Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 30-09-2016
Uruchomiony przez vengador (administrator)  AIRIS (01-10-2016 16:50:30)
Uruchomiony z C:\Users\vengador\Desktop\FRST + GMER
Załadowane profile: vengador (Dostępne profile: vengador)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe
(Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
() C:\Windows\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
() C:\Program Files\HTC Home 3\Weather.exe
() C:\Program Files\Rainlendar2\Rainlendar2.exe
() C:\Program Files\HTC Home 3\Clock.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12111576 2000-01-01] (Realtek Semiconductor)
HKU\S-1-5-21-4173278026-601312190-193035093-1000\...\Run: [RocketDock] => C:\Windows\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [630784 2007-03-19] ()
HKU\S-1-5-21-4173278026-601312190-193035093-1000\...\Run: [Clock Widget (HTC Home)] => C:\Program Files\HTC Home 3\Clock.exe [2281984 2015-05-23] ()
HKU\S-1-5-21-4173278026-601312190-193035093-1000\...\Run: [Weather Widget (HTC Home)] => C:\Program Files\HTC Home 3\Weather.exe [890880 2015-04-17] ()
HKU\S-1-5-21-4173278026-601312190-193035093-1000\...\Run: [Rainlendar2] => C:\Program Files\Rainlendar2\Rainlendar2.exe [2739240 2015-11-13] ()
HKU\S-1-5-21-4173278026-601312190-193035093-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2014-03-07] (Microsoft Corporation)
ShellExecuteHooks:  - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} -  Brak pliku [ ]
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{785FEAF1-7966-4DBE-81AB-757D7808B06F}: [NameServer] 208.67.222.222,208.67.220.220
Tcpip\..\Interfaces\{785FEAF1-7966-4DBE-81AB-757D7808B06F}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{8D03D31D-7BCB-4B1D-8556-A4CC73385C15}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
Tcpip\..\Interfaces\{F23291E1-4299-4EAD-9C48-7A3A7351F16A}: [NameServer] 208.67.222.222,208.67.220.220

Internet Explorer:
==================
HKU\S-1-5-21-4173278026-601312190-193035093-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.pl/
SearchScopes: HKLM -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-4173278026-601312190-193035093-1000 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-4173278026-601312190-193035093-1000 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2016-02-01] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\vengador\AppData\Roaming\TomTom\HOME\Profiles\ks7uy3bg.default
FF Extension: (Brak nazwy) - C:\Users\vengador\Documents\PLIKI ENIGMA2\Nowy folder\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [nie znaleziono]
FF Extension: (Emulator) - C:\Users\vengador\AppData\Roaming\TomTom\HOME\Profiles\ks7uy3bg.default\Extensions\Navcore.7.903.9183@tomtom.com [2015-07-04] [Brak podpisu cyfrowego]

Chrome: 
=======
CHR HomePage: Default -> hxxps://www.google.pl/
CHR StartupUrls: Default -> "hxxps://www.google.pl/"
CHR Profile: C:\Users\vengador\AppData\Local\Google\Chrome\User Data\Default [2016-10-01]
CHR Extension: (Dysk Google) - C:\Users\vengador\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-28]
CHR Extension: (YouTube) - C:\Users\vengador\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-28]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\vengador\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-28]
CHR Extension: (Gmail) - C:\Users\vengador\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-28]
CHR Extension: (Chrome Media Router) - C:\Users\vengador\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-28]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2016-01-29] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [292816 2016-01-29] (Microsoft Corporation)
R2 ReimageRealTimeProtector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [6489456 2016-09-28] (Reimage®)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 DrvSnSht; C:\Program Files\R-Drive Image.5200\DrvSnSht.sys [102912 2010-05-06] (R-TT Inc.) [Brak podpisu cyfrowego]
R1 Ext2fs; C:\Windows\System32\DRIVERS\ext2fs.sys [266800 2015-12-26] (Stephan Schreiber)
S3 Ext2Fsd; C:\Windows\system32\Drivers\Ext2Fsd.sys [686872 2011-07-09] (www.ext2fsd.com)
R0 IfsMount; C:\Windows\System32\DRIVERS\ifsmount.sys [59952 2015-12-23] (Stephan Schreiber)
R1 ISODrive; C:\Program Files\UltraISO\drivers\ISODrive.sys [82320 2010-01-29] (EZB Systems, Inc.)
R3 mpfilt; C:\Windows\system32\drivers\mpfilt.sys [10588 2013-11-05] () [Brak podpisu cyfrowego]
S3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-14] (Ralink Technology Corp.)
S3 PortTalk; C:\Windows\System32\Drivers\PortTalk.sys [3567 2002-01-12] (Beyond Logic hxxp://www.beyondlogic.org) [Brak podpisu cyfrowego]
S3 PRODIGY; C:\Windows\System32\Drivers\PRODIGY.SYS [32377 2006-08-29] (B-phreaks) [Brak podpisu cyfrowego]
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [15688 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [10320 2013-09-30] ()
S3 R-ImageDisk; C:\Program Files\R-Drive Image.5200\R-ImageDisk.sys [127182 2010-03-03] (R-TT Inc.) [Brak podpisu cyfrowego]
R3 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [379904 2010-03-31] (Realtek Semiconductor Corporation                           )
R3 RTSUER; C:\Windows\System32\Drivers\RtsUer.sys [283864 2000-01-01] (Realsil Semiconductor Corporation)
S3 Ser2plx86; C:\Windows\System32\DRIVERS\ser2pl.sys [160272 2015-10-07] (Prolific Technology Inc.)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-07-01] (The OpenVPN Project)
R2 U3SDR200; C:\Windows\System32\Drivers\U3SDR200.SYS [4224 2014-10-08] () [Brak podpisu cyfrowego]
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [119952 2016-03-10] (MBB)
U5 RTSPER; C:\Windows\System32\Drivers\RTSPER.sys [658136 2000-01-01] (Realsil Semiconductor Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-10-01 16:43 - 2016-10-01 16:43 - 00000000 ____D C:\Windows\system32\log
2016-10-01 00:09 - 2016-10-01 12:54 - 00000000 ____D C:\ProgramData\Kingsoft
2016-09-30 23:39 - 2016-08-12 18:47 - 12574208 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-09-30 23:39 - 2016-08-12 18:47 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-09-30 23:39 - 2016-08-12 18:31 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-09-30 23:39 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-09-30 23:39 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-09-30 23:39 - 2016-08-12 18:21 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-09-30 23:39 - 2016-08-06 17:15 - 01178112 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-09-30 23:39 - 2016-08-06 17:15 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-09-30 23:39 - 2016-08-06 17:15 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-09-30 23:39 - 2016-08-06 17:15 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-09-30 23:39 - 2016-08-06 17:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
2016-09-30 23:39 - 2016-08-06 16:53 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-09-30 23:39 - 2016-08-06 16:53 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
2016-09-30 23:39 - 2016-08-06 16:53 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
2016-09-30 23:39 - 2016-06-14 17:25 - 00078568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-09-30 23:39 - 2016-06-14 17:21 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 01176064 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00474624 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00195072 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-09-30 23:39 - 2016-06-14 17:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-09-30 23:39 - 2016-06-14 17:17 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-09-30 23:39 - 2016-06-14 17:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-09-30 23:39 - 2016-06-14 17:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-09-30 23:39 - 2016-06-14 17:05 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-09-30 23:39 - 2016-06-14 17:00 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-09-30 23:39 - 2016-06-14 16:55 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-09-30 23:39 - 2016-06-14 16:55 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-09-30 23:39 - 2016-06-14 16:54 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-09-30 23:38 - 2016-08-29 17:12 - 12880384 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-09-30 23:38 - 2016-08-29 17:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-09-30 23:38 - 2016-08-29 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-09-30 23:38 - 2016-08-29 16:55 - 02972672 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-09-30 23:38 - 2016-08-16 22:27 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-09-30 23:38 - 2016-08-16 22:27 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-09-30 23:38 - 2016-08-16 22:26 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-09-30 23:38 - 2016-08-16 22:26 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-09-30 23:38 - 2016-08-16 22:26 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-09-30 23:38 - 2016-08-16 22:26 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2016-09-30 23:38 - 2016-08-16 22:26 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-09-30 22:51 - 2016-09-30 23:10 - 00000000 ____D C:\Program Files\Reimage
2016-09-30 22:49 - 2016-09-30 22:52 - 00000140 _____ C:\Windows\Reimage.ini
2016-09-30 22:36 - 2016-09-30 22:43 - 00000000 ____D C:\Users\vengador\AppData\Roaming\Solvusoft
2016-09-30 22:36 - 2015-11-25 13:01 - 00019576 _____ (solvusoft) C:\Windows\system32\roboot.exe
2016-09-30 16:59 - 2016-09-30 16:59 - 00000000 ____D C:\Users\vengador\scan_results
2016-09-30 16:57 - 2016-09-30 16:57 - 00000000 ____D C:\ProgramData\TEMP
2016-09-30 15:29 - 2016-09-30 15:29 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-09-30 10:47 - 2016-09-30 10:47 - 10885792 _____ (TeamViewer GmbH) C:\Users\vengador\Documents\TeamViewer.exe
2016-09-30 10:11 - 2016-10-01 16:50 - 00000000 ____D C:\Users\vengador\Desktop\FRST + GMER
2016-09-30 09:52 - 2016-10-01 16:50 - 00000000 ____D C:\FRST
2016-09-29 11:55 - 2016-09-29 12:20 - 00000000 ____D C:\Qoobox
2016-09-29 11:55 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2016-09-29 11:55 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2016-09-29 11:55 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-09-29 11:55 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-09-29 11:55 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-09-29 11:55 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2016-09-29 11:55 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2016-09-29 11:55 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2016-09-28 18:21 - 2016-09-30 15:43 - 00002137 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-09-28 18:19 - 2016-10-01 16:42 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-28 18:19 - 2016-10-01 16:24 - 00001040 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-28 18:19 - 2016-09-28 18:21 - 00000000 ____D C:\Program Files\Google
2016-09-28 14:04 - 2016-09-28 14:04 - 00000000 ____D C:\Users\vengador\AppData\Local\Kingsoft
2016-09-28 14:02 - 2016-09-28 14:05 - 00000000 ____D C:\Users\vengador\AppData\Roaming\Kingsoft
2016-09-28 13:55 - 2016-09-28 13:55 - 00114488 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kisnetmxp.sys
2016-09-28 13:55 - 2016-09-28 13:55 - 00113464 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kisnetm.sys
2016-09-28 13:55 - 2016-09-28 13:55 - 00109880 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kisnetm64.sys
2016-09-28 13:55 - 2016-09-28 13:55 - 00070744 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksapi64.sys
2016-09-28 12:57 - 2016-09-28 12:57 - 00000000 ____D C:\Program Files\Common Files\AV
2016-09-27 21:23 - 2016-09-27 21:24 - 00000000 ____D C:\Users\vengador\Documents\KOPIE NOTES
2016-09-27 20:43 - 2016-09-27 20:44 - 00000000 ____D C:\Users\vengador\Documents\Malwarebytes Anti-Malware+keys
2016-09-27 19:49 - 2016-09-28 15:14 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-09-27 19:49 - 2016-03-10 14:09 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-09-27 19:49 - 2016-03-10 14:08 - 00126336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-09-27 19:49 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-09-27 11:24 - 2016-09-27 11:24 - 00000000 ____D C:\Windows\admx
2016-09-27 10:14 - 2016-09-30 21:13 - 00000000 ____D C:\Windows\system32\GPBAK
2016-09-27 10:14 - 2008-04-14 02:11 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\appmgr.dll
2016-09-27 10:14 - 2001-08-23 13:00 - 00034871 _____ C:\Windows\system32\gpedit.msc
2016-09-21 16:38 - 2016-08-05 17:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-09-18 16:38 - 2016-09-18 16:38 - 00000000 ____D C:\Users\vengador\AppData\Roaming\PotPlayerMini
2016-09-18 16:33 - 2016-09-18 16:33 - 20317832 _____ (Kakao) C:\Users\vengador\Documents\PotPlayer 1.6.62949.exe
2016-09-15 12:10 - 2016-09-15 12:10 - 3149159934 _____ C:\Windows\MEMORY.DMP
2016-09-15 12:10 - 2016-09-15 12:10 - 00146104 _____ C:\Windows\Minidump\091516-27487-01.dmp
2016-09-14 12:32 - 2016-09-01 20:41 - 00346320 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-09-14 12:32 - 2016-09-01 05:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-09-14 12:32 - 2016-09-01 05:17 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-09-14 12:32 - 2016-09-01 04:48 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-09-14 12:32 - 2016-09-01 04:46 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-09-14 12:32 - 2016-09-01 04:46 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-09-14 12:32 - 2016-09-01 04:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-09-14 12:32 - 2016-09-01 04:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-09-14 12:32 - 2016-09-01 04:26 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-09-14 12:32 - 2016-09-01 04:24 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-09-14 12:32 - 2016-09-01 04:24 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-09-14 12:32 - 2016-09-01 04:23 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-09-14 12:32 - 2016-09-01 04:14 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-09-14 12:32 - 2016-09-01 04:08 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-09-14 12:32 - 2016-09-01 03:59 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-09-14 12:32 - 2016-09-01 03:57 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-09-14 12:32 - 2016-09-01 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-09-14 12:32 - 2016-09-01 03:48 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-09-14 12:32 - 2016-09-01 03:45 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-09-14 12:32 - 2016-09-01 03:34 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-09-14 12:32 - 2016-09-01 03:31 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-09-14 12:32 - 2016-09-01 03:30 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-09-14 12:32 - 2016-09-01 03:29 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-09-14 12:32 - 2016-09-01 03:27 - 13808128 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-09-14 12:32 - 2016-09-01 02:43 - 02445824 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-09-14 12:32 - 2016-09-01 02:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-09-14 12:32 - 2016-09-01 02:38 - 01316352 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-09-14 12:31 - 2016-09-02 17:21 - 04000488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2016-09-14 12:31 - 2016-09-02 17:21 - 03944680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-09-14 12:31 - 2016-09-02 17:21 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-09-14 12:31 - 2016-09-02 17:21 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-09-14 12:31 - 2016-09-02 17:18 - 01310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-09-14 12:31 - 2016-09-02 17:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-09-14 12:31 - 2016-09-02 16:53 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-09-14 12:31 - 2016-09-02 16:53 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-09-14 12:31 - 2016-09-02 16:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-09-14 12:31 - 2016-09-02 16:53 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-09-14 12:31 - 2016-09-02 16:53 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-09-14 12:31 - 2016-09-02 16:51 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-09-14 12:31 - 2016-09-02 16:49 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-09-14 12:31 - 2016-09-02 16:49 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-09-14 12:31 - 2016-09-02 16:49 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-09-14 12:31 - 2016-09-02 16:49 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-09-14 12:31 - 2016-09-02 16:49 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-09-14 12:31 - 2016-09-02 16:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-09-14 12:31 - 2016-09-02 16:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-09-14 12:31 - 2016-09-01 05:08 - 20312064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-09-14 12:31 - 2016-09-01 04:46 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-09-14 12:31 - 2016-09-01 04:44 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-09-14 12:31 - 2016-09-01 04:34 - 02286592 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-09-14 12:31 - 2016-09-01 04:24 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-09-14 12:31 - 2016-09-01 03:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-09-14 12:31 - 2016-09-01 03:29 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-09-14 12:31 - 2016-09-01 03:24 - 04607488 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-09-14 12:31 - 2016-05-13 23:50 - 02945536 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-09-14 12:31 - 2016-05-13 23:50 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-09-14 12:31 - 2016-05-13 23:47 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-09-14 12:31 - 2016-05-13 23:39 - 02060288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-09-14 12:31 - 2016-05-13 23:38 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-09-14 12:31 - 2016-05-13 23:38 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-09-14 12:31 - 2016-05-13 23:38 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-09-14 12:31 - 2016-05-13 23:38 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-09-14 12:31 - 2016-05-13 23:38 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-09-14 12:31 - 2016-05-13 23:38 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-09-14 12:31 - 2016-05-13 23:38 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-09-14 12:31 - 2016-05-12 17:18 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-09-14 12:31 - 2016-05-12 17:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-09-14 12:31 - 2016-05-04 19:21 - 00105192 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-09-14 12:31 - 2016-05-04 19:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-09-14 12:31 - 2016-05-04 19:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-09-14 12:31 - 2016-05-04 19:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-09-14 12:31 - 2016-05-04 19:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-09-14 12:31 - 2016-05-04 16:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-09-14 12:30 - 2016-08-16 04:48 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-09-14 12:30 - 2016-08-16 04:28 - 02399232 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-09-14 12:30 - 2016-08-12 18:21 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-09-14 12:30 - 2016-08-12 18:21 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-09-14 12:30 - 2016-08-12 18:21 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-09-14 12:30 - 2016-08-06 17:15 - 00581632 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-09-14 12:30 - 2016-07-07 17:20 - 01309928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-09-14 12:30 - 2016-07-07 17:20 - 00240872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-09-14 12:30 - 2016-07-07 17:20 - 00187624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-09-14 12:30 - 2016-07-07 16:57 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-09-14 12:30 - 2016-07-01 17:13 - 00741888 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-09-14 12:30 - 2016-07-01 17:13 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2016-09-13 21:27 - 2016-09-13 21:29 - 08244656 _____ (Piriform Ltd) C:\Users\vengador\Documents\ccsetup522.exe
2016-09-09 13:38 - 2016-09-09 13:38 - 00000000 ____D C:\Users\vengador\Documents\windows_Bluray_Player
2016-09-09 13:19 - 2016-09-09 13:19 - 00000000 ____D C:\Users\vengador\Samsung Link
2016-09-07 20:48 - 2016-09-07 20:48 - 00000000 ____D C:\Users\vengador\AppData\Roaming\Leawo
2016-09-07 16:40 - 2016-09-07 17:00 - 00000000 ____D C:\Users\vengador\Documents\Generator Cccm ElPolinizador115
2016-09-06 11:49 - 2016-09-30 13:20 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2016-09-05 02:02 - 2016-09-05 02:02 - 02139840 _____ (BitTorrent Inc.) C:\Users\vengador\Documents\uTorrent (1).exe
2016-09-05 02:01 - 2016-09-05 02:02 - 02540232 _____ (BitTorrent Inc.) C:\Users\vengador\Documents\BitTorrent (1).exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-10-01 16:44 - 2016-05-27 16:01 - 00000000 ____D C:\Program Files\HTC Home 3
2016-10-01 16:43 - 2016-07-02 09:53 - 00000000 ____D C:\Users\vengador\.rainlendar2
2016-10-01 16:42 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-10-01 16:21 - 2009-07-14 06:34 - 00025408 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-10-01 16:21 - 2009-07-14 06:34 - 00025408 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-10-01 10:31 - 2009-07-14 06:46 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-10-01 00:00 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\Dism
2016-09-30 23:43 - 2014-03-05 20:21 - 01643348 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-30 23:43 - 2009-07-14 10:07 - 00740742 _____ C:\Windows\system32\perfh015.dat
2016-09-30 23:43 - 2009-07-14 10:07 - 00156260 _____ C:\Windows\system32\perfc015.dat
2016-09-30 23:42 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\inf
2016-09-30 22:39 - 2015-05-24 00:28 - 00002115 _____ C:\Windows\epplauncher.mif
2016-09-30 22:32 - 2016-04-22 16:40 - 00000000 ____D C:\Program Files\Microsoft Security Client
2016-09-30 19:11 - 2012-11-01 10:12 - 00000000 ____D C:\Users\vengador\Documents\DataRecovery_EN
2016-09-30 18:47 - 2016-05-26 15:07 - 00059224 _____ C:\Users\vengador\AppData\Local\GDIPFONTCACHEV1.DAT
2016-09-30 18:47 - 2009-07-14 06:33 - 00270448 _____ C:\Windows\system32\FNTCACHE.DAT
2016-09-30 16:59 - 2014-03-05 20:16 - 00000000 ____D C:\Users\vengador
2016-09-30 16:57 - 2014-03-06 11:45 - 00000000 ____D C:\Users\vengador\AppData\Local\Apps\2.0
2016-09-30 15:26 - 2016-01-17 21:04 - 00000000 ____D C:\Users\vengador\AppData\LocalLow\Temp
2016-09-30 10:49 - 2014-05-19 18:51 - 00000000 ____D C:\Users\vengador\AppData\Roaming\TeamViewer
2016-09-30 02:06 - 2016-05-10 09:38 - 00000000 ____D C:\AdwCleaner
2016-09-29 12:06 - 2009-07-14 04:04 - 00000215 _____ C:\Windows\system.ini
2016-09-29 10:54 - 2016-04-17 17:15 - 00000000 ____D C:\Users\vengador\Documents\combofix
2016-09-28 18:21 - 2014-03-06 11:46 - 00000000 ____D C:\Users\vengador\AppData\Local\Google
2016-09-28 18:19 - 2014-03-06 11:45 - 00000000 ____D C:\Users\vengador\AppData\Local\Deployment
2016-09-28 18:17 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2016-09-28 18:03 - 2014-03-06 18:51 - 00000000 ____D C:\KRECYCLE
2016-09-28 13:45 - 2016-03-27 19:10 - 00000000 ____D C:\Program Files\Common Files\Skype
2016-09-28 13:45 - 2015-08-18 19:08 - 00000000 ___RD C:\Program Files\Skype
2016-09-28 13:45 - 2014-03-06 16:01 - 00000000 ____D C:\Users\vengador\AppData\Roaming\Skype
2016-09-28 13:45 - 2014-03-06 16:01 - 00000000 ____D C:\ProgramData\Skype
2016-09-28 13:45 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration
2016-09-27 22:33 - 2014-11-21 19:17 - 00000000 ____D C:\Users\vengador\Documents\Zakldki
2016-09-27 22:08 - 2015-11-08 14:00 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-09-27 22:08 - 2014-03-05 20:12 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-09-27 22:08 - 2014-03-05 20:12 - 00000080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-09-27 22:08 - 2009-07-14 06:42 - 00000080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-09-27 22:08 - 2009-07-14 06:42 - 00000080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-09-27 22:08 - 2009-07-14 06:42 - 00000080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-09-27 22:08 - 2009-07-14 06:42 - 00000080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-09-27 22:07 - 2015-10-06 16:19 - 00001116 _____ C:\Users\vengador\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
2016-09-27 22:07 - 2015-07-06 16:29 - 00001116 _____ C:\Users\vengador\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-09-27 22:07 - 2009-07-14 06:46 - 00001218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-09-27 22:07 - 2009-07-14 06:37 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-09-27 22:07 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Cursors
2016-09-27 21:57 - 2009-07-14 04:04 - 00002577 _____ C:\Windows\system32\config.nt
2016-09-27 21:57 - 2009-07-14 04:04 - 00001688 _____ C:\Windows\system32\autoexec.nt
2016-09-27 20:48 - 2015-08-19 19:46 - 00000000 ____D C:\Users\vengador\AppData\Roaming\uTorrent
2016-09-27 13:38 - 2009-07-14 06:34 - 00000000 ____D C:\Windows\ServiceProfiles
2016-09-27 00:20 - 2014-03-21 00:21 - 00000000 ____D C:\Users\vengador\AppData\Local\ElevatedDiagnostics
2016-09-24 18:44 - 2014-09-13 14:47 - 00000000 ____D C:\Users\vengador\AppData\Local\Adobe
2016-09-24 18:44 - 2014-03-06 20:52 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-09-24 18:44 - 2014-03-06 20:52 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-09-24 18:43 - 2014-03-06 20:52 - 00000000 ____D C:\Windows\system32\Macromed
2016-09-24 15:14 - 2014-04-22 17:17 - 00000000 ___SD C:\Users\vengador\Documents\PLIKI ENIGMA2
2016-09-24 14:09 - 2014-10-08 20:13 - 00000000 ____D C:\Program Files\R-Drive Image.5200
2016-09-23 17:51 - 2015-07-11 13:30 - 00000000 ____D C:\Users\vengador\AppData\Roaming\SatChannelListEditor
2016-09-20 10:53 - 2016-05-06 10:20 - 01726976 ___SH C:\Users\vengador\Desktop\Thumbs.db
2016-09-19 23:48 - 2014-10-02 22:22 - 00000000 ____D C:\Users\vengador\Documents\adwcleaner_6.010
2016-09-19 23:47 - 2014-03-06 15:57 - 00000000 ____D C:\Users\vengador\AppData\Roaming\GG
2016-09-19 12:32 - 2009-07-14 06:53 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-09-15 12:10 - 2014-04-18 15:57 - 00000000 ____D C:\Windows\Minidump
2016-09-14 15:12 - 2014-04-05 18:01 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-09-14 14:58 - 2014-03-06 14:36 - 141747376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-09-14 14:58 - 2014-03-06 12:18 - 00000000 ____D C:\Windows\system32\MRT
2016-09-14 14:57 - 2014-04-05 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-09-09 11:56 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\TAPI
2016-09-04 12:12 - 2014-03-06 16:15 - 00000000 ____D C:\Users\vengador\Documents\Dream_Logo_Generator

==================== Pliki w katalogu głównym wybranych folderów =======

2015-01-21 20:10 - 2015-01-21 20:10 - 0000001 _____ () C:\Users\vengador\AppData\Local\llftool.4.25.agreement
2014-08-24 19:02 - 2014-08-24 19:02 - 0000001 _____ () C:\Users\vengador\AppData\Local\llftool.4.40.agreement
2015-07-22 21:05 - 2015-07-22 21:09 - 0000600 _____ () C:\Users\vengador\AppData\Local\PUTTY.RND
2015-05-18 19:32 - 2015-05-18 19:32 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2014-09-28 02:19

==================== Koniec  FRST.txt ============================