Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 21-09-2016 Uruchomiony przez Piotr (administrator) PIOTR-MISIASZEK (23-09-2016 13:12:52) Uruchomiony z C:\Users\Admin\Downloads Załadowane profile: Piotr (Dostępne profile: Piotr & Gość) Platform: Windows 8.1 Pro (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: "C:\Program Files (x86)\Firefox\Firefox.exe" -osint -url "%1") Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (National Instruments Corporation) C:\Windows\SysWOW64\lkads.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe (Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe (National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe (National Instruments, Inc.) C:\Windows\SysWOW64\lkcitdl.exe (National Instruments Corporation) C:\Windows\SysWOW64\lktsrv.exe (National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (Akamai Technologies, Inc.) C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI Error Reporting\nierserver.exe () C:\Program Files (x86)\DC@ms\dtella.exe (Akamai Technologies, Inc.) C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe () C:\Program Files (x86)\WinSaber\WinSaber.exe () C:\Program Files (x86)\Firefox\bin\FirefoxCommand.exe () C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe (Microsoft Corporation) C:\Windows\System32\Taskmgr.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe (Mozilla Corporation) C:\Program Files (x86)\Firefox\Firefox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Mozilla Corporation) C:\Program Files (x86)\Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_162.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_162.exe (Microsoft Corporation) C:\Windows\splwow64.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe () C:\Users\Admin\Downloads\b361l7i6.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [54520 2015-10-22] (Panda Security, S.L.) HKLM-x32\...\Run: [Panda Security URL Filtering] => "C:\Program Files\Panda Security URL Filtering\Panda_URL_Filtering.exe" HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [529480 2016-02-24] (Autodesk Inc.) HKLM-x32\...\Run: [NI Update Service] => C:\Program Files (x86)\National Instruments\Shared\Update Service\NIUpdateService.exe [857888 2013-05-28] (National Instruments) HKU\S-1-5-21-3933479072-2540534226-446759770-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.) HKU\S-1-5-21-3933479072-2540534226-446759770-1000\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1310088 2015-01-27] (Autodesk, Inc.) HKU\S-1-5-21-3933479072-2540534226-446759770-1000\...\Policies\Explorer: [] HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1310088 2015-01-27] (Autodesk, Inc.) AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [185816 2015-11-16] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [164008 2015-11-16] (NVIDIA Corporation) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.) Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\dtella.lnk [2016-02-24] ShortcutTarget: dtella.lnk -> C:\Program Files (x86)\DC@ms\dtella.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dtella.lnk [2016-02-24] ShortcutTarget: Dtella.lnk -> C:\Program Files (x86)\Dtella@MS\dtella.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NI Error Reporting.lnk [2016-05-22] ShortcutTarget: NI Error Reporting.lnk -> C:\Program Files (x86)\National Instruments\Shared\NI Error Reporting\nierserver.exe (National Instruments Corporation) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Winsock: Catalog5 08 C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [26512 2013-05-11] (National Instruments Corporation) Winsock: Catalog5-x64 08 C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [28560 2013-05-11] (National Instruments Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{17E853B6-22AF-4505-A2CC-910069B8954A}: [DhcpNameServer] 192.168.80.2 192.168.64.2 Tcpip\..\Interfaces\{45C35913-77E4-420D-AED5-366AF1556F38}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mylucky123.com/?type=hp&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mylucky123.com/?type=hp&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mylucky123.com/search/?type=ds&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mylucky123.com/search/?type=ds&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mylucky123.com/?type=hp&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mylucky123.com/?type=hp&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834&q={searchTerms} HKU\S-1-5-21-3933479072-2540534226-446759770-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mylucky123.com/?type=hp&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834 HKU\S-1-5-21-3933479072-2540534226-446759770-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mylucky123.com/?type=hp&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834 SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834&q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834&q={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834&q={searchTerms} SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834&q={searchTerms} SearchScopes: HKU\S-1-5-21-3933479072-2540534226-446759770-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834&q={searchTerms} BHO: Panda Security Toolbar -> {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll => Brak pliku Toolbar: HKLM - Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll Brak pliku Toolbar: HKLM-x32 - Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - Brak pliku Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2016-08-29] (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2016-08-29] (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2016-08-29] (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2016-08-29] (McAfee, Inc.) StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.mylucky123.com/?type=sc&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834 FireFox: ======== FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\saeoed1k.default FF Homepage: hxxp://www.mylucky123.com/?type=hp&ts=1474277055&z=6b102441f9f8bf456353d33gcz1m3zco8mdm1e1wfq&from=wpm0616&uid=ST1000LM024XHN-M101MBB_S2U5J9FD416834 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll [2016-09-13] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-13] () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3933479072-2540534226-446759770-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Admin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-07-14] (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nplv2012win32.dll [2013-05-29] (National Instruments) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nplv2013win32.dll [2013-06-20] (National Instruments) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-06-30] (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\saeoed1k.default\searchplugins\mylucky123.xml [2016-09-19] FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2016-09-15] FF Extension: (Firefox Hotfix) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\saeoed1k.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-08-31] FF Extension: (MEGA) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\saeoed1k.default\Extensions\firefox@mega.co.nz.xpi [2016-09-14] FF Extension: (Panda Security Toolbar) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\saeoed1k.default\Extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}.xpi [2015-11-23] FF Extension: (Adblock Plus) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\saeoed1k.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-29] FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi Chrome: ======= CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [Brak podpisu cyfrowego] R2 CommandHandler; C:\Program Files (x86)\Firefox\bin\FirefoxCommand.exe [272768 2016-09-18] () U2 ed2kidle; C:\Program Files (x86)\walalala co\aMuleCustom\ed2k.exe [236544 2016-09-12] (hxxp://www.amule.org/) [Brak podpisu cyfrowego] R2 FirefoxU; C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe [610688 2016-09-18] () R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation) R2 LkCitadelServer; C:\WINDOWS\SysWOW64\lkcitdl.exe [695136 2010-10-27] (National Instruments, Inc.) R2 lkClassAds; C:\WINDOWS\SysWOW64\lkads.exe [53544 2013-06-12] (National Instruments Corporation) R2 lkTimeSync; C:\WINDOWS\SysWOW64\lktsrv.exe [63792 2013-06-12] (National Instruments Corporation) R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [161536 2016-08-29] (McAfee, Inc.) R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [142072 2015-10-18] (Panda Security, S.L.) R2 NIApplicationWebServer; C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [57696 2013-06-08] (National Instruments Corporation) S4 NIApplicationWebServer64; C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [81248 2013-06-08] (National Instruments Corporation) R2 NIDomainService; C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe [380720 2013-06-12] (National Instruments Corporation) S3 NILM License Manager; C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\lmgrd.exe [1427688 2010-08-02] (Macrovision Corporation) R2 nimDNSResponder; C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [260976 2013-05-11] (National Instruments Corporation) R2 NiSvcLoc; C:\Program Files (x86)\National Instruments\Shared\niSvcLoc\nisvcloc.exe [90440 2013-06-07] (National Instruments Corporation) R2 NISystemWebServer; C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe [57680 2013-06-08] (National Instruments Corporation) S4 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [73176 2016-02-22] (Panda Security, S.L.) S4 panda_url_filtering; C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe [287752 2015-11-06] (Visicom Media Inc.) R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [38136 2015-10-22] (Panda Security, S.L.) S3 vmicvss; C:\Windows\System32\ICSvc.dll [517120 2013-08-22] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) R2 winsaber; C:\Program Files (x86)\WinSaber\WinSaber.exe [477400 2016-09-18] () S2 AdAppMgrSvc; "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe" [X] ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [129152 2016-04-25] (Samsung Electronics Co., Ltd.) S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider) S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation) R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [46240 2016-06-06] (McAfee, Inc.) R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [94456 2015-07-09] (Panda Security, S.L.) R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [201976 2015-07-09] (Panda Security, S.L.) R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [110840 2015-07-09] (Panda Security, S.L.) R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [110840 2015-07-09] (Panda Security, S.L.) R1 NNSNAHSL; C:\Windows\system32\DRIVERS\NNSNAHSL.sys [58616 2015-06-19] (Panda Security, S.L.) R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [103160 2015-07-09] (Panda Security, S.L.) R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [89472 2015-09-01] (Panda Security, S.L.) R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [124152 2015-07-09] (Panda Security, S.L.) R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [300280 2015-07-09] (Panda Security, S.L.) R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [170232 2015-07-09] (Panda Security, S.L.) R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [113400 2015-07-09] (Panda Security, S.L.) R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [257784 2015-07-09] (Panda Security, S.L.) R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [106232 2015-07-09] (Panda Security, S.L.) S3 panda_url_filteringd; C:\Program Files\Panda Security URL Filtering\panda_url_filteringd.sys [51288 2014-03-19] (Visicom Media Inc.) R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [164088 2015-07-19] (Panda Security, S.L.) R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [121592 2015-07-19] (Panda Security, S.L.) R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [197880 2015-07-19] (Panda Security, S.L.) R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [124152 2015-07-19] (Panda Security, S.L.) R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [134392 2015-07-19] (Panda Security, S.L.) R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [107768 2015-07-19] (Panda Security, S.L.) R3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [61712 2015-05-22] (Panda Security, S.L.) S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [221824 2016-04-25] (Samsung Electronics Co., Ltd.) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) U3 kwtiapod; \??\C:\Users\Admin\AppData\Local\Temp\kwtiapod.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-09-23 13:12 - 2016-09-23 13:15 - 00022668 _____ C:\Users\Admin\Downloads\FRST.txt 2016-09-23 13:11 - 2016-09-23 13:12 - 00000000 ____D C:\FRST 2016-09-23 13:09 - 2016-09-23 13:09 - 00060436 _____ C:\Users\Admin\Desktop\gmerlog.txt 2016-09-23 11:39 - 2016-09-23 11:39 - 02402816 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe 2016-09-23 11:39 - 2016-09-23 11:39 - 00380928 _____ C:\Users\Admin\Downloads\b361l7i6.exe 2016-09-22 16:52 - 2016-09-22 16:52 - 00001122 _____ C:\Users\Admin\Desktop\Maszyny i urządzenia energetyczne — skrót.lnk 2016-09-22 16:30 - 2016-09-22 16:30 - 00000885 _____ C:\Users\Admin\Desktop\CHEMIA FIZYCZNA — skrót.lnk 2016-09-22 16:25 - 2016-09-22 16:25 - 00000938 _____ C:\Users\Admin\Desktop\PODSTAWY PROJEKTOWANIA — skrót.lnk 2016-09-22 15:42 - 2016-09-22 15:42 - 00000000 ____D C:\Users\Admin\Desktop\SEM V 2016-09-22 15:35 - 2016-09-22 15:35 - 00000980 _____ C:\Users\Admin\Desktop\BUDOWNICTWO I FIZYKA CIEPLNA — skrót.lnk 2016-09-22 15:35 - 2016-09-22 15:35 - 00000854 _____ C:\Users\Admin\Desktop\MATEMATYKA — skrót.lnk 2016-09-22 12:01 - 2016-09-22 12:01 - 37058622 _____ C:\Users\Admin\Downloads\Energetyka Jądrowa - Opracowanie by Shang.pdf 2016-09-22 12:01 - 2016-09-22 12:01 - 05773361 _____ C:\Users\Admin\Downloads\Ćwiczenia z EJ.pdf 2016-09-22 12:01 - 2016-09-22 12:01 - 00838351 _____ C:\Users\Admin\Downloads\Egzamin.rar 2016-09-21 20:18 - 2016-09-21 20:21 - 69760620 _____ C:\Users\Admin\Downloads\jadrówka.rar 2016-09-21 18:56 - 2016-09-21 18:56 - 00225257 _____ C:\Users\Admin\Downloads\Wniosek_styp_socjalne.pdf 2016-09-21 18:56 - 2016-09-21 18:56 - 00208901 _____ C:\Users\Admin\Downloads\Wniosek_styp_korygujacy.pdf 2016-09-21 18:56 - 2016-09-21 18:56 - 00201160 _____ C:\Users\Admin\Downloads\Wniosek_styp_dla os_niepel.pdf 2016-09-21 18:56 - 2016-09-21 18:56 - 00179375 _____ C:\Users\Admin\Downloads\Wniosek_zapomoga.pdf 2016-09-21 18:56 - 2016-09-21 18:56 - 00101468 _____ C:\Users\Admin\Downloads\Wniosek_styp_Rektora.pdf 2016-09-21 18:55 - 2016-09-21 18:55 - 00141479 _____ C:\Users\Admin\Downloads\Regulamin_sw_pom_mat(1).pdf 2016-09-21 18:51 - 2016-09-21 18:51 - 00044110 _____ C:\Users\Admin\Downloads\oswiadczenie_zameldowanie.pdf 2016-09-21 18:50 - 2016-09-21 18:51 - 00044513 _____ C:\Users\Admin\Downloads\oswiadczenie_kwatera.pdf 2016-09-21 18:49 - 2016-09-21 18:49 - 00000000 ____D C:\WINDOWS\LastGood 2016-09-21 01:29 - 2016-09-21 01:29 - 00705823 _____ C:\Users\Admin\Downloads\Zasada działania silnika Diesla - Piotr Misiaszek(1).pptx 2016-09-21 00:18 - 2016-09-21 00:18 - 00395862 _____ C:\Users\Admin\Desktop\ObedientDistantHuemul.webm 2016-09-19 11:30 - 2016-09-19 11:30 - 00242136 _____ C:\Users\Admin\Downloads\Firefox Setup Stub 48.0.2.exe 2016-09-19 11:27 - 2016-09-19 11:27 - 41455096 _____ C:\Users\Admin\Downloads\firefox-51.0a1.pl.win64.installer.exe 2016-09-19 11:25 - 2016-09-19 11:32 - 00001159 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-09-19 11:25 - 2016-09-19 11:25 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Firefox 2016-09-19 11:25 - 2016-09-19 11:25 - 00000000 ____D C:\Users\Admin\AppData\Local\Firefox 2016-09-19 11:24 - 2016-09-23 13:10 - 00000000 _____ C:\Users\Public\Documents\report.dat 2016-09-19 11:24 - 2016-09-19 11:24 - 00000000 ____D C:\Users\Admin\AppData\Roaming\aMule 2016-09-19 11:24 - 2016-09-19 11:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aMuleCustom 2016-09-19 11:24 - 2016-09-19 11:24 - 00000000 ____D C:\Program Files (x86)\walalala co 2016-09-19 11:24 - 2016-09-19 11:24 - 00000000 ____D C:\Program Files (x86)\Firefox 2016-09-19 11:24 - 2016-09-19 11:24 - 00000000 _____ C:\Users\Public\Documents\temp.dat 2016-09-18 21:15 - 2016-09-18 21:15 - 00159410 _____ C:\Users\Admin\Downloads\Jezyk-slowacki-Podrecznik-dla-poczatkujacych_scrap.pdf 2016-09-14 14:33 - 2016-09-14 14:34 - 04104113 _____ C:\Users\Admin\Downloads\drive-download-20160914T123127Z.zip 2016-09-13 11:07 - 2016-09-13 11:08 - 16648049 _____ C:\Users\Admin\Downloads\drive-download-20160913T090749Z.zip 2016-09-13 10:29 - 2016-09-13 10:37 - 568582379 _____ C:\Users\Admin\Downloads\Narcos.S02E10.PL.720p.Gelson.mp4 2016-09-12 19:30 - 2016-09-12 19:30 - 00988501 _____ C:\Users\Admin\Downloads\CENGEL_ PROPERTY Tables 6 NEW-SIappendix1.pdf 2016-09-12 14:30 - 2016-09-12 14:39 - 614640455 _____ C:\Users\Admin\Downloads\Narcos.S02E09.PL.720p.Gelson.mp4 2016-09-11 12:25 - 2016-09-11 12:33 - 586437626 _____ C:\Users\Admin\Downloads\Narcos.S02E08.PL.720p.Gelson.mp4 2016-09-11 11:21 - 2016-09-11 11:57 - 616394458 _____ C:\Users\Admin\Downloads\Narcos.S02E07.PL.720p.Gelson.mp4 2016-09-10 21:54 - 2016-09-10 21:54 - 00797552 _____ C:\Users\Admin\Downloads\Niemiecki w 1 miesiąc.pdf 2016-09-10 13:08 - 2016-09-10 13:16 - 564601443 _____ C:\Users\Admin\Downloads\Narcos.S02E05.PL.720p.WEBRiP.x264-PSiG.mkv.mp4 2016-09-10 12:54 - 2016-09-10 13:03 - 586877428 _____ C:\Users\Admin\Downloads\Narcos.S02E06.PL.720p.WEBRiP.x264-PSiG.mkv.mp4 2016-09-10 12:04 - 2016-09-10 12:05 - 08313856 _____ C:\Users\Admin\Downloads\PONS- Japoński w 1 miesiąc.pdf 2016-09-10 11:51 - 2016-09-10 11:57 - 84644740 _____ C:\Users\Admin\Downloads\JAPOŃSKI PONS w 1 miesiac.zip 2016-09-10 11:50 - 2016-09-10 11:53 - 39752477 _____ C:\Users\Admin\Downloads\DELF A2 book.pdf 2016-09-09 22:00 - 2016-09-09 22:01 - 00141479 _____ C:\Users\Admin\Downloads\Regulamin_sw_pom_mat.pdf 2016-09-09 21:00 - 2016-09-09 23:05 - 610742675 _____ C:\Users\Admin\Downloads\Narcos.S02E04.PL.720p.WEBRiP.x264-PSiG.mkv.mp4 2016-09-08 22:35 - 2016-09-08 22:35 - 00133632 _____ C:\Users\Admin\Documents\Rescue8.asd 2016-09-08 22:22 - 2016-09-08 22:39 - 00000000 ____D C:\Users\Admin\Desktop\Nowy folder 2016-09-08 22:22 - 2016-09-08 22:33 - 00135168 _____ C:\Users\Admin\Documents\Rescue6.asd 2016-09-08 22:13 - 2016-09-08 22:21 - 00136704 _____ C:\Users\Admin\Documents\Rescue5.asd 2016-09-08 22:09 - 2016-09-08 22:09 - 00000484 _____ C:\Users\Admin\Desktop\Dysk lokalny (C) — skrót.lnk 2016-09-08 22:08 - 2016-09-08 22:12 - 00138752 _____ C:\Users\Admin\Documents\Rescue4.asd 2016-09-08 22:05 - 2016-09-08 22:05 - 00905133 _____ C:\Users\Admin\Desktop\rr p1.pdf 2016-09-08 22:02 - 2016-09-08 22:02 - 00138240 _____ C:\Users\Admin\Documents\Rescue.asd 2016-09-08 10:33 - 2016-09-08 10:33 - 00000000 ____D C:\ProgramData\corss 2016-09-05 23:18 - 2016-09-05 23:18 - 01549987 _____ C:\Users\Admin\Downloads\Mark Twain - Pod gołym niebem.pdf 2016-09-05 23:11 - 2016-09-05 23:11 - 00041198 _____ C:\Users\Admin\Downloads\Mark Twain - Jak kandydowałem na gubernatora.pdf 2016-09-05 23:11 - 2016-09-05 23:11 - 00041198 _____ C:\Users\Admin\Downloads\Mark Twain - Jak kandydowałem na gubernatora(1).pdf 2016-09-05 14:28 - 2016-09-05 14:28 - 00187772 _____ C:\Users\Admin\Downloads\energ - zestawy 11.pdf 2016-09-05 14:28 - 2016-09-05 14:28 - 00182724 _____ C:\Users\Admin\Downloads\energ - zestawy 10.pdf 2016-09-05 11:44 - 2016-09-05 11:44 - 02414710 _____ C:\Users\Admin\Downloads\Jozef Mackiewicz - Katyn zbrodnia bez sadu i kary.pdf 2016-09-04 13:36 - 2016-09-04 13:36 - 00000100 _____ C:\Users\Admin\Downloads\_1245.djvu 2016-09-02 15:23 - 2016-09-02 15:27 - 14345694 _____ C:\Users\Admin\Downloads\Zwroty i wyrażenia w języku francuskim.pdf 2016-09-01 20:28 - 2016-09-01 20:28 - 00000000 ____D C:\Program Files (x86)\ESET 2016-09-01 20:27 - 2016-09-01 20:27 - 02870984 _____ (ESET) C:\Users\Admin\Downloads\esetsmartinstaller_plk.exe 2016-08-31 20:59 - 2016-08-31 21:00 - 00000000 ____D C:\Users\Admin\Desktop\ciężki gnój 2016-08-31 20:52 - 2016-08-31 20:57 - 00000000 ____D C:\Users\Admin\Desktop\Xiaomi 2016-08-30 19:45 - 2016-08-30 19:56 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Nero 2016-08-30 19:44 - 2016-08-30 19:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2016-08-30 19:44 - 2016-08-30 19:44 - 00002752 _____ C:\Users\Public\Desktop\Nero StartSmart Essentials.lnk 2016-08-30 19:44 - 2016-08-30 19:44 - 00000000 ____D C:\ProgramData\Nero 2016-08-30 19:44 - 2016-08-30 19:44 - 00000000 ____D C:\Program Files (x86)\Nero 2016-08-30 19:38 - 2016-08-30 19:38 - 00001213 _____ C:\Users\Admin\Desktop\Kontynuuj instalację Nero Free 9.4.12.3d.lnk 2016-08-30 19:31 - 2016-09-13 09:48 - 00000000 ____D C:\Program Files (x86)\McAfee 2016-08-30 19:31 - 2016-08-30 19:31 - 00000000 ____D C:\ProgramData\McAfee 2016-08-30 19:21 - 2016-08-30 19:22 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Corner Sunshine 2016-08-30 19:21 - 2016-08-30 19:21 - 00000000 ____D C:\ProgramData\sozy 2016-08-30 18:45 - 2016-08-31 23:09 - 00000943 _____ C:\Users\Admin\Desktop\instrukcja.txt 2016-08-30 18:45 - 2016-08-30 18:45 - 00008005 _____ C:\Users\Admin\Desktop\Nowy Arkusz programu Microsoft Office Excel.xlsx 2016-08-30 18:36 - 2016-08-30 18:39 - 2575128051 _____ C:\Users\Admin\Desktop\pes2016.rar.002 2016-08-30 18:32 - 2016-08-30 18:36 - 2575128052 _____ C:\Users\Admin\Desktop\pes2016.rar.001 2016-08-30 18:31 - 2016-08-30 18:31 - 00001055 _____ C:\Users\Public\Desktop\Dzielenie i łączenie plików.lnk 2016-08-30 18:30 - 2016-08-30 18:30 - 00895362 _____ (Michał Bąbik ) C:\Users\Admin\Downloads\dzielenie-i-laczenie-plikow-122_[www.programosy.pl].exe ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-09-23 12:04 - 2016-02-13 20:47 - 00000000 ____D C:\Users\Admin\AppData\Roaming\vlc 2016-09-21 22:59 - 2016-03-25 17:03 - 00000000 ____D C:\Users\Admin\Desktop\użytkowe 2016-09-20 14:18 - 2016-02-13 19:18 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3933479072-2540534226-446759770-1000 2016-09-19 11:32 - 2016-02-13 19:25 - 00001171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-09-19 11:32 - 2016-02-13 19:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-09-19 11:32 - 2016-02-13 19:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-09-19 11:25 - 2016-02-13 19:12 - 00001760 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-09-17 15:36 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-09-16 17:37 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2016-09-15 15:52 - 2016-02-13 19:28 - 00004476 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-09-14 13:36 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps 2016-09-14 13:36 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-09-13 10:28 - 2016-02-13 19:26 - 00000000 ____D C:\Users\Admin\AppData\Local\Adobe 2016-09-13 10:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2016-09-13 10:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\Macromed 2016-09-06 20:03 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF 2016-09-06 18:47 - 2016-06-28 18:55 - 00000000 ____D C:\Users\Admin\Desktop\francuski 2016-09-05 11:37 - 2016-06-28 18:59 - 00000000 ____D C:\Users\Admin\Desktop\czytam 2016-09-01 22:46 - 2016-02-13 19:38 - 00000000 ____D C:\Program Files (x86)\pandasecuritytb 2016-09-01 13:36 - 2016-03-30 18:47 - 00000000 ____D C:\Users\Admin\Downloads\Pink Floyd - Dark Side Of The Moon [320kbps] 2016-08-30 18:31 - 2016-03-28 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dziel. i łącz. plików 2016-08-30 18:31 - 2016-03-28 13:45 - 00000000 ____D C:\Program Files (x86)\Dzielenie i laczenie plikow Niektóre pliki w TEMP: ==================== C:\Users\Admin\AppData\Local\Temp\AcDeltree.exe C:\Users\Admin\AppData\Local\Temp\ose00000.exe C:\Users\Admin\AppData\Local\Temp\sfamcc00001.dll C:\Users\Admin\AppData\Local\Temp\sfextra.dll ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2016-09-22 14:59 ==================== Koniec FRST.txt ============================