Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 21.01.2018
Uruchomiony przez carlo_000 (administrator)  KAROL-LAPTOP (27-01-2018 18:39:46)
Uruchomiony z D:\Desktop
Załadowane profile: carlo_000 (Dostępne profile: carlo_000 & Konto2)
Platform: Windows 8.1 (Update) (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(AVG Technologies CZ, s.r.o.) C:\Pliki programów (x86)\AVG\Framework\Common\avgsvca.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(AVG Technologies CZ, s.r.o.) C:\Pliki programów (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.224\WsAppService.exe
(AVG Technologies CZ, s.r.o.) C:\Pliki programów (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
() C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(AVG Technologies CZ, s.r.o.) C:\Pliki programów (x86)\AVG\Framework\Common\avguix.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Intel Corporation) D:\Programy\Intel\BluetoothHS\BTHSAmpPalService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel(R) Corporation) D:\Programy\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera_crashreporter.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Opera Software) D:\Programy\Opera\50.0.2762.67\opera.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15794160 2014-05-09] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80368 2013-11-27] (Lenovo(beijing) Limited)
HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [457616 2014-10-03] ()
HKLM\...\Run: [DolbyTrayApp] => c:\program files (x86)\Dolby Home Theater v4\pcee4.exe [508656 2012-08-31] (Dolby Laboratories Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-04-30] (Intel Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [WindowsMediaSvc] => C:\Windows\Temp\wimserv.exe <==== UWAGA
HKLM\...\Run: [WindowsSATcom] => C:\Windows\Temp\WinSAT.exe <==== UWAGA
HKLM\...\Run: [SERVICE] => [X]
HKLM-x32\...\Run: [331BigDog] => D:\Programy (x86)\USB Camera\VM331STI.EXE [552960 2013-05-15] (Vimicro)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [81920 2008-03-13] (Hewlett-Packard)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2406496 2017-06-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [WSVCUUpdateHelper.exe] => C:\Pliki programów (x86)\Wondershare\Wondershare Video Converter Ultimate\WSVCUUpdateHelper.exe [28896 2017-08-10] ()
HKLM-x32\...\Run: [AvgUi] => C:\Pliki programów (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKLM\...\RunOnce: [KAROL-LAPTOP] => C:\Windows\Temp\g1D9D.tmp.exe [209408 2018-01-27] () <==== UWAGA
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKLM\ DisallowedCertificates: 03D22C9C66915D58C88912B64C1F984B8344EF09 (Comodo Security Solutions) <==== UWAGA
HKLM\ DisallowedCertificates: 0F684EC1163281085C6AF20528878103ACEFCAAB (F-Secure Corporation) <==== UWAGA
HKLM\ DisallowedCertificates: 1667908C9E22EFBD0590E088715CC74BE4C60884 (FRISK Software International/F-Prot) <==== UWAGA
HKLM\ DisallowedCertificates: 18DEA4EFA93B06AE997D234411F3FD72A677EECE (Bitdefender SRL) <==== UWAGA
HKLM\ DisallowedCertificates: 2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF (G DATA Software AG) <==== UWAGA
HKLM\ DisallowedCertificates: 249BDA38A611CD746A132FA2AF995A2D3C941264 (Malwarebytes Corporation) <==== UWAGA
HKLM\ DisallowedCertificates: 31AC96A6C17C425222C46D55C3CCA6BA12E54DAF (Symantec Corporation) <==== UWAGA
HKLM\ DisallowedCertificates: 331E2046A1CCA7BFEF766724394BE6112B4CA3F7 (Trend Micro) <==== UWAGA
HKLM\ DisallowedCertificates: 3353EA609334A9F23A701B9159E30CB6C22D4C59 (Webroot Inc.) <==== UWAGA
HKLM\ DisallowedCertificates: 373C33726722D3A5D1EDD1F1585D5D25B39BEA1A (SUPERAntiSpyware.com) <==== UWAGA
HKLM\ DisallowedCertificates: 3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F (Kaspersky Lab) <==== UWAGA
HKLM\ DisallowedCertificates: 3D496FA682E65FC122351EC29B55AB94F3BB03FC (AVG Technologies CZ) <==== UWAGA
HKLM\ DisallowedCertificates: 4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 (PC Tools) <==== UWAGA
HKLM\ DisallowedCertificates: 42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 (K7 Computing Pvt Ltd) <==== UWAGA
HKLM\ DisallowedCertificates: 4420C99742DF11DD0795BC15B7B0ABF090DC84DF (Doctor Web Ltd.) <==== UWAGA
HKLM\ DisallowedCertificates: 4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF (Emsisoft Ltd) <==== UWAGA
HKLM\ DisallowedCertificates: 5240AB5B05D11B37900AC7712A3C6AE42F377C8C (Check Point Software Technologies Ltd.) <==== UWAGA
HKLM\ DisallowedCertificates: 5DD3D41810F28B2A13E9A004E6412061E28FA48D (Emsisoft Ltd) <==== UWAGA
HKLM\ DisallowedCertificates: 7457A3793086DBB58B3858D6476889E3311E550E (K7 Computing Pvt Ltd) <==== UWAGA
HKLM\ DisallowedCertificates: 76A9295EF4343E12DFC5FE05DC57227C1AB00D29 (BullGuard Ltd) <==== UWAGA
HKLM\ DisallowedCertificates: 775B373B33B9D15B58BC02B184704332B97C3CAF (McAfee) <==== UWAGA
HKLM\ DisallowedCertificates: 872CD334B7E7B3C3D1C6114CD6B221026D505EAB (Comodo Security Solutions) <==== UWAGA
HKLM\ DisallowedCertificates: 88AD5DFE24126872B33175D1778687B642323ACF (McAfee) <==== UWAGA
HKLM\ DisallowedCertificates: 9132E8B079D080E01D52631690BE18EBC2347C1E (Adaware Software) <==== UWAGA
HKLM\ DisallowedCertificates: 982D98951CF3C0CA2A02814D474A976CBFF6BDB1 (Safer Networking Ltd.) <==== UWAGA
HKLM\ DisallowedCertificates: 9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 (Webroot Inc.) <==== UWAGA
HKLM\ DisallowedCertificates: 9C43F665E690AB4D486D4717B456C5554D4BCEB5 (ThreatTrack Security) <==== UWAGA
HKLM\ DisallowedCertificates: 9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 (CURIOLAB S.M.B.A.) <==== UWAGA
HKLM\ DisallowedCertificates: A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 (Avira Operations GmbH & Co. KG) <==== UWAGA
HKLM\ DisallowedCertificates: A5341949ABE1407DD7BF7DFE75460D9608FBC309 (BullGuard Ltd) <==== UWAGA
HKLM\ DisallowedCertificates: A59CC32724DD07A6FC33F7806945481A2D13CA2F (ESET) <==== UWAGA
HKLM\ DisallowedCertificates: AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 (AVG Technologies CZ) <==== UWAGA
HKLM\ DisallowedCertificates: AD4C5429E10F4FF6C01840C20ABA344D7401209F (Avast Antivirus/Software) <==== UWAGA
HKLM\ DisallowedCertificates: AD96BB64BA36379D2E354660780C2067B81DA2E0 (Symantec Corporation) <==== UWAGA
HKLM\ DisallowedCertificates: B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 (Malwarebytes Corporation) <==== UWAGA
HKLM\ DisallowedCertificates: CDC37C22FE9272D8F2610206AD397A45040326B8 (Trend Micro) <==== UWAGA
HKLM\ DisallowedCertificates: D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 (Kaspersky Lab) <==== UWAGA
HKLM\ DisallowedCertificates: DB303C9B61282DE525DC754A535CA2D6A9BD3D87 (ThreatTrack Security) <==== UWAGA
HKLM\ DisallowedCertificates: DB77E5CFEC34459146748B667C97B185619251BA (Avast Antivirus/Software) <==== UWAGA
HKLM\ DisallowedCertificates: E22240E837B52E691C71DF248F12D27F96441C00 (Total Defense, Inc.) <==== UWAGA
HKLM\ DisallowedCertificates: E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF (AVG Technologies CZ) <==== UWAGA
HKLM\ DisallowedCertificates: ED841A61C0F76025598421BC1B00E24189E68D54 (Bitdefender SRL) <==== UWAGA
HKLM\ DisallowedCertificates: F83099622B4A9F72CB5081F742164AD1B8D048C9 (ESET) <==== UWAGA
HKLM\ DisallowedCertificates: FBB42F089AF2D570F2BF6F493D107A3255A9BB1A (Panda Security S.L) <==== UWAGA
HKLM\ DisallowedCertificates: FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 (Doctor Web Ltd.) <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Run: [ALLUpdate] => D:\Programy (x86)\ALLPlayer\ALLUpdate.exe [3510704 2014-04-17] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Run: [Steam] => D:\Programy\Steam\steam.exe [2860832 2016-10-13] (Valve Corporation)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Run: [DAEMON Tools Lite] => D:\Programy\DAEMON Tools Lite\DTLite.exe [3589464 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Run: [AlcoholAutomount] => D:\Programy\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Run: [DAEMON Tools Lite Automount] => D:\Programy\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832264 2017-10-06] (Skype Technologies S.A.)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [479744 2014-10-29] (Microsoft Corporation)
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\RunOnce: [Uninstall C:\Users\carlo_000\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\carlo_000\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64"
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\RunOnce: [Uninstall C:\Users\carlo_000\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\carlo_000\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Policies\system: [0] 0
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\MountPoints2: {7db930d8-1d27-11e5-832f-0c54a513d209} - "E:\setup.exe" 
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\MountPoints2: {7db93156-1d27-11e5-832f-0c54a513d209} - "G:\install.exe" 
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\MountPoints2: {a552d1be-ec84-11e6-84c2-0c54a513d209} - "E:\AutoRun.exe" 
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\MountPoints2: {b8d3f713-bace-11e4-82df-0c54a513d209} - "E:\LG_PC_Programs.exe" 
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\MountPoints2: {d4b5b6f8-724b-11e7-8505-0c54a513d209} - "E:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\MountPoints2: {df6d26f6-dcf3-11e3-825a-0c54a513d209} - "E:\AutoRun.exe" 
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\MountPoints2: {df6d275b-dcf3-11e3-825a-0c54a513d209} - "E:\AutoRun.exe" 
HKU\S-1-5-18\...\Run: [] => [X]
HKU\S-1-5-18\...\RunOnce: [zZHILNIspz] => C:\Windows\system32\config\SYSTEM~1\AppData\Local\BJIHIW~1\rdsvc.exe
HKU\S-1-5-18\...\RunOnce: [KyhuRAcNvF] => "C:\Windows\system32\config\SYSTEM~1\AppData\Local\YXVHVH~1\win32k.exe"
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [170688 2016-12-12] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148016 2016-12-12] (NVIDIA Corporation)
IFEO\taskmgr.exe: [Debugger] 

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\Parameters: [NameServer] 8.8.8.8,8.8.8.4
Tcpip\..\Interfaces\{4BD2DB2F-62D5-4171-BD79-C957C5D662E8}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{4FF41D6B-3B85-4C7C-96A4-7AE861CA5269}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{4FF41D6B-3B85-4C7C-96A4-7AE861CA5269}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
SearchScopes: HKLM-x32 -> DefaultScope - brak wartości
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2017-12-16] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-11] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-08-09] (Oracle Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-11] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-09] (Oracle Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  Brak pliku
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  Brak pliku
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} -  Brak pliku
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} -  Brak pliku
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\carlo_000\AppData\Roaming\Mozilla\Firefox\Profiles\1y4lkfco.default [2017-08-21]
FF user.js: detected! => C:\Users\carlo_000\AppData\Roaming\Mozilla\Firefox\Profiles\1y4lkfco.default\user.js [2017-07-12]
FF Extension: (Firefox365scorescom) - C:\Users\carlo_000\AppData\Roaming\Mozilla\Firefox\Profiles\1y4lkfco.default\Extensions\Firefox@365scores.com [2015-10-25] [Przestarzałe] [Brak podpisu cyfrowego]
FF Extension: (jid1aPwS0JCl36iLkQjetpack) - C:\Users\carlo_000\AppData\Roaming\Mozilla\Firefox\Profiles\1y4lkfco.default\Extensions\jid1-aPwS0JCl36iLkQ@jetpack [2015-10-25] [Przestarzałe] [Brak podpisu cyfrowego]
FF Extension: (rememberpassteesoftinfo) - C:\Users\carlo_000\AppData\Roaming\Mozilla\Firefox\Profiles\1y4lkfco.default\Extensions\rememberpass@teesoft.info [2015-10-25] [Przestarzałe] [Brak podpisu cyfrowego]
FF Extension: (Adblock Plus) - C:\Users\carlo_000\AppData\Roaming\Mozilla\Firefox\Profiles\1y4lkfco.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-25] [Przestarzałe]
FF Extension: (D9CFDC5F081E420cA108A628AC2E556B) - C:\Users\carlo_000\AppData\Roaming\Mozilla\Firefox\Profiles\1y4lkfco.default\Extensions\{D9CFDC5F-081E-420c-A108-A628AC2E556B} [2015-10-25] [Przestarzałe] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2014-05-17] [Przestarzałe] [Brak podpisu cyfrowego]
FF HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_137.dll [2018-01-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-06-04] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_137.dll [2018-01-09] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [Brak pliku]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [Brak pliku]
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-09] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-09] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-11-15] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Brak pliku]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-06-04] (Adobe Systems)
StartMenuInternet: FIREFOX.EXE - D:\Programy\firefox.exe

Chrome: 
=======
CHR DefaultProfile: ChromeDefaultData2
CHR HomePage: ChromeDefaultData2 -> hxxp://www.youndoo.com/?z=53038f011113141e56d8c69gfz1bewamdg8e0c1wdb&from=wak&uid=ST1000LM014-SSHD-8GB_W380KFP3XXXXW380KFP3&type=hp
CHR StartupUrls: ChromeDefaultData2 -> "hxxp://www.youndoo.com/?z=53038f011113141e56d8c69gfz1bewamdg8e0c1wdb&from=wak&uid=ST1000LM014-SSHD-8GB_W380KFP3XXXXW380KFP3&type=hp"
CHR Profile: C:\Users\carlo_000\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2 [2018-01-26] <==== UWAGA
CHR Extension: (Prezentacje) - C:\Users\carlo_000\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-16]
CHR Extension: (Dokumenty) - C:\Users\carlo_000\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-16]
CHR Extension: (Dysk Google) - C:\Users\carlo_000\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-24]
CHR Extension: (YouTube) - C:\Users\carlo_000\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-24]
CHR Extension: (Google Search) - C:\Users\carlo_000\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2017-10-01]
CHR Extension: (Adobe Acrobat) - C:\Users\carlo_000\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-10-01]
CHR Extension: (Arkusze) - C:\Users\carlo_000\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\carlo_000\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-10-01]
CHR Extension: (Skype) - C:\Users\carlo_000\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-12-14]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\carlo_000\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-01]
CHR Extension: (Gmail) - C:\Users\carlo_000\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-24]
CHR Extension: (Chrome Media Router) - C:\Users\carlo_000\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-15]
CHR HKU\S-1-5-21-603080990-3676789936-2700333261-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
HKU\S-1-5-21-603080990-3676789936-2700333261-1001\...\StartMenuInternet\ChromeHTML: -> C:\Program Files (x86)\Eggper\Application\chrome.exe <==== UWAGA

Opera: 
=======
OPR Session Restore: -> [funkcja włączona]
OPR Extension: (Adblock Plus) - C:\Users\carlo_000\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2017-10-09]
StartMenuInternet: (HKLM) OperaStable - D:\Programy\Opera\Launcher.exe

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [814688 2017-06-04] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2257016 2017-08-23] (Adobe Systems, Incorporated)
R2 AMPPALR3; D:\Programy\Intel\BluetoothHS\BTHSAmpPalService.exe [772064 2013-05-01] (Intel Corporation)
R2 avgsvc; C:\Pliki programów (x86)\AVG\Framework\Common\avgsvca.exe [1146128 2016-12-06] (AVG Technologies CZ, s.r.o.) [Brak podpisu cyfrowego]
S4 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2228440 2013-04-24] (Broadcom Corporation.)
S4 BrcmSetSecurity; D:\Programy\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-05-28] (Intel)
R2 BTHSSecurityMgr; D:\Programy\Intel\BluetoothHS\BTHSSecurityMgr.exe [135984 2012-09-12] (Intel(R) Corporation)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-10-19] (Digital Wave Ltd.) [Brak podpisu cyfrowego]
S3 Disc Soft Lite Bus Service; D:\Programy\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
S2 EvtEng; D:\Programy\Intel\WiFi\bin\EvtEng.exe [624368 2013-04-16] (Intel(R) Corporation)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [Brak podpisu cyfrowego]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-30] (Intel Corporation)
S4 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Brak podpisu cyfrowego]
R2 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [156104 2013-06-04] (Intel Corporation)
S2 MyWiFiDHCPDNS; D:\Programy\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-04-16] ()
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-12-13] (NVIDIA Corporation)
S2 Origin Client Service; D:\Programy\Origin\OriginClientService.exe [1910128 2015-02-20] (Electronic Arts)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 TuneUp.UtilitiesSvc; C:\Pliki programów (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [5618960 2017-11-15] (AVG Technologies CZ, s.r.o.) [Brak podpisu cyfrowego]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.224\WsAppService.exe [473824 2017-04-20] (Wondershare)
S3 WsDrvInst; C:\Pliki programów (x86)\Wondershare\Wondershare Video Converter Ultimate\Transfer\DriverInstall.exe [118496 2017-08-10] (Wondershare)
S2 ZeroConfigService; D:\Programy\Intel\WiFi\bin\ZeroConfigService.exe [3379440 2013-04-16] (Intel® Corporation)
R2 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "%ProgramData%\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

U3 axscsidrv; C:\Windows\System32\Drivers\axscsidrv.sys [293888 2015-03-12] (Alcohol Soft Development Team)
S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [172760 2013-04-24] (Broadcom Corporation.)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-03-25] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1366328 2013-03-28] (Motorola Solutions, Inc.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-06-30] (Disc Soft Ltd)
U3 dtscsidrv; C:\Windows\System32\Drivers\dtscsidrv.sys [309248 2015-02-10] (Disc Soft Ltd)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-02-10] (Disc Soft Ltd)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [115656 2013-06-04] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [74344 2013-07-03] (Intel Corporation)
S3 lehidmini; C:\Windows\System32\drivers\leath_hid.sys [39704 2013-08-29] (Atheros)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-25] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46016 2016-12-13] (NVIDIA Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-06-20] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-02-06] (Duplex Secure Ltd.)
R3 TuneUpUtilitiesDrv; C:\Pliki programów (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2017-02-21] (AVG Netherlands B.V.)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [206744 2013-05-28] (Windows (R) Win 7 DDK provider)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1064704 2013-06-01] (Vimicro Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
S1 appdrv01; System32\Drivers\appdrv01.sys [X]
S3 ew_hwusbdev; \SystemRoot\system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; \SystemRoot\System32\drivers\ew_usbenumfilter.sys [X]
S1 ggnaqtey; \??\C:\Windows\system32\drivers\ggnaqtey.sys [X]
S3 huawei_cdcacm; \SystemRoot\system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; \SystemRoot\System32\drivers\ew_juextctrl.sys [X]
S3 huawei_wwanecm; \SystemRoot\system32\DRIVERS\ew_juwwanecm.sys [X]
S1 ifljqtsk; \??\C:\Windows\system32\drivers\ifljqtsk.sys [X]
S1 oemtqvsk; \??\C:\Windows\system32\drivers\oemtqvsk.sys [X]
S1 oobhbuzr; \??\C:\Windows\system32\drivers\oobhbuzr.sys [X]
S1 pqnaoomr; \??\C:\Windows\system32\drivers\pqnaoomr.sys [X]
U2 snare; Brak ImagePath
S1 sptgfcjn; \??\C:\Windows\system32\drivers\sptgfcjn.sys [X]
S3 STHDA; \SystemRoot\system32\DRIVERS\stwrt64.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

NETSVCx32: HpSvc -> Brak ścieżki do pliku.
NETSVCx32: GmSvc -> Brak ścieżki do pliku.

==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-01-27 00:31 - 2018-01-27 00:32 - 000001528 _____ C:\Windows\Tasks\Video Backgammon.job
2018-01-27 00:10 - 2018-01-27 18:39 - 000000000 ____D C:\FRST
2018-01-26 23:37 - 2018-01-26 23:37 - 000003120 _____ C:\Windows\System32\Tasks\{218BB54C-4C19-430E-B737-B90B587EF513}
2018-01-26 23:18 - 2018-01-26 23:44 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\wfalp3rtvjm
2018-01-26 23:01 - 2018-01-27 00:09 - 000000000 ____D C:\WinSys
2018-01-26 23:01 - 2018-01-27 00:09 - 000000000 ____D C:\Disk
2018-01-26 23:01 - 2018-01-26 23:43 - 000000000 ___HD C:\Windows\rss
2018-01-26 23:01 - 2018-01-26 23:01 - 000000000 ____D C:\Windat
2018-01-26 23:00 - 2018-01-27 00:32 - 000000000 ____D C:\Users\carlo_000\AppData\Local\AdService
2018-01-26 23:00 - 2018-01-26 23:00 - 000016716 _____ C:\Windows\System32\Tasks\Video Backgammon
2018-01-26 22:26 - 2018-01-26 22:26 - 000000000 ____D C:\Users\carlo_000\AppData\Local\PES17_MCR
2018-01-21 21:40 - 2018-01-26 21:07 - 000506088 _____ C:\Windows\system32\FNTCACHE.DAT
2018-01-16 18:54 - 2018-01-16 18:54 - 000000218 _____ C:\Users\carlo_000\.recently-used.xbel
2018-01-13 13:36 - 2018-01-27 18:11 - 000000000 ____D C:\Users\carlo_000\AppData\Local\CrashDumps
2018-01-09 22:09 - 2018-01-02 09:00 - 000590680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2018-01-09 22:09 - 2018-01-02 09:00 - 000242520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2018-01-09 22:09 - 2018-01-02 09:00 - 000214392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2018-01-09 22:09 - 2018-01-02 08:56 - 002530400 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2018-01-09 22:09 - 2018-01-02 08:56 - 000567656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2018-01-09 22:09 - 2018-01-02 08:56 - 000397224 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2018-01-09 22:09 - 2018-01-02 08:56 - 000136536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2018-01-09 22:09 - 2018-01-02 07:39 - 022374248 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2018-01-09 22:09 - 2018-01-02 07:39 - 007408984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-01-09 22:09 - 2018-01-02 07:39 - 002013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2018-01-09 22:09 - 2018-01-02 07:39 - 000418648 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-01-09 22:09 - 2018-01-02 07:39 - 000354648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2018-01-09 22:09 - 2018-01-02 07:38 - 002176064 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2018-01-09 22:09 - 2018-01-02 07:38 - 001662096 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2018-01-09 22:09 - 2018-01-02 07:38 - 001063464 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2018-01-09 22:09 - 2018-01-02 07:37 - 001737600 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-01-09 22:09 - 2018-01-02 07:37 - 001676056 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-01-09 22:09 - 2018-01-02 07:37 - 001536120 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-01-09 22:09 - 2018-01-02 07:37 - 001500432 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-01-09 22:09 - 2018-01-02 07:37 - 001371352 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2018-01-09 22:09 - 2018-01-02 07:37 - 001135280 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-01-09 22:09 - 2018-01-02 07:37 - 000685440 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-01-09 22:09 - 2018-01-02 07:35 - 001307840 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-01-09 22:09 - 2018-01-02 07:35 - 000989528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2018-01-09 22:09 - 2018-01-02 07:05 - 000164296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2018-01-09 22:09 - 2018-01-02 07:03 - 025739264 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-01-09 22:09 - 2018-01-02 07:03 - 000341384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2018-01-09 22:09 - 2018-01-02 07:01 - 001902328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2018-01-09 22:09 - 2018-01-02 07:00 - 019790760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2018-01-09 22:09 - 2018-01-02 06:59 - 001565520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2018-01-09 22:09 - 2018-01-02 06:59 - 001213784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2018-01-09 22:09 - 2018-01-02 06:58 - 001502000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-01-09 22:09 - 2018-01-02 06:48 - 000507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-01-09 22:09 - 2018-01-02 06:40 - 000284672 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-01-09 22:09 - 2018-01-02 06:39 - 000686080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-01-09 22:09 - 2018-01-02 06:39 - 000402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2018-01-09 22:09 - 2018-01-02 06:39 - 000072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2018-01-09 22:09 - 2018-01-02 06:39 - 000048128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbios.sys
2018-01-09 22:09 - 2018-01-02 06:38 - 000559616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2018-01-09 22:09 - 2018-01-02 06:38 - 000445952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2018-01-09 22:09 - 2018-01-02 06:38 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2018-01-09 22:09 - 2018-01-02 06:38 - 000401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-01-09 22:09 - 2018-01-02 06:38 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2018-01-09 22:09 - 2018-01-02 06:38 - 000151040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
2018-01-09 22:09 - 2018-01-02 06:38 - 000138752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2018-01-09 22:09 - 2018-01-02 06:37 - 000110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2018-01-09 22:09 - 2018-01-02 06:37 - 000080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2018-01-09 22:09 - 2018-01-02 06:34 - 000360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2018-01-09 22:09 - 2018-01-02 06:31 - 000040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
2018-01-09 22:09 - 2018-01-02 06:30 - 002900480 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-01-09 22:09 - 2018-01-02 06:28 - 005796352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-01-09 22:09 - 2018-01-02 06:28 - 000577024 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-01-09 22:09 - 2018-01-02 06:28 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-01-09 22:09 - 2018-01-02 06:28 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-01-09 22:09 - 2018-01-02 06:28 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2018-01-09 22:09 - 2018-01-02 06:20 - 020275200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-01-09 22:09 - 2018-01-02 06:19 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll
2018-01-09 22:09 - 2018-01-02 06:18 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-01-09 22:09 - 2018-01-02 06:17 - 000817152 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-01-09 22:09 - 2018-01-02 06:17 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-01-09 22:09 - 2018-01-02 06:16 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-01-09 22:09 - 2018-01-02 06:09 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-01-09 22:09 - 2018-01-02 06:06 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-01-09 22:09 - 2018-01-02 06:02 - 000862720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-01-09 22:09 - 2018-01-02 05:59 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-01-09 22:09 - 2018-01-02 05:59 - 000005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-01-09 22:09 - 2018-01-02 05:57 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-01-09 22:09 - 2018-01-02 05:56 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-01-09 22:09 - 2018-01-02 05:54 - 000145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2018-01-09 22:09 - 2018-01-02 05:53 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-01-09 22:09 - 2018-01-02 05:52 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-01-09 22:09 - 2018-01-02 05:51 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-01-09 22:09 - 2018-01-02 05:49 - 002294272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-01-09 22:09 - 2018-01-02 05:48 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-01-09 22:09 - 2018-01-02 05:45 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll
2018-01-09 22:09 - 2018-01-02 05:44 - 015284224 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-01-09 22:09 - 2018-01-02 05:44 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-01-09 22:09 - 2018-01-02 05:43 - 000662528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-01-09 22:09 - 2018-01-02 05:42 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-01-09 22:09 - 2018-01-02 05:42 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-01-09 22:09 - 2018-01-02 05:41 - 000380416 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-01-09 22:09 - 2018-01-02 05:40 - 001436672 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-01-09 22:09 - 2018-01-02 05:40 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-01-09 22:09 - 2018-01-02 05:40 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-01-09 22:09 - 2018-01-02 05:38 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-01-09 22:09 - 2018-01-02 05:37 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-01-09 22:09 - 2018-01-02 05:34 - 001217536 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2018-01-09 22:09 - 2018-01-02 05:34 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-01-09 22:09 - 2018-01-02 05:33 - 001080320 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2018-01-09 22:09 - 2018-01-02 05:33 - 000845312 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2018-01-09 22:09 - 2018-01-02 05:33 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2018-01-09 22:09 - 2018-01-02 05:32 - 000571392 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2018-01-09 22:09 - 2018-01-02 05:29 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2018-01-09 22:09 - 2018-01-02 05:29 - 000754176 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2018-01-09 22:09 - 2018-01-02 05:27 - 001696256 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2018-01-09 22:09 - 2018-01-02 05:27 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-01-09 22:09 - 2018-01-02 05:26 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-01-09 22:09 - 2018-01-02 05:25 - 000795648 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2018-01-09 22:09 - 2018-01-02 05:25 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-01-09 22:09 - 2018-01-02 05:25 - 000128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2018-01-09 22:09 - 2018-01-02 05:23 - 004508160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-01-09 22:09 - 2018-01-02 05:23 - 002882048 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2018-01-09 22:09 - 2018-01-02 05:22 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-01-09 22:09 - 2018-01-02 05:22 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\WcnApi.dll
2018-01-09 22:09 - 2018-01-02 05:21 - 000391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2018-01-09 22:09 - 2018-01-02 05:20 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-01-09 22:09 - 2018-01-02 05:18 - 000380416 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2018-01-09 22:09 - 2018-01-02 05:18 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-01-09 22:09 - 2018-01-02 05:17 - 001547264 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2018-01-09 22:09 - 2018-01-02 05:17 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-01-09 22:09 - 2018-01-02 05:17 - 000465920 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2018-01-09 22:09 - 2018-01-02 05:17 - 000331776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-01-09 22:09 - 2018-01-02 05:16 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-01-09 22:09 - 2018-01-02 05:16 - 000881152 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2018-01-09 22:09 - 2018-01-02 05:16 - 000747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-01-09 22:09 - 2018-01-02 05:16 - 000464384 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2018-01-09 22:09 - 2018-01-02 05:15 - 001545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-01-09 22:09 - 2018-01-02 05:13 - 000216576 _____ (Microsoft Corporation) C:\Windows\system32\P2P.dll
2018-01-09 22:09 - 2018-01-02 05:11 - 000185856 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2018-01-09 22:09 - 2018-01-02 05:11 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2018-01-09 22:09 - 2018-01-02 05:09 - 000827392 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2018-01-09 22:09 - 2018-01-02 05:09 - 000713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2018-01-09 22:09 - 2018-01-02 05:09 - 000543232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2018-01-09 22:09 - 2018-01-02 05:08 - 000110080 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll
2018-01-09 22:09 - 2018-01-02 05:07 - 001265664 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2018-01-09 22:09 - 2018-01-02 05:07 - 000440832 _____ (Microsoft Corporation) C:\Windows\system32\p2psvc.dll
2018-01-09 22:09 - 2018-01-02 05:06 - 000626176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2018-01-09 22:09 - 2018-01-02 05:05 - 000097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll
2018-01-09 22:09 - 2018-01-02 05:04 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-01-09 22:09 - 2018-01-02 04:59 - 000177664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\P2P.dll
2018-01-09 22:09 - 2018-01-02 04:58 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-01-09 22:09 - 2018-01-02 04:57 - 000164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll
2018-01-09 22:09 - 2018-01-02 04:56 - 000562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2018-01-09 22:09 - 2018-01-02 04:55 - 003548160 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2018-01-09 22:09 - 2018-01-02 04:54 - 001313792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-01-09 22:09 - 2018-01-02 04:53 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-01-09 22:09 - 2017-12-29 09:21 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-01-09 22:09 - 2017-12-15 00:26 - 000374096 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-01-09 22:09 - 2017-12-14 22:39 - 000315736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-01-09 22:09 - 2017-12-14 11:19 - 000096256 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-01-09 22:09 - 2017-12-14 11:17 - 000044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-01-09 22:09 - 2017-12-10 14:59 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-01-09 22:09 - 2017-12-10 14:58 - 000035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-01-09 22:09 - 2017-12-10 14:46 - 007079424 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2018-01-09 22:09 - 2017-12-10 14:24 - 005275136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2018-01-09 22:09 - 2017-12-10 14:06 - 007797760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2018-01-09 22:09 - 2017-12-10 13:59 - 005270528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2018-01-09 22:09 - 2017-12-06 05:42 - 002452816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-01-09 22:09 - 2017-12-05 17:58 - 004168192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-01-09 22:09 - 2014-11-08 05:00 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2018-01-09 22:09 - 2014-11-08 04:56 - 000048128 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp
2018-01-09 22:09 - 2014-11-08 04:56 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll
2018-01-09 22:09 - 2014-11-08 04:56 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll
2018-01-09 22:09 - 2014-11-08 04:24 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2018-01-09 22:09 - 2014-11-08 04:13 - 000039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp
2018-01-09 22:09 - 2014-11-08 04:13 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll
2018-01-09 22:09 - 2014-11-08 04:13 - 000022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll
2018-01-09 22:09 - 2014-11-08 03:48 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll
2018-01-09 22:09 - 2014-11-04 07:27 - 000128512 _____ (Microsoft Corporation) C:\Windows\splwow64.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-01-27 12:58 - 2014-05-09 18:13 - 000003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-603080990-3676789936-2700333261-1001
2018-01-27 09:32 - 2017-08-19 13:58 - 000003604 _____ C:\Windows\System32\Tasks\AVG EUpdate Task
2018-01-27 01:28 - 2014-05-09 18:10 - 000000000 __RDO C:\Users\carlo_000\SkyDrive
2018-01-27 01:26 - 2017-08-18 02:27 - 000000008 __RSH C:\Users\carlo_000\ntuser.pol
2018-01-27 01:26 - 2015-04-13 03:17 - 000000000 ____D C:\Users\carlo_000\Documents\Assassin's Creed Unity
2018-01-27 01:26 - 2014-05-09 18:03 - 000000000 ____D C:\Users\carlo_000
2018-01-27 01:26 - 2013-08-22 15:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-01-27 01:24 - 2013-08-22 16:36 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2018-01-27 01:24 - 2013-08-22 14:25 - 000524288 ___SH C:\Windows\system32\config\BBI
2018-01-27 00:35 - 2016-04-27 16:58 - 000000855 _____ C:\Users\carlo_000\AppData\Roaming\Microsoft\Windows\Start Menu\Free Sound Recorder.lnk
2018-01-27 00:35 - 2016-04-27 10:12 - 000002400 _____ C:\Users\carlo_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive dla Firm.lnk
2018-01-27 00:35 - 2015-10-20 17:34 - 000000080 _____ C:\Users\carlo_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2018-01-27 00:35 - 2014-05-13 13:45 - 000002423 _____ C:\Users\carlo_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ALLPlayer.TV.lnk
2018-01-27 00:34 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\Inf
2018-01-27 00:32 - 2013-08-22 14:36 - 000000000 ____D C:\Program Files\Video Backgammon
2018-01-27 00:09 - 2017-08-18 09:23 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\Install
2018-01-27 00:01 - 2014-05-11 02:45 - 000000000 ___RD C:\Pliki programów (x86)
2018-01-26 23:59 - 2014-05-09 18:47 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\uTorrent
2018-01-26 23:35 - 2016-12-03 12:33 - 000192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2018-01-26 23:18 - 2014-05-09 18:07 - 000000000 ____D C:\Users\carlo_000\AppData\Local\VirtualStore
2018-01-26 22:25 - 2017-04-23 12:18 - 000000000 ____D C:\Users\carlo_000\Documents\KONAMI
2018-01-26 01:07 - 2017-04-27 10:09 - 000000000 ____D C:\Windows\Minidump
2018-01-25 08:00 - 2016-12-04 01:48 - 000003866 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1480812480
2018-01-25 08:00 - 2014-05-09 18:03 - 000000000 ____D C:\Users\carlo_000\AppData\Local\Packages
2018-01-23 19:58 - 2014-05-11 19:33 - 000548000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2018-01-19 21:46 - 2017-01-25 19:42 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\MPC-HC
2018-01-18 01:27 - 2013-11-26 15:08 - 001831240 _____ C:\Windows\system32\PerfStringBackup.INI
2018-01-18 01:27 - 2013-08-23 00:12 - 000809096 _____ C:\Windows\system32\perfh015.dat
2018-01-18 01:27 - 2013-08-23 00:12 - 000164352 _____ C:\Windows\system32\perfc015.dat
2018-01-18 01:16 - 2013-08-22 16:36 - 000000000 ___RD C:\Windows\ToastData
2018-01-18 01:12 - 2017-11-28 10:22 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\gretl
2018-01-17 18:59 - 2017-06-13 18:26 - 000000000 ____D C:\Windows\CbsTemp
2018-01-16 19:12 - 2017-11-28 10:22 - 000000000 ____D C:\Users\carlo_000\Documents\gretl
2018-01-16 18:16 - 2017-11-28 10:22 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\gtk-2.0
2018-01-14 14:32 - 2017-08-11 12:03 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera Software
2018-01-13 13:06 - 2017-06-12 07:14 - 000000000 ____D C:\Users\carlo_000\AppData\Local\Microsoft Help
2018-01-11 17:18 - 2017-10-12 15:46 - 129365736 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-01-11 17:18 - 2014-05-11 20:49 - 129365736 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-01-11 17:18 - 2014-05-11 20:49 - 000000000 ____D C:\Windows\system32\MRT
2018-01-11 17:13 - 2013-08-22 14:25 - 000000202 _____ C:\Windows\win.ini
2018-01-10 06:25 - 2017-07-27 16:38 - 000003188 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-603080990-3676789936-2700333261-1001
2018-01-09 18:31 - 2016-02-08 00:46 - 000004388 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-01-09 18:31 - 2015-12-11 02:33 - 000004542 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-01-09 18:31 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-01-09 18:31 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\Macromed
2017-12-30 15:39 - 2017-09-14 16:57 - 000092520 _____ C:\Windows\wmsvr.exe
2017-12-28 04:34 - 2016-01-22 01:09 - 000000000 ____D C:\Users\carlo_000\AppData\Roaming\Skype

==================== Pliki w katalogu głównym wybranych folderów =======

2017-08-18 09:31 - 2017-08-18 10:32 - 000023343 _____ () C:\Users\carlo_000\AppData\Roaming\Internet Explorer.txt
2017-08-18 09:31 - 2017-08-18 10:32 - 000931280 _____ () C:\Users\carlo_000\AppData\Roaming\Opera Browser.txt
2015-02-02 04:34 - 2016-07-31 17:58 - 000000139 _____ () C:\Users\carlo_000\AppData\Roaming\WB.CFG
2017-08-11 12:42 - 2017-08-11 12:52 - 000004608 _____ () C:\Users\carlo_000\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-05-12 20:21 - 2017-05-12 20:21 - 000000979 _____ () C:\Users\carlo_000\AppData\Local\recently-used.xbel

Pliki do przeniesienia lub usunięcia:
====================
C:\Windows\Temp\g1D9D.tmp.exe


==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2018-01-26 16:33

==================== Koniec  FRST.txt ============================