Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 21-08-2016 01
Uruchomiony przez DSkowronska (administrator)  DS-KOMPUTER (22-08-2016 18:23:01)
Uruchomiony z C:\Users\DSkowronska\Downloads
Załadowane profile: DSkowronska &  (Dostępne profile: DSkowronska & Gość)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
() C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.13.11\ccSvcHst.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.13.11\ccSvcHst.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Spotify Ltd) C:\Users\DSkowronska\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(TOSHIBA Corporation) C:\Program Files (x86)\Toshiba\TOSHIBA Service Station\ToshibaServiceStation.exe
(Huawei Technologies Co., Ltd.) C:\Users\DSkowronska\AppData\Roaming\PLAY ONLINE\ouc.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA Corporation) C:\Program Files (x86)\Toshiba\TOSHIBA Service Station\TMachInfo.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Temp\4D9AFAE4-F1E0-4E1C-A4D6-23E43A000ECC\DismHost.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2588456 2010-11-11] (ELAN Microelectronics Corp.)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [590256 2011-05-18] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [972672 2011-04-28] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-12] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710560 2011-06-10] (TOSHIBA Corporation)
HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [596912 2011-06-28] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38824 2011-06-28] (TOSHIBA Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-06-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1298816 2011-07-12] (TOSHIBA Corporation)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [46368 2010-03-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [29984 2010-03-09] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFHook] => C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDF5 Registry Controller] => C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2011-04-20] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [6709008 2016-07-28] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [186640 2016-07-20] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKU\S-1-5-21-613429214-350687809-4038973015-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-613429214-350687809-4038973015-1000\...\Run: [HW_OPENEYE_OUC_PLAY ONLINE] => C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [110592 2009-04-14] (Huawei Technologies Co., Ltd.)
HKU\S-1-5-21-613429214-350687809-4038973015-1000\...\Run: [Spotify Web Helper] => C:\Users\DSkowronska\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1555056 2016-08-12] (Spotify Ltd)
HKU\S-1-5-21-613429214-350687809-4038973015-1000\...\Run: [Spotify] => C:\Users\DSkowronska\AppData\Roaming\Spotify\Spotify.exe [6937200 2016-08-12] (Spotify Ltd)
HKU\S-1-5-21-613429214-350687809-4038973015-1000\...\MountPoints2: F - F:\LaunchU3.exe -a
HKU\S-1-5-21-613429214-350687809-4038973015-1000\...\MountPoints2: {4c868169-8b3f-11e2-84df-00266ccbdb0c} - F:\AutoRun.exe
HKU\S-1-5-21-613429214-350687809-4038973015-1000\...\MountPoints2: {5c0d94d2-8a43-11e2-a6ac-806e6f6e6963} - F:\AutoRun.exe
HKU\S-1-5-21-613429214-350687809-4038973015-1000\...\MountPoints2: {5c0d9509-8a43-11e2-a6ac-00266ccbdb0c} - F:\AutoRun.exe
HKU\S-1-5-21-613429214-350687809-4038973015-1000\...\MountPoints2: {769149fa-d09e-11e5-b096-00030d000001} - F:\AutoRun.exe
HKU\S-1-5-21-613429214-350687809-4038973015-1000\...\MountPoints2: {928dacd2-cfc7-11e5-b6ef-806e6f6e6963} - F:\AutoRun.exe
HKU\S-1-5-21-613429214-350687809-4038973015-1000\...\MountPoints2: {928db930-cfc7-11e5-b6ef-00266ccbdb0c} - F:\AutoRun.exe
HKU\S-1-5-21-613429214-350687809-4038973015-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Bubbles.scr [899584 2010-11-21] (Microsoft Corporation)
HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [HW_OPENEYE_OUC_PLAY ONLINE] => C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [110592 2009-04-14] (Huawei Technologies Co., Ltd.)
HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify Web Helper] => C:\Users\DSkowronska\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1555056 2016-08-12] (Spotify Ltd)
HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify] => C:\Users\DSkowronska\AppData\Roaming\Spotify\Spotify.exe [6937200 2016-08-12] (Spotify Ltd)
HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: F - F:\LaunchU3.exe -a
HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {4c868169-8b3f-11e2-84df-00266ccbdb0c} - F:\AutoRun.exe
HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {5c0d94d2-8a43-11e2-a6ac-806e6f6e6963} - F:\AutoRun.exe
HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {5c0d9509-8a43-11e2-a6ac-00266ccbdb0c} - F:\AutoRun.exe
HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {769149fa-d09e-11e5-b096-00030d000001} - F:\AutoRun.exe
HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {928dacd2-cfc7-11e5-b6ef-806e6f6e6963} - F:\AutoRun.exe
HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {928db930-cfc7-11e5-b6ef-00266ccbdb0c} - F:\AutoRun.exe
HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Bubbles.scr [899584 2010-11-21] (Microsoft Corporation)
HKU\S-1-5-21-613429214-350687809-4038973015-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [swg] => "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
Startup: C:\Users\DSkowronska\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2016-08-21]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 37.8.214.2 31.11.202.254
Tcpip\..\Interfaces\{4661851C-DC37-4EE2-8FEF-7622FAC3FDF7}: [DhcpNameServer] 37.8.214.2 31.11.202.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.globasearch.com/?serie=219&b=3&installkey=QFPsYujMJY07sn9KgUKy
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-613429214-350687809-4038973015-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.globasearch.com/?serie=219&b=3&installkey=QFPsYujMJY07sn9KgUKy
HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.globasearch.com/?serie=219&b=3&installkey=QFPsYujMJY07sn9KgUKy
HKU\S-1-5-21-613429214-350687809-4038973015-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.toshiba.com
HKU\S-1-5-21-613429214-350687809-4038973015-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://start.toshiba.com
SearchScopes: HKLM -> DefaultScope {3CBA2D28-991E-4BCF-846B-D26761C36500} URL = hxxp://www.google.com/search?sourceid=ie9&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNP
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {3CBA2D28-991E-4BCF-846B-D26761C36500} URL = hxxp://www.google.com/search?sourceid=ie9&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNP
SearchScopes: HKLM-x32 -> DefaultScope {3CBA2D28-991E-4BCF-846B-D26761C36500} URL = hxxp://www.globasearch.com/?serie=219&installkey=QFPsYujMJY07sn9KgUKy&b=3&q={searchTerms}
SearchScopes: HKLM-x32 -> {3CBA2D28-991E-4BCF-846B-D26761C36500} URL = hxxp://www.globasearch.com/?serie=219&installkey=QFPsYujMJY07sn9KgUKy&b=3&q={searchTerms}
SearchScopes: HKU\S-1-5-21-613429214-350687809-4038973015-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.globasearch.com/?serie=219&installkey=QFPsYujMJY07sn9KgUKy&b=3&q={searchTerms}
SearchScopes: HKU\S-1-5-21-613429214-350687809-4038973015-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.globasearch.com/?serie=219&installkey=QFPsYujMJY07sn9KgUKy&b=3&q={searchTerms}
SearchScopes: HKU\S-1-5-21-613429214-350687809-4038973015-1000 -> {3CBA2D28-991E-4BCF-846B-D26761C36500} URL = hxxp://www.google.com/search?sourceid=ie9&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNP
SearchScopes: HKU\S-1-5-21-613429214-350687809-4038973015-1000 -> {C27D16EC-B11B-4148-99CD-576A2325118A} URL = hxxp://www.google.com/search?sourceid=ie9&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNP_plPL479
SearchScopes: HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.globasearch.com/?serie=219&installkey=QFPsYujMJY07sn9KgUKy&b=3&q={searchTerms}
SearchScopes: HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.globasearch.com/?serie=219&installkey=QFPsYujMJY07sn9KgUKy&b=3&q={searchTerms}
SearchScopes: HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {3CBA2D28-991E-4BCF-846B-D26761C36500} URL = hxxp://www.google.com/search?sourceid=ie9&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNP
SearchScopes: HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {C27D16EC-B11B-4148-99CD-576A2325118A} URL = hxxp://www.google.com/search?sourceid=ie9&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNP_plPL479
SearchScopes: HKU\S-1-5-21-613429214-350687809-4038973015-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {801CCC86-3257-4880-9110-359F4D329D74} URL = hxxp://www.google.com/search?sourceid=ie9&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNP_plPL479
SearchScopes: HKU\S-1-5-21-613429214-350687809-4038973015-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {3CBA2D28-991E-4BCF-846B-D26761C36500} URL = hxxp://www.google.com/search?sourceid=ie9&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNP
SearchScopes: HKU\S-1-5-21-613429214-350687809-4038973015-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {801CCC86-3257-4880-9110-359F4D329D74} URL = hxxp://www.google.com/search?sourceid=ie9&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNP_plPL479
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll [2009-02-06] (Zeon Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
Toolbar: HKU\S-1-5-21-613429214-350687809-4038973015-1000 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Brak pliku
Toolbar: HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Brak pliku
Toolbar: HKU\S-1-5-21-613429214-350687809-4038973015-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Brak pliku
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  Brak pliku
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2012-01-09] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\new_plugin\npjp2.dll [Brak pliku]
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-24] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-613429214-350687809-4038973015-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\DSkowronska\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-11-09] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-613429214-350687809-4038973015-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\DSkowronska\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-11-09] (Unity Technologies ApS)

Chrome: 
=======
CHR HomePage: Default -> hxxps://z-1-static/
CHR Session Restore: Default -> [funkcja włączona]
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\ppGoogleNaClPluginChrome.dll => Brak pliku
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\pdf.dll => Brak pliku
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll => Brak pliku
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll => Brak pliku
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll => Brak pliku
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Facebook Desktop) - C:\Users\DSkowronska\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll => Brak pliku
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\windows\SysWOW64\npDeployJava1.dll => Brak pliku
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll => Brak pliku
CHR Profile: C:\Users\DSkowronska\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (EditThisCookie) - C:\Users\DSkowronska\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2016-08-21]
CHR Extension: (AdBlock) - C:\Users\DSkowronska\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-08-21]
CHR Extension: (SEO & Website Analysis) - C:\Users\DSkowronska\AppData\Local\Google\Chrome\User Data\Default\Extensions\hlngmmdolgbdnnimbmblfhhndibdipaf [2016-08-21]
CHR Extension: (Pocket) - C:\Users\DSkowronska\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2016-08-21]
CHR Extension: (Save to Pocket) - C:\Users\DSkowronska\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2016-08-21]
CHR Extension: (Chrome Media Router) - C:\Users\DSkowronska\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-21]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-14] (Adobe Systems) [Brak podpisu cyfrowego]
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [674552 2016-07-28] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5267456 2016-07-28] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1097488 2016-07-20] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [760024 2016-07-28] (AVG Technologies CZ, s.r.o.)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [Brak podpisu cyfrowego]
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2014-01-15] ()
S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [682064 2014-04-26] ()
S4 Norton PC Checkup Application Launcher; C:\Program Files (x86)\PC Checkup\SymcPCCULaunchSvc.exe [132504 2013-12-11] (Symantec Corporation)
R2 PCCUJobMgr; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.13.11\ccSvcHst.exe [126392 2011-07-19] (Symantec Corporation)
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.)
S3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [575488 2008-09-08] (Nokia.) [Brak podpisu cyfrowego]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [314112 2016-06-30] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [261376 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [260352 2016-06-01] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [261888 2016-07-19] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [298752 2016-07-12] (AVG Technologies CZ, s.r.o.)
R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
R0 BtHidBus; C:\Windows\System32\Drivers\BtHidBus.sys [23944 2010-04-06] (IVT Corporation.)
S3 btnetBUs; C:\Windows\System32\Drivers\btnetBus.sys [30088 2010-04-06] ()
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 hwusb_cdcacm; C:\Windows\System32\DRIVERS\ew_cdcacm.sys [124800 2014-06-11] (Huawei Technologies Co., Ltd.)
S3 hwusb_wwanecm; C:\Windows\System32\DRIVERS\ew_wwanecm.sys [379392 2014-05-04] (Huawei Technologies Co., Ltd.)
S3 IvtBtBUs; C:\Windows\System32\Drivers\IvtBtBus.sys [27016 2010-04-06] (IVT Corporation.)
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-08-22] (Malwarebytes)
S3 MWAC; \??\C:\windows\SysWOW64\drivers\ [0 ] () <==== UWAGA (zerobajtowy plik/folder)
S3 BT; system32\DRIVERS\btnetdrv.sys [X]
S3 BTCOM; system32\DRIVERS\btcomport.sys [X]
S3 BTCOMBUS; System32\Drivers\btcombus.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S0 oblaggp; System32\drivers\ksyw.sys [X]
U3 fglciaow; \??\C:\Users\DSKOWR~1\AppData\Local\Temp\fglciaow.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-08-22 18:23 - 2016-08-22 18:24 - 00028340 _____ C:\Users\DSkowronska\Downloads\FRST.txt
2016-08-22 18:21 - 2016-08-22 18:23 - 00000000 ____D C:\FRST
2016-08-22 18:14 - 2016-08-22 18:14 - 00000000 ____D C:\Users\DSkowronska\Desktop\bootstrap2
2016-08-22 17:59 - 2016-08-22 18:16 - 00000000 ____D C:\Users\DSkowronska\Desktop\bootstrap
2016-08-22 17:50 - 2016-08-22 17:50 - 00380928 _____ C:\Users\DSkowronska\Downloads\miol0omj.exe
2016-08-22 17:48 - 2016-08-22 17:48 - 02396672 _____ (Farbar) C:\Users\DSkowronska\Downloads\FRST64.exe
2016-08-21 11:22 - 2016-08-21 23:59 - 00000000 ____D C:\Users\DSkowronska\Downloads\FixWin
2016-08-21 11:05 - 2016-08-22 18:00 - 00000480 _____ C:\windows\Tasks\ParetoLogic Registration3.job
2016-08-21 11:05 - 2016-08-21 11:05 - 00003156 _____ C:\windows\System32\Tasks\ParetoLogic Registration3
2016-08-21 11:05 - 2016-08-21 11:05 - 00000000 ____D C:\Users\DSkowronska\AppData\Roaming\ParetoLogic
2016-08-21 11:04 - 2016-08-22 17:18 - 00000506 _____ C:\windows\Tasks\ParetoLogic Update Version3 Startup Task.job
2016-08-21 11:04 - 2016-08-22 00:07 - 00000454 _____ C:\windows\Tasks\ParetoLogic Update Version3.job
2016-08-21 11:04 - 2016-08-21 11:19 - 00000000 ____D C:\ProgramData\ParetoLogic
2016-08-21 11:04 - 2016-08-21 11:04 - 00003276 _____ C:\windows\System32\Tasks\ParetoLogic Update Version3
2016-08-21 11:04 - 2016-08-21 11:04 - 00002944 _____ C:\windows\System32\Tasks\ParetoLogic Update Version3 Startup Task
2016-08-21 10:52 - 2016-08-21 23:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
2016-08-21 10:51 - 2016-08-21 10:51 - 00000000 ____D C:\Users\DSkowronska\AppData\Roaming\WinBatch
2016-08-19 17:58 - 2016-08-22 00:04 - 00000000 ____D C:\Users\DSkowronska\Desktop\bootstrap-3.3.7
2016-08-19 17:54 - 2016-08-22 00:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2016-08-19 17:54 - 2016-08-22 00:04 - 00000000 ____D C:\Program Files (x86)\Notepad++
2016-08-19 17:54 - 2016-08-21 23:59 - 00000000 ____D C:\Users\DSkowronska\AppData\Roaming\Notepad++
2016-08-19 17:53 - 2016-08-19 17:53 - 04211112 _____ C:\Users\DSkowronska\Downloads\npp.6.9.2.Installer.exe
2016-08-19 17:52 - 2016-08-19 17:52 - 04297547 _____ C:\Users\DSkowronska\Downloads\bootstrap-3.3.7.zip
2016-08-17 16:56 - 2016-08-17 16:56 - 00260499 _____ C:\Users\DSkowronska\Downloads\HR.Contact.Analytics.Specialist.2016.pdf
2016-08-17 00:44 - 2016-08-17 19:02 - 00000000 ____D C:\Users\DSkowronska\AppData\Roaming\SimpleNotepad3
2016-08-17 00:44 - 2016-08-17 00:45 - 00002039 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk
2016-08-17 00:44 - 2016-08-17 00:45 - 00002027 _____ C:\Users\DSkowronska\Desktop\Gооglе Сhrоmе.lnk
2016-08-17 00:44 - 2016-08-17 00:45 - 00001885 _____ C:\Users\Gość\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехрlоrеr.lnk
2016-08-17 00:44 - 2016-08-17 00:45 - 00001730 _____ C:\Users\DSkowronska\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехрlоrеr.lnk
2016-08-17 00:04 - 2016-08-17 00:39 - 00003364 _____ C:\windows\System32\Tasks\Bluetooth Driver Installer
2016-08-17 00:03 - 2016-08-17 00:03 - 03381573 _____ (Bluetooth I ) C:\Users\DSkowronska\Downloads\Bluetooth-QuickInstaller-1.0.0.984.exe
2016-08-16 23:57 - 2016-08-16 23:57 - 00003014 _____ C:\windows\System32\Tasks\{952BAEDC-E9EA-4F5C-B8AD-4F8369B61E01}
2016-08-16 23:56 - 2016-08-16 23:56 - 00003014 _____ C:\windows\System32\Tasks\{666BE319-64C3-4CC1-AE3F-AC465B5DCC4B}
2016-08-16 23:55 - 2016-08-16 23:55 - 00003014 _____ C:\windows\System32\Tasks\{83128D83-9B6C-4FE6-AC9B-2FE904C322C3}
2016-08-16 23:28 - 2016-08-16 23:28 - 01252352 _____ C:\Users\DSkowronska\Downloads\Bluetooth_Radar_2.2.msi
2016-08-16 23:28 - 2016-08-16 23:28 - 01252352 _____ C:\Users\DSkowronska\Downloads\Bluetooth_Radar_2.2 (1).msi
2016-08-03 21:25 - 2016-08-03 21:25 - 00038034 _____ C:\Users\DSkowronska\Downloads\Zadanie rekrutacyjne - Limango (D.Skowronska).xlsx
2016-08-01 22:53 - 2016-08-01 22:53 - 00000000 ____D C:\Users\DSkowronska\AppData\Local\{3A7D98D6-E449-406E-A204-80A823616D59}
2016-08-01 22:07 - 2016-08-01 22:08 - 09928812 _____ C:\Users\DSkowronska\Downloads\video0033.3gp
2016-08-01 22:07 - 2016-08-01 22:07 - 10846320 _____ C:\Users\DSkowronska\Downloads\video0034.3gp
2016-08-01 22:07 - 2016-08-01 22:07 - 07897172 _____ C:\Users\DSkowronska\Downloads\video0032.3gp
2016-08-01 20:42 - 2016-08-01 20:42 - 02781241 _____ C:\Users\DSkowronska\Downloads\Audyt ODEO24.pdf
2016-08-01 20:30 - 2016-08-01 20:30 - 06183242 _____ C:\Users\DSkowronska\Downloads\marketing_w_wyszukiwarkach SEO RAPORRT.pdf
2016-07-29 21:26 - 2016-07-29 21:27 - 00015411 _____ C:\Users\DSkowronska\Downloads\Zadanie rekrutacyjne - Limango.xlsx

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-08-22 18:13 - 2013-04-09 20:02 - 00000000 ____D C:\Users\DSkowronska\AppData\Local\Spotify
2016-08-22 18:01 - 2012-01-09 22:01 - 00001048 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-08-22 17:53 - 2009-07-14 06:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-08-22 17:53 - 2009-07-14 06:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-08-22 17:27 - 2014-10-01 01:12 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2016-08-22 17:25 - 2012-03-21 16:00 - 00000000 ____D C:\ProgramData\MFAData
2016-08-22 17:24 - 2013-04-09 20:01 - 00000000 ____D C:\Users\DSkowronska\AppData\Roaming\Spotify
2016-08-22 17:18 - 2012-01-09 22:01 - 00001044 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-08-22 17:18 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2016-08-22 00:09 - 2012-03-21 05:18 - 00000000 ____D C:\Users\DSkowronska
2016-08-22 00:07 - 2014-03-18 22:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-08-22 00:07 - 2013-12-27 02:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellarium
2016-08-22 00:07 - 2012-03-21 16:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 3.5
2016-08-22 00:05 - 2013-11-14 20:07 - 00000000 ____D C:\Users\Gość
2016-08-22 00:05 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-08-22 00:05 - 2009-07-14 05:20 - 00000000 ____D C:\windows\inf
2016-08-22 00:04 - 2016-05-14 20:17 - 00000000 ____D C:\PULP2016
2016-08-22 00:04 - 2016-05-03 03:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dokumenty Pro 7
2016-08-22 00:04 - 2016-02-10 09:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Manager
2016-08-22 00:04 - 2015-10-01 16:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sims2Pack Clean Installer
2016-08-22 00:04 - 2015-08-17 17:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-08-22 00:04 - 2015-07-11 02:33 - 00000000 ___SD C:\windows\system32\GWX
2016-08-22 00:04 - 2015-05-04 13:19 - 00000000 ____D C:\Users\DSkowronska\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikacje Chrome
2016-08-22 00:04 - 2015-05-04 13:18 - 00000000 ____D C:\Users\DSkowronska\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-08-22 00:04 - 2014-12-16 15:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-08-22 00:04 - 2014-10-01 23:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo!
2016-08-22 00:04 - 2014-10-01 01:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-08-22 00:04 - 2014-07-28 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2016-08-22 00:04 - 2014-07-16 09:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Traffic Travis v4
2016-08-22 00:04 - 2014-03-18 22:14 - 00000000 ____D C:\Users\DSkowronska\AppData\Roaming\vlc
2016-08-22 00:04 - 2013-12-27 02:44 - 00000000 ____D C:\Users\DSkowronska\AppData\Roaming\Stellarium
2016-08-22 00:04 - 2013-11-21 20:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-08-22 00:04 - 2013-07-10 14:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2016-08-22 00:04 - 2013-03-11 14:06 - 00000000 ____D C:\Users\DSkowronska\AppData\Roaming\PLAY ONLINE
2016-08-22 00:04 - 2013-03-11 14:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PLAY ONLINE
2016-08-22 00:04 - 2013-01-18 11:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2016-08-22 00:04 - 2013-01-14 15:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2016-08-22 00:04 - 2012-11-05 14:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Checkup
2016-08-22 00:04 - 2012-10-29 15:24 - 00000000 ____D C:\Users\DSkowronska\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-08-22 00:04 - 2012-10-29 15:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
2016-08-22 00:04 - 2012-09-10 15:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-08-22 00:04 - 2012-03-23 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 12
2016-08-22 00:04 - 2012-03-22 13:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP
2016-08-22 00:04 - 2012-01-09 22:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetZero
2016-08-22 00:04 - 2012-01-09 20:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
2016-08-22 00:04 - 2011-07-22 04:00 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2016-08-22 00:03 - 2009-07-14 05:20 - 00000000 ____D C:\windows\registration
2016-08-21 23:59 - 2016-05-14 20:17 - 00000000 ____D C:\pulpit 05-2016
2016-08-21 23:59 - 2015-07-02 09:49 - 00000000 ____D C:\pulpit 01-2016
2016-08-21 23:59 - 2014-07-07 10:54 - 00000000 ____D C:\szkolenie
2016-08-21 23:58 - 2012-01-09 22:01 - 00000000 ____D C:\Program Files (x86)\Google
2016-08-21 23:24 - 2015-07-02 09:49 - 00000000 ____D C:\pulpit
2016-08-21 23:23 - 2013-07-28 17:59 - 00000000 ____D C:\Program Files (x86)\IVT Corporation
2016-08-21 16:51 - 2012-10-29 15:24 - 00000000 ____D C:\Users\DSkowronska\AppData\Local\CrashDumps
2016-08-21 11:21 - 2011-07-22 03:49 - 00000000 ____D C:\Program Files\TOSHIBA
2016-08-21 10:54 - 2012-03-21 05:19 - 00000000 ____D C:\Users\DSkowronska\AppData\Local\TOSHIBA
2016-08-21 10:52 - 2011-07-22 03:54 - 00000000 ____D C:\Program Files (x86)\Toshiba
2016-08-21 03:25 - 2014-07-07 00:34 - 00002601 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office PowerPoint Viewer 2007.lnk
2016-08-21 03:25 - 2013-06-19 14:04 - 00001954 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prezi Desktop.lnk
2016-08-21 03:25 - 2013-01-14 15:38 - 00002056 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help Center.lnk
2016-08-21 03:25 - 2013-01-14 15:37 - 00002038 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge.lnk
2016-08-21 03:25 - 2013-01-14 15:36 - 00002016 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS2.lnk
2016-08-21 03:25 - 2013-01-14 15:36 - 00002013 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ImageReady CS2.lnk
2016-08-21 03:25 - 2012-03-22 15:22 - 00002069 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2016-08-21 03:25 - 2011-07-22 03:59 - 00002497 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2016-08-21 03:25 - 2011-07-22 03:59 - 00001469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2016-08-21 03:25 - 2011-07-22 03:59 - 00001385 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
2016-08-21 03:25 - 2011-07-22 03:59 - 00001316 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
2016-08-21 03:25 - 2011-07-22 03:55 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2016-08-21 03:25 - 2011-07-22 03:18 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-08-21 03:25 - 2011-07-22 03:17 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-08-21 03:25 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-08-21 03:25 - 2009-07-14 06:57 - 00001352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-08-21 03:25 - 2009-07-14 06:57 - 00001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-08-21 03:25 - 2009-07-14 06:57 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-08-21 03:25 - 2009-07-14 06:54 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-08-21 03:24 - 2015-11-10 16:53 - 00000907 _____ C:\Users\Public\Desktop\AVG Protection.lnk
2016-08-21 03:24 - 2014-12-16 15:08 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2016-08-21 03:24 - 2014-10-01 23:03 - 00001148 _____ C:\Users\DSkowronska\Desktop\Photo! Editor.lnk
2016-08-21 03:24 - 2014-10-01 01:12 - 00001073 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-08-21 03:24 - 2014-07-16 09:42 - 00001062 _____ C:\Users\DSkowronska\Desktop\Traffic Travis v4.lnk
2016-08-21 03:24 - 2014-03-18 22:14 - 00000926 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-08-21 03:24 - 2013-12-27 02:44 - 00001775 _____ C:\Users\DSkowronska\Desktop\Stellarium.lnk
2016-08-21 03:24 - 2013-07-10 14:18 - 00002283 _____ C:\Users\Public\Desktop\HP Deskjet 1050 J410 series.lnk
2016-08-21 03:24 - 2013-06-19 14:04 - 00001942 _____ C:\Users\Public\Desktop\Prezi Desktop.lnk
2016-08-21 03:24 - 2013-04-09 20:02 - 00001850 _____ C:\Users\DSkowronska\Desktop\Spotify.lnk
2016-08-21 03:24 - 2013-04-09 20:02 - 00001836 _____ C:\Users\DSkowronska\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2016-08-21 03:24 - 2013-03-11 14:06 - 00001014 _____ C:\Users\Public\Desktop\PLAY ONLINE.lnk
2016-08-21 03:24 - 2013-01-18 11:58 - 00001077 _____ C:\Users\Public\Desktop\Picasa 3.lnk
2016-08-21 03:24 - 2012-03-23 13:51 - 00001877 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Software Updates.lnk
2016-08-21 03:24 - 2012-03-22 15:22 - 00002057 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2016-08-21 03:24 - 2012-03-22 13:18 - 00001106 _____ C:\Users\Public\Desktop\GIMP 2.lnk
2016-08-21 03:24 - 2012-03-21 16:37 - 00001084 _____ C:\Users\Public\Desktop\LibreOffice 3.5.lnk
2016-08-21 03:24 - 2009-07-14 07:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-08-21 03:24 - 2009-07-14 06:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-08-19 17:39 - 2013-11-05 00:44 - 00000000 ____D C:\ZDJECIA
2016-08-18 16:27 - 2012-03-05 10:24 - 00740688 _____ C:\windows\system32\perfh015.dat
2016-08-18 16:27 - 2012-03-05 10:24 - 00156230 _____ C:\windows\system32\perfc015.dat
2016-08-18 16:27 - 2009-07-14 07:13 - 01670590 _____ C:\windows\system32\PerfStringBackup.INI
2016-08-17 00:29 - 2013-07-28 17:59 - 00000032 _____ C:\windows\0
2016-07-28 21:56 - 2012-01-09 22:01 - 00004044 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-07-28 21:56 - 2012-01-09 22:01 - 00003792 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Pliki w katalogu głównym wybranych folderów =======

2016-08-21 11:05 - 2016-08-21 11:19 - 0000115 _____ () C:\Users\DSkowronska\AppData\Roaming\LogFile.txt
2013-05-06 11:11 - 2013-05-06 11:12 - 0003584 _____ () C:\Users\DSkowronska\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Niektóre pliki w TEMP:
====================
C:\Users\DSkowronska\AppData\Local\Temp\avguirn_081047474331.exe
C:\Users\DSkowronska\AppData\Local\Temp\avguirn_081188482296.exe
C:\Users\DSkowronska\AppData\Local\Temp\avguirn_081379904658.exe
C:\Users\DSkowronska\AppData\Local\Temp\avguirn_081550044461.exe
C:\Users\DSkowronska\AppData\Local\Temp\avguirn_081702000521.exe
C:\Users\DSkowronska\AppData\Local\Temp\avguirn_081818302474.exe
C:\Users\DSkowronska\AppData\Local\Temp\avguirn_081905491858.exe
C:\Users\DSkowronska\AppData\Local\Temp\DefaultPack.EXE
C:\Users\DSkowronska\AppData\Local\Temp\drm_dyndata_7400009.dll
C:\Users\DSkowronska\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\windows\explorer.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\windows\system32\services.exe => Plik podpisany cyfrowo
C:\windows\system32\User32.dll => Plik podpisany cyfrowo
C:\windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-08-03 00:13

==================== Koniec  FRST.txt ============================