Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 23-11-2016 Uruchomiony przez Piter (administrator) KOMP-PIOTRKA (25-11-2016 23:46:05) Uruchomiony z C:\Users\Piter\Downloads Załadowane profile: Piter (Dostępne profile: Piter & Administrator) Platform: Windows 8.1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe () C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (HP) C:\Windows\System32\HPSIsvc.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Toshiba Corporation) C:\Program Files\Toshiba\Teco\TecoService.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (TOSHIBA Corporation) C:\Program Files\Toshiba\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation) C:\Program Files\Toshiba\Teco\TecoResident.exe (TOSHIBA Corporation) C:\Program Files\Toshiba\Hotkey\TCrdMain_Win8.exe (TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\System Setting\TssSrv.exe (TOSHIBA) C:\Program Files\Toshiba\TOSHIBA Smart View Utility\TDUSrv64.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (TOSHIBA Corporation) C:\Program Files\Toshiba\TOSHIBA Service Station\TMachInfo.exe (WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (TOSHIBA Corporation) C:\Program Files\Toshiba\TPHM\TPCHSrv.exe (TOSHIBA Corporation) C:\Program Files\Toshiba\TPHM\TPCHWMsg.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe (Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe ==================== Rejestr (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [894048 2013-01-11] (Conexant Systems, Inc.) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830104 2014-01-14] (Conexant Systems, Inc.) HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [179288 2014-01-05] (TOSHIBA Corporation) HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [354144 2013-08-13] (TOSHIBA Corporation) HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-10-09] (TOSHIBA Corporation) HKLM\...\Run: [TSSSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296008 2013-10-22] (TOSHIBA Corporation) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-02-15] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [TSVU] => c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516512 2013-07-23] (TOSHIBA) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software) HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [408888 2015-10-08] (Power Software Ltd) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-3621693401-2034365866-4225762973-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8810200 2016-06-10] (Piriform Ltd) HKU\S-1-5-21-3621693401-2034365866-4225762973-1001\...\MountPoints2: E - "E:\setup.exe" HKU\S-1-5-21-3621693401-2034365866-4225762973-1001\...\MountPoints2: {dd6a5b24-ace7-11e5-8267-c454446836a0} - "F:\SISetup.exe" ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-26] (AVAST Software) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{C8E41D18-8BE9-44E7-9072-7599AC082087}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{E6DE827D-1274-40FE-863D-2F4D5AE6C34A}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-3621693401-2034365866-4225762973-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://toshiba13.msn.com/?pc=TEJB HKU\S-1-5-21-3621693401-2034365866-4225762973-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com/?pc=TEJB HKU\S-1-5-21-3621693401-2034365866-4225762973-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://toshiba.eu/symbaloo_c BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-28] (AVAST Software) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-28] (AVAST Software) FireFox: ======== FF DefaultProfile: kfeo2863.default FF ProfilePath: C:\Users\Piter\AppData\Roaming\Mozilla\Firefox\Profiles\kfeo2863.default [2016-11-25] FF Extension: (Foxtrick) - C:\Users\Piter\AppData\Roaming\Mozilla\Firefox\Profiles\kfeo2863.default\Extensions\{9d1f059c-cada-4111-9696-41a62d64e3ba}.xpi [2016-06-05] FF Extension: (Adblock Plus) - C:\Users\Piter\AppData\Roaming\Mozilla\Firefox\Profiles\kfeo2863.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-10-29] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-10-06] FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-10-06] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.) Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-26] (AVAST Software) R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [21328 2014-02-21] () R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-02-25] (WildTangent) S3 HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [13824 2011-10-17] (Hewlett-Packard Company) [Brak podpisu cyfrowego] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Brak podpisu cyfrowego] R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-16] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-10-11] () R3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [120392 2015-11-17] (Toshiba Europe GmbH) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3671792 2013-10-11] (Intel® Corporation) ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [37656 2016-09-26] (AVAST Software) R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [37144 2016-09-26] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [108816 2016-09-26] (AVAST Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [103064 2016-09-26] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-26] (AVAST Software) R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [969184 2016-09-26] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [513632 2016-09-26] (AVAST Software) R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [163416 2016-09-26] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-14] (AVAST Software) R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [142280 2013-10-18] (Intel Corporation) R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) R3 NETwNb64; C:\WINDOWS\system32\DRIVERS\NETwbw02.sys [3607520 2013-10-14] (Intel Corporation) R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [291544 2014-01-03] (Realtek Semiconductor Corp.) R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-02-21] (Synaptics Incorporated) R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [33168 2013-10-10] (Windows (R) Win 7 DDK provider) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) S3 WUDFWpdComp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-11-25 23:46 - 2016-11-25 23:46 - 00014041 _____ C:\Users\Piter\Downloads\FRST.txt 2016-11-25 23:44 - 2016-11-25 23:46 - 00000000 ____D C:\FRST 2016-11-25 23:43 - 2016-11-25 23:43 - 00380928 _____ C:\Users\Piter\Downloads\h05265is.exe 2016-11-25 23:42 - 2016-11-25 23:42 - 02412032 _____ (Farbar) C:\Users\Piter\Downloads\FRST64.exe 2016-11-25 14:52 - 2016-11-25 14:52 - 01586138 _____ C:\Users\Piter\Downloads\b617afb5b7348d0a2036a87d8cb3b94b92f72264.pdf 2016-11-24 14:46 - 2016-11-24 14:47 - 15662080 _____ C:\Users\Piter\Downloads\Patologia lęgu 2016.ppt 2016-11-22 23:25 - 2016-11-22 23:26 - 00860348 _____ C:\Users\Piter\Downloads\EPI PSÓW I KOTÓW - CAŁOŚĆ.pdf 2016-11-22 23:24 - 2016-11-22 23:24 - 00662374 _____ C:\Users\Piter\Downloads\choroby_ukladu_oddechowego_psow_dr_n_wet_e_mikulska_skupien.pdf 2016-11-20 02:16 - 2016-11-20 02:16 - 00000000 ____D C:\Users\Piter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2016-11-20 02:06 - 2016-11-20 02:06 - 00000000 ____D C:\Users\Piter\AppData\Local\Steam 2016-11-20 02:02 - 2016-11-20 02:02 - 01446792 _____ C:\Users\Piter\Downloads\SteamSetup.exe 2016-11-17 21:27 - 2016-11-25 16:13 - 00000000 ____D C:\Users\Piter\AppData\LocalLow\Mozilla 2016-11-16 23:45 - 2016-11-16 23:45 - 03746556 _____ C:\Users\Piter\Downloads\sekcja_ptakow.pdf 2016-11-16 19:27 - 2016-11-16 19:27 - 00022651 _____ C:\Users\Piter\Downloads\KATEGORIE-ODPADÓW.odt 2016-11-16 15:31 - 2016-11-16 15:31 - 03998980 _____ C:\Users\Piter\Downloads\podroby.pptx 2016-11-16 15:31 - 2016-11-16 15:31 - 01333505 _____ C:\Users\Piter\Downloads\Rogowizna2.pdf 2016-11-16 15:31 - 2016-11-16 15:31 - 00857707 _____ C:\Users\Piter\Downloads\Uboczne produkty poubojowe niejadalne - skóra.pptx 2016-11-16 15:30 - 2016-11-16 15:30 - 00943002 _____ C:\Users\Piter\Downloads\krew jadalna gr6.pdf 2016-11-16 15:30 - 2016-11-16 15:30 - 00386518 _____ C:\Users\Piter\Downloads\Odpady miękkie, nm.pptx 2016-11-16 15:30 - 2016-11-16 15:30 - 00174250 _____ C:\Users\Piter\Downloads\gruczoły.odp 2016-11-16 15:20 - 2016-11-16 15:22 - 02850291 _____ C:\Users\Piter\Downloads\Krew-surowiec-niejadalny.odp 2016-10-30 08:26 - 2016-10-30 08:30 - 114465141 _____ C:\Users\Piter\Downloads\Nefrologia i urologia psów i kotów, Maurey i Dufayet, Elsevier.PDF 2016-10-30 08:26 - 2016-10-30 08:26 - 02567486 _____ C:\Users\Piter\Downloads\Gmail.zip 2016-10-28 23:57 - 2016-10-28 23:57 - 00003074 _____ C:\WINDOWS\System32\Tasks\{E17B177D-1D4B-4474-8F0E-6647D2213F79} 2016-10-27 22:24 - 2016-10-27 22:24 - 02567436 _____ C:\Users\Piter\Downloads\tabelkidermawlepszejjakoci.zip ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2016-11-25 16:29 - 2016-04-01 19:08 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-11-25 16:14 - 2015-12-19 16:59 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3621693401-2034365866-4225762973-1001 2016-11-25 15:21 - 2016-10-22 13:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-11-25 15:21 - 2015-12-19 17:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-11-25 15:21 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-11-25 15:20 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2016-11-22 23:59 - 2015-12-19 17:04 - 00000000 ____D C:\Users\Piter\AppData\Roaming\MPC-HC 2016-11-22 12:01 - 2015-12-26 00:27 - 00000000 ____D C:\Users\Piter\AppData\Roaming\Skype 2016-11-22 11:52 - 2015-12-26 00:27 - 00000000 ____D C:\ProgramData\Skype 2016-11-20 23:06 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf 2016-11-20 11:46 - 2014-03-27 18:10 - 01825074 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-11-20 11:46 - 2013-08-28 15:28 - 00807160 _____ C:\WINDOWS\system32\perfh015.dat 2016-11-20 11:46 - 2013-08-28 15:28 - 00163478 _____ C:\WINDOWS\system32\perfc015.dat 2016-11-15 17:29 - 2016-03-23 22:28 - 00003966 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1458768503 2016-11-15 17:29 - 2016-03-23 22:28 - 00001070 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk 2016-11-08 23:58 - 2015-12-20 02:25 - 00004476 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-11-08 10:29 - 2016-04-01 19:08 - 00003818 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2016-11-08 10:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2016-11-08 10:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Macromed 2016-11-07 17:24 - 2016-04-24 15:33 - 00000000 ____D C:\Users\Piter\AppData\Local\ElevatedDiagnostics ==================== Pliki w katalogu głównym wybranych folderów ======= 2016-09-18 12:23 - 2016-09-18 12:23 - 0000057 _____ () C:\ProgramData\Ament.ini ==================== Bamital & volsnap ====================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2016-11-08 13:01 ==================== Koniec FRST.txt ============================