Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 24.02.2018
Uruchomiony przez mateusz (administrator)  MATEUSZ1 (24-02-2018 22:32:17)
Uruchomiony z C:\Users\mateusz\Downloads
Załadowane profile: mateusz (Dostępne profile: mateusz & Gość)
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Highresolution Enterprises) F:\Program Files\XMouseButtonControl.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [8029576 2016-11-08] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [XMouseButtonControl] => F:\Program Files\XMouseButtonControl.exe [1570512 2017-12-23] (Highresolution Enterprises)
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [144520 2017-07-19] (Panda Security, S.L.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1284680 2014-01-17] (CANON INC.)
HKLM\...\Winlogon: [Userinit] C:\Windows\SysWOW64\userinit.exe,
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2017-10-06]
ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Windows\System32\schtasks.exe (Microsoft Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 37.8.214.2 31.11.202.254
Tcpip\..\Interfaces\{8B303904-071E-4E7A-AA7E-343E63EC7769}: [DhcpNameServer] 37.8.214.2 31.11.202.254

Internet Explorer:
==================
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-06-21] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-06-21] (Oracle Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-06-01] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\mateusz\AppData\Roaming\Mozilla\Firefox\Profiles\v07a5ilt.default [2018-02-24]
FF Extension: (Video DownloadHelper) - C:\Users\mateusz\AppData\Roaming\Mozilla\Firefox\Profiles\v07a5ilt.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-10-21] [Przestarzałe]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_137.dll [2018-01-09] ()
FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-06-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-06-21] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_137.dll [2018-01-09] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1214154.dll [2014-11-07] (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2013-05-11] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1185433337-1787618353-186506704-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\mateusz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-10] (Unity Technologies ApS)

Chrome: 
=======
CHR DefaultProfile: ChromeDefaultData
CHR Profile: C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2018-02-24] <==== UWAGA
CHR Extension: (Prezentacje) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-02-24]
CHR Extension: (Dokumenty) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2018-02-24]
CHR Extension: (Dysk Google) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-02-24]
CHR Extension: (YouTube) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-02-24]
CHR Extension: (Arkusze) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-02-24]
CHR Extension: (Dokumenty Google offline) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-02-24]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-02-24]
CHR Extension: (Gmail) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-02-24]
CHR Extension: (Chrome Media Router) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-24]
CHR Profile: C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\Default [2018-02-24]
CHR Extension: (Dokumenty Google) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]
CHR Extension: (Mail.Ru) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhjhnafpiilpffhglajcaepjbnbjemci [2018-02-24]
CHR Extension: (YOU.DJ app) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\defekohaofmambflfpfoojkmfdpcbgko [2017-08-07]
CHR Extension: (Arkusze Google) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-05]
CHR Extension: (Dokumenty Google offline) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-02-26]
CHR Extension: (Pinterestowy przycisk Zapisz) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2017-08-07]
CHR Extension: (Домашняя страница Mail.Ru) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcadgijmedbfgciegjomfpjcdchlhnif [2018-02-24]
CHR Extension: (Визуальные Закладки Mail.Ru) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhemechcanjmilllmccjbjldonmnnjjj [2018-02-24]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-07]
CHR Extension: (Dogry) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\okaknalkhkbidbafdapgbmcaidbibccf [2016-07-14]
CHR Extension: (Chrome Media Router) - C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-07]
CHR Profile: C:\Users\mateusz\AppData\Local\Google\Chrome\User Data\System Profile [2018-02-24]

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1530376 2018-01-03] ()
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-11-14] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Brak podpisu cyfrowego]
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21304 2017-09-28] (Microsoft Corporation)
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [109024 2017-07-19] (Panda Security, S.L.)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-06-24] (Nero AG)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [7801944 2016-10-20] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-11-14] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-11-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-11-14] (NVIDIA Corporation)
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [86104 2016-07-19] (Panda Security, S.L.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2018-02-14] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [107832 2018-02-14] ()
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [48784 2017-07-19] (Panda Security, S.L.)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe [187904 2017-09-28] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [142432 2017-11-09] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
S4 .EsetTrialReset; C:\Windows\system32\regedt32.exe /s C:\Windows\esettrialreset.reg

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 arcawfp; C:\Windows\System32\drivers\arcawfp.sys [60104 2015-08-27] (NetFilterSDK.com)
S3 GPCIDrv; C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [14376 2014-08-28] ()
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-12-30] (REALiX(tm))
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2016-11-25] (Huawei Technologies Co., Ltd.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [105472 2017-04-06] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [211008 2017-04-06] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [119880 2017-04-06] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [124488 2017-04-06] (Panda Security, S.L.)
R1 NNSNAHSL; C:\Windows\System32\DRIVERS\NNSNAHSL.sys [92536 2017-03-15] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [116784 2017-04-06] (Panda Security, S.L.)
R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [83824 2017-04-06] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [134288 2017-04-06] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [336168 2017-04-06] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [225464 2017-04-06] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [121952 2017-04-06] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [279536 2017-04-06] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [123976 2017-04-06] (Panda Security, S.L.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-11-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-11-14] (NVIDIA Corporation)
R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [178264 2017-07-19] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [139352 2017-07-19] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [206424 2017-07-19] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [132696 2017-07-19] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [146008 2017-07-19] (Panda Security, S.L.)
R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [116312 2017-07-19] (Panda Security, S.L.)
U3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [72280 2017-05-22] (Panda Security, S.L.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2014-08-31] (Duplex Secure Ltd.)
S3 usbser; C:\Windows\System32\DRIVERS\usbser.sys [33280 2016-11-25] (Microsoft Corporation) [Brak podpisu cyfrowego]
R1 VBoxUSBMon; C:\Windows\System32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
U3 asp9xnjs; C:\Windows\System32\Drivers\asp9xnjs.sys [0 ] (NVIDIA Corporation) <==== UWAGA (zerobajtowy plik/folder)
S3 cpuz145; \??\C:\Windows\temp\cpuz145\cpuz145_x64.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-02-24 22:25 - 2017-05-22 11:29 - 000072280 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSKMAD.sys
2018-02-24 22:15 - 2018-02-24 22:26 - 000052771 _____ C:\Users\mateusz\Downloads\Fixlog.txt
2018-02-24 21:21 - 2018-02-24 22:33 - 000018615 _____ C:\Users\mateusz\Downloads\FRST.txt
2018-02-24 20:55 - 2018-02-24 20:56 - 000080263 _____ C:\Users\mateusz\Downloads\Shortcut.txt
2018-02-24 20:48 - 2018-02-24 20:55 - 000078836 _____ C:\Users\mateusz\Downloads\Addition.txt
2018-02-24 20:46 - 2018-02-24 22:32 - 000000000 ____D C:\FRST
2018-02-24 20:46 - 2018-02-24 20:55 - 000040000 _____ C:\Users\mateusz\Desktop\FRST.txt
2018-02-24 20:45 - 2018-02-24 20:45 - 002403328 _____ (Farbar) C:\Users\mateusz\Downloads\FRST64.exe
2018-02-24 20:03 - 2018-02-24 20:04 - 008222496 _____ (Malwarebytes) C:\Users\mateusz\Downloads\adwcleaner_7.0.8.0 (1).exe
2018-02-24 20:01 - 2018-02-24 20:01 - 008182736 _____ (Malwarebytes) C:\Users\mateusz\Downloads\3d8c5dd1-174c-495b-ab82-76f497e4fe38.tmp
2018-02-24 18:32 - 2018-02-24 18:34 - 067570816 _____ (Malwarebytes ) C:\Users\mateusz\Downloads\mb3-setup-consumer-3.3.1.2183-1.0.262-1.0.4046.exe
2018-02-24 17:42 - 2018-02-24 17:43 - 000000000 ____D C:\Users\mateusz\AppData\Local\yc
2018-02-24 17:40 - 2018-02-24 17:40 - 000000000 ____D C:\Users\mateusz\AppData\Local\NetBoxLogs
2018-02-24 17:37 - 2018-02-24 22:25 - 000000008 __RSH C:\Users\mateusz\ntuser.pol
2018-02-24 17:19 - 2018-02-24 17:19 - 000000000 ____D C:\Users\mateusz\AppData\Local\Activision
2018-02-24 17:18 - 2011-10-09 15:33 - 000000468 _____ C:\Users\mateusz\Desktop\cod5key.reg
2018-02-24 17:14 - 2018-02-24 17:35 - 000000000 ____D C:\Users\mateusz\Desktop\Call of Duty - World at War
2018-02-24 15:52 - 2018-02-24 16:13 - 2584061739 _____ C:\Users\mateusz\Desktop\Call of Duty World At War.rar
2018-02-24 15:37 - 2018-02-24 15:37 - 000000000 ____D C:\Users\mateusz\Desktop\Call of Duty World at War
2018-02-24 15:36 - 2018-02-24 15:36 - 000000730 _____ C:\Users\Public\Desktop\MegaDownloader.lnk
2018-02-24 15:36 - 2018-02-24 15:36 - 000000000 ____D C:\Users\mateusz\AppData\Local\MegaDownloader
2018-02-24 15:34 - 2018-02-24 15:34 - 002068299 _____ C:\Users\mateusz\Downloads\MegaDownloader_v1.7.rar
2018-02-23 14:46 - 2018-02-23 14:46 - 000262144 ____N C:\Windows\Minidump\022318-18579-01.dmp
2018-02-22 17:01 - 2018-02-22 17:01 - 005803642 _____ C:\Users\mateusz\Downloads\AssembleeGameClient1519257402.swf
2018-02-22 15:13 - 2018-02-22 15:13 - 000000222 _____ C:\Users\mateusz\Desktop\Path of Exile.url
2018-02-21 16:28 - 2018-02-22 12:46 - 000060728 _____ C:\Users\mateusz\Desktop\Nowy Prezentacja programu Microsoft Office PowerPoint.pptx
2018-02-21 16:28 - 2018-02-21 16:28 - 000000165 ____H C:\Users\mateusz\Desktop\~$Nowy Prezentacja programu Microsoft Office PowerPoint.pptx
2018-02-19 16:22 - 2018-02-19 17:25 - 000000498 _____ C:\Users\mateusz\Desktop\Nowy dokument tekstowy.txt
2018-02-18 20:06 - 2018-02-18 23:20 - 000000172 _____ C:\Users\mateusz\Desktop\Komendy.txt
2018-02-18 11:01 - 2018-02-19 22:39 - 000000000 ____D C:\Users\mateusz\AppData\Roaming\.minecraft
2018-02-17 15:38 - 2018-02-17 15:38 - 000191695 _____ C:\Users\mateusz\Desktop\Rozpierdol WTC 2.0.sb2
2018-02-16 20:41 - 2018-02-16 20:41 - 000108450 _____ C:\Users\mateusz\Downloads\Baubles-Mod-1.12.2.jar
2018-02-16 20:39 - 2018-02-16 20:39 - 000040201 _____ C:\Users\mateusz\Downloads\Lootable-Bodies-Mod-1.12.2.jar
2018-02-16 20:35 - 2018-02-16 20:36 - 014164550 _____ C:\Users\mateusz\Downloads\Decocraft-2.5.4_1.12.2.jar
2018-02-16 20:34 - 2018-02-16 20:34 - 000945058 _____ C:\Users\mateusz\Downloads\Hardcore-ORE-Mod-1.12.2.jar
2018-02-16 20:15 - 2018-02-16 20:15 - 004954206 _____ C:\Users\mateusz\Downloads\forge-1.12.2-14.23.1.2555-installer.jar
2018-02-16 19:12 - 2018-02-16 19:55 - 000000000 ____D C:\Users\mateusz\Desktop\Wszystkie zdjęcia
2018-02-14 20:28 - 2018-02-14 20:28 - 000107832 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2018-02-14 20:28 - 2018-02-14 20:28 - 000066872 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2018-02-14 20:23 - 2018-02-14 20:23 - 000000000 ____D C:\Program Files (x86)\Activision
2018-02-13 20:02 - 2018-02-19 00:44 - 000000000 ____D C:\Users\mateusz\Desktop\Morong
2018-02-13 17:24 - 2018-02-13 17:24 - 001657241 _____ (Installer ) C:\Users\mateusz\Downloads\Speccy Portable 1.31.732_1441232714.exe
2018-02-10 16:20 - 2018-02-10 16:20 - 000000869 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2018-02-10 16:20 - 2018-02-10 16:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2018-02-10 16:20 - 2018-02-10 16:20 - 000000000 ____D C:\Program Files\CPUID
2018-02-10 16:19 - 2018-02-10 16:19 - 001754192 _____ (CPUID, Inc. ) C:\Users\mateusz\Downloads\cpu-z_1.83-en.exe
2018-02-10 16:05 - 2018-02-10 16:05 - 000000000 ____D C:\Users\mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z
2018-02-10 16:05 - 2018-02-10 16:05 - 000000000 ____D C:\Program Files (x86)\GPU-Z
2018-02-10 16:04 - 2018-02-10 16:04 - 005231272 _____ (techPowerUp (www.techpowerup.com)) C:\Users\mateusz\Downloads\GPU-Z.2.7.0.exe
2018-02-01 21:40 - 2018-02-01 21:40 - 006295422 _____ C:\Users\mateusz\Downloads\Client (2).swf
2018-02-01 20:14 - 2018-02-01 20:14 - 006295422 _____ C:\Users\mateusz\Downloads\Client.swf
2018-01-30 22:45 - 2018-01-30 22:45 - 000000000 ____D C:\Users\mateusz\AppData\Roaming\The Creative Assembly
2018-01-30 18:58 - 2018-01-30 18:58 - 000000221 _____ C:\Users\mateusz\Desktop\Total War SHOGUN 2.url
2018-01-25 02:37 - 2018-02-16 19:52 - 000000062 _____ C:\Users\mateusz\Desktop\ip ts.txt

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-02-24 22:25 - 2014-04-14 10:59 - 000000008 __RSH C:\ProgramData\ntuser.pol
2018-02-24 22:25 - 2013-06-02 12:04 - 000000000 ____D C:\Users\mateusz
2018-02-24 22:25 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-02-24 22:24 - 2017-10-06 09:31 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2018-02-24 22:18 - 2015-06-25 14:51 - 000000000 ____D C:\Users\mateusz\AppData\LocalLow\Temp
2018-02-24 22:16 - 2017-12-11 01:04 - 000000000 ____D C:\Users\mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2018-02-24 22:16 - 2017-12-11 01:03 - 000000000 ____D C:\Users\mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2018-02-24 22:16 - 2017-12-11 01:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2018-02-24 22:16 - 2017-06-21 15:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2018-02-24 22:16 - 2014-08-31 19:04 - 000000000 ____D C:\ProgramData\Media Center Programs
2018-02-24 22:16 - 2009-07-14 04:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2018-02-24 22:14 - 2013-07-21 21:05 - 000000000 ____D C:\Users\mateusz\AppData\Roaming\Audacity
2018-02-24 20:17 - 2017-07-06 22:08 - 000000000 ____D C:\AdwCleaner
2018-02-24 17:42 - 2013-06-05 19:23 - 000000000 ____D C:\Users\mateusz\AppData\Roaming\uTorrent
2018-02-24 17:02 - 2017-10-06 09:31 - 000000000 ____D C:\Users\mateusz\Documents\temp
2018-02-24 16:12 - 2014-04-29 20:47 - 000000000 ____D C:\Program Files (x86)\Steam
2018-02-24 16:09 - 2015-08-27 15:11 - 000000000 ____D C:\Users\mateusz\AppData\Roaming\TS3Client
2018-02-24 15:04 - 2013-06-02 19:43 - 000000000 ___RD C:\Users\mateusz\Desktop\mati
2018-02-23 14:46 - 2013-07-11 20:57 - 000000000 ____D C:\Windows\Minidump
2018-02-22 18:51 - 2017-09-15 16:21 - 000000000 ____D C:\Users\mateusz\Documents\My Games
2018-02-22 17:05 - 2013-07-22 11:52 - 000000000 ____D C:\Users\mateusz\AppData\Local\CrashDumps
2018-02-16 20:04 - 2013-06-11 20:41 - 000000000 ____D C:\games
2018-02-14 20:29 - 2009-07-14 06:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2018-02-14 20:28 - 2013-07-11 18:09 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2018-02-14 17:46 - 2017-11-11 10:47 - 000000000 ____D C:\ProgramData\CanonIJPLM
2018-02-12 22:16 - 2018-01-20 19:04 - 000000000 ____D C:\Users\mateusz\Desktop\fabiano-swagger-of-doom-master
2018-02-11 12:06 - 2014-04-24 12:29 - 000000000 ____D C:\Users\mateusz\AppData\Local\Ubisoft Game Launcher
2018-02-09 19:35 - 2013-07-11 18:16 - 000000000 ____D C:\Users\mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2018-02-09 17:24 - 2017-08-19 21:41 - 000000252 _____ C:\Users\mateusz\AppData\LocalLow\rbxcsettings.rbx
2018-02-09 16:42 - 2018-01-20 19:24 - 000000000 ____D C:\Users\mateusz\Documents\Visual Studio 2017
2018-02-08 16:36 - 2013-06-02 12:16 - 000000000 ____D C:\Users\mateusz\AppData\Roaming\Skype
2018-02-05 20:47 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2018-02-02 19:11 - 2017-01-06 23:25 - 000000000 ____D C:\Users\mateusz\AppData\LocalLow\Mozilla
2018-02-01 20:24 - 2013-06-02 12:40 - 000000000 ____D C:\Users\mateusz\AppData\Local\Adobe
2018-02-01 20:24 - 2013-06-02 12:13 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-02-01 20:24 - 2013-06-02 12:13 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-02-01 20:24 - 2013-06-02 12:13 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-02-01 20:24 - 2013-06-02 12:13 - 000000000 ____D C:\Windows\system32\Macromed
2018-01-28 16:19 - 2011-04-12 14:21 - 001610214 _____ C:\Windows\system32\perfh015.dat
2018-01-28 16:19 - 2011-04-12 14:21 - 000450512 _____ C:\Windows\system32\perfc015.dat
2018-01-28 16:19 - 2009-07-14 06:13 - 000006496 _____ C:\Windows\system32\PerfStringBackup.INI

==================== Pliki w katalogu głównym wybranych folderów =======

2014-03-30 11:14 - 2014-03-30 11:14 - 000003754 _____ () C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml
2013-12-12 13:54 - 2013-12-12 13:54 - 000000172 _____ () C:\Users\mateusz\AppData\Roaming\9fbe28db.dat
2013-07-31 14:28 - 2016-01-10 21:06 - 000000098 _____ () C:\Users\mateusz\AppData\Roaming\default.pls
2013-08-13 21:50 - 2013-08-13 21:51 - 000000228 _____ () C:\Users\mateusz\AppData\Roaming\launcher_profiles.json
2013-08-13 21:50 - 2013-08-13 21:50 - 000000970 _____ () C:\Users\mateusz\AppData\Roaming\options.txt
2013-08-13 21:50 - 2013-08-13 21:50 - 000000298 _____ () C:\Users\mateusz\AppData\Roaming\output-client.log
2013-08-13 21:50 - 2013-08-13 21:50 - 000000298 _____ () C:\Users\mateusz\AppData\Roaming\output-client.log.1
2013-06-04 09:41 - 2017-12-13 22:32 - 000014848 _____ () C:\Users\mateusz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-09-21 21:48 - 2016-09-21 21:48 - 000000843 _____ () C:\Users\mateusz\AppData\Local\recently-used.xbel
2016-09-24 13:14 - 2016-09-24 13:42 - 000000184 _____ () C:\Users\mateusz\AppData\Local\uts.ini

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll
[2010-11-21 04:24] - [2014-05-08 15:17] - 001008640 _____ (Microsoft Corporation) 2C353B6CE0C8D03225CAA2AF33B68D79

C:\Windows\SysWOW64\User32.dll
[2010-11-21 04:24] - [2014-05-08 15:17] - 000833024 _____ (Microsoft Corporation) 861C4346F9281DC0380DE72C8D55D6BE

C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-12-30 14:27

==================== Koniec  FRST.txt ============================