explorer: [HideSCAHealth] 0 HKU\S-1-5-21-1645522239-823518204-682003330-1003\...\Run: [Adobe Reader Synchronizer] => C:\Program Files\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe [1104256 2014-05-08] (Adobe Systems Incorporated) HKU\S-1-5-21-1645522239-823518204-682003330-1003\...\Run: [TomTomHOME.exe] => C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176 2014-12-19] (TomTom) HKU\S-1-5-21-1645522239-823518204-682003330-1003\...\Run: [PC Suite Tray] => C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [1516632 2012-06-26] (Nokia) HKU\S-1-5-21-1645522239-823518204-682003330-1003\...\Policies\Explorer: [TaskbarNoNotification] 0 HKU\S-1-5-21-1645522239-823518204-682003330-1003\...\Policies\Explorer: [HideSCAHealth] 0 HKU\S-1-5-21-1645522239-823518204-682003330-1003\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [9216 2008-04-14] (Microsoft Corporation) HKU\S-1-5-18\...\Policies\Explorer: [TaskbarNoNotification] 0 HKU\S-1-5-18\...\Policies\Explorer: [HideSCAHealth] 0 ShellIconOverlayIdentifiers: [Uchwyt nakładania ikony podpisu cyfrowego] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2010-02-10] (Autodesk, Inc.) Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Przyspieszenie uruchomienia programu AutoCAD.lnk [2009-07-01] ShortcutTarget: Przyspieszenie uruchomienia programu AutoCAD.lnk -> C:\Program Files\Common Files\Autodesk Shared\acstart17.exe (Autodesk, Inc) Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\STIMON.lnk [2016-05-06] ShortcutTarget: STIMON.lnk -> C:\Program Files\USB2.0 UVC WebCam\USB2.0 UVC WebCam\STIMON.exe (Silicon Motion) GroupPolicyScripts: Ograniczenia <======= UWAGA GroupPolicyScripts\User: Ograniczenia <======= UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 62.179.1.60 62.179.1.61 Tcpip\..\Interfaces\{4D2B5AA7-AD5C-47D0-9365-29763DCA774A}: [DhcpNameServer] 62.179.1.60 62.179.1.61 Tcpip\..\Interfaces\{E7EE214D-0998-4249-B93E-5B1BA69D89F4}: [DhcpNameServer] 62.179.1.60 62.179.1.61 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA HKU\S-1-5-21-1645522239-823518204-682003330-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-1645522239-823518204-682003330-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1645522239-823518204-682003330-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch URLSearchHook: HKLM -> Domyślne = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D} SearchScopes: HKU\S-1-5-21-1645522239-823518204-682003330-1003 -> DefaultScope {679548A4-72FD-4214-A0B8-9E3ACF479229} URL = hxxp://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=1I7AURU_plPL498 SearchScopes: HKU\S-1-5-21-1645522239-823518204-682003330-1003 -> {679548A4-72FD-4214-A0B8-9E3ACF479229} URL = hxxp://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=1I7AURU_plPL498 BHO: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files\TechSmith\Snagit 10\SnagitBHO.dll [2010-04-13] (TechSmith Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-04-14] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-04-14] (Oracle Corporation) Toolbar: HKLM - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\Snagit 10\SnagitIEAddin.dll [2010-04-13] (TechSmith Corporation) Toolbar: HKU\S-1-5-21-1645522239-823518204-682003330-1003 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Brak pliku Toolbar: HKU\S-1-5-21-1645522239-823518204-682003330-1003 -> Brak nazwy - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - Brak pliku DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.7.cab DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1245959445593 DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_55-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0055-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_55-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Documents and Settings\zbyszek\Dane aplikacji\Mozilla\Firefox\Profiles\d51neqz8.default-1424708365312 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-24] () FF Plugin: @cuminas.jp/DjVuPlugin -> C:\Program Files\Cuminas\Document Express DjVu Plug-in\npdjvu.dll [2015-05-08] (Cuminas Corporation) FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google) FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-04-14] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-04-14] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-08-03] (Adobe Systems Inc.) FF Plugin: Web Components -> C:\Program Files\Web Components\npWebVideoPlugin.dll [2014-09-17] () FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-08-03] (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\default-search.xml [2014-05-19] FF Extension: Adblock Plus - C:\Documents and Settings\zbyszek\Dane aplikacji\Mozilla\Firefox\Profiles\d51neqz8.default-1424708365312\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-05-02] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2016-06-08] [Brak podpisu cyfrowego] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2016-06-08] [Brak podpisu cyfrowego] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2016-06-08] [Brak podpisu cyfrowego] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-07-01] [Brak podpisu cyfrowego] FF HKLM\...\Firefox\Extensions: [{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension FF Extension: Firefox Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension [2010-07-01] [Brak podpisu cyfrowego] FF HKLM\...\Thunderbird\Extensions: [{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}] - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension FF Extension: Thunderbird Address Book Synchronisation Extension - C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension [2010-07-01] [Brak podpisu cyfrowego] ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 ACS; C:\WINDOWS\system32\acs.exe [467029 2008-07-07] (Atheros) [Brak podpisu cyfrowego] R2 BRA_Scheduler; C:\Program Files\Brother\BRAdmin Professional 3\bratimer.exe [99328 2014-11-25] () [Brak podpisu cyfrowego] R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [Brak podpisu cyfrowego] R2 Capture Device Service; C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe [198168 2007-03-06] (InterVideo Inc.) R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4180576 2010-09-27] (SafeNet Inc.) S4 Hilti PROFIS AutoUpdate Service; C:\Program Files\Hilti\PROFIS AutoUpdate\Hilti.AutoUpdate.Service.exe [206336 2011-09-26] (Agito d.o.o.) [Brak podpisu cyfrowego] R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-04-14] (Oracle Corporation) S3 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [53248 2005-07-24] (Hewlett-Packard Company) [Brak podpisu cyfrowego] S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155520 2015-06-10] (Avanquest Software) R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [67056 2007-03-03] (Ulead Systems, Inc.) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 aksfridge; C:\WINDOWS\system32\drivers\aksfridge.sys [352256 2009-01-16] (Aladdin Knowledge Systems Ltd.) S3 akshasp; C:\WINDOWS\System32\DRIVERS\akshasp.sys [238208 2009-03-13] (Aladdin Knowledge Systems Ltd.) S3 aksusb; C:\WINDOWS\System32\DRIVERS\aksusb.sys [16384 2009-06-22] (Aladdin Knowledge Systems Ltd.) S3 btaudio; C:\WINDOWS\System32\drivers\btaudio.sys [534440 2008-04-15] (Broadcom Corporation.) R3 BTDriver; C:\WINDOWS\System32\DRIVERS\btport.sys [37160 2008-02-04] (Broadcom Corporation.) R3 BTKRNL; C:\WINDOWS\System32\DRIVERS\btkrnl.sys [990632 2008-04-15] (Broadcom Corporation.) S3 BTWDNDIS; C:\WINDOWS\System32\DRIVERS\btwdndis.sys [156392 2007-09-20] (Broadcom Corporation.) S3 btwhid; C:\WINDOWS\System32\DRIVERS\btwhid.sys [57384 2008-03-10] (Broadcom Corporation.) R2 BulkUsb; C:\WINDOWS\System32\DRIVERS\usbscan.sys [14976 2013-07-03] (Microsoft Corporation) S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation) S2 DgiVecp; C:\WINDOWS\system32\Drivers\DgiVecp.sys [41984 2007-10-22] (Samsung Electronics Co., Ltd.) [Brak podpisu cyfrowego] S3 GVCplDrv; C:\WINDOWS\system32\Drivers\GVCplDrv.sys [23040 2004-05-02] () [Brak podpisu cyfrowego] R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [587776 2009-07-09] (Aladdin Knowledge Systems Ltd.) R2 Haspnt; C:\WINDOWS\system32\drivers\Haspnt.sys [47616 2010-12-20] (Aladdin Knowledge Systems) [Brak podpisu cyfrowego] R3 itecir; C:\WINDOWS\System32\DRIVERS\itecir.sys [54784 2007-12-18] (ITE Tech. Inc. ) [Brak podpisu cyfrowego] R3 kbfiltr; C:\WINDOWS\System32\DRIVERS\kbfiltr.sys [5632 2007-01-25] ( ) R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ATKACPI.sys [7680 2006-12-17] (ATK0100) S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation) R3 NETw5x32; C:\WINDOWS\System32\DRIVERS\NETw5x32.sys [3630080 2008-06-26] (Intel Corporation) R2 NPF; C:\WINDOWS\system32\drivers\npf.sys [36600 2014-10-24] (Riverbed Technology, Inc.) R3 NVHDA; C:\WINDOWS\System32\drivers\nvhda32.sys [100456 2010-11-12] (NVIDIA Corporation) S3 slabbus; C:\WINDOWS\System32\DRIVERS\slabbus.sys [58368 2008-05-27] (MCCI Corporation) S3 slabser; C:\WINDOWS\System32\DRIVERS\slabser.sys [75776 2008-05-27] (MCCI Corporation) R3 WSIMD; C:\WINDOWS\System32\DRIVERS\wsimd.sys [57408 2008-02-08] (Atheros Communications, Inc.) [Brak podpisu cyfrowego] R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; C:\Program Files\ASUS\AI TouchMedia\PlayMovie\000.fcl [61424 2008-05-19] (Cyberlink Corp.) S3 BlueletAudio; system32\DRIVERS\blueletaudio.sys [X] S3 BlueletSCOAudio; system32\DRIVERS\BlueletSCOAudio.sys [X] S3 BT; system32\DRIVERS\btnetdrv.sys [X] S3 Btcsrusb; System32\Drivers\btcusb.sys [X] S0 BTHidEnum; System32\Drivers\vbtenum.sys [X] S0 BTHidMgr; System32\Drivers\BTHidMgr.sys [X] S3 catchme; \??\C:\avyrv5h6\catchme.sys [X] S4 IntelIde; Brak ImagePath U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation) S3 USBET; system32\DRIVERS\ETdrv.sys [X] S3 VComm; system32\DRIVERS\VComm.sys [X] S3 VcommMgr; System32\Drivers\VcommMgr.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-06-15 19:50 - 2016-06-15 19:50 - 00000000 ____D C:\FRST 2016-06-15 14:43 - 2016-06-15 14:43 - 00000000 ____D C:\Documents and Settings\zbyszek\Ustawienia lokalne\Dane aplikacji\FSDART 2016-06-08 12:58 - 2016-06-08 15:01 - 00000000 ____D C:\Program Files\Mozilla Firefox ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-06-15 19:51 - 2014-04-19 14:13 - 00000000 ____D C:\Documents and Settings\zbyszek\Ustawienia lokalne\temp 2016-06-15 19:50 - 2009-07-01 21:42 - 00000000 ____D C:\temp 2016-06-15 19:21 - 2009-12-24 13:01 - 00001036 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-06-15 16:48 - 2010-12-20 15:09 - 00000000 ____D C:\BiK2007 2016-06-15 15:29 - 2009-09-11 14:36 - 00000988 _____ C:\WINDOWS\IE4 Error Log.txt 2016-06-15 14:57 - 2013-01-21 13:11 - 00002561 _____ C:\Documents and Settings\zbyszek\Pulpit\Outlook 2003.lnk 2016-06-15 14:49 - 2010-12-10 20:59 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\F-Secure 2016-06-15 14:43 - 2009-06-25 20:14 - 00000000 ___HD C:\Documents and Settings\zbyszek\Ustawienia lokalne\Dane aplikacji 2016-06-15 14:37 - 2013-07-20 21:48 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-06-15 14:35 - 2006-03-02 14:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl 2016-06-15 14:34 - 2015-02-19 12:38 - 00000926 _____ C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job 2016-06-15 14:34 - 2014-03-12 09:22 - 00000226 _____ C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job 2016-06-15 14:34 - 2009-12-24 13:01 - 00001032 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-06-15 14:34 - 2009-06-25 21:51 - 00000000 ____D C:\Documents and Settings\All Users 2016-06-15 14:34 - 2009-06-25 20:12 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-06-15 14:33 - 2009-06-25 20:12 - 00032042 _____ C:\WINDOWS\SchedLgU.Txt 2016-06-15 14:17 - 2009-06-25 22:56 - 139785240 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-06-15 11:22 - 2013-09-16 12:15 - 00017358 _____ C:\WINDOWS\ModemLog_Nokia E52 USB Modem.txt 2016-06-14 15:39 - 2009-07-01 21:04 - 00002539 _____ C:\Documents and Settings\zbyszek\Pulpit\Word 2003.lnk 2016-06-14 11:43 - 2015-02-19 12:38 - 00000930 _____ C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job 2016-06-14 08:18 - 2014-05-27 10:43 - 00002000 _____ C:\Documents and Settings\zbyszek\intlname.ols 2016-06-14 08:15 - 2010-12-20 15:10 - 00002185 _____ C:\Documents and Settings\zbyszek\Pulpit\BiK 2007.lnk 2016-06-13 12:13 - 2009-07-01 21:04 - 00002575 _____ C:\Documents and Settings\zbyszek\Pulpit\Excel 2003.lnk 2016-06-13 09:55 - 2009-07-01 21:04 - 00002513 _____ C:\Documents and Settings\zbyszek\Pulpit\PowerPoint 2003.lnk 2016-06-08 15:34 - 2013-10-15 20:54 - 00503664 _____ C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat 2016-06-08 15:34 - 2009-07-02 13:42 - 00524288 _____ C:\WINDOWS\system32\config\Autodesk.evt 2016-06-08 15:34 - 2009-06-25 20:12 - 00000000 ___HD C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji 2016-06-08 15:01 - 2012-06-04 12:35 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2016-06-08 15:00 - 2014-03-12 09:22 - 00000220 _____ C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job 2016-06-08 12:40 - 2009-06-25 20:14 - 00000000 ____D C:\Documents and Settings\zbyszek\Pulpit 2016-06-08 12:08 - 2011-10-18 17:58 - 00000043 _____ C:\WINDOWS\soilcalc.INI 2016-06-08 09:17 - 2009-06-25 20:14 - 00000000 ___RD C:\Documents and Settings\zbyszek\Moje dokumenty\Moja muzyka 2016-06-07 14:14 - 2010-05-22 10:35 - 00001324 _____ C:\WINDOWS\system32\d3d9caps.dat 2016-06-03 14:32 - 2015-09-15 19:01 - 00000000 ____D C:\Output Files 2016-06-02 16:59 - 2009-06-25 20:14 - 00000292 ___SH C:\Documents and Settings\zbyszek\ntuser.ini 2016-06-02 11:50 - 2009-06-25 21:41 - 00000000 ___HD C:\WINDOWS\inf 2016-06-01 16:32 - 2009-07-01 21:45 - 00000000 ____D C:\TEKSTY 2016-06-01 08:50 - 2009-07-02 20:24 - 00002501 _____ C:\Documents and Settings\All Users\Pulpit\Corel Paint Shop Pro 9.lnk 2016-06-01 08:50 - 2009-07-02 20:22 - 00000000 ____D C:\Documents and Settings\zbyszek\Moje dokumenty\My PSP Files 2016-05-31 14:07 - 2010-09-03 21:50 - 00000000 ____D C:\Volvo P1800 2016-05-30 11:36 - 2009-12-24 12:44 - 00000000 ____D C:\Program Files\gpsPhotoTagger 2016-05-30 11:23 - 2009-12-24 12:52 - 00000000 ____D C:\Documents and Settings\zbyszek\Moje dokumenty\gpsPhotoTagger_Workspace 2016-05-25 09:28 - 2009-07-10 13:48 - 00000000 ____D C:\EXCEL 2016-05-24 09:33 - 2012-04-04 12:55 - 00797376 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2016-05-24 09:33 - 2012-04-04 12:55 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-05-24 09:33 - 2011-05-18 13:26 - 00142528 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2016-05-18 10:25 - 2009-07-01 21:47 - 00000000 ____D C:\RYSUNKI ==================== Pliki w katalogu głównym wybranych folderów ======= 2009-07-28 13:28 - 2009-07-28 13:28 - 0036985 _____ () C:\Documents and Settings\zbyszek\Dane aplikacji\Microsoft Excel.ADR 2012-08-06 09:41 - 2012-08-06 09:41 - 0000268 ___RH () C:\Documents and Settings\zbyszek\Dane aplikacji\Standard Tool 2009-07-21 21:25 - 2016-02-05 18:14 - 0081408 _____ () C:\Documents and Settings\zbyszek\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2012-08-06 09:41 - 2012-08-06 10:49 - 0000020 ____H () C:\Documents and Settings\All Users\Dane aplikacji\PKP_DLds.DAT 2012-08-06 09:43 - 2012-08-06 10:49 - 0000020 ____H () C:\Documents and Settings\All Users\Dane aplikacji\PKP_DLec.DAT 2012-08-06 09:41 - 2012-08-06 09:41 - 0000268 ___RH () C:\Documents and Settings\All Users\Dane aplikacji\Stingers Niektóre pliki w TEMP: ==================== C:\Documents and Settings\zbyszek\Ustawienia lokalne\temp\AcDeltree.exe C:\Documents and Settings\zbyszek\Ustawienia lokalne\temp\cdo2496741474.dll C:\Documents and Settings\zbyszek\Ustawienia lokalne\temp\cdo3949378900.dll C:\Documents and Settings\zbyszek\Ustawienia lokalne\temp\NEventMessages.dll ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo ==================== Koniec FRST.txt ============================