UA: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0
U0 aswVmm; Brak ImagePath
S3 btwampfl; \??\C:\Windows\system32\drivers\btwampfl.sys [X]
S3 btwaudio; system32\drivers\btwaudio.sys [X]
S3 btwavdt; system32\DRIVERS\btwavdt.sys [X]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [X]
S3 btwrchid; system32\DRIVERS\btwrchid.sys [X]
S0 MBAMSwissArmy; system32\drivers\MBAMSwissArmy.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S2 NVIDIA Wireless Controller Service; "C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe" [X]
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => nie znaleziono
AutoConfigURL: [S-1-5-21-2650061123-2267679007-346275474-1000] => hxxp://no-blocked.com/wpad.dat?7c1390d14ee7ad71fb9b3284896420bd24249700
ManualProxies: 0hxxp://no-blocked.com/wpad.dat?7c1390d14ee7ad71fb9b3284896420bd24249700
ShellIconOverlayIdentifiers: [ MEGA (Pending)]{056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\dawid\AppData\Local\MEGAsync\ShellExtX64.dll
Brak pliku
ShellIconOverlayIdentifiers: [ MEGA (Synced)]{05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\dawid\AppData\Local\MEGAsync\ShellExtX64.dll
Brak pliku
ShellIconOverlayIdentifiers: [ MEGA (Syncing)]{0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\dawid\AppData\Local\MEGAsync\ShellExtX64.dll
Brak pliku
ShellIconOverlayIdentifiers: [00avast]{472083B0-C522-11CF-8763-00608CC02F24} =>
Brak pliku
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)]{056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\dawid\AppData\Local\MEGAsync\ShellExtX32.dll
Brak pliku
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)]{05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\dawid\AppData\Local\MEGAsync\ShellExtX32.dll
Brak pliku
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)]{0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\dawid\AppData\Local\MEGAsync\ShellExtX32.dll
Brak pliku
GroupPolicy\User: Ograniczenia <======= UWAGA
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291096 2011-12-05] (Intel Corporation)
EmptyTemp:
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 22-01-2017
Uruchomiony przez dawid (24-01-2017 17:14:48) Run:2
Uruchomiony z C:\Users\dawid\Downloads
Załadowane profile: dawid (Dostępne profile: dawid)
Tryb startu: Normal
==============================================
fixlist - zawartość:
*****************
U0 aswVmm; Brak ImagePath
S3 btwampfl; \??\C:\Windows\system32\drivers\btwampfl.sys [X]
S3 btwaudio; system32\drivers\btwaudio.sys [X]
S3 btwavdt; system32\DRIVERS\btwavdt.sys [X]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [X]
S3 btwrchid; system32\DRIVERS\btwrchid.sys [X]
S0 MBAMSwissArmy; system32\drivers\MBAMSwissArmy.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S2 NVIDIA Wireless Controller Service; "C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe" [X]
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => nie znaleziono
AutoConfigURL: [S-1-5-21-2650061123-2267679007-346275474-1000] => hxxp://no-blocked.com/wpad.dat?7c1390d14ee7ad71fb9b3284896420bd24249700
ManualProxies: 0hxxp://no-blocked.com/wpad.dat?7c1390d14ee7ad71fb9b3284896420bd24249700
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\dawid\AppData\Local\MEGAsync\ShellExtX64.dll -> Brak pliku
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\dawid\AppData\Local\MEGAsync\ShellExtX64.dll -> Brak pliku
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\dawid\AppData\Local\MEGAsync\ShellExtX64.dll -> Brak pliku
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\dawid\AppData\Local\MEGAsync\ShellExtX32.dll -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\dawid\AppData\Local\MEGAsync\ShellExtX32.dll -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\dawid\AppData\Local\MEGAsync\ShellExtX32.dll -> Brak pliku
GroupPolicy\User: Ograniczenia <======= UWAGA
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291096 2011-12-05] (Intel Corporation)
EmptyTemp:
*****************
HKLM\System\CurrentControlSet\Services\aswVmm => klucz pomyślnie usunięto
aswVmm => serwis pomyślnie usunięto
HKLM\System\CurrentControlSet\Services\btwampfl => klucz pomyślnie usunięto
btwampfl => serwis pomyślnie usunięto
HKLM\System\CurrentControlSet\Services\btwaudio => klucz pomyślnie usunięto
btwaudio => serwis pomyślnie usunięto
HKLM\System\CurrentControlSet\Services\btwavdt => klucz pomyślnie usunięto
btwavdt => serwis pomyślnie usunięto
HKLM\System\CurrentControlSet\Services\btwl2cap => klucz pomyślnie usunięto
btwl2cap => serwis pomyślnie usunięto
HKLM\System\CurrentControlSet\Services\btwrchid => klucz pomyślnie usunięto
btwrchid => serwis pomyślnie usunięto
HKLM\System\CurrentControlSet\Services\MBAMSwissArmy => klucz pomyślnie usunięto
MBAMSwissArmy => serwis pomyślnie usunięto
HKLM\System\CurrentControlSet\Services\Synth3dVsc => klucz pomyślnie usunięto
Synth3dVsc => serwis pomyślnie usunięto
HKLM\System\CurrentControlSet\Services\tsusbhub => klucz pomyślnie usunięto
tsusbhub => serwis pomyślnie usunięto
HKLM\System\CurrentControlSet\Services\VGPU => klucz pomyślnie usunięto
VGPU => serwis pomyślnie usunięto
HKLM\System\CurrentControlSet\Services\NVIDIA Wireless Controller Service => klucz pomyślnie usunięto
NVIDIA Wireless Controller Service => serwis pomyślnie usunięto
HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\[email protected] => Wartość pomyślnie usunięto
HKU\S-1-5-21-2650061123-2267679007-346275474-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigURL => Wartość pomyślnie usunięto
HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies\\ => Wartość pomyślnie usunięto
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Pending) => klucz pomyślnie usunięto
HKCR\CLSID\{056D528D-CE28-4194-9BA3-BA2E9197FF8C} => klucz nie znaleziono.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Synced) => klucz pomyślnie usunięto
HKCR\CLSID\{05B38830-F4E9-4329-978B-1DD28605D202} => klucz nie znaleziono.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Syncing) => klucz pomyślnie usunięto
HKCR\CLSID\{0596C850-7BDD-4C9D-AFDF-873BE6890637} => klucz nie znaleziono.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast => klucz pomyślnie usunięto
HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => klucz nie znaleziono.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Pending) => klucz pomyślnie usunięto
HKCR\Wow6432Node\CLSID\{056D528D-CE28-4194-9BA3-BA2E9197FF8C} => klucz nie znaleziono.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Synced) => klucz pomyślnie usunięto
HKCR\Wow6432Node\CLSID\{05B38830-F4E9-4329-978B-1DD28605D202} => klucz nie znaleziono.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Syncing) => klucz pomyślnie usunięto
HKCR\Wow6432Node\CLSID\{0596C850-7BDD-4C9D-AFDF-873BE6890637} => klucz nie znaleziono.
C:\Windows\system32\GroupPolicy\User => pomyślnie przeniesiono
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\NUSB3MON => Wartość pomyślnie usunięto
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui => klucz pomyślnie usunięto
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\USB3MON => Wartość pomyślnie usunięto
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 4407567 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 26338 B
Edge => 0 B
Chrome => 0 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 128 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 0 B
dawid => 38288185 B
UpdatusUser => 0 B
RecycleBin => 120377 B
EmptyTemp: => 48.9 MB danych tymczasowych Usunięto.
================================
System wymagał restartu.
==== Koniec Fixlog 17:14:50 ====
UA: Mozilla/5.0 (Windows NT 6.1; rv:49.0) Gecko/20100101 Firefox/49.0 SeaMonkey/2.46
AlternateDataStreams: C:\Windows\system32\drivers:ucdrv-x64.sys [23652]
AlternateDataStreams: C:\Windows\system32\drivers:x64 [1479458]
AlternateDataStreams: C:\Windows\system32\drivers:x86 [1205026]
2017-01-21 21:08 - 2017-01-21 21:08 - 0140288 _____ () C:\Users\dawid\AppData\Roaming\Installer.dat
2017-01-21 21:08 - 2017-01-21 21:08 - 0018432 _____ () C:\Users\dawid\AppData\Roaming\Main.dat
2017-01-21 21:14 - 2017-01-21 21:14 - 00000000 ____D C:\Program Files (x86)\Nagewardanerluy Manager
2017-01-21 21:10 - 2017-01-21 21:47 - 00000000 ____D C:\Program Files (x86)\Anerzutydweward
2017-01-21 21:10 - 2017-01-21 21:46 - 00000000 ____D C:\Program Files (x86)\ff18d337-a6c1-4ffc-9306-ed89eb8bd6331485029407
2017-01-21 21:10 - 2017-01-21 21:46 - 00000000 ____D C:\Program Files (x86)\baidu
2017-01-21 21:10 - 2017-01-21 21:10 - 00000000 ____D C:\ProgramData\Avg
2017-01-21 21:09 - 2017-01-21 21:47 - 00000000 ____D C:\Program Files (x86)\UCBrowser
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
UA: Mozilla/5.0 (Windows NT 6.1; rv:49.0) Gecko/20100101 Firefox/49.0 SeaMonkey/2.46
lternateDataStreams: C:\Windows\system32\drivers:ucdrv-x64.sys [23652]
AlternateDataStreams: C:\Windows\system32\drivers:x64 [1479458]
AlternateDataStreams: C:\Windows\system32\drivers:x86 [1205026]
C:\Users\dawid\AppData\Roaming\Installer.dat
C:\Users\dawid\AppData\Roaming\Main.dat
RemoveDirectory: C:\Program Files (x86)\Nagewardanerluy Manager
RemoveDirectory: C:\Program Files (x86)\Anerzutydweward
RemoveDirectory: C:\Program Files (x86)\ff18d337-a6c1-4ffc-9306-ed89eb8bd6331485029407
RemoveDirectory: C:\Program Files (x86)\baidu
RemoveDirectory: C:\ProgramData\Avg
RemoveDirectory: C:\Program Files (x86)\UCBrowser
C:\Users\dawid\Downloads\SpyHunter-Installer.exe
FirewallRules: [{33A6A713-3CB6-4EA9-9C8D-A5B5960766E7}] => C:\Users\dawid\AppData\Local\Amigo\Application\amigo.exe
RemoveDirectory: C:\Users\dawid\AppData\Local\Amigo
Task: {FAB5C06B-3104-4259-B036-63D6636D0374} - System32\Tasks\wd-client => Chrome.exe hxxp://world-client.ru/steepm
Task: {6FE868C0-119E-411C-8CEA-DDBA0E808410} - System32\Tasks\{FFEE2A3E-9DA6-422E-A87B-1CA8965CEB44} => pcalua.exe -a "D:\Win7\03 Intel IRST driver\setup.exe" -d "D:\Win7\03 Intel IRST driver"
Task: {0513890F-966D-4D06-8A77-661623883E59} - System32\Tasks\{C88AF54E-C1A0-4EC8-953D-A50739A32BED} => pcalua.exe -a "D:\Win7\14 TV tuner driver\Setup.exe" -d "D:\Win7\14 TV tuner driver"
C:\ProgramData\Ament.ini
EmptyTemp:
2017-01-22 18:42 - 2017-01-22 18:42 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2017-01-22 18:41 - 2017-01-22 21:28 - 00000000 ____D C:\ProgramData\AVAST Software
UA: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0
filutka78 napisał(a):Nie prowadzę tego tematu, więc nie mogę podać usuwania - czekaj na Moderatora.
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Rezultat naprawy Farbar Recovery Scan Tool (x64) Wersja: 25-01-2017 01
Uruchomiony przez dawid (25-01-2017 22:24:36) Run:4
Uruchomiony z C:\Users\dawid\Downloads
Załadowane profile: dawid (Dostępne profile: dawid)
Tryb startu: Normal
==============================================
fixlist - zawartość:
*****************
lternateDataStreams: C:\Windows\system32\drivers:ucdrv-x64.sys [23652]
AlternateDataStreams: C:\Windows\system32\drivers:x64 [1479458]
AlternateDataStreams: C:\Windows\system32\drivers:x86 [1205026]
C:\Users\dawid\AppData\Roaming\Installer.dat
C:\Users\dawid\AppData\Roaming\Main.dat
RemoveDirectory: C:\Program Files (x86)\Nagewardanerluy Manager
RemoveDirectory: C:\Program Files (x86)\Anerzutydweward
RemoveDirectory: C:\Program Files (x86)\ff18d337-a6c1-4ffc-9306-ed89eb8bd6331485029407
RemoveDirectory: C:\Program Files (x86)\baidu
RemoveDirectory: C:\ProgramData\Avg
RemoveDirectory: C:\Program Files (x86)\UCBrowser
C:\Users\dawid\Downloads\SpyHunter-Installer.exe
FirewallRules: [{33A6A713-3CB6-4EA9-9C8D-A5B5960766E7}] => C:\Users\dawid\AppData\Local\Amigo\Application\amigo.exe
RemoveDirectory: C:\Users\dawid\AppData\Local\Amigo
Task: {FAB5C06B-3104-4259-B036-63D6636D0374} - System32\Tasks\wd-client => Chrome.exe hxxp://world-client.ru/steepm
Task: {6FE868C0-119E-411C-8CEA-DDBA0E808410} - System32\Tasks\{FFEE2A3E-9DA6-422E-A87B-1CA8965CEB44} => pcalua.exe -a "D:\Win7\03 Intel IRST driver\setup.exe" -d "D:\Win7\03 Intel IRST driver"
Task: {0513890F-966D-4D06-8A77-661623883E59} - System32\Tasks\{C88AF54E-C1A0-4EC8-953D-A50739A32BED} => pcalua.exe -a "D:\Win7\14 TV tuner driver\Setup.exe" -d "D:\Win7\14 TV tuner driver"
C:\ProgramData\Ament.ini
EmptyTemp:
*****************
lternateDataStreams: C:\Windows\system32\drivers:ucdrv-x64.sys [23652] => Błąd: Nie znaleziono automatycznej naprawy dla tego wejścia.
C:\Windows\system32\drivers => ":x64" ADS pomyślnie usunięto.
C:\Windows\system32\drivers => ":x86" ADS pomyślnie usunięto.
C:\Users\dawid\AppData\Roaming\Installer.dat => pomyślnie przeniesiono
C:\Users\dawid\AppData\Roaming\Main.dat => pomyślnie przeniesiono
"C:\Program Files (x86)\Nagewardanerluy Manager" => pomyślnie usunięto.
"C:\Program Files (x86)\Anerzutydweward" => nie znaleziono.
"C:\Program Files (x86)\ff18d337-a6c1-4ffc-9306-ed89eb8bd6331485029407" => nie znaleziono.
"C:\Program Files (x86)\baidu" => pomyślnie usunięto.
"C:\ProgramData\Avg" => pomyślnie usunięto.
"C:\Program Files (x86)\UCBrowser" => pomyślnie usunięto.
"C:\Users\dawid\Downloads\SpyHunter-Installer.exe" => nie znaleziono.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{33A6A713-3CB6-4EA9-9C8D-A5B5960766E7} => Wartość nie znaleziono.
"C:\Users\dawid\AppData\Local\Amigo" => nie znaleziono.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FAB5C06B-3104-4259-B036-63D6636D0374} => klucz pomyślnie usunięto
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FAB5C06B-3104-4259-B036-63D6636D0374} => klucz pomyślnie usunięto
C:\Windows\System32\Tasks\wd-client => pomyślnie przeniesiono
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\wd-client => klucz pomyślnie usunięto
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6FE868C0-119E-411C-8CEA-DDBA0E808410} => klucz pomyślnie usunięto
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6FE868C0-119E-411C-8CEA-DDBA0E808410} => klucz pomyślnie usunięto
C:\Windows\System32\Tasks\{FFEE2A3E-9DA6-422E-A87B-1CA8965CEB44} => pomyślnie przeniesiono
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{FFEE2A3E-9DA6-422E-A87B-1CA8965CEB44} => klucz pomyślnie usunięto
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0513890F-966D-4D06-8A77-661623883E59} => klucz pomyślnie usunięto
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0513890F-966D-4D06-8A77-661623883E59} => klucz pomyślnie usunięto
C:\Windows\System32\Tasks\{C88AF54E-C1A0-4EC8-953D-A50739A32BED} => pomyślnie przeniesiono
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C88AF54E-C1A0-4EC8-953D-A50739A32BED} => klucz pomyślnie usunięto
C:\ProgramData\Ament.ini => pomyślnie przeniesiono
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 6609493 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 2629979 B
Edge => 0 B
Chrome => 0 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 0 B
dawid => 8850200 B
UpdatusUser => 0 B
RecycleBin => 0 B
EmptyTemp: => 25.3 MB danych tymczasowych Usunięto.
================================
System wymagał restartu.
==== Koniec Fixlog 22:24:37 ====
UA: Mozilla/5.0 (Windows NT 6.1; rv:49.0) Gecko/20100101 Firefox/49.0 SeaMonkey/2.46
Zrób nowe logi FRST.
UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36
Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 25-01-2017 01
Uruchomiony przez dawid (administrator) DAWID-KOMPUTER (25-01-2017 22:44:00)
Uruchomiony z C:\Users\dawid\Downloads
Załadowane profile: dawid (Dostępne profile: dawid)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Procesy (filtrowane) =================
(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamuseragent.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Rejestr (filtrowane) ====================
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2011-11-15] (Realtek Semiconductor)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8079408 2016-06-14] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [6200368 2016-06-14] (Lenovo(beijing) Limited)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKU\S-1-5-21-2650061123-2267679007-346275474-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9292504 2016-12-21] (Piriform Ltd)
HKU\S-1-5-21-2650061123-2267679007-346275474-1000\...\MountPoints2: F - F:\setup.exe
HKU\S-1-5-21-2650061123-2267679007-346275474-1000\...\MountPoints2: H - H:\setup.exe
HKU\S-1-5-21-2650061123-2267679007-346275474-1000\...\MountPoints2: I - I:\setup.exe
HKU\S-1-5-21-2650061123-2267679007-346275474-1000\...\MountPoints2: J - J:\setup.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-06-15] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [170688 2016-12-12] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148016 2016-12-12] (NVIDIA Corporation)
==================== Internet (filtrowane) ====================
(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{884EA50F-B5A5-4D68-8BFC-D0D92267DABE}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com
HKU\S-1-5-21-2650061123-2267679007-346275474-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com
HKU\S-1-5-21-2650061123-2267679007-346275474-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.pl/?gws_rd=ssl
HKU\S-1-5-21-2650061123-2267679007-346275474-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com
FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-25] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-25] (Google Inc.)
FF Plugin-x32: Adobe Reader -> E:\Program Files (x86)\adobe reader\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2650061123-2267679007-346275474-1000: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\dawid\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-08-16] (RocketLife, LLP)
Chrome:
=======
CHR Profile: C:\Users\dawid\AppData\Local\Google\Chrome\User Data\Default [2017-01-25]
CHR Extension: (Prezentacje Google) - C:\Users\dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-25]
CHR Extension: (Dokumenty Google) - C:\Users\dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-25]
CHR Extension: (Dysk Google) - C:\Users\dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-25]
CHR Extension: (YouTube) - C:\Users\dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-25]
CHR Extension: (Arkusze Google) - C:\Users\dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-25]
CHR Extension: (Dokumenty Google offline) - C:\Users\dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-25]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-25]
CHR Extension: (Gmail) - C:\Users\dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-25]
CHR Extension: (Chrome Media Router) - C:\Users\dawid\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-25]
==================== Usługi (filtrowane) ====================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [464440 2017-01-06] (NVIDIA Corporation)
R3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [464440 2017-01-06] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [459832 2016-12-11] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [427064 2017-01-06] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119176 2017-01-22] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2181648 2017-01-22] (Electronic Arts)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)
===================== Sterowniki (filtrowane) ======================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2012-02-02] (Broadcom Corporation.)
R1 ISODrive; E:\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (EZB Systems, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2017-01-25] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [29240 2017-01-06] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47672 2017-01-06] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [59448 2017-01-06] (NVIDIA Corporation)
==================== NetSvcs (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
==================== Jeden miesiąc - utworzone pliki i foldery ========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2017-01-25 22:37 - 2017-01-25 22:44 - 00012790 _____ C:\Users\dawid\Downloads\FRST.txt
2017-01-25 22:34 - 2017-01-25 22:40 - 00003480 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-01-25 22:34 - 2017-01-25 22:40 - 00003352 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-01-25 22:34 - 2017-01-25 22:34 - 00002273 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-01-25 22:34 - 2017-01-25 22:34 - 00002261 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-01-24 23:28 - 2017-01-24 23:40 - 00003272 _____ C:\Windows\System32\Tasks\GridinSoft Anti-Malware
2017-01-24 23:28 - 2017-01-24 23:28 - 00000000 ____D C:\ProgramData\GridinSoft
2017-01-24 23:27 - 2017-01-24 23:28 - 00000013 _____ C:\Users\dawid\Desktop\Nowy dokument tekstowy (2).txt
2017-01-24 22:27 - 2017-01-24 22:34 - 00000000 ____D C:\AdwCleaner
2017-01-24 20:54 - 2017-01-24 20:54 - 00001102 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2017-01-24 20:52 - 2017-01-25 22:25 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-24 20:52 - 2017-01-24 20:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2017-01-24 20:51 - 2017-01-24 20:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2017-01-24 20:51 - 2017-01-24 20:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-24 20:51 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2017-01-24 20:51 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2017-01-24 20:51 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-24 20:29 - 2017-01-25 22:34 - 00000000 ____D C:\Program Files (x86)\Google
2017-01-24 19:04 - 2017-01-24 19:04 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2017-01-24 17:43 - 2017-01-24 17:47 - 00000000 ____D C:\Users\dawid\Documents\SHIFT 2 UNLEASHED
2017-01-24 17:42 - 2017-01-24 17:42 - 00001327 _____ C:\Users\Public\Desktop\Need for Speed Shift 2 Unleashed.lnk
2017-01-24 17:42 - 2017-01-24 17:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GTX Box Team
2017-01-24 17:34 - 2017-01-24 17:34 - 00000000 ____D C:\Program Files (x86)\GTX Box Team
2017-01-23 18:56 - 2017-01-23 18:56 - 00000000 ____D C:\Users\dawid\AppData\LocalLow\Hewlett-Packard
2017-01-23 17:17 - 2017-01-23 17:17 - 00000000 ____D C:\Users\dawid\AppData\LocalLow\BitTorrent
2017-01-23 17:09 - 2017-01-23 17:09 - 00000000 _____ C:\autoexec.bat
2017-01-22 18:46 - 2017-01-25 22:44 - 00000000 ____D C:\FRST
2017-01-22 18:45 - 2017-01-25 22:23 - 02420736 _____ (Farbar) C:\Users\dawid\Downloads\FRST64.exe
2017-01-22 18:41 - 2017-01-22 18:41 - 00002802 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2017-01-22 18:41 - 2017-01-22 18:41 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-01-22 18:41 - 2017-01-22 18:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-01-22 18:41 - 2017-01-22 18:41 - 00000000 ____D C:\Program Files\CCleaner
2017-01-22 17:57 - 2017-01-22 17:58 - 00000000 ____D C:\Users\dawid\Documents\NFS Carbon
2017-01-22 17:57 - 2017-01-22 17:57 - 00000000 ____D C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-01-22 17:39 - 2017-01-22 17:39 - 00000457 _____ C:\Users\Public\Desktop\Need for Speed™ Carbon.lnk
2017-01-22 17:39 - 2017-01-22 17:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Need for Speed™ Carbon
2017-01-22 16:18 - 2017-01-22 16:18 - 00000650 _____ C:\Users\Public\Desktop\Need for Speed Most Wanted 2012.lnk
2017-01-22 16:18 - 2017-01-22 16:18 - 00000000 ____D C:\Users\dawid\Documents\Criterion Games
2017-01-22 16:18 - 2017-01-22 16:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Need for Speed Most Wanted 2012
2017-01-22 12:15 - 2017-01-23 15:27 - 00000000 ____D C:\Users\dawid\AppData\LocalLow\Unity
2017-01-22 00:10 - 2017-01-22 00:10 - 00000000 ____D C:\Program Files (x86)\Origin Games
2017-01-22 00:06 - 2017-01-22 21:22 - 00000000 ____D C:\Users\dawid\AppData\Roaming\Origin
2017-01-22 00:06 - 2017-01-22 00:06 - 00000993 _____ C:\Users\Public\Desktop\Origin.lnk
2017-01-22 00:06 - 2017-01-22 00:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2017-01-22 00:06 - 2017-01-22 00:06 - 00000000 ____D C:\Program Files (x86)\Origin
2017-01-22 00:05 - 2017-01-22 00:05 - 00000000 ____D C:\Users\dawid\.QtWebEngineProcess
2017-01-22 00:05 - 2017-01-22 00:05 - 00000000 ____D C:\Users\dawid\.Origin
2017-01-21 23:48 - 2017-01-22 19:42 - 00000000 ____D C:\ProgramData\Origin
2017-01-21 21:08 - 2017-01-21 21:08 - 00000000 ____D C:\Users\dawid\AppData\Roaming\Mozilla
2017-01-11 19:07 - 2017-01-06 02:10 - 00126008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-01-11 19:07 - 2017-01-06 02:10 - 00059448 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-01-11 19:07 - 2017-01-06 02:10 - 00047672 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2017-01-11 15:50 - 2017-01-11 15:50 - 00000000 ____D C:\Program Files (x86)\ESET
2017-01-11 14:33 - 2017-01-05 19:55 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-01-11 14:33 - 2017-01-05 19:55 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-11 14:33 - 2017-01-05 19:52 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-11 14:33 - 2017-01-05 19:52 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-01-11 14:33 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-01-11 14:33 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-01-11 14:33 - 2017-01-05 18:32 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-01-11 14:33 - 2017-01-05 18:25 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-11 14:33 - 2017-01-05 18:24 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-11 14:33 - 2017-01-05 18:24 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-11 14:33 - 2017-01-05 18:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-11 14:33 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-01-11 14:33 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-01-06 12:30 - 2017-01-22 18:42 - 00000000 ____D C:\Users\dawid\AppData\Roaming\TeamViewer
2017-01-06 12:30 - 2017-01-06 12:30 - 00001043 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2017-01-06 12:30 - 2017-01-06 12:30 - 00001031 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
2017-01-06 12:30 - 2017-01-06 12:30 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-12-31 15:49 - 2016-10-12 08:09 - 00001983 _____ C:\Users\dawid\Desktop\README.txt
2016-12-29 17:10 - 2016-12-29 17:15 - 00000000 ____D C:\Users\dawid\AppData\Roaming\DarkSoulsIII
2016-12-26 11:06 - 2017-01-22 11:23 - 00000000 ____D C:\Windows\SysWOW64\NV
2016-12-26 11:06 - 2017-01-22 11:23 - 00000000 ____D C:\Windows\system32\NV
2016-12-26 11:06 - 2016-12-26 11:06 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-12-26 11:06 - 2016-09-09 19:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-12-26 11:06 - 2016-09-09 19:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll
2016-12-26 11:06 - 2016-09-09 19:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-12-26 11:06 - 2016-09-09 19:24 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe
2016-12-26 11:05 - 2016-12-12 03:37 - 40125496 _____ C:\Windows\system32\nvcompiler.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 35222976 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 34703416 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 28138432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 17436808 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 14410472 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 14073400 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-12-26 11:05 - 2016-12-12 03:37 - 10912744 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 10795312 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 10345696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 09151216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 08913328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 08753832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 03640376 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 03206080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 01953336 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437633.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437633.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 01036224 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 00975416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 00944184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 00896056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 00683640 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 00572888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 00521096 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 00438208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 00435904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 00388544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 00153184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 00131536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-12-26 11:05 - 2016-12-12 03:37 - 00038336 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2017-01-25 22:33 - 2016-10-09 16:22 - 00000402 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2017-01-25 22:33 - 2009-07-14 05:45 - 00017472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-25 22:33 - 2009-07-14 05:45 - 00017472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-25 22:32 - 2009-07-14 18:55 - 00740672 _____ C:\Windows\system32\perfh015.dat
2017-01-25 22:32 - 2009-07-14 18:55 - 00156214 _____ C:\Windows\system32\perfc015.dat
2017-01-25 22:32 - 2009-07-14 06:13 - 01670518 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-25 22:32 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-01-25 22:26 - 2016-06-14 11:11 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-25 22:25 - 2016-12-07 17:00 - 00000000 ____D C:\Users\dawid\Documents\Assassin's Creed Unity
2017-01-25 22:25 - 2016-06-14 11:43 - 00000000 __SHD C:\Users\dawid\IntelGraphicsProfiles
2017-01-25 22:25 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2017-01-25 22:25 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-24 17:49 - 2016-06-14 10:25 - 00001327 _____ C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-01-24 17:14 - 2009-07-14 04:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-01-23 17:33 - 2016-11-11 10:27 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-01-23 17:32 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-01-23 17:22 - 2016-06-15 14:30 - 00000000 ____D C:\Users\dawid\AppData\Roaming\BitTorrent
2017-01-23 17:09 - 2016-06-14 10:24 - 00000000 ____D C:\Users\dawid
2017-01-23 15:28 - 2016-06-15 15:59 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-22 18:42 - 2016-07-09 18:57 - 00000000 ____D C:\Program Files\Common Files\AV
2017-01-22 18:42 - 2016-06-14 11:21 - 00000000 ____D C:\Windows\Panther
2017-01-22 18:26 - 2016-08-25 16:43 - 00000000 ____D C:\Users\dawid\Documents\My Games
2017-01-22 16:08 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2017-01-21 21:47 - 2016-06-14 10:43 - 00000000 ____D C:\Program Files (x86)\Realtek
2017-01-21 21:46 - 2016-06-14 10:55 - 00000000 ____D C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2017-01-21 21:46 - 2016-06-14 10:53 - 00000000 ___HD C:\Windows\system32\WLANProfiles
2017-01-21 21:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2017-01-21 21:14 - 2016-09-14 21:25 - 00000000 ____D C:\Program Files (x86)\AviSynth
2017-01-21 21:10 - 2016-09-14 21:25 - 00000000 ____D C:\Program Files (x86)\Haali
2017-01-12 18:53 - 2016-11-25 18:09 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2017-01-12 18:52 - 2016-11-25 21:46 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-11 19:07 - 2016-12-24 18:24 - 00004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-11 19:07 - 2016-11-05 10:33 - 00003742 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-11 19:07 - 2016-11-05 10:33 - 00001412 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-01-11 19:07 - 2016-11-05 10:32 - 00003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-11 19:07 - 2016-09-11 09:48 - 00003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-11 19:07 - 2016-09-11 09:48 - 00003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-11 19:07 - 2016-09-11 09:48 - 00003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-11 19:07 - 2016-09-11 09:48 - 00003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-11 19:07 - 2016-06-14 11:11 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-01-11 19:07 - 2016-06-14 11:11 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-01-11 19:07 - 2016-06-14 11:10 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-01-11 18:39 - 2016-11-15 16:31 - 00000000 ____D C:\Users\dawid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-01-11 15:39 - 2016-12-24 18:24 - 00005110 _____ C:\ProgramData\NvTelemetryContainer.log_backup1
2017-01-11 15:36 - 2016-06-14 11:34 - 00000000 ____D C:\Windows\system32\MRT
2017-01-11 15:35 - 2016-06-14 11:34 - 135657872 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-01-11 14:50 - 2016-12-05 15:36 - 00000000 ____D C:\Users\dawid\Desktop\Nowy folder
2017-01-07 14:44 - 2009-07-14 05:45 - 00279136 _____ C:\Windows\system32\FNTCACHE.DAT
2017-01-06 22:16 - 2016-10-17 16:07 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2017-01-06 02:10 - 2016-12-24 18:24 - 00158264 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-01-06 02:10 - 2016-11-05 10:33 - 01855544 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-01-06 02:10 - 2016-11-05 10:33 - 01756728 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-01-06 02:10 - 2016-11-05 10:33 - 01454136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-01-06 02:10 - 2016-11-05 10:33 - 01318968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-01-06 02:10 - 2016-11-05 10:33 - 00121912 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-01-06 01:09 - 2016-12-24 18:24 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-01-06 00:42 - 2016-11-05 10:32 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2016-12-31 22:28 - 2016-08-06 19:22 - 00000000 ____D C:\KMPlayer
2016-12-29 17:08 - 2016-09-11 14:53 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-12-29 13:23 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-12-27 11:38 - 2016-09-10 16:15 - 00000000 ____D C:\Users\dawid\Documents\FLiNGTrainer
2016-12-26 11:30 - 2016-08-25 15:40 - 00000000 ____D C:\Users\dawid\.gstreamer-0.10
2016-12-26 11:06 - 2016-09-12 20:42 - 00000000 ____D C:\Temp
==================== Pliki w katalogu głównym wybranych folderów =======
2016-06-14 11:31 - 2017-01-06 22:14 - 0007598 _____ () C:\Users\dawid\AppData\Local\Resmon.ResmonCfg
2016-12-24 18:24 - 2017-01-11 19:07 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-24 18:24 - 2017-01-11 15:39 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1
==================== Bamital & volsnap ======================
(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo
LastRegBack: 2017-01-23 18:42
==================== Koniec FRST.txt ============================
UA: Mozilla/5.0 (Windows NT 6.1; rv:49.0) Gecko/20100101 Firefox/49.0 SeaMonkey/2.46
AlternateDataStreams: C:\Windows\system32\drivers:ucdrv-x64.sys [23652]
Task: {30083ACE-6EAE-4AA6-B55A-23750FDC65B1} - \AVAST Software\Avast settings backup -> Brak pliku <==== UWAGA
Task: {4B6A9F9F-9E38-4494-B8E6-6A233D9F2F4C} - System32\Tasks\{CDE713AC-CC41-45BF-805B-65B665D13283} => pcalua.exe -a "D:\Win7\09 WLAN driver\Non-intel WLAN\Setup.exe" -d "D:\Win7\09 WLAN driver\Non-intel WLAN"
EmptyTemp:
DeleteQuarantine:
UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36
UA: Mozilla/5.0 (Windows NT 6.1; rv:49.0) Gecko/20100101 Firefox/49.0 SeaMonkey/2.46
UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36
UA: Mozilla/5.0 (Windows NT 6.1; rv:49.0) Gecko/20100101 Firefox/49.0 SeaMonkey/2.46
Zarejestrowani użytkownicy: Bing [Bot], Google [Bot]