FRST.txt

zainfekowany komputer Sprawdzenie log FRST

Witam Wykonałem to co pisałeś To są loga przed instalacja chrome


Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:31-10-2015
Uruchomiony przez Tomek (administrator) SZERKAN (04-11-2015 14:59:49)
Uruchomiony z C:\Users\Tomek\Desktop
Załadowane profile: Tomek (Dostępne profile: Tomek)
Platform: Windows 8.1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: IE)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft) C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(BitTorrent Inc.) C:\Users\Tomek\AppData\Roaming\uTorrent\uTorrent.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
(BitTorrent Inc.) C:\Users\Tomek\AppData\Roaming\uTorrent\updates\3.4.5_41202\utorrentie.exe
(BitTorrent Inc.) C:\Users\Tomek\AppData\Roaming\uTorrent\updates\3.4.5_41202\utorrentie.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.4.9926.17994_x64__8wekyb3d8bbwe\glcnd.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [ETDCtrl] = & gt; C:\Program Files\Elantech\ETDCtrl.exe [2876816 2013-03-05] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtsFT] = & gt; C:\WINDOWS\RTFTrack.exe [6339656 2013-04-10] (Realtek semiconductor)
HKLM\...\Run: [IAStorIcon] = & gt; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [cAudioFilterAgent] = & gt; C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [909016 2013-10-21] (Conexant Systems, Inc.)
HKLM\...\Run: [BTMTrayAgent] = & gt; rundll32.exe " C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll " ,TrayApp
HKLM\...\Run: [Energy Management] = & gt; C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17097200 2013-09-06] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] = & gt; C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [193008 2013-09-06] (Lenovo(beijing) Limited)
HKLM\...\Run: [Windows Mobile Device Center] = & gt; C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [SmartAudio] = & gt; C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [BCSSync] = & gt; C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [YouCam Tray] = & gt; C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-30] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] = & gt; C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] = & gt; C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] = & gt; C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [APSDaemon] = & gt; C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] = & gt; C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [KiesTrayAgent] = & gt; C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-02-14] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] = & gt; C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] = & gt; C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [650080 2011-03-15] (Sony Corporation)
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] = & gt; C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [54072 2015-06-18] (Malwarebytes Corporation)
HKU\S-1-5-21-2756060167-294891085-3003495681-1001\...\Run: [uTorrent] = & gt; C:\Users\Tomek\AppData\Roaming\uTorrent\uTorrent.exe [1822048 2015-10-13] (BitTorrent Inc.)
HKU\S-1-5-21-2756060167-294891085-3003495681-1001\...\Run: [ALLUpdate] = & gt; C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [3510704 2014-04-17] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-2756060167-294891085-3003495681-1001\...\Run: [GG] = & gt; C:\Users\Tomek\AppData\Local\GG\Application\gghub.exe [4078144 2015-04-04] (GG Network S.A.)
HKU\S-1-5-21-2756060167-294891085-3003495681-1001\...\Run: [KiesPreload] = & gt; C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-02-14] (Samsung)
HKU\S-1-5-21-2756060167-294891085-3003495681-1001\...\Run: [Sony PC Companion] = & gt; C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-2756060167-294891085-3003495681-1001\...\Policies\Explorer: [NofolderOptions] 0
HKU\S-1-5-21-2756060167-294891085-3003495681-1001\...\MountPoints2: {1923f1da-3228-11e5-bffb-0cd292630e6a} - " G:\startme.exe "
HKU\S-1-5-21-2756060167-294891085-3003495681-1001\...\MountPoints2: {35a133d9-6e38-11e4-bf56-0cd292630e6a} - " G:\AutoRun.exe "
HKU\S-1-5-21-2756060167-294891085-3003495681-1001\...\MountPoints2: {35a13490-6e38-11e4-bf56-0cd292630e6a} - " G:\AutoRun.exe "
HKU\S-1-5-21-2756060167-294891085-3003495681-1001\...\MountPoints2: {827af844-ab54-11e3-bea8-0cd292630e6a} - " G:\LGAutoRun.exe "
HKU\S-1-5-21-2756060167-294891085-3003495681-1001\...\MountPoints2: {9d9ae9af-70be-11e5-8017-0cd292630e6a} - " G:\Startme.exe "
HKU\S-1-5-21-2756060167-294891085-3003495681-1001\...\MountPoints2: {fb5a79e0-ff80-11e4-bfd6-0cd292630e6a} - " G:\AutoRun.exe "
HKU\S-1-5-21-2756060167-294891085-3003495681-1001\Control Panel\Desktop\\SCRNSAVE.EXE - & gt; C:\WINDOWS\system32\scrnsave.scr [11776 2013-08-22] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] - & gt; {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} = & gt; C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll Brak pliku
ShellIconOverlayIdentifiers: [SugarSyncPending] - & gt; {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} = & gt; C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll Brak pliku
ShellIconOverlayIdentifiers: [SugarSyncRoot] - & gt; {A759AFF6-5851-457D-A540-F4ECED148351} = & gt; C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll Brak pliku
ShellIconOverlayIdentifiers: [SugarSyncShared] - & gt; {1574C9EF-7D58-488F-B358-8B78C1538F51} = & gt; C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll Brak pliku

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{4015396E-C770-4DCF-A38D-F9AA07754603}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{EFB748FB-6C40-4905-B256-90CEC291D607}: [DhcpNameServer] 192.168.8.1 192.168.8.1

Internet Explorer:
==================
BHO: Groove GFS Browser Helper - & gt; {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - & gt; C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: Office Document Cache Handler - & gt; {B4F3A835-0E21-4959-BA22-42B3008E02FF} - & gt; C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - & gt; {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - & gt; C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - & gt; {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - & gt; C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-11] (Oracle Corporation)
BHO-x32: Office Document Cache Handler - & gt; {B4F3A835-0E21-4959-BA22-42B3008E02FF} - & gt; C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - & gt; {DBC80044-A445-435b-BC74-9C25C1C588A9} - & gt; C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-11] (Oracle Corporation)
BHO-x32: IplexToALLPlayer - & gt; {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - & gt; C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll [2013-11-01] (ALLCinema Ltd.)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - & gt; C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-16] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - & gt; C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - & gt; C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - & gt; C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-16] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - & gt; C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - & gt; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-11-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - & gt; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-11-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - & gt; C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-11] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - & gt; C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-07-11] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - & gt; C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - & gt; C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - & gt; C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - & gt; C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - & gt; C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - & gt; C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-20] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [161736 2013-04-15] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-11-06] (Intel Corporation)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [1662424 2014-02-19] ()
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-04-18] ()
R2 NovaPdfServer; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [41760 2015-06-09] (Microsoft)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3388144 2013-04-18] (Intel(R) Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-03-17] (Disc Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8243272 2013-04-10] (Realtek Semiconductor Corp.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [35856 2014-03-24] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [257880 2014-03-24] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ( " CyberLink)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-03 21:34 - 2015-11-03 21:34 - 00212968 _____ C:\Users\Tomek\Desktop\OTL.Txt
2015-11-03 21:24 - 2015-11-03 21:24 - 00000080 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\uTorrent.lnk
2015-11-03 21:02 - 2015-11-04 14:56 - 00000000 ____D C:\Users\Tomek\AppData\Local\Google
2015-11-03 19:17 - 2015-11-03 21:08 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-11-03 19:10 - 2015-11-03 19:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices
2015-11-03 17:30 - 2015-11-03 21:45 - 00038317 _____ C:\Users\Tomek\Desktop\Addition.txt
2015-11-03 17:30 - 2015-11-03 17:30 - 00602112 _____ (OldTimer Tools) C:\Users\Tomek\Desktop\OTL.exe
2015-11-03 17:28 - 2015-11-04 14:59 - 00017040 _____ C:\Users\Tomek\Desktop\FRST.txt
2015-11-03 17:28 - 2015-11-04 14:59 - 00000000 ____D C:\FRST
2015-11-03 17:28 - 2015-11-03 21:25 - 00001079 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-11-03 17:28 - 2015-11-03 17:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-11-03 17:28 - 2015-11-03 17:28 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-11-03 17:28 - 2015-11-03 17:28 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-11-03 17:28 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-11-03 17:28 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-11-03 17:28 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-11-03 17:25 - 2015-11-03 17:25 - 02198016 _____ (Farbar) C:\Users\Tomek\Desktop\FRST64.exe
2015-11-03 16:33 - 2015-11-04 14:37 - 00364754 _____ C:\WINDOWS\WindowsUpdate.log
2015-11-03 16:32 - 2015-11-03 19:07 - 00000154 _____ C:\WINDOWS\setupact.log
2015-11-03 16:32 - 2015-11-03 16:32 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-11-03 16:25 - 2015-11-03 19:06 - 00001026 _____ C:\WINDOWS\PFRO.log
2015-11-03 15:37 - 2015-11-03 15:37 - 00000000 ____D C:\WINDOWS\pss
2015-11-03 14:33 - 2015-11-03 21:01 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\shortCutStore
2015-11-02 17:11 - 2015-11-02 17:11 - 02550784 _____ C:\Users\Tomek\Desktop\PREZENTACJA_NASZA.PPT
2015-11-01 14:59 - 2015-11-01 15:47 - 736476016 _____ C:\Users\Tomek\Desktop\Inside.Out.2015.PLDUB.BDRiP.XViD-K12.avi
2015-10-29 12:00 - 2015-10-28 08:06 - 324822285 _____ C:\Users\Tomek\Desktop\Sojusznicy - Allies (2014) Lektor.PLBRRip.XviD-AZ.rmvb
2015-10-29 12:00 - 2015-10-28 07:47 - 281377405 _____ C:\Users\Tomek\Desktop\Curve (2015) Napisy PL.DVDRip.XviD-AZ.rmvb
2015-10-29 11:59 - 2015-10-28 07:55 - 329122129 _____ C:\Users\Tomek\Desktop\Momentum [2015] PL.WEB-DL.XViD-K12.rmvb
2015-10-28 14:26 - 2015-11-03 19:09 - 00000000 ____D C:\Users\Tomek\AppData\LocalLow\uTorrent
2015-10-26 19:00 - 2015-10-26 19:00 - 00000000 ____H C:\Users\Tomek\Documents\Default.rdp
2015-10-19 19:06 - 2015-10-20 15:21 - 00000000 ____D C:\Users\SYSTEM\AppData\LocalLow\B5T
2015-10-19 19:06 - 2015-10-19 19:06 - 00000000 ____D C:\Users\SYSTEM
2015-10-19 18:24 - 2015-10-19 18:26 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\????
2015-10-19 18:08 - 2015-10-19 18:08 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\ppslog
2015-10-19 18:08 - 2015-10-19 18:08 - 00000000 ____D C:\Users\Tomek\AppData\LocalLow\VirtualStore
2015-10-19 17:51 - 2015-10-19 18:32 - 00000000 ____D C:\Users\Tomek\AppData\LocalLow\Unity
2015-10-19 17:51 - 2015-10-19 18:32 - 00000000 ____D C:\Users\Tomek\AppData\Local\Unity
2015-10-06 13:40 - 2015-09-02 03:56 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-10-06 13:40 - 2015-09-02 03:55 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-10-06 13:40 - 2015-09-02 03:50 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-10-06 13:40 - 2015-09-02 03:17 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-10-06 13:40 - 2015-09-02 03:13 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-10-06 13:40 - 2015-08-27 03:48 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-10-06 13:40 - 2015-08-26 19:00 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-10-06 13:40 - 2015-08-26 19:00 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-10-06 13:40 - 2015-08-26 19:00 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-10-06 13:40 - 2015-08-26 19:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-10-06 13:40 - 2015-08-26 15:46 - 03705344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-10-06 13:40 - 2015-08-26 15:29 - 02240512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-10-06 13:40 - 2015-08-26 15:27 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-10-06 13:40 - 2015-08-26 15:27 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-10-06 13:40 - 2015-08-26 15:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-10-06 13:40 - 2015-08-26 15:26 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-10-06 13:40 - 2015-08-26 15:26 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-10-06 13:40 - 2015-08-22 19:19 - 25188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-10-06 13:40 - 2015-08-22 18:35 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-10-06 13:40 - 2015-08-22 18:34 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-10-06 13:40 - 2015-08-22 18:22 - 19856384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-10-06 13:40 - 2015-08-22 18:21 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-10-06 13:40 - 2015-08-22 18:20 - 05923840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-10-06 13:40 - 2015-08-22 17:55 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-10-06 13:40 - 2015-08-22 17:50 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-10-06 13:40 - 2015-08-22 17:50 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-10-06 13:40 - 2015-08-22 17:45 - 00665600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-10-06 13:40 - 2015-08-22 17:44 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-10-06 13:40 - 2015-08-22 17:41 - 14451712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-10-06 13:40 - 2015-08-22 17:41 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-10-06 13:40 - 2015-08-22 17:41 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-10-06 13:40 - 2015-08-22 17:41 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-10-06 13:40 - 2015-08-22 17:39 - 02126336 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-10-06 13:40 - 2015-08-22 17:28 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-10-06 13:40 - 2015-08-22 17:26 - 02427392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-10-06 13:40 - 2015-08-22 17:23 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-10-06 13:40 - 2015-08-22 17:22 - 12857344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-10-06 13:40 - 2015-08-22 17:20 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-10-06 13:40 - 2015-08-22 17:18 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-10-06 13:40 - 2015-08-22 17:18 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-10-06 13:40 - 2015-08-22 17:18 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-10-06 13:40 - 2015-08-22 17:14 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-10-06 13:40 - 2015-08-22 17:01 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-10-06 13:40 - 2015-08-22 17:00 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-10-06 13:40 - 2015-08-22 16:56 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-10-06 13:40 - 2015-08-22 16:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-10-06 13:40 - 2015-08-03 22:15 - 00065600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
2015-10-06 13:40 - 2015-08-01 04:47 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schtasks.exe
2015-10-06 13:40 - 2015-08-01 04:45 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe
2015-10-06 13:40 - 2015-08-01 04:38 - 01265152 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-10-06 13:40 - 2015-08-01 04:37 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2015-10-06 13:40 - 2015-08-01 04:37 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe
2015-10-06 13:40 - 2015-07-30 18:18 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2015-10-06 13:40 - 2015-07-30 17:22 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll
2015-10-06 13:40 - 2015-07-22 15:34 - 02775552 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-10-06 13:40 - 2015-07-22 15:33 - 01728000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-10-06 13:40 - 2015-07-22 15:25 - 02461184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-10-06 13:40 - 2015-07-22 15:25 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-10-06 13:40 - 2015-07-22 15:19 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-10-06 13:40 - 2015-07-22 14:52 - 01633792 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-10-06 13:40 - 2015-07-18 19:31 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2015-10-06 13:40 - 2015-07-18 19:29 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2015-10-06 13:40 - 2015-07-18 19:29 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2015-10-06 13:40 - 2015-07-18 19:27 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2015-10-06 13:40 - 2015-07-17 15:15 - 00951296 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-10-06 13:40 - 2015-07-17 15:10 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-10-06 13:40 - 2015-07-16 21:36 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-10-06 13:40 - 2015-07-16 21:23 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-10-06 13:40 - 2015-07-16 20:53 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-10-06 13:40 - 2015-07-16 20:50 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-10-06 13:40 - 2015-07-16 20:41 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-10-06 13:40 - 2015-07-16 20:14 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-10-06 13:40 - 2015-07-16 19:52 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-10-06 13:40 - 2015-07-14 04:27 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzsync.exe
2015-10-06 13:40 - 2015-07-13 20:10 - 00411455 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-10-06 13:40 - 2015-07-09 19:40 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-10-06 13:40 - 2015-07-09 17:14 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-10-06 13:40 - 2015-07-03 22:51 - 01380056 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-10-06 13:40 - 2015-07-03 15:00 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-10-06 13:40 - 2015-06-27 12:47 - 00118616 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2015-10-06 13:40 - 2015-06-27 04:08 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-10-06 13:40 - 2015-06-27 04:08 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-10-06 13:40 - 2015-06-27 03:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-10-06 13:40 - 2015-06-19 18:07 - 02819072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-10-06 13:40 - 2015-06-15 23:38 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-10-06 13:40 - 2015-06-15 23:02 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2015-10-06 13:40 - 2015-06-15 22:58 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2015-10-06 13:40 - 2015-06-15 22:57 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-10-06 13:40 - 2015-06-15 22:55 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-10-06 13:40 - 2015-06-15 22:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-10-06 13:40 - 2015-06-15 21:47 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2015-10-06 13:40 - 2015-06-15 21:44 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2015-10-06 13:40 - 2015-06-15 21:43 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-10-06 13:40 - 2015-06-15 21:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-10-06 13:40 - 2015-06-15 21:41 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-10-06 13:40 - 2015-03-14 02:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-10-06 13:40 - 2014-10-29 03:49 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-10-06 13:40 - 2014-10-29 03:44 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2015-10-06 13:40 - 2014-10-29 03:44 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-10-06 13:40 - 2014-10-29 03:44 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-10-06 13:40 - 2014-10-29 03:42 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\jnwmon.dll
2015-10-06 13:40 - 2014-10-29 03:28 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidpolicyconverter.exe
2015-10-06 13:40 - 2014-10-29 03:04 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-10-06 13:40 - 2014-10-29 03:00 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-10-06 13:40 - 2014-10-29 03:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-10-06 13:40 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2015-10-06 13:39 - 2015-08-03 22:15 - 00074928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
2015-10-06 13:39 - 2015-08-01 15:22 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll
2015-10-06 13:39 - 2014-10-29 03:46 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2015-10-06 13:39 - 2014-10-29 03:41 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidcertstorecheck.exe
2015-10-06 13:34 - 2015-07-10 20:06 - 00118272 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-04 15:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-11-04 14:58 - 2014-01-14 00:17 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2756060167-294891085-3003495681-1001
2015-11-04 14:57 - 2014-01-12 18:15 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\uTorrent
2015-11-04 14:56 - 2014-01-12 19:54 - 00000000 ____D C:\Program Files (x86)\Google
2015-11-04 14:53 - 2013-09-06 01:01 - 00000000 ____D C:\Program Files (x86)\SugarSync
2015-11-04 14:30 - 2014-11-27 22:53 - 00003980 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{6602FFF3-0EBA-43B2-ABE4-330FFF2B21CA}
2015-11-04 05:02 - 2014-04-06 13:02 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-11-04 05:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-11-03 21:27 - 2014-01-12 19:55 - 00001072 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-03 21:25 - 2015-06-20 15:00 - 00001661 _____ C:\Users\Public\Desktop\INPA.lnk
2015-11-03 21:25 - 2015-06-05 14:30 - 00001092 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMB.lnk
2015-11-03 21:25 - 2014-05-29 18:29 - 00002411 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
2015-11-03 21:25 - 2014-01-29 11:27 - 00001511 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-11-03 21:25 - 2014-01-13 23:11 - 00001053 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shut Down-O-Matic.lnk
2015-11-03 21:25 - 2013-09-06 00:56 - 00001969 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk
2015-11-03 21:24 - 2015-03-23 17:25 - 00000299 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Grupa domowa.lnk
2015-11-03 21:24 - 2015-01-31 15:54 - 00001168 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\e-pity 2014 - program, pity roczne, e-deklaracje.lnk
2015-11-03 21:24 - 2014-11-21 13:24 - 00001053 _____ C:\Users\Tomek\Desktop\Shut Down-O-Matic.lnk
2015-11-03 21:24 - 2014-11-21 07:07 - 00001539 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wyłącz.lnk
2015-11-03 21:24 - 2014-05-06 14:00 - 00002350 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ALLPlayer.TV.lnk
2015-11-03 21:24 - 2014-04-06 13:01 - 00001245 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenFM.lnk
2015-11-03 21:24 - 2014-01-29 12:16 - 00001083 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-11-03 21:24 - 2014-01-28 13:15 - 00000283 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kosz.lnk
2015-11-03 21:24 - 2014-01-13 10:23 - 00001206 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
2015-11-03 21:24 - 2014-01-12 18:28 - 00000363 _____ C:\Users\Tomek\Desktop\Komputer.lnk
2015-11-03 21:01 - 2014-02-10 18:30 - 00000000 ____D C:\Users\Gość\AppData\Local\Google
2015-11-03 21:01 - 2014-02-10 18:30 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2015-11-03 20:46 - 2014-03-13 11:52 - 00175497 _____ C:\Users\Tomek\Documents\zakladki.html
2015-11-03 19:13 - 2014-01-13 10:23 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\GG
2015-11-03 19:09 - 2014-04-19 11:17 - 00000000 ___DO C:\Users\Tomek\SkyDrive
2015-11-03 19:08 - 2014-02-14 14:57 - 00000000 ____D C:\Users\Tomek\AppData\LocalLow\Temp
2015-11-03 19:08 - 2014-01-12 19:54 - 00001068 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-03 19:07 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-11-03 19:06 - 2014-01-12 20:29 - 21807830 _____ C:\Users\Public\CAFADEBUG.log
2015-11-03 19:05 - 2014-01-19 21:04 - 00000000 ____D C:\WINDOWS\SysWOW64\C2MP
2015-11-03 16:34 - 2014-01-13 10:23 - 00000000 ____D C:\Users\Tomek\AppData\Local\GG
2015-11-03 16:25 - 2013-08-22 14:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2015-11-03 16:23 - 2014-03-06 14:31 - 00000000 ____D C:\Users\Tomek\AppData\Local\CrashDumps
2015-11-03 15:48 - 2014-03-06 16:47 - 00000000 ____D C:\AdwCleaner
2015-11-03 14:33 - 2014-02-17 18:46 - 00000266 __RSH C:\ProgramData\ntuser.pol
2015-11-03 14:33 - 2013-08-22 16:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2015-11-03 14:33 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2015-11-01 19:36 - 2013-11-14 08:33 - 01828496 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-01 19:36 - 2013-11-14 08:13 - 00808198 _____ C:\WINDOWS\system32\perfh015.dat
2015-11-01 19:36 - 2013-11-14 08:13 - 00164014 _____ C:\WINDOWS\system32\perfc015.dat
2015-10-30 15:08 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-10-19 18:43 - 2013-08-22 15:44 - 00484168 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-10-19 18:30 - 2014-08-19 14:02 - 00000000 ____D C:\WINDOWS\Minidump
2015-10-19 18:30 - 2014-03-03 18:28 - 00000000 ____D C:\Users\Tomek\AppData\Roaming\DAEMON Tools Lite
2015-10-19 17:57 - 2014-11-17 13:20 - 00000000 ____D C:\Program Files (x86)\WiFi Mobile Partner
2015-10-16 22:02 - 2014-04-06 13:02 - 00003818 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-10-16 07:36 - 2015-07-25 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-10-16 07:36 - 2013-09-06 00:33 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-10-15 19:40 - 2015-05-17 11:12 - 00000000 ____D C:\Users\Tomek\Desktop\Basi-)
2015-10-08 19:04 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2015-10-06 23:09 - 2015-06-17 23:35 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-10-06 23:09 - 2015-06-17 23:35 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-10-06 23:09 - 2013-11-14 08:16 - 00000000 ____D C:\Program Files\Windows Journal
2015-10-06 23:09 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-10-06 13:58 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2015-10-06 13:54 - 2014-01-13 10:57 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-10-05 10:00 - 2014-03-06 13:51 - 00000000 ____D C:\ProgramData\Norton

==================== Pliki w katalogu głównym wybranych folderów =======

2014-12-02 14:39 - 2014-12-02 14:39 - 0003584 _____ () C:\Users\Tomek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-07-25 14:12 - 2015-07-25 14:12 - 29593968 _____ (Sony Mobile Communications ) C:\Users\Tomek\AppData\Local\pcc.exe
2014-01-15 23:14 - 2014-03-17 14:56 - 0007603 _____ () C:\Users\Tomek\AppData\Local\Resmon.ResmonCfg
2014-02-02 23:20 - 2014-02-02 23:20 - 0000000 _____ () C:\Users\Tomek\AppData\Local\{2A0E317C-8AFC-4D28-9870-F56AE930C770}
2013-09-06 00:38 - 2013-09-06 00:38 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Niektóre pliki w TEMP:
====================
C:\Users\SYSTEM\AppData\Local\Temp\B5TBubble.exe
C:\Users\SYSTEM\AppData\Local\Temp\B5TMini.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys = & gt; Plik podpisany cyfrowo


LastRegBack: 2015-11-03 19:23

==================== Koniec FRST.txt ============================


Download file - link to post