Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 17-10-2016
Uruchomiony przez Lenovo (administrator)  Y580 (21-10-2016 20:58:41)
Uruchomiony z C:\Users\Lenovo\Desktop
Załadowane profile: Lenovo (Dostępne profile: Lenovo)
Platform: Windows 7 Professional (X64) Język: Polski (Polska)
Internet Explorer Wersja 8 (Domyślna przeglądarka: "C:\Program Files (x86)\Firefox\Firefox.exe" "%1")
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(hxxp://www.amule.org/) C:\Program Files (x86)\amuleC\ed2k.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(Mozilla Corporation) C:\Program Files (x86)\Firefox\Firefox.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Desktop.exe
(Mozilla Corporation) C:\Program Files (x86)\Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_185.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_185.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe


==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12343400 2011-12-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2011-11-15] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1767944 2016-06-14] (NVIDIA Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291096 2011-12-05] (Intel Corporation)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [218896 2016-09-13] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [218896 2016-09-13] (AVG Technologies CZ, s.r.o.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-488659936-1714191775-3546540212-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2860832 2016-10-13] (Valve Corporation)
HKU\S-1-5-21-488659936-1714191775-3546540212-1000\...\MountPoints2: {501c7a6a-37c4-11e6-87e3-feaa652506c5} - E:\LGAutoRun.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [178136 2016-06-03] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [155768 2016-06-03] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Brak pliku
BootExecute: autocheck autochk * aswBoot.exe /M:aae4a41333 /wow /dir:"C:\Program Files\AVAST Software\Avast"

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63
Tcpip\..\Interfaces\{06D8B874-A398-4746-B453-293B3E8843B7}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{3933196E-7661-4FEA-90FD-497AFD1349ED}: [DhcpNameServer] 62.179.1.62 62.179.1.63
Tcpip\..\Interfaces\{69D3E49B-883F-443E-BA62-F558F484AEF6}: [DhcpNameServer] 45.63.123.163 8.8.4.4
Tcpip\..\Interfaces\{E5D43F6F-1BDA-4137-A1AB-17343E7D79E7}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E5D43F6F-1BDA-4137-A1AB-17343E7D79E7}: [DhcpNameServer] 62.179.1.62 62.179.1.63

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mylucky123.com/?type=hp&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mylucky123.com/?type=hp&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mylucky123.com/search/?type=ds&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mylucky123.com/search/?type=ds&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mylucky123.com/?type=hp&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mylucky123.com/?type=hp&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799&q={searchTerms}
HKU\S-1-5-21-488659936-1714191775-3546540212-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mylucky123.com/?type=hp&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799
HKU\S-1-5-21-488659936-1714191775-3546540212-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mylucky123.com/?type=hp&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799&q={searchTerms}
SearchScopes: HKU\S-1-5-21-488659936-1714191775-3546540212-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799&q={searchTerms}
SearchScopes: HKU\S-1-5-21-488659936-1714191775-3546540212-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mylucky123.com/search/?type=ds&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799&q={searchTerms}
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.mylucky123.com/?type=sc&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799

FireFox:
========
FF DefaultProfile: c73l0l9w.default
FF ProfilePath: C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\c73l0l9w.default [2016-10-21]
FF Homepage: Mozilla\Firefox\Profiles\c73l0l9w.default -> hxxp://www.mylucky123.com/?type=hp&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799
FF Extension: (Adblock Plus) - C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\c73l0l9w.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-06-20]
FF Extension: (Greasemonkey) - C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\c73l0l9w.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-08-20]
FF SearchPlugin: C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\c73l0l9w.default\searchplugins\mylucky123.xml [2016-10-17]
FF ProfilePath: C:\Users\Lenovo\AppData\Roaming\Firefox\Firefox\Profiles\c73l0l9w.default [2016-10-21]
FF user.js: detected! => C:\Users\Lenovo\AppData\Roaming\Firefox\Firefox\Profiles\c73l0l9w.default\user.js [2016-09-19]
FF Homepage: Firefox\Firefox\Profiles\c73l0l9w.default -> hxxp://www.searchinme.com/?type=hp&ts=1477048641212&z=90ce6dd1afea6e4ac230395g3z5mdm2ebqdb8obb0t&from=official&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799
FF Extension: (SimilarWeb) - C:\Users\Lenovo\AppData\Roaming\Firefox\Firefox\Profiles\c73l0l9w.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi [2016-10-21] [Brak podpisu cyfrowego]
FF Extension: (FF Adr) - C:\Users\Lenovo\AppData\Roaming\Firefox\Firefox\Profiles\c73l0l9w.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi [2016-10-21] [Brak podpisu cyfrowego]
FF Extension: (English (US) Language Pack) - C:\Users\Lenovo\AppData\Roaming\Firefox\Firefox\Profiles\c73l0l9w.default\Extensions\langpack-en-US@firefox.mozilla.org.xpi [2016-10-21] [Brak podpisu cyfrowego]
FF Extension: (Adblock Plus) - C:\Users\Lenovo\AppData\Roaming\Firefox\Firefox\Profiles\c73l0l9w.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-06-20]
FF Extension: (Greasemonkey) - C:\Users\Lenovo\AppData\Roaming\Firefox\Firefox\Profiles\c73l0l9w.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-08-20]
FF SearchPlugin: C:\Users\Lenovo\AppData\Roaming\Firefox\Firefox\Profiles\c73l0l9w.default\searchplugins\mylucky123.xml [2016-10-17]
FF SearchPlugin: C:\Users\Lenovo\AppData\Roaming\Firefox\Firefox\Profiles\c73l0l9w.default\searchplugins\searchinme.xml [2016-10-11]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_185.dll [2016-10-13] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-01-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-01-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_185.dll [2016-10-13] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-01-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-01-18] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.mylucky123.com/?type=sc&ts=1476688607&z=9fe51f9c95ffd7fa023445ag1z1m5qfq2b4bew4t2b&from=amule1017&uid=ST500LM012XHN-M500MBB_S2R7J9EDC06799

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [647864 2016-10-13] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5332384 2016-10-13] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1149712 2016-09-13] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [727512 2016-10-13] (AVG Technologies CZ, s.r.o.)
R2 ed2kidle; C:\Program Files (x86)\amuleC\ed2k.exe [237568 2016-10-08] (hxxp://www.amule.org/) [Brak podpisu cyfrowego]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
S4 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
S4 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7500048 2016-09-20] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)
S4 CommandHandler; "C:\Program Files (x86)\Firefox\bin\FirefoxCommand.exe" [X]

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [311552 2016-09-22] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272640 2016-07-27] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [265472 2016-09-20] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [254208 2016-09-26] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [299264 2016-07-27] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-06-03] (NVIDIA Corporation)
S2 WCMVCAM; C:\Windows\System32\DRIVERS\wcmvcam64.sys [1071032 2012-04-15] (Windows (R) Win 7 DDK provider)
U0 aswVmm; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-10-21 20:54 - 2016-10-21 20:54 - 00036249 _____ C:\Users\Lenovo\Desktop\Addition.txt
2016-10-21 20:54 - 2016-10-21 20:54 - 00032376 _____ C:\Users\Lenovo\Desktop\Shortcut.txt
2016-10-21 20:53 - 2016-10-21 20:58 - 00019125 _____ C:\Users\Lenovo\Desktop\FRST.txt
2016-10-21 20:53 - 2016-10-21 20:58 - 00000000 ____D C:\FRST
2016-10-21 19:14 - 2016-10-21 19:14 - 02407424 _____ (Farbar) C:\Users\Lenovo\Desktop\FRST64.exe
2016-10-21 19:08 - 2016-10-21 19:08 - 00371411 _____ C:\Users\Lenovo\Downloads\gm.zip
2016-10-21 19:07 - 2016-10-21 19:07 - 02407424 _____ (Farbar) C:\Users\Lenovo\Downloads\FRST64.exe
2016-10-21 13:17 - 2016-10-21 13:18 - 00000000 ____D C:\ProgramData\UvConverter
2016-10-21 13:17 - 2016-10-21 13:17 - 00000000 ____D C:\ProgramData\hadga
2016-10-21 13:16 - 2016-10-21 13:16 - 00000000 ____D C:\Program Files (x86)\Firefox
2016-10-21 13:15 - 2016-10-21 13:18 - 00000000 ____D C:\ProgramData\chuvc
2016-10-21 13:15 - 2016-10-21 13:18 - 00000000 ____D C:\ProgramData\BaofengUpdate_U
2016-10-21 13:15 - 2016-10-21 13:18 - 00000000 ____D C:\Program Files (x86)\uvconvrx_00000000
2016-10-20 17:16 - 2016-10-20 17:16 - 00000000 ____D C:\Program Files (x86)\5808DFDD_jumpeasy
2016-10-19 01:48 - 2016-10-19 01:48 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2016-10-19 01:48 - 2016-10-19 01:48 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2016-10-17 09:16 - 2016-10-20 17:16 - 00000003 _____ C:\Windows\SysWOW64\xaabbbbbbb
2016-10-17 00:15 - 2016-10-17 00:15 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\AVG
2016-10-17 00:14 - 2016-10-19 01:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-10-17 00:14 - 2016-10-17 00:14 - 00000000 ___HD C:\$AVG
2016-10-17 00:14 - 2016-10-17 00:14 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\TuneUp Software
2016-10-17 00:13 - 2016-10-21 20:41 - 00000000 ____D C:\ProgramData\MFAData
2016-10-17 00:13 - 2016-10-17 00:13 - 00000000 ____D C:\Users\Lenovo\AppData\Local\MFAData
2016-10-17 00:05 - 2016-10-17 00:05 - 00000984 _____ C:\Users\Public\Desktop\AVG.lnk
2016-10-17 00:05 - 2016-10-17 00:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-10-17 00:03 - 2016-10-21 02:22 - 00003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task
2016-10-17 00:03 - 2016-10-17 00:13 - 00000000 ____D C:\Program Files (x86)\AVG
2016-10-17 00:00 - 2016-10-19 01:47 - 00000000 ____D C:\Users\Lenovo\AppData\Local\Avg
2016-10-17 00:00 - 2016-10-17 00:14 - 00000000 ____D C:\ProgramData\Avg
2016-10-17 00:00 - 2016-10-17 00:13 - 00000000 ____D C:\Users\Lenovo\AppData\Local\AvgSetupLog
2016-10-17 00:00 - 2016-10-17 00:00 - 03143504 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Lenovo\Downloads\AVG_Protection_Free_1597.exe
2016-10-16 23:47 - 2016-10-21 13:16 - 00002631 _____ C:\Users\Lenovo\Desktop\Mozilla Firefox.lnk
2016-10-13 00:21 - 2016-10-13 00:40 - 518284288 _____ C:\Users\Lenovo\Downloads\odc 3.rar
2016-10-11 19:38 - 2016-10-11 19:52 - 465740312 _____ C:\Users\Lenovo\Downloads\odc 1.rar
2016-10-11 19:38 - 2016-10-11 19:51 - 466678208 _____ C:\Users\Lenovo\Downloads\odc 2.rar
2016-10-11 12:39 - 2016-10-11 12:39 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\amuleC
2016-10-11 12:39 - 2016-10-11 12:39 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\aMule
2016-10-11 12:39 - 2016-10-11 12:39 - 00000000 ____D C:\Program Files (x86)\UvConverter
2016-10-11 12:39 - 2016-10-11 12:39 - 00000000 ____D C:\Program Files (x86)\amuleC
2016-10-10 18:17 - 2016-10-10 18:46 - 808601356 _____ C:\Users\Lenovo\Downloads\10.rar
2016-10-10 18:15 - 2016-10-10 18:42 - 440500281 _____ C:\Users\Lenovo\Downloads\9.rar
2016-10-01 11:22 - 2016-10-21 20:23 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-10-01 11:22 - 2016-10-13 17:31 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-10-01 11:12 - 2016-10-21 04:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-10-01 11:12 - 2016-10-21 04:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-10-01 11:06 - 2016-10-01 11:06 - 00243632 _____ C:\Users\Lenovo\Downloads\Firefox Setup Stub 49.0.1.exe
2016-09-30 19:21 - 2016-09-30 19:23 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\Bongo
2016-09-30 19:10 - 2016-09-30 19:15 - 48200876 _____ C:\Users\Lenovo\Downloads\BongOTS.exe
2016-09-30 14:45 - 2016-09-30 14:45 - 00000000 ____D C:\Windows\system32\appmgmt
2016-09-30 14:31 - 2016-09-30 14:31 - 00000000 ____D C:\Windows\pss
2016-09-30 14:14 - 2016-09-30 14:14 - 00000000 ____D C:\Users\Lenovo\Desktop\Old Firefox Data
2016-09-29 13:40 - 2016-09-29 13:43 - 00000000 ____D C:\Users\Lenovo\Desktop\Originals
2016-09-29 13:28 - 2016-09-29 13:31 - 00151552 ____H C:\Users\Lenovo\Desktop\photothumb.db
2016-09-29 13:25 - 2016-09-29 13:52 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\PhotoScape
2016-09-29 13:23 - 2016-09-29 13:25 - 00000000 ____D C:\Program Files (x86)\PhotoScape
2016-09-29 13:23 - 2016-09-29 13:23 - 00001031 _____ C:\Users\Lenovo\Desktop\PhotoScape.lnk
2016-09-29 13:23 - 2016-09-29 13:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape
2016-09-29 13:15 - 2016-10-17 00:15 - 00000000 ____D C:\Program Files\Common Files\AV
2016-09-29 13:15 - 2016-09-29 13:15 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-09-29 13:14 - 2016-09-29 13:13 - 00992960 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-09-29 13:14 - 2016-09-29 13:13 - 00921280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-09-29 13:09 - 2016-09-29 13:09 - 21025552 _____ (Mooii) C:\Users\Lenovo\Downloads\Setup_PhotoScapeSetup_V3.7.exe
2016-09-29 13:04 - 2016-09-30 14:05 - 00000000 ____D C:\Program Files\ByteFence
2016-09-29 13:04 - 2016-09-30 12:23 - 00000000 ____D C:\ProgramData\AVAST Software
2016-09-29 12:55 - 2016-09-29 12:55 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\WCMShare
2016-09-29 12:55 - 2016-09-29 12:55 - 00000000 ____D C:\ProgramData\WCMShare
2016-09-29 11:32 - 2016-09-29 11:32 - 00000000 ____D C:\Users\Lenovo\AppData\Roaming\Firefox
2016-09-29 11:32 - 2016-09-29 11:32 - 00000000 ____D C:\Users\Lenovo\AppData\Local\Firefox
2016-09-29 11:21 - 2016-10-21 13:16 - 00000000 _____ C:\Users\Public\Documents\report.dat
2016-09-29 11:21 - 2016-10-21 13:15 - 00000000 _____ C:\Users\Public\Documents\temp.dat
2016-09-29 11:21 - 2016-09-29 11:36 - 00000003 _____ C:\Windows\SysWOW64\xaa
2016-09-28 13:51 - 2016-09-28 13:49 - 10952242 ____N C:\Users\Lenovo\Desktop\CAM00552.mp4
2016-09-28 10:53 - 2016-09-30 14:41 - 00000000 ____D C:\Program Files (x86)\Elex-tech
2016-09-28 10:53 - 2016-09-28 10:53 - 00000000 ____D C:\Windows\system32\log
2016-09-26 18:19 - 2016-09-26 18:19 - 00254208 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
2016-09-26 14:01 - 2016-09-26 14:04 - 00000000 ____D C:\Users\Lenovo\Desktop\PSIAKI WIES
2016-09-23 14:38 - 2016-10-11 12:39 - 00003442 _____ C:\Windows\System32\Tasks\ChelfNotify Task
2016-09-22 14:44 - 2016-09-22 14:44 - 00311552 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2016-09-22 13:51 - 2016-10-10 14:28 - 00000000 ____D C:\ProgramData\corss
2016-09-22 11:55 - 2016-10-17 01:13 - 00000000 ____D C:\ProgramData\ChelfNotify

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-10-21 18:43 - 2016-06-30 17:53 - 00000000 ____D C:\Users\Lenovo\AppData\Local\CrashDumps
2016-10-21 13:16 - 2016-06-20 21:30 - 00002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-10-21 01:21 - 2009-07-14 06:45 - 00031456 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-10-21 01:21 - 2009-07-14 06:45 - 00031456 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-10-21 01:16 - 2016-08-30 15:40 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2016-10-17 09:16 - 2016-06-20 20:06 - 00001751 _____ C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-10-17 09:16 - 2016-06-20 20:06 - 00001729 _____ C:\Users\Lenovo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-10-17 01:24 - 2016-07-06 05:30 - 00000000 ____D C:\Program Files (x86)\Steam
2016-10-17 01:21 - 2009-07-14 19:55 - 00737480 _____ C:\Windows\system32\perfh015.dat
2016-10-17 01:21 - 2009-07-14 19:55 - 00154136 _____ C:\Windows\system32\perfc015.dat
2016-10-17 01:21 - 2009-07-14 07:13 - 01661232 _____ C:\Windows\system32\PerfStringBackup.INI
2016-10-17 01:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-10-17 01:13 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-10-13 17:31 - 2016-06-22 21:13 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-10-13 17:31 - 2016-06-22 21:13 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-10-13 17:31 - 2016-06-22 21:13 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-10-13 17:31 - 2016-06-22 21:13 - 00000000 ____D C:\Windows\system32\Macromed
2016-10-10 09:49 - 2016-07-06 05:34 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-10-09 23:36 - 2016-06-25 01:09 - 00000000 ____D C:\Users\Lenovo\Desktop\psiaki
2016-10-07 11:50 - 2016-07-06 05:34 - 00000971 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2016-10-07 11:50 - 2016-07-06 05:34 - 00000959 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-10-06 21:44 - 2016-07-06 09:09 - 00000000 ____D C:\Users\Lenovo\Documents\The Witcher 3
2016-10-04 18:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-10-01 11:22 - 2016-06-22 21:12 - 00000000 ____D C:\Users\Lenovo\AppData\Local\Adobe

==================== Pliki w katalogu głównym wybranych folderów =======

2016-08-11 01:54 - 2016-08-11 01:54 - 24633095 _____ () C:\Program Files\OpenTTD.rar

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-10-15 00:57

==================== Koniec  FRST.txt ============================