Witam mam problem tak jak bardzo dużo użytkowników z yoursites w załączniku daje skany
Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:07-01-2015
Uruchomiony przez Saturn (administrator) OLGA (08-01-2016 18:10:51)
Uruchomiony z C:\Users\Saturn\Downloads
Załadowane profile: Saturn (Dostępne profile: Saturn & DefaultAppPool)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Procesy (filtrowane) =================
(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\BCMWLTRY.EXE
(Taiwan Shui Mu Chih Ching Technology Limited) C:\Program Files (x86)\WinZipper\winzipersvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(tsvr.com) C:\Users\Saturn\AppData\Roaming\TSv\TSvr.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfevtps.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TODO: & lt; 公司名 & gt; ) C:\Program Files (x86)\SFK\SSFK.exe
(TODO: & lt; 公司名 & gt; ) C:\Program Files (x86)\SFK\SSFK.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE
(Akamai Technologies, Inc.) C:\Users\Saturn\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Saturn\AppData\Local\Akamai\netsession_win.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(TU-Funs LIMITED) C:\ProgramData\1WdM1\WdMan.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Desktop.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Rejestr (filtrowane) ===========================
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
HKLM\...\Run: [QuickSet] = & gt; C:\Program Files\Dell\QuickSet\QuickSet.exe [3179288 2010-01-06] (Dell Inc.)
HKLM\...\Run: [SysTrayApp] = & gt; C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-04-07] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] = & gt; C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2010-03-17] (Synaptics Incorporated)
HKLM\...\Run: [Broadcom Wireless Manager UI] = & gt; C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [5712896 2010-02-03] (Dell Inc.)
HKLM-x32\...\Run: [IAStorIcon] = & gt; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-06-08] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] = & gt; C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-06-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ISUSScheduler] = & gt; C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2004-06-16] (InstallShield Software Corporation)
HKLM-x32\...\Run: [GrooveMonitor] = & gt; C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] = & gt; C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248552 2010-05-14] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [AvgUi] = & gt; C:\Program Files (x86)\AVG\Framework\Common\avguix.exe [1139112 2015-12-08] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] = & gt; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.)
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\...\Run: [ISUSPM Startup] = & gt; C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2004-06-16] (InstallShield Software Corporation)
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\...\Run: [Akamai NetSession Interface] = & gt; C:\Users\Saturn\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\...\Run: [CCleaner Monitoring] = & gt; C:\Program Files\CCleaner\CCleaner64.exe [8551848 2015-10-19] (Piriform Ltd)
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x95000000
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\...\MountPoints2: E - E:\setup.bmp
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\...\MountPoints2: F - F:\_AUTORUN\AUTORUN.EXE
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\...\MountPoints2: G - G:\setup.bmp
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\...\MountPoints2: H - H:\Autorun.exe
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\...\MountPoints2: I - I:\RunGame.exe
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\...\MountPoints2: {a376958f-87a3-11e5-a921-eaf9c5a03a1b} - F:\Setup.exe
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\...\MountPoints2: {a3769748-87a3-11e5-a921-eaf9c5a03a1b} - E:\setup.exe
ShellIconOverlayIdentifiers: [ AccExtIco1] - & gt; {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} = & gt; C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] - & gt; {853B7E05-C47D-4985-909A-D0DC5C6D7303} = & gt; C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] - & gt; {42D38F2E-98E9-4382-B546-E24E4D6D04BB} = & gt; C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [0_sxBZOverlayIcon] - & gt; {6457FB0A-5C02-4393-909C-2139A5D5571F} = & gt; Brak pliku
ShellIconOverlayIdentifiers: [0_sxConfidentialOIcon] - & gt; {871FE18B-B68D-4437-BC76-6634996CDB97} = & gt; Brak pliku
ShellIconOverlayIdentifiers: [0_sxForbiddenOIcon] - & gt; {1F03249C-6AB2-4E31-8C10-86F7E31E3B4E} = & gt; Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay1] - & gt; {E68D0A50-3C40-4712-B90D-DCFA93FF2534} = & gt; Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay2] - & gt; {E68D0A51-3C40-4712-B90D-DCFA93FF2534} = & gt; Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay3] - & gt; {E68D0A52-3C40-4712-B90D-DCFA93FF2534} = & gt; Brak pliku
ShellIconOverlayIdentifiers: [GGDriveOverlay4] - & gt; {E68D0A53-3C40-4712-B90D-DCFA93FF2534} = & gt; Brak pliku
==================== Internet (filtrowane) ====================
(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{0A96F794-0062-4FA6-910A-A9EA7C1DE258}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp & ts=1449645654 & z=0e223ec1747baa90ced24c2g3zezfteq7z8wdm0w1q & from=ient07021 & uid=WDCXWD5000BEVT-75A0RT0_WD-WXE1A70E8282E8282
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp & ts=1449645654 & z=0e223ec1747baa90ced24c2g3zezfteq7z8wdm0w1q & from=ient07021 & uid=WDCXWD5000BEVT-75A0RT0_WD-WXE1A70E8282E8282
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp & ts=1449645654 & z=0e223ec1747baa90ced24c2g3zezfteq7z8wdm0w1q & from=ient07021 & uid=WDCXWD5000BEVT-75A0RT0_WD-WXE1A70E8282E8282
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp & ts=1449645654 & z=0e223ec1747baa90ced24c2g3zezfteq7z8wdm0w1q & from=ient07021 & uid=WDCXWD5000BEVT-75A0RT0_WD-WXE1A70E8282E8282
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://do-search.com/web/?type=ds & ts=1431592994 & z=57696f2195f90e39b6ec06cg3z6c8g5wdt2cbtdm8m & from=cor & uid=WDCXWD5000BEVT-75A0RT0_WD-WXE1A70E8282E8282 & q={searchTerms}
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp & ts=1449645654 & z=0e223ec1747baa90ced24c2g3zezfteq7z8wdm0w1q & from=ient07021 & uid=WDCXWD5000BEVT-75A0RT0_WD-WXE1A70E8282E8282
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp & ts=1449645654 & z=0e223ec1747baa90ced24c2g3zezfteq7z8wdm0w1q & from=ient07021 & uid=WDCXWD5000BEVT-75A0RT0_WD-WXE1A70E8282E8282
HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://do-search.com/web/?type=ds & ts=1431592994 & z=57696f2195f90e39b6ec06cg3z6c8g5wdt2cbtdm8m & from=cor & uid=WDCXWD5000BEVT-75A0RT0_WD-WXE1A70E8282E8282 & q={searchTerms}
URLSearchHook: HKU\S-1-5-21-3616690994-2771968203-2831934069-1000 - (Brak nazwy) - {5a089bcd-c7f1-4064-8702-f58d8bd5d61f} - Brak pliku
SearchScopes: HKLM - & gt; DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms} & form=MSSEDF & pc=MSE1
SearchScopes: HKLM - & gt; {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms} & form=MSSEDF & pc=MSE1
SearchScopes: HKLM-x32 - & gt; DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds & ts=1452245560 & z=44a7928b55ff57c5d43c526g0z4w6o8obzawfm6zcw & from=wpm01073 & uid=WDCXWD5000BEVT-75A0RT0_WD-WXE1A70E8282E8282 & q={searchTerms}
SearchScopes: HKLM-x32 - & gt; {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds & ts=1452245560 & z=44a7928b55ff57c5d43c526g0z4w6o8obzawfm6zcw & from=wpm01073 & uid=WDCXWD5000BEVT-75A0RT0_WD-WXE1A70E8282E8282 & q={searchTerms}
SearchScopes: HKLM-x32 - & gt; {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =
SearchScopes: HKU\S-1-5-21-3616690994-2771968203-2831934069-1000 - & gt; DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds & ts=1452245560 & z=44a7928b55ff57c5d43c526g0z4w6o8obzawfm6zcw & from=wpm01073 & uid=WDCXWD5000BEVT-75A0RT0_WD-WXE1A70E8282E8282 & q={searchTerms}
SearchScopes: HKU\S-1-5-21-3616690994-2771968203-2831934069-1000 - & gt; ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKU\S-1-5-21-3616690994-2771968203-2831934069-1000 - & gt; {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} URL = hxxp://www.crawler.com/search/dispatcher.aspx?tp=aus & qkw={searchTerms} & tbid=60438
SearchScopes: HKU\S-1-5-21-3616690994-2771968203-2831934069-1000 - & gt; {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds & ts=1452245560 & z=44a7928b55ff57c5d43c526g0z4w6o8obzawfm6zcw & from=wpm01073 & uid=WDCXWD5000BEVT-75A0RT0_WD-WXE1A70E8282E8282 & q={searchTerms}
SearchScopes: HKU\S-1-5-21-3616690994-2771968203-2831934069-1000 - & gt; {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-3616690994-2771968203-2831934069-1000 - & gt; {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} URL = hxxp://search.certified-toolbar.com?si=43251 & st=bs & tid=3623 & ver=2.8 & ts=1367856118248 & tguid=43251-3623-1367856118248-D41D8CD98F00B204E9800998ECF8427E & q={searchTerms}
SearchScopes: HKU\S-1-5-21-3616690994-2771968203-2831934069-1000 - & gt; {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms} & SearchSource=4 & ctid=CT1391269
SearchScopes: HKU\S-1-5-21-3616690994-2771968203-2831934069-1000 - & gt; {F3FCDABF-63B3-4751-A93A-31D55A550C7D} URL = hxxp://search.certified-toolbar.com?si=43251 & st=bs & tid=3623 & ver=4.9 & ts=1367856118248.000005 & tguid=43251-3623-1367856118248-D41D8CD98F00B204E9800998ECF8427E & q={searchTerms}
BHO: BufferZone Web Privacy Manager - & gt; {311BA51F-64F2-439D-9A4A-772373D77312} - & gt; Brak pliku
BHO: scriptproxy - & gt; {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - & gt; C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20100907225126.dll [2010-04-27] (McAfee, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - & gt; {DBC80044-A445-435b-BC74-9C25C1C588A9} - & gt; C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-09-08] (Sun Microsystems, Inc.)
BHO-x32: Groove GFS Browser Helper - & gt; {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - & gt; C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: scriptproxy - & gt; {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - & gt; C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120911195756.dll [2010-04-27] (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - & gt; {DBC80044-A445-435b-BC74-9C25C1C588A9} - & gt; C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2015-11-11] (Sun Microsystems, Inc.)
Toolbar: HKLM - Brak nazwy - {036451d5-97b6-4882-a0cb-0f3b6de4df8d} - Brak pliku
Toolbar: HKLM-x32 - Brak nazwy - {5a089bcd-c7f1-4064-8702-f58d8bd5d61f} - Brak pliku
Toolbar: HKLM-x32 - Brak nazwy - {98889811-442D-49dd-99D7-DC866BE87DBC} - Brak pliku
Toolbar: HKLM-x32 - HomeTab - {036451d5-97b6-4882-a0cb-0f3b6de4df8d} - Brak pliku
Toolbar: HKU\S-1-5-21-3616690994-2771968203-2831934069-1000 - & gt; Brak nazwy - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - Brak pliku
Toolbar: HKU\S-1-5-21-3616690994-2771968203-2831934069-1000 - & gt; Brak nazwy - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - Brak pliku
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - & gt; C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2016-01-06] ()
FF Plugin: @microsoft.com/GENUINE - & gt; disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - & gt; c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - & gt; C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Brak pliku]
FF Plugin-x32: @adobe.com/FlashPlayer - & gt; C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2016-01-06] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 - & gt; C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - & gt; C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll [2015-11-11] (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - & gt; disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - & gt; c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - & gt; C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2012-10-09] (Pando Networks)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - & gt; C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-06-07] (VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect - & gt; C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Brak pliku]
FF Plugin HKU\S-1-5-21-3616690994-2771968203-2831934069-1000: pandonetworks.com/PandoWebPlugin - & gt; C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2012-10-09] (Pando Networks)
FF Plugin HKU\S-1-5-21-3616690994-2771968203-2831934069-1000: ubisoft.com/uplaypc - & gt; C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [Brak pliku]
FF HKLM-x32\...\Firefox\Extensions: [ocr@babylon.com] - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\ocr@babylon.com = & gt; nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF = & gt; nie znaleziono
FF HKU\S-1-5-21-3616690994-2771968203-2831934069-1000\...\Firefox\Extensions: [{b64982b1-d112-42b5-b1e4-d3867c4533f8}] - C:\ProgramData\Browser Manager\2.3.765.24\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension = & gt; nie znaleziono
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [hfikdpojhgckaejifppccjeedkjcndpp] - C:\Users\Saturn\AppData\Roaming\BabSolution\CR\hola.crx & lt; nie znaleziono & gt;
CHR HKLM-x32\...\Chrome\Extension: [jlceijfdfeghdhmmbhbcffanmcggoojf] - hxxps://clients2.google.com/service/update2/crx
Opera:
=======
OPR Session Restore: - & gt; [funkcja włączona]
StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe hxxp://www.yoursites123.com/?type=sc & ts=1452245560 & z=44a7928b55ff57c5d43c526g0z4w6o8obzawfm6zcw & from=wpm01073 & uid=WDCXWD5000BEVT-75A0RT0_WD-WXE1A70E8282E8282
==================== Usługi (filtrowane) ========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016448 2015-11-25] (Adobe Systems, Incorporated)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1049000 2015-12-08] (AVG Technologies CZ, s.r.o.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [Brak podpisu cyfrowego]
R2 IhPul; C:\Users\Saturn\AppData\Roaming\TSv\TSvr.exe [580752 2015-12-08] (tsvr.com)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.)
S2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [355440 2009-12-15] (McAfee, Inc.)
S2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2009-12-15] (McAfee, Inc.)
S2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2009-12-15] (McAfee, Inc.)
R2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2009-12-15] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2009-12-15] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2009-12-15] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [199032 2010-04-27] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [244840 2010-04-27] (McAfee, Inc.)
R2 mfevtp; C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe [148520 2010-04-27] (McAfee, Inc.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5268336 2014-03-25] (INCA Internet Co., Ltd.)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1008880 2015-12-15] (Overwolf LTD)
S2 PavPrSrv; C:\Program Files (x86)\Common Files\Panda Software\PavShld\pavprsrv.exe [32768 2004-07-08] (Panda Software) [Brak podpisu cyfrowego]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-09-24] ()
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [176264 2015-05-27] (Sandboxie Holdings, LLC)
S4 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [210432 2006-11-06] (Nokia.) [Brak podpisu cyfrowego]
R2 SSFK; C:\Program Files (x86)\SFK\SSFK.exe [158400 2016-01-08] (TODO: & lt; 公司名 & gt; )
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
R2 WdMan; C:\ProgramData\1WdM1\WdMan.exe [326656 2016-01-08] (TU-Funs LIMITED) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [711344 2016-01-05] (Taiwan Shui Mu Chih Ching Technology Limited) & lt; ==== UWAGA
R2 wltrysvc; C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe [5088256 2010-02-03] (Dell Inc.) [Brak podpisu cyfrowego]
===================== Sterowniki (filtrowane) ==========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2013-08-18] ()
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [62416 2010-04-27] (McAfee, Inc.)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-11-16] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2012-11-26] ()
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [121504 2010-04-27] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [189880 2010-04-27] (McAfee, Inc.)
U3 mfeavfk01; Brak ImagePath
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [440688 2010-04-27] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [528616 2010-04-27] (McAfee, Inc.)
R1 mfenlfk; C:\Windows\System32\DRIVERS\mfenlfk.sys [75288 2010-04-27] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [93840 2010-04-27] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [279752 2010-04-27] (McAfee, Inc.)
S3 NPF; C:\Windows\System32\drivers\NPF.sys [47632 2010-02-03] (CACE Technologies, Inc.)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-01] (INCA Internet Co., Ltd.) [Brak podpisu cyfrowego]
S2 PavProc; C:\Windows\SysWOW64\DRIVERS\PavProc.sys [163856 2004-01-08] (Panda Software) [Brak podpisu cyfrowego]
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [188552 2015-05-27] (Sandboxie Holdings, LLC)
S1 ShldDrv; C:\Windows\SysWow64\Drivers\ShldDrv.sys [25248 2004-10-05] (Panda Software) [Brak podpisu cyfrowego]
S3 dump_wmimmc; \??\C:\AeriaGames\WolfTeam-PL\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 hamachi; system32\DRIVERS\hamachi.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 PCAMPR4; \??\C:\Windows\system32\PCAMPR4.SYS [X]
S3 PCANDIS4; \??\C:\Windows\system32\PCANDIS4.SYS [X]
U5 viadsk; C:\Windows\SysWOW64\Drivers\viadsk.sys [50208 2002-03-04] (VIA Technologies, Inc.)
S1 VIAPFD; \SystemRoot\System32\Drivers\VIAPFD.SYS [X]
==================== NetSvcs (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
==================== Jeden miesiąc - utworzone pliki i foldery ========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2016-01-08 18:10 - 2016-01-08 18:12 - 00024632 _____ C:\Users\Saturn\Downloads\FRST.txt
2016-01-08 18:10 - 2016-01-08 18:10 - 00000000 ____D C:\FRST
2016-01-08 17:58 - 2016-01-08 17:58 - 02370560 _____ (Farbar) C:\Users\Saturn\Downloads\FRST64.exe
2016-01-08 17:55 - 2016-01-08 17:55 - 00000862 _____ C:\Users\Public\Desktop\AVG.lnk
2016-01-08 17:35 - 2016-01-08 17:36 - 00100570 _____ C:\Windows\ntbtlog.txt
2016-01-08 10:34 - 2016-01-08 17:55 - 00000000 ____D C:\Program Files (x86)\WinZipper
2016-01-08 10:34 - 2016-01-08 10:34 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\WinZipper
2016-01-08 10:34 - 2016-01-08 10:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper
2016-01-08 10:33 - 2016-01-08 10:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\TSv
2016-01-08 10:31 - 2016-01-08 10:32 - 00000000 ____D C:\ProgramData\1WdM1
2016-01-05 20:47 - 2016-01-05 20:47 - 00003980 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-01-05 20:46 - 2016-01-06 14:42 - 00000992 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-12-28 18:47 - 2015-12-28 18:47 - 00001409 _____ C:\Windows\QTFont.for
2015-12-25 19:19 - 2015-12-28 18:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GiantsEdit
2015-12-17 21:04 - 2015-12-17 21:40 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\REngLauncher
2015-12-16 11:36 - 2016-01-08 17:55 - 00000000 ____D C:\Users\Saturn\AppData\Local\LogMeIn Hamachi
2015-12-16 11:35 - 2015-12-16 11:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-12-16 11:35 - 2015-12-16 11:35 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2015-12-16 11:05 - 2015-12-18 14:02 - 00000000 ____D C:\Program Files (x86)\cdp.pl
2015-12-14 20:23 - 2016-01-08 10:32 - 00001445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-12-14 20:23 - 2015-12-14 20:24 - 00000000 ____D C:\Program Files (x86)\Opera
2015-12-14 20:23 - 2015-12-14 20:23 - 00003872 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1450120984
2015-12-09 12:58 - 2015-12-09 12:58 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Awesomium
2015-12-09 12:57 - 2015-12-09 12:57 - 00000000 ____D C:\Users\Saturn\Documents\BnS
2015-12-09 11:52 - 2015-12-09 11:52 - 00000000 ____D C:\Users\Saturn\AppData\Local\BNSUpdater
2015-12-09 08:22 - 2016-01-08 17:54 - 00000000 ____D C:\Program Files (x86)\SFK
2015-12-09 08:22 - 2015-12-09 08:23 - 00000000 ____D C:\ProgramData\UWdMU
2015-12-09 08:20 - 2015-12-09 08:21 - 00000000 ____D C:\ProgramData\MWdMM
2015-12-09 07:57 - 2015-12-09 08:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blade and Soul
2015-12-09 07:57 - 2015-12-09 07:57 - 00000000 ____D C:\Program Files (x86)\PlayBns.com
2015-12-09 06:58 - 2015-11-20 19:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-12-09 06:58 - 2015-11-20 19:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-12-09 06:58 - 2015-11-20 19:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-12-09 06:58 - 2015-11-20 19:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-12-09 06:58 - 2015-11-20 19:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-12-09 06:58 - 2015-11-20 19:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-12-09 06:58 - 2015-11-20 19:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-12-09 06:58 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-12-09 06:58 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-12-09 06:58 - 2015-11-20 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-12-09 06:58 - 2015-11-20 19:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-12-09 06:58 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-12-09 06:58 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-12-09 06:58 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-12-09 06:58 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-12-09 06:58 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-12-09 06:58 - 2015-11-05 20:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-12-09 06:58 - 2015-11-05 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-12-09 06:58 - 2015-11-03 20:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-12-09 06:58 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2015-12-09 06:57 - 2015-11-11 22:12 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-12-09 06:57 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-12-09 06:57 - 2015-11-11 19:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2015-12-09 06:57 - 2015-11-11 19:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2015-12-09 06:57 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2015-12-09 06:57 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2015-12-09 06:57 - 2015-11-11 17:21 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-12-09 06:57 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-12-09 06:57 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-12-09 06:57 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-12-09 06:57 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-12-09 06:57 - 2015-11-11 16:12 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-12-09 06:57 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-12-09 06:57 - 2015-11-10 19:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-12-09 06:57 - 2015-11-10 19:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-12-09 06:57 - 2015-11-10 19:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-12-09 06:57 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-12-09 06:57 - 2015-11-10 19:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-12-09 06:57 - 2015-11-10 18:47 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-12-09 06:57 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-12-09 06:57 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-12-09 06:57 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-12-09 06:57 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-12-09 06:57 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-12-09 06:57 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-12-09 06:57 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-12-09 06:57 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-12-09 06:57 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-12-09 06:57 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-12-09 06:57 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-12-09 06:57 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-12-09 06:57 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-12-09 06:57 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-12-09 06:57 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-12-09 06:57 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-12-09 06:57 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-12-09 06:57 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-12-09 06:57 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-12-09 06:57 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-12-09 06:57 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-12-09 06:57 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-12-09 06:57 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-12-09 06:57 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-12-09 06:57 - 2015-11-08 23:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-12-09 06:57 - 2015-11-08 23:32 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-12-09 06:57 - 2015-11-08 23:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-12-09 06:57 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-12-09 06:57 - 2015-11-08 23:15 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-12-09 06:57 - 2015-11-08 23:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-12-09 06:57 - 2015-11-08 23:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-12-09 06:57 - 2015-11-08 23:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-12-09 06:57 - 2015-11-08 23:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-12-09 06:57 - 2015-11-08 23:06 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-12-09 06:57 - 2015-11-08 23:04 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-12-09 06:57 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-12-09 06:57 - 2015-11-08 23:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-12-09 06:57 - 2015-11-08 23:01 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-12-09 06:57 - 2015-11-08 23:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-12-09 06:57 - 2015-11-08 23:01 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-12-09 06:57 - 2015-11-08 22:52 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-12-09 06:57 - 2015-11-08 22:48 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-12-09 06:57 - 2015-11-08 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-12-09 06:57 - 2015-11-08 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-12-09 06:57 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-12-09 06:57 - 2015-11-08 22:29 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-12-09 06:57 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-12-09 06:57 - 2015-11-08 22:15 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-12-09 06:57 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-12-09 06:57 - 2015-11-08 22:14 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-12-09 06:57 - 2015-11-08 22:14 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-12-09 06:57 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-12-09 06:57 - 2015-11-08 21:53 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-12-09 06:57 - 2015-11-08 21:41 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-12-09 06:57 - 2015-11-08 21:30 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-12-09 06:57 - 2015-11-05 20:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2015-12-09 06:57 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2015-12-09 06:57 - 2015-11-05 10:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2015-12-09 06:57 - 2015-10-09 00:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2015-12-09 06:57 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL
2015-12-09 06:57 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2015-12-09 06:57 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2015-12-09 06:57 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2015-12-09 06:57 - 2015-10-09 00:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll
2015-12-09 06:57 - 2015-10-09 00:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL
2015-12-09 06:57 - 2015-10-09 00:17 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2015-12-09 06:57 - 2015-10-08 20:13 - 00419928 _____ C:\Windows\SysWOW64\locale.nls
2015-12-09 06:57 - 2015-10-08 19:52 - 00419928 _____ C:\Windows\system32\locale.nls
2015-12-09 06:54 - 2015-11-03 20:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2015-12-09 06:54 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2016-01-08 18:11 - 2013-05-18 09:28 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-08 18:10 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2016-01-08 18:03 - 2009-07-14 05:45 - 00013664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-08 18:03 - 2009-07-14 05:45 - 00013664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-08 17:57 - 2011-04-05 14:40 - 00000000 ____D C:\Users\Saturn
2016-01-08 17:56 - 2015-02-07 20:38 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\TS3Client
2016-01-08 17:55 - 2015-11-20 08:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-01-08 17:55 - 2013-12-31 18:28 - 00000000 ____D C:\ProgramData\AVG
2016-01-08 17:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-01-08 17:52 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-08 17:30 - 2015-11-20 08:41 - 00000000 ____D C:\Users\Saturn\AppData\Local\AvgSetupLog
2016-01-08 17:30 - 2013-11-17 15:54 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2016-01-08 17:24 - 2015-11-20 08:43 - 00000000 ____D C:\Program Files (x86)\AVG
2016-01-08 17:14 - 2014-06-21 13:08 - 00000000 ____D C:\Program Files\CCleaner
2016-01-08 17:11 - 2014-01-27 13:19 - 00000000 ___RD C:\Users\Saturn\Desktop\Nowy folder
2016-01-08 17:07 - 2012-01-31 21:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft
2016-01-08 17:07 - 2010-09-08 04:41 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-01-08 17:06 - 2013-06-21 21:24 - 00000000 ____D C:\Users\Saturn\AppData\Local\CrashDumps
2016-01-08 17:04 - 2012-07-09 13:05 - 00007620 _____ C:\Users\Saturn\AppData\Local\resmon.resmoncfg
2016-01-08 10:31 - 2015-11-16 07:11 - 00000074 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2016-01-06 23:12 - 2013-05-18 09:28 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-01-06 23:12 - 2013-05-18 09:28 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-01-06 23:12 - 2013-05-18 09:28 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-01-05 20:47 - 2012-01-24 20:06 - 00000000 ____D C:\Users\Saturn\AppData\Local\Adobe
2016-01-05 18:23 - 2012-04-15 18:50 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\vlc
2015-12-31 20:17 - 2015-06-11 11:51 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-12-28 18:48 - 2012-04-10 18:18 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-12-28 18:46 - 2014-12-12 17:29 - 00054156 ____H C:\Windows\QTFont.qfn
2015-12-23 09:28 - 2012-03-20 19:24 - 01722358 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-12-23 09:28 - 2010-09-08 07:09 - 00772956 _____ C:\Windows\system32\perfh015.dat
2015-12-23 09:28 - 2010-09-08 07:09 - 00166540 _____ C:\Windows\system32\perfc015.dat
2015-12-23 09:28 - 2009-07-14 06:13 - 01722358 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-22 19:52 - 2015-05-05 19:49 - 00000000 ____D C:\Program Files (x86)\Overwolf
2015-12-21 12:28 - 2013-05-16 14:25 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\GG
2015-12-21 12:28 - 2013-05-16 14:25 - 00000000 ____D C:\Users\Saturn\AppData\Local\GG
2015-12-20 08:47 - 2015-04-05 08:09 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-12-20 08:47 - 2015-04-05 08:09 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-15 21:14 - 2011-04-05 14:44 - 00000000 ____D C:\Users\Saturn\AppData\Local\VirtualStore
2015-12-14 21:48 - 2014-11-02 12:33 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InfiniteCrisis
2015-12-14 20:23 - 2014-04-06 10:47 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Opera Software
2015-12-14 20:23 - 2014-04-06 10:47 - 00000000 ____D C:\Users\Saturn\AppData\Local\Opera Software
2015-12-12 08:18 - 2015-05-16 16:41 - 00000000 ____D C:\Program Files (x86)\Glyph
2015-12-12 08:18 - 2015-02-01 14:57 - 00000000 ____D C:\Users\Saturn\AppData\Local\Glyph
2015-12-11 16:52 - 2014-07-09 13:14 - 00427136 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-11 09:08 - 2012-10-21 18:25 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-11 08:59 - 2013-06-08 10:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-11 08:54 - 2013-06-08 10:46 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-11 08:54 - 2013-06-08 10:46 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-11 08:39 - 2013-07-25 20:04 - 00000000 ____D C:\Windows\system32\MRT
2015-12-11 07:53 - 2013-03-06 13:35 - 140158008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-12-09 08:28 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-12-09 08:20 - 2015-11-16 07:11 - 00000000 ____D C:\ProgramData\FWMiniProF
==================== Pliki w katalogu głównym wybranych folderów =======
2013-03-22 13:33 - 2013-03-22 13:33 - 0000108 _____ () C:\Users\Saturn\AppData\Roaming\ad18cb5f.dat
2014-07-29 20:10 - 2014-07-29 20:14 - 0000320 _____ () C:\Users\Saturn\AppData\Roaming\aps.uninstall.scan.results
2013-12-19 17:01 - 2015-04-29 09:04 - 0000134 _____ () C:\Users\Saturn\AppData\Roaming\WB.CFG
2014-07-29 20:08 - 2014-07-29 15:48 - 0575544 _____ (ClickMeIn Limited) C:\Users\Saturn\AppData\Local\AnyProtectScannerSetup.exe
2012-02-05 20:49 - 2013-06-12 19:29 - 0010240 _____ () C:\Users\Saturn\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-29 20:07 - 2014-07-29 20:07 - 0301608 _____ (VuuPC Limited) C:\Users\Saturn\AppData\Local\nsj2F9D.tmp
2014-07-29 20:02 - 2014-07-29 20:02 - 0301608 _____ (VuuPC Limited) C:\Users\Saturn\AppData\Local\nsmBA10.tmp
2014-07-29 20:01 - 2014-07-29 20:01 - 0301608 _____ (VuuPC Limited) C:\Users\Saturn\AppData\Local\nsr6369.tmp
2014-06-05 18:01 - 2014-06-05 18:01 - 0001836 _____ () C:\Users\Saturn\AppData\Local\recently-used.xbel
2012-07-09 13:05 - 2016-01-08 17:04 - 0007620 _____ () C:\Users\Saturn\AppData\Local\resmon.resmoncfg
2015-11-16 07:11 - 2016-01-08 10:31 - 0000074 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
==================== Bamital & volsnap =================
(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
C:\Windows\system32\winlogon.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe = & gt; Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe = & gt; Plik podpisany cyfrowo
C:\Windows\explorer.exe = & gt; Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe = & gt; Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\services.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\User32.dll = & gt; Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll = & gt; Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe = & gt; Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll = & gt; Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll = & gt; Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll = & gt; Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys = & gt; Plik podpisany cyfrowo
LastRegBack: 2012-12-22 11:48
==================== Koniec FRST.txt ============================