Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 21-09-2016
Uruchomiony przez User (administrator)  USER-KOMPUTER (22-09-2016 16:53:12)
Uruchomiony z C:\Users\User\Desktop
Załadowane profile: User (Dostępne profile: User)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(BitTorrent, Inc.) C:\Program Files (x86)\uTorrent\uTorrent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(ALLPlayer Group Ltd.) C:\Program Files (x86)\ALLPlayer Remote\ALLPlayerRemoteControl.exe
(Napisy24.pl) C:\Program Files (x86)\Napisy24\Napisy24.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Innkeeper) C:\Users\User\AppData\Local\Innkeeper\app-0.3.1\Innkeeper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Curse Inc.) C:\Users\User\AppData\Local\Innkeeper\app-0.3.1\Electron\bin\InnkeeperUI-win32-ia32\InnkeeperUI.exe
(Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\PlexDlnaServer.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe
(Curse Inc.) C:\Users\User\AppData\Local\Innkeeper\app-0.3.1\Electron\bin\InnkeeperUI-win32-ia32\InnkeeperUI.exe
(Curse Inc.) C:\Users\User\AppData\Local\Innkeeper\app-0.3.1\Electron\bin\InnkeeperUI-win32-ia32\InnkeeperUI.exe
(Curse Inc.) C:\Users\User\AppData\Local\Innkeeper\app-0.3.1\Electron\bin\InnkeeperUI-win32-ia32\InnkeeperUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_ep64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13423688 2013-02-26] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6625672 2016-08-11] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-04-11] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58640 2016-08-05] (Raptr, Inc)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9107616 2016-09-12] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-11-09] (Oracle Corporation)
HKU\S-1-5-21-1760844222-3365795311-1753932860-1000\...\Run: [uTorrent] => C:\Program Files (x86)\uTorrent\uTorrent.exe [328568 2013-09-24] (BitTorrent, Inc.)
HKU\S-1-5-21-1760844222-3365795311-1753932860-1000\...\Run: [ALLUpdate] => C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [3670472 2015-07-28] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-1760844222-3365795311-1753932860-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd)
HKU\S-1-5-21-1760844222-3365795311-1753932860-1000\...\Run: [GG] => C:\Users\User\AppData\Local\GG\Application\gghub.exe [4078144 2015-11-16] (GG Network S.A.)
HKU\S-1-5-21-1760844222-3365795311-1753932860-1000\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [4525192 2014-08-01] (Plex, Inc.)
HKU\S-1-5-21-1760844222-3365795311-1753932860-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3503088 2016-09-20] (Electronic Arts)
HKU\S-1-5-21-1760844222-3365795311-1753932860-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2857248 2016-08-23] (Valve Corporation)
HKU\S-1-5-21-1760844222-3365795311-1753932860-1000\...\Run: [Napisy24Update] => C:\Program Files (x86)\Napisy24\Napisy24Update.exe [3709896 2015-11-04] (Napisy24.pl)
HKU\S-1-5-21-1760844222-3365795311-1753932860-1000\...\Run: [ALLPlayer WiFi Remote] => C:\Program Files (x86)\ALLPlayer Remote\ALLPlayerRemoteControl.exe [5975264 2016-03-14] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-1760844222-3365795311-1753932860-1000\...\Run: [Napisy24.pl] => C:\Program Files (x86)\Napisy24\Napisy24.exe [5798400 2016-06-03] (Napisy24.pl)
HKU\S-1-5-21-1760844222-3365795311-1753932860-1000\...\Run: [GalaxyClient] => C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe [4090944 2016-09-21] (GOG.com)
HKU\S-1-5-21-1760844222-3365795311-1753932860-1000\...\Run: [Innkeeper] => C:\Users\User\AppData\Local\Innkeeper\Update.exe --processStart Innkeeper.exe --process-start-args="-startup"
HKU\S-1-5-21-1760844222-3365795311-1753932860-1000\...\MountPoints2: {e6860a6a-c7ec-11e3-9964-94de80b746f5} - E:\autorun.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-02] (AVAST Software)
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{9C2461D8-FC2C-459C-B1E4-280BFEDCED1F}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{CEBC3A67-612A-491C-93B3-8A4540F2EDCD}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{DDF528CC-0E2A-429D-9F6F-D4A3CBC7CA2C}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1760844222-3365795311-1753932860-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=190
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-12-18] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-09-02] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-18] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-12-18] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-09-02] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-18] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\d2sjtju3.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll [2016-09-13] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-18] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-13] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-18] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)
FF Extension: (Firefox Hotfix) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\d2sjtju3.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-09-08]
FF Extension: (Ghostery) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\d2sjtju3.default\Extensions\firefox@ghostery.com.xpi [2016-09-21]
FF Extension: (Adblock Plus) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\d2sjtju3.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

Opera: 
=======
OPR Extension: (Adblock Plus) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2015-12-18]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-02] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [223600 2016-09-15] (AVAST Software)
S3 GalaxyClientService; C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [281152 2016-09-21] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6411840 2016-09-19] (GOG.com)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-04-11] (Intel Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2141192 2016-09-20] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2206224 2016-09-20] (Electronic Arts)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Brak podpisu cyfrowego]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-02] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-02] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-02] (AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [28312 2016-09-15] (AVAST Software)
R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [453192 2016-09-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-02] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-02] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-02] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-09-02] (AVAST Software)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [129152 2016-04-25] (Samsung Electronics Co., Ltd.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-09-14] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 MotioninJoyXFilter; C:\Windows\System32\DRIVERS\MijXfilt.sys [115272 2012-03-25] (MotioninJoy) [Brak podpisu cyfrowego]
S3 RtkBtFilter; C:\Windows\System32\DRIVERS\RtkBtfilter.sys [585944 2014-12-18] (Realtek Semiconductor Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2014-04-19] (Duplex Secure Ltd.)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [221824 2016-04-25] (Samsung Electronics Co., Ltd.)
U3 ahp0sz0s; C:\Windows\System32\Drivers\ahp0sz0s.sys [0 ] (Advanced Micro Devices) <==== UWAGA (zerobajtowy plik/folder)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-09-22 16:53 - 2016-09-22 16:53 - 00017419 _____ C:\Users\User\Desktop\FRST.txt
2016-09-22 07:10 - 2016-09-22 07:11 - 00003368 _____ C:\Users\User\Desktop\Fixlog.txt
2016-09-22 07:10 - 2016-09-22 07:10 - 00000022 _____ C:\Users\User\Desktop\Upload.zip
2016-09-22 07:09 - 2016-09-22 07:09 - 00000000 ____D C:\Users\User\Desktop\FRST-OlderVersion
2016-09-21 14:46 - 2016-09-21 14:46 - 00380928 _____ C:\Users\User\Desktop\u7zispm0.exe
2016-09-21 14:44 - 2016-09-22 07:09 - 02402816 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2016-09-19 20:44 - 2016-09-19 20:44 - 00000000 ____D C:\Users\User\Documents\Deus Ex -  Mankind Divided
2016-09-19 20:44 - 2016-09-19 20:44 - 00000000 ____D C:\Users\User\AppData\Roaming\Eidos Montreal
2016-09-19 10:25 - 2016-09-19 10:25 - 00000222 _____ C:\Users\User\Desktop\Deus Ex Mankind Divided.url
2016-09-18 17:45 - 2016-09-18 17:45 - 00000000 ____D C:\Users\User\.QtWebEngineProcess
2016-09-18 17:45 - 2016-09-18 17:45 - 00000000 ____D C:\Users\User\.Origin
2016-09-18 12:33 - 2016-09-18 12:33 - 00276528 _____ C:\Windows\Minidump\091816-15740-01.dmp
2016-09-15 23:43 - 2016-09-15 23:43 - 00001922 _____ C:\Users\Public\Desktop\Avast Internet Security.lnk
2016-09-15 23:43 - 2016-09-15 23:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-09-15 23:41 - 2016-09-15 23:40 - 00453192 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetSec.sys
2016-09-15 23:41 - 2016-09-02 20:21 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-09-15 23:40 - 2016-09-15 23:40 - 00028312 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetNd6.sys
2016-09-09 23:13 - 2016-09-09 23:13 - 00155225 _____ C:\Users\User\Downloads\Captain America Civil War 2016.txt
2016-09-02 20:20 - 2016-09-02 20:20 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-08-30 20:51 - 2016-09-09 21:46 - 00000000 ____D C:\Users\User\Downloads\The Night Of S01 - SWESUB
2016-08-28 13:07 - 2016-08-29 11:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-09-22 16:53 - 2015-12-16 18:06 - 00000000 ____D C:\FRST
2016-09-22 16:52 - 2014-05-27 17:43 - 00000000 ____D C:\Users\User\AppData\Roaming\Raptr
2016-09-22 16:52 - 2013-09-27 11:36 - 00000000 ____D C:\Users\User\AppData\Roaming\GG
2016-09-22 16:52 - 2013-09-24 12:27 - 00000000 ____D C:\Users\User\AppData\Roaming\uTorrent
2016-09-22 16:51 - 2014-01-12 13:39 - 00000000 ____D C:\ProgramData\Origin
2016-09-22 16:36 - 2013-09-14 12:16 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-09-22 15:16 - 2013-09-15 16:11 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-09-22 15:10 - 2014-09-05 19:40 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-09-22 15:09 - 2015-03-02 18:54 - 00000000 ____D C:\Program Files (x86)\Steam
2016-09-22 15:08 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-22 07:57 - 2016-08-22 10:32 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2016-09-22 07:57 - 2015-07-01 16:33 - 00000000 ____D C:\ProgramData\Napisy24
2016-09-21 14:05 - 2015-10-26 17:37 - 00000000 ____D C:\Program Files (x86)\GalaxyClient
2016-09-20 14:41 - 2014-12-10 20:25 - 00000000 ____D C:\Program Files (x86)\Origin
2016-09-20 14:07 - 2014-12-10 20:36 - 00000000 ____D C:\Users\User\AppData\Local\Origin
2016-09-19 23:44 - 2016-07-13 12:34 - 00003968 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1468406088
2016-09-19 19:49 - 2014-12-06 23:13 - 00000000 ____D C:\Users\User\AppData\Local\Battle.net
2016-09-19 17:10 - 2014-12-07 17:21 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2016-09-19 15:52 - 2014-12-06 23:13 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-09-19 14:08 - 2016-08-17 17:05 - 00000000 ____D C:\Users\User\AppData\Roaming\InnkeeperUI
2016-09-18 12:33 - 2015-11-19 18:56 - 475670701 _____ C:\Windows\MEMORY.DMP
2016-09-18 12:33 - 2014-12-27 21:30 - 00000000 ____D C:\Windows\Minidump
2016-09-17 23:36 - 2016-04-08 11:36 - 00000992 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-09-16 17:03 - 2015-02-26 12:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2016-09-15 23:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-09-15 23:41 - 2013-09-15 16:10 - 00003922 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-09-15 10:17 - 2014-12-25 12:08 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-09-13 20:21 - 2013-09-15 16:10 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-09-13 12:36 - 2016-04-08 11:36 - 00003994 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-09-13 12:36 - 2013-09-14 12:16 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-09-13 12:36 - 2013-09-14 12:16 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-13 12:36 - 2013-09-14 12:16 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-09-13 12:36 - 2013-09-14 12:16 - 00000000 ____D C:\Windows\system32\Macromed
2016-09-13 12:36 - 2013-09-14 11:43 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-09-13 09:55 - 2016-08-17 17:05 - 00002192 _____ C:\Users\User\Desktop\Innkeeper.lnk
2016-09-13 09:55 - 2016-08-17 17:05 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Innkeeper
2016-09-13 09:55 - 2016-08-17 17:04 - 00000000 ____D C:\Users\User\AppData\Local\SquirrelTemp
2016-09-13 09:55 - 2016-08-17 17:04 - 00000000 ____D C:\Users\User\AppData\Local\Innkeeper
2016-09-12 11:20 - 2009-07-14 07:08 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-09-11 12:25 - 2011-02-04 19:20 - 00743808 _____ C:\Windows\system32\perfh015.dat
2016-09-11 12:25 - 2011-02-04 19:20 - 00157290 _____ C:\Windows\system32\perfc015.dat
2016-09-11 12:25 - 2009-07-14 07:13 - 01679362 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-09 21:49 - 2014-01-21 18:13 - 00000000 ____D C:\ProgramData\ALLPlayer
2016-09-03 02:08 - 2015-12-03 18:25 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-09-03 02:08 - 2010-11-21 09:16 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-09-03 02:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2016-09-03 02:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2016-09-02 20:21 - 2015-06-13 16:08 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-09-02 20:21 - 2015-06-13 16:08 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-09-02 20:21 - 2013-09-15 16:11 - 00513496 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.147455021835501
2016-09-02 20:21 - 2013-09-15 16:11 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-09-02 20:21 - 2013-09-15 16:10 - 00292704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-09-02 20:21 - 2013-09-15 16:10 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-09-02 20:21 - 2013-09-15 16:10 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-09-02 20:20 - 2016-07-12 10:30 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-08-29 11:45 - 2015-12-19 14:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

==================== Pliki w katalogu głównym wybranych folderów =======

2013-09-14 13:19 - 2013-09-14 13:19 - 0000088 _____ () C:\Users\User\AppData\Roaming\WB.CFG
2015-10-26 19:39 - 2015-11-13 21:39 - 0004608 _____ () C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-11-21 21:39 - 2015-01-28 20:38 - 0007602 _____ () C:\Users\User\AppData\Local\Resmon.ResmonCfg

Niektóre pliki w TEMP:
====================
C:\Users\User\AppData\Local\Temp\ALLRemote.exe
C:\Users\User\AppData\Local\Temp\Napisy24.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll
[2010-11-21 05:24] - [2013-09-13 16:12] - 1008640 ____A (Microsoft Corporation) 2C353B6CE0C8D03225CAA2AF33B68D79

C:\Windows\SysWOW64\User32.dll
[2010-11-21 05:24] - [2013-09-13 16:12] - 0833024 ____A (Microsoft Corporation) 861C4346F9281DC0380DE72C8D55D6BE

C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-09-15 10:30

==================== Koniec  FRST.txt ============================