Witam, przez pewien czas miałem otwartą sieć wifi. I teraz nie wiem czy ktoś nie włamał mi się do komputera i nie zainstalował jakiegoś wirusa lub coś podobnego. Z góry dziękuje.
Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 11-07-2017
Uruchomiony przez Kellerman (administrator) ŁUKASZ-KOMPUTER (12-07-2017 13:39:03)
Uruchomiony z C:\Users\Kellerman\Desktop
Załadowane profile: Kellerman (Dostępne profile: Kellerman & Gość)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Procesy (filtrowane) =================
(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe
( ) C:\Windows\System32\lxczcoms.exe
(Symantec Corporation) C:\Program Files\Norton Identity Safe\Engine\2014.7.11.42\NST.exe
() C:\Program Files\EaseUS\Todo Backup\bin\TodoBackupService.exe
(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\wmi32.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Symantec Corporation) C:\Program Files\Norton Identity Safe\Engine\2014.7.11.42\NST.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Murray Hurps Software Pty Ltd) C:\Ad Muncher\AdMunch.exe
(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
==================== Rejestr (filtrowane) ====================
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
HKU\S-1-5-21-1219754016-2387284431-2628485383-1007\...\Run: [CCleaner Monitoring] = & gt; C:\Program Files\CCleaner\CCleaner.exe [6369048 2015-05-08] (Piriform Ltd)
HKU\S-1-5-21-1219754016-2387284431-2628485383-1007\...\Run: [IDMan] = & gt; C:\Program Files\Internet Download Manager\IDMan.exe [4019312 2017-06-28] (Tonec Inc.)
HKU\S-1-5-18\...\RunOnce: [SPReview] = & gt; C:\Windows\System32\SPReview\SPReview.exe [280576 2014-06-12] (Microsoft Corporation)
Startup: C:\Users\Kellerman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AdMunch.lnk [2014-10-15]
ShortcutTarget: AdMunch.lnk - & gt; C:\Ad Muncher\AdMunch.exe (Murray Hurps Software Pty Ltd)
GroupPolicy: Ograniczenia ? & lt; ==== UWAGA
GroupPolicyScripts: Ograniczenia & lt; ==== UWAGA
GroupPolicyScripts\User: Ograniczenia & lt; ==== UWAGA
==================== Internet (filtrowane) ====================
(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5D2E495C-5415-4110-BDF6-2BF865520897}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{EC83F2A5-2570-4D89-A3BB-0ADC9CDB8ACD}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKU\S-1-5-21-1219754016-2387284431-2628485383-1007\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
BHO: IDM integration (IDMIEHlprObj Class) - & gt; {0055C089-8582-441B-A0BF-17B458C2A3A8} - & gt; C:\Program Files\Internet Download Manager\IDMIECC.dll [2017-06-23] (Internet Download Manager, Tonec Inc.)
BHO: Kaspersky Protection - & gt; {2E38825B-8815-42CF-9126-C58BC28D4591} - & gt; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2016-12-08] (AO Kaspersky Lab)
BHO: Norton Identity Protection - & gt; {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} - & gt; C:\Program Files\Norton Identity Safe\Engine\2014.7.11.42\coIEPlg.dll [2015-06-26] (Symantec Corporation)
Toolbar: HKLM - Norton Identity Safe Toolbar - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - C:\Program Files\Norton Identity Safe\Engine\2014.7.11.42\coIEPlg.dll [2015-06-26] (Symantec Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2016-12-08] (AO Kaspersky Lab)
FireFox:
========
FF ProfilePath: C:\Users\Kellerman\AppData\Roaming\Mozilla\Firefox\Profiles\yvfim3gq.default [2017-07-12]
FF user.js: detected! = & gt; C:\Users\Kellerman\AppData\Roaming\Mozilla\Firefox\Profiles\yvfim3gq.default\user.js [2015-09-04]
FF Homepage: Mozilla\Firefox\Profiles\yvfim3gq.default - & gt; about:home
FF NetworkProxy: Mozilla\Firefox\Profiles\yvfim3gq.default - & gt; type " , 0
FF Extension: (Element Hiding Helper for Adblock Plus) - C:\Users\Kellerman\AppData\Roaming\Mozilla\Firefox\Profiles\yvfim3gq.default\Extensions\elemhidehelper@adblockplus.org.xpi [2017-04-12]
FF Extension: (WOT) - C:\Users\Kellerman\AppData\Roaming\Mozilla\Firefox\Profiles\yvfim3gq.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2017-05-06]
FF Extension: (Adblock Plus) - C:\Users\Kellerman\AppData\Roaming\Mozilla\Firefox\Profiles\yvfim3gq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-06-08]
FF Extension: (Greasemonkey) - C:\Users\Kellerman\AppData\Roaming\Mozilla\Firefox\Profiles\yvfim3gq.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2017-04-27]
FF HKLM\...\Firefox\Extensions: [{F04D2D30-776C-4d02-8627-8E4385ECA58D}] - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2014.7.11.42\coFFPlgn
FF Extension: (Norton Identity Safe Toolbar) - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2014.7.11.42\coFFPlgn [2017-07-12]
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2016-12-08]
FF HKU\S-1-5-21-1219754016-2387284431-2628485383-1007\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc3.xpi
FF Extension: (Brak nazwy) - C:\Program Files\Internet Download Manager\idmmzcc3.xpi [2017-06-28]
FF HKU\S-1-5-21-1219754016-2387284431-2628485383-1007\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\ŁukasZ\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\ŁukasZ\AppData\Roaming\IDM\idmmzcc5 [2017-04-06] [Brak podpisu cyfrowego]
FF HKU\S-1-5-21-1219754016-2387284431-2628485383-1007\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files\Internet Download Manager\idmmzcc2.xpi [2017-01-26]
FF Plugin: @adobe.com/FlashPlayer - & gt; C:\Windows\system32\Macromed\Flash\NPSWF32_26_0_0_137.dll [2017-07-11] ()
FF Plugin: @microsoft.com/GENUINE - & gt; disabled [Brak pliku]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2017-06-28]
CHR HKLM\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] - C:\Program Files\Norton Identity Safe\Engine\2014.7.11.42\Exts\Chrome.crx [2015-05-10]
CHR HKLM\...\Chrome\Extension: [ofoeigeaodhbjogdigckajfhjbonaofg] - hxxps://clients2.google.com/service/update2/crx
==================== Usługi (filtrowane) ====================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R2 AVP17.0.0; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 EaseUS Agent; C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe [36904 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd)
R2 KSDE1.0.0; C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 lxcz_device; C:\Windows\system32\lxczcoms.exe [537520 2007-04-19] ( )
R2 NCO; C:\Program Files\Norton Identity Safe\Engine\2014.7.11.42\NST.exe [131144 2015-03-05] (Symantec Corporation)
S3 npggsvc; C:\Windows\system32\GameMon.des [3611808 2015-07-22] (INCA Internet Co., Ltd.)
S3 SplashtopRemoteService; C:\Program Files\Splashtop\Splashtop Remote\Server\SRService.exe [695136 2015-06-17] (Splashtop Inc.)
S3 SSUService; C:\Program Files\Splashtop\Splashtop Software Updater\SSUService.exe [609056 2013-10-09] (Splashtop Inc.)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
===================== Sterowniki (filtrowane) ======================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
S3 athur; C:\Windows\System32\DRIVERS\athur.sys [1570304 2012-08-30] (Atheros Communications, Inc.) [Brak podpisu cyfrowego]
R1 ccSet_NST; C:\Windows\system32\drivers\NST\7DE070B0.02A\ccSetx86.sys [127064 2013-09-27] (Symantec Corporation)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [170840 2016-06-10] (AO Kaspersky Lab)
R1 dvdfabio; C:\Windows\system32\drivers\dvdfabio.sys [12192 2014-08-29] (DVDFab Software)
R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [51752 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [41512 2015-12-10] ()
R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [15912 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd)
R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [190504 2015-12-10] (CHENGDU YIWO Tech Development Co., Ltd)
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [26328 2015-07-30] (Sony Mobile Communications)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [165296 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [57264 2016-06-08] (AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [71504 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [69000 2016-06-01] (AO Kaspersky Lab)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [155360 2017-04-12] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [129520 2017-04-12] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [805088 2017-04-12] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [49744 2016-12-08] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [46000 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [38072 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41392 2016-06-01] (AO Kaspersky Lab)
R3 kltap; C:\Windows\System32\DRIVERS\kltap.sys [48056 2016-06-07] (The OpenVPN Project)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [71088 2016-05-18] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [116960 2017-03-15] (AO Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [165088 2017-03-15] (AO Kaspersky Lab)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [32912 2016-01-29] (NVIDIA Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [15688 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [10320 2013-09-30] ()
S3 USBAAPL; C:\Windows\System32\Drivers\usbaapl.sys [45056 2014-08-15] (Apple, Inc.) [Brak podpisu cyfrowego]
R3 vdrive; C:\Windows\System32\DRIVERS\vdrive.sys [36768 2014-08-29] (DVDFab Software)
==================== NetSvcs (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
==================== Jeden miesiąc - utworzone pliki i foldery ========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2017-07-12 13:27 - 2017-06-30 05:32 - 00346312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-07-12 13:27 - 2017-06-30 04:39 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-07-12 13:27 - 2017-06-30 04:38 - 01400320 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-07-12 13:27 - 2017-06-30 04:38 - 01363968 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-07-12 13:27 - 2017-06-30 04:38 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-07-12 13:27 - 2017-06-30 04:38 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-07-12 13:27 - 2017-06-30 04:38 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-07-12 13:27 - 2017-06-30 04:38 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-07-12 13:27 - 2017-06-30 04:38 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-07-12 13:27 - 2017-06-30 04:38 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-07-12 13:27 - 2017-06-30 04:27 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-07-12 13:27 - 2017-06-30 04:27 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-07-12 13:27 - 2017-06-30 04:26 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-07-12 13:27 - 2017-06-30 04:26 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-07-12 13:27 - 2017-06-29 07:35 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-07-12 13:27 - 2017-06-29 07:35 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-07-12 13:27 - 2017-06-29 07:23 - 20270592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-07-12 13:27 - 2017-06-29 07:23 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-07-12 13:27 - 2017-06-29 07:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-07-12 13:27 - 2017-06-29 07:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-07-12 13:27 - 2017-06-29 07:22 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-07-12 13:27 - 2017-06-29 07:22 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-07-12 13:27 - 2017-06-29 07:19 - 02290176 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-07-12 13:27 - 2017-06-29 07:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-07-12 13:27 - 2017-06-29 07:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-07-12 13:27 - 2017-06-29 07:14 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-07-12 13:27 - 2017-06-29 07:13 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-07-12 13:27 - 2017-06-29 07:13 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-07-12 13:27 - 2017-06-29 07:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-07-12 13:27 - 2017-06-29 07:13 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-07-12 13:27 - 2017-06-29 07:08 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-07-12 13:27 - 2017-06-29 07:05 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-07-12 13:27 - 2017-06-29 07:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-07-12 13:27 - 2017-06-29 07:00 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-07-12 13:27 - 2017-06-29 07:00 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-07-12 13:27 - 2017-06-29 06:58 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-07-12 13:27 - 2017-06-29 06:56 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-07-12 13:27 - 2017-06-29 06:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-07-12 13:27 - 2017-06-29 06:54 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-07-12 13:27 - 2017-06-29 06:52 - 04549632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-07-12 13:27 - 2017-06-29 06:48 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-07-12 13:27 - 2017-06-29 06:47 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-07-12 13:27 - 2017-06-29 06:47 - 00689664 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-07-12 13:27 - 2017-06-29 06:46 - 02057216 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-07-12 13:27 - 2017-06-29 06:46 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-07-12 13:27 - 2017-06-29 06:43 - 13663744 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-07-12 13:27 - 2017-06-29 06:28 - 02767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-07-12 13:27 - 2017-06-29 06:24 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-07-12 13:27 - 2017-06-29 06:23 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-07-12 13:27 - 2017-06-22 16:50 - 02402304 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-07-12 13:27 - 2017-06-15 22:18 - 00514048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-07-12 13:27 - 2017-06-13 00:32 - 00250600 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2017-07-12 13:27 - 2017-06-13 00:32 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-07-12 13:27 - 2017-06-13 00:32 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-07-12 13:27 - 2017-06-13 00:29 - 01227264 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2017-07-12 13:27 - 2017-06-13 00:29 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2017-07-12 13:27 - 2017-06-13 00:29 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2017-07-12 13:27 - 2017-06-13 00:29 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-07-12 13:27 - 2017-06-13 00:29 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-07-12 13:27 - 2017-06-13 00:29 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-07-12 13:27 - 2017-06-13 00:28 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-07-12 13:27 - 2017-06-13 00:28 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-07-12 13:27 - 2017-06-13 00:28 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-07-12 13:27 - 2017-06-13 00:28 - 00554496 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-07-12 13:27 - 2017-06-13 00:28 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-07-12 13:27 - 2017-06-13 00:28 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-07-12 13:27 - 2017-06-13 00:28 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-07-12 13:27 - 2017-06-13 00:28 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-07-12 13:27 - 2017-06-13 00:28 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-07-12 13:27 - 2017-06-13 00:28 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-07-12 13:27 - 2017-06-13 00:28 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-07-12 13:27 - 2017-06-13 00:28 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
2017-07-12 13:27 - 2017-06-13 00:28 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-07-12 13:27 - 2017-06-13 00:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-07-12 13:27 - 2017-06-13 00:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-07-12 13:27 - 2017-06-13 00:06 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2017-07-12 13:27 - 2017-06-13 00:06 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
2017-07-12 13:27 - 2017-06-13 00:06 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\resmon.exe
2017-07-12 13:27 - 2017-06-13 00:05 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-07-12 13:27 - 2017-06-13 00:05 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-07-12 13:27 - 2017-06-13 00:05 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-07-12 13:27 - 2017-06-13 00:05 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-07-12 13:27 - 2017-06-13 00:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-07-12 13:27 - 2017-06-13 00:05 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-07-12 13:27 - 2017-06-10 17:39 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-07-12 13:27 - 2017-06-09 17:17 - 01213672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-07-12 13:27 - 2017-06-06 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-07-12 13:27 - 2017-05-30 06:39 - 01309928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-07-12 13:27 - 2017-05-30 06:39 - 00240872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2017-07-12 13:27 - 2017-05-30 06:39 - 00187624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2017-07-12 13:27 - 2017-05-21 06:06 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-07-12 13:27 - 2017-05-16 17:16 - 00730856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-07-12 13:27 - 2017-05-16 17:16 - 00218856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-07-12 13:27 - 2017-05-16 17:12 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-07-12 12:57 - 2017-07-12 13:40 - 00012637 _____ C:\Users\Kellerman\Desktop\FRST.txt
2017-07-11 20:56 - 2017-07-11 20:53 - 01202160 _____ (Adobe Systems Incorporated) C:\Users\Kellerman\Downloads\flashplayer26au_ha_install.exe
2017-06-28 17:23 - 2017-06-08 18:15 - 00148104 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2017-06-22 09:57 - 2017-06-22 09:57 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\68FC6991.sys
2017-06-15 05:39 - 2017-06-15 05:39 - 00000045 _____ C:\Users\Kellerman\Documents\Nowy dokument tekstowy.txt
2017-06-14 04:04 - 2017-06-02 09:57 - 00497152 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-06-14 04:04 - 2017-05-12 20:07 - 04001000 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2017-06-14 04:04 - 2017-05-12 20:07 - 03945704 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-06-14 04:04 - 2017-05-12 20:07 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-06-14 04:04 - 2017-05-12 20:04 - 01310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-06-14 04:04 - 2017-05-12 20:03 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-06-14 04:04 - 2017-05-12 20:03 - 00629760 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-06-14 04:04 - 2017-05-12 20:03 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-06-14 04:04 - 2017-05-12 20:03 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-06-14 04:04 - 2017-05-12 20:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-06-14 04:04 - 2017-05-12 20:03 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-06-14 04:04 - 2017-05-12 20:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-06-14 04:04 - 2017-05-12 20:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-06-14 04:04 - 2017-05-12 20:03 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-06-14 04:04 - 2017-05-12 20:03 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-06-14 04:04 - 2017-05-12 20:03 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-06-14 04:04 - 2017-05-12 20:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-06-14 04:04 - 2017-05-12 19:45 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-06-14 04:04 - 2017-05-12 19:45 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-06-14 04:04 - 2017-05-12 19:45 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-06-14 04:04 - 2017-05-12 19:45 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-06-14 04:04 - 2017-05-12 19:43 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-06-14 04:04 - 2017-05-12 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-06-14 04:04 - 2017-05-12 19:41 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-06-14 04:04 - 2017-05-12 18:25 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-06-14 04:04 - 2017-05-12 18:25 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-06-14 04:04 - 2017-05-10 17:16 - 00091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
2017-06-14 04:04 - 2017-05-10 17:12 - 12880896 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-06-14 04:04 - 2017-05-10 17:12 - 02953216 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-06-14 04:04 - 2017-05-10 17:12 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-06-14 04:04 - 2017-05-10 17:10 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-06-14 04:04 - 2017-05-10 17:01 - 02092032 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-06-14 04:04 - 2017-05-10 17:00 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-06-14 04:04 - 2017-05-10 17:00 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-06-14 04:04 - 2017-05-10 17:00 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-06-14 04:04 - 2017-05-10 17:00 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-06-14 04:04 - 2017-05-10 17:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-06-14 04:04 - 2017-05-10 17:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-06-14 04:04 - 2017-05-10 17:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-06-14 04:04 - 2017-05-10 16:47 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-06-14 04:04 - 2017-05-09 17:11 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-06-14 04:04 - 2017-05-09 17:11 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-06-14 04:04 - 2017-05-09 17:01 - 00066048 _____ C:\Windows\system32\PrintBrmUi.exe
2017-06-14 04:04 - 2017-05-07 17:14 - 00078568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2017-06-14 04:04 - 2017-05-07 16:53 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2017-06-14 04:04 - 2017-04-28 00:50 - 03550208 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-06-14 04:04 - 2017-03-30 16:58 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2017-07-12 13:39 - 2016-12-26 08:39 - 00000000 ____D C:\FRST
2017-07-12 13:39 - 2016-11-17 08:43 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2017-07-12 13:37 - 2014-08-12 22:45 - 00006192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-07-12 13:37 - 2014-08-12 22:45 - 00006192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-07-12 13:36 - 2014-08-18 21:12 - 00430096 _____ C:\Windows\system32\FNTCACHE.DAT
2017-07-12 13:36 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-07-12 12:49 - 2017-03-22 08:36 - 00000000 ____D C:\Users\Kellerman\Desktop\FRST-OlderVersion
2017-07-12 12:49 - 2016-12-26 07:37 - 01780224 _____ (Farbar) C:\Users\Kellerman\Desktop\FRST.exe
2017-07-12 12:32 - 2016-11-16 20:37 - 00000000 ____D C:\Users\Kellerman\AppData\LocalLow\Mozilla
2017-07-11 20:58 - 2016-04-10 00:12 - 00000000 ____D C:\Users\Kellerman\AppData\Local\Adobe
2017-07-11 20:58 - 2014-06-12 15:14 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-07-11 20:58 - 2014-06-12 15:14 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-07-11 20:58 - 2014-06-12 15:14 - 00000000 ____D C:\Windows\system32\Macromed
2017-07-11 19:47 - 2016-04-10 00:18 - 00000000 ____D C:\Users\Kellerman\AppData\Roaming\DMCache
2017-07-08 10:57 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2017-07-07 20:00 - 2014-06-12 23:39 - 00000000 ____D C:\Program Files\Steam
2017-07-07 19:33 - 2016-04-10 00:12 - 00000000 ____D C:\Users\Kellerman\AppData\Local\CrashDumps
2017-07-07 19:32 - 2016-04-10 00:12 - 00007680 _____ C:\Users\Kellerman\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-07-03 09:50 - 2014-08-25 23:20 - 00006128 _____ C:\Windows\system32\PerfStringBackup.TMP
2017-07-03 09:50 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\inf
2017-07-02 14:51 - 2014-06-12 23:39 - 00000000 ____D C:\Program Files\Common Files\Steam
2017-07-01 14:43 - 2015-04-24 18:30 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-07-01 14:43 - 2014-06-12 23:27 - 00000000 ____D C:\Program Files\Internet Download Manager
2017-07-01 11:53 - 2015-09-27 15:02 - 00000000 ____D C:\Users\ŁukasZ\AppData\Roaming\IDM
2017-06-30 13:09 - 2015-07-30 16:35 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-06-30 12:22 - 2017-03-30 07:00 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-06-22 19:36 - 2016-04-10 00:21 - 00000000 ____D C:\Users\Kellerman\AppData\Roaming\Skype
2017-06-22 09:48 - 2014-09-06 05:02 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-06-14 04:07 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\migwiz
==================== Pliki w katalogu głównym wybranych folderów =======
2016-04-10 00:12 - 2017-07-07 19:32 - 0007680 _____ () C:\Users\Kellerman\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-05-01 18:19 - 2016-05-02 00:14 - 0000600 _____ () C:\Users\Kellerman\AppData\Local\PUTTY.RND
2016-11-08 22:42 - 2016-11-08 22:42 - 0000218 _____ () C:\Users\Kellerman\AppData\Local\recently-used.xbel
2016-04-10 00:12 - 2017-03-24 04:47 - 0007586 _____ () C:\Users\Kellerman\AppData\Local\Resmon.ResmonCfg
==================== Bamital & volsnap ======================
(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
C:\Windows\explorer.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\services.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\User32.dll = & gt; Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll = & gt; Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll = & gt; Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys = & gt; Plik podpisany cyfrowo
LastRegBack: 2017-07-08 10:49
==================== Koniec FRST.txt ============================