Dzięki za pomoc. Wygenerowałam pliki. Teraz liczę na pomoc w pozbyciu się wirusa. :)
Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:07-01-2015
Uruchomiony przez Alex (administrator) ALEX-KOMPUTER (08-01-2016 20:43:53)
Uruchomiony z C:\Users\Alex\Desktop
Załadowane profile: Alex (Dostępne profile: Alex & Gość)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Procesy (filtrowane) =================
(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgcsrvx.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgwdsvcx.exe
(SEIKO EPSON CORPORATION) C:\Program Files\epson\EpsonCustomerResearchParticipation\EPCP.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_JT50RP.EXE
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgemcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgui.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Epson Software\Event Manager\EEventManager.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_TATII3E.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FATIHJE.EXE
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgcfgex.exe
==================== Rejestr (filtrowane) ===========================
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
HKLM\...\Run: [AVG_UI] = & gt; C:\Program Files\AVG\Av\avgui.exe [3855272 2015-11-20] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [EEventManager] = & gt; C:\Program Files\Epson Software\Event Manager\EEventManager.exe [979328 2010-08-30] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [GrooveMonitor] = & gt; C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM\...\Run: [NeroFilterCheck] = & gt; C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG)
HKLM\...\Run: [Dropbox] = & gt; C:\Program Files\Dropbox\Client\Dropbox.exe [24952456 2015-12-08] (Dropbox, Inc.)
HKLM\...\Run: [AvgUi] = & gt; C:\Program Files\AVG\Framework\Common\avguix.exe [1139112 2015-12-08] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-2314376949-1411995889-1100840063-1001\...\Run: [uTorrent] = & gt; C:\Users\Alex\AppData\Roaming\uTorrent\uTorrent.exe [2026520 2015-12-03] (BitTorrent Inc.)
HKU\S-1-5-21-2314376949-1411995889-1100840063-1001\...\Run: [EPLTarget\P0000000000000000] = & gt; C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TATII3E.EXE [249440 2012-02-27] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2314376949-1411995889-1100840063-1001\...\Run: [EPLTarget\P0000000000000001] = & gt; C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIHJE.EXE [249440 2015-04-06] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2314376949-1411995889-1100840063-1001\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] = & gt; C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG)
HKU\S-1-5-21-2314376949-1411995889-1100840063-1001\...\Run: [CCleaner Monitoring] = & gt; C:\Program Files\CCleaner\CCleaner.exe [6602152 2015-12-08] (Piriform Ltd)
HKU\S-1-5-21-2314376949-1411995889-1100840063-1001\...\MountPoints2: J - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-2314376949-1411995889-1100840063-1001\...\MountPoints2: {650278a6-2096-11e5-b8f2-002618d45e2d} - K:\Autorun.exe
HKU\S-1-5-21-2314376949-1411995889-1100840063-1001\...\MountPoints2: {650278b6-2096-11e5-b8f2-002618d45e2d} - L:\Autorun.exe
HKU\S-1-5-21-2314376949-1411995889-1100840063-1001\...\MountPoints2: {9a20eb18-1e52-11e5-bce5-002618d45e2d} - J:\Autorun.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] = & gt; C:\Windows\System32\SPReview\SPReview.exe [280576 2015-04-08] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ DropboxExt1] - & gt; {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] - & gt; {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] - & gt; {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] - & gt; {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] - & gt; {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] - & gt; {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] - & gt; {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] - & gt; {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} = & gt; C:\Program Files\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk [2015-08-23]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk - & gt; C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (filtrowane) ====================
(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62
Tcpip\..\Interfaces\{1F1A0A5C-F682-409C-8422-48F2C43305E5}: [DhcpNameServer] 62.179.1.63 62.179.1.62
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp & ts=1452251035 & z=eec379cf0dee8ad4b687b2cg4zbw0o2o8wegcebo4q & from=wpm01073 & uid=HitachiXHDS721050CLA362_JP1521HN03GRTA03GRTAX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://yoursites123.com/web?type=ds & ts=1452251035 & z=eec379cf0dee8ad4b687b2cg4zbw0o2o8wegcebo4q & from=wpm01073 & uid=HitachiXHDS721050CLA362_JP1521HN03GRTA03GRTAX & q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp & ts=1452251035 & z=eec379cf0dee8ad4b687b2cg4zbw0o2o8wegcebo4q & from=wpm01073 & uid=HitachiXHDS721050CLA362_JP1521HN03GRTA03GRTAX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://yoursites123.com/web?type=ds & ts=1452251035 & z=eec379cf0dee8ad4b687b2cg4zbw0o2o8wegcebo4q & from=wpm01073 & uid=HitachiXHDS721050CLA362_JP1521HN03GRTA03GRTAX & q={searchTerms}
HKU\S-1-5-21-2314376949-1411995889-1100840063-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp & ts=1452251035 & z=eec379cf0dee8ad4b687b2cg4zbw0o2o8wegcebo4q & from=wpm01073 & uid=HitachiXHDS721050CLA362_JP1521HN03GRTA03GRTAX
HKU\S-1-5-21-2314376949-1411995889-1100840063-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp & ts=1452251035 & z=eec379cf0dee8ad4b687b2cg4zbw0o2o8wegcebo4q & from=wpm01073 & uid=HitachiXHDS721050CLA362_JP1521HN03GRTA03GRTAX
SearchScopes: HKLM - & gt; DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds & ts=1452251035 & z=eec379cf0dee8ad4b687b2cg4zbw0o2o8wegcebo4q & from=wpm01073 & uid=HitachiXHDS721050CLA362_JP1521HN03GRTA03GRTAX & q={searchTerms}
SearchScopes: HKLM - & gt; {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds & ts=1452251035 & z=eec379cf0dee8ad4b687b2cg4zbw0o2o8wegcebo4q & from=wpm01073 & uid=HitachiXHDS721050CLA362_JP1521HN03GRTA03GRTAX & q={searchTerms}
SearchScopes: HKU\S-1-5-21-2314376949-1411995889-1100840063-1001 - & gt; DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds & ts=1452251035 & z=eec379cf0dee8ad4b687b2cg4zbw0o2o8wegcebo4q & from=wpm01073 & uid=HitachiXHDS721050CLA362_JP1521HN03GRTA03GRTAX & q={searchTerms}
SearchScopes: HKU\S-1-5-21-2314376949-1411995889-1100840063-1001 - & gt; {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds & ts=1452251035 & z=eec379cf0dee8ad4b687b2cg4zbw0o2o8wegcebo4q & from=wpm01073 & uid=HitachiXHDS721050CLA362_JP1521HN03GRTA03GRTAX & q={searchTerms}
BHO: E-Web Print - & gt; {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - & gt; C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
BHO: Groove GFS Browser Helper - & gt; {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - & gt; C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-26] (Microsoft Corporation)
BHO: Easy Photo Print - & gt; {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - & gt; C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-03-30] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-03-30] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-26] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc & ts=1446583478 & z=2a67db308ba1c58d82be7fdgaz7zaq9w4b1c1o4e7c & from=cor & uid=HitachiXHDS721050CLA362_JP1521HN03GRTA03GRTAX
FireFox:
========
FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\qfsvcd1j.default-1452268590637
FF Homepage: hxxp://www.google.pl/
FF Plugin: @adobe.com/FlashPlayer - & gt; C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-29] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - & gt; C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: Adobe Reader - & gt; C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Extension: Fast Dial - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\qfsvcd1j.default-1452268590637\extensions\fastdial@telega.phpnet.us [2016-01-08]
FF Extension: Adblock Plus - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\qfsvcd1j.default-1452268590637\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-08]
FF HKLM\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on [2015-06-08] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\bwci9zzz.default-1444241671357\extensions\defsearchp@gmail.com = & gt; nie znaleziono
FF HKLM\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\bwci9zzz.default-1444241671357\extensions\deskCutv2@gmail.com = & gt; nie znaleziono
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd] - hxxp://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2314376949-1411995889-1100840063-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd] - hxxp://clients2.google.com/service/update2/crx
==================== Usługi (filtrowane) ========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S3 AvgAMPS; C:\Program Files\AVG\Av\avgamps.exe [615584 2015-11-20] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\Av\avgidsagent.exe [3857272 2015-11-20] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [866216 2015-12-08] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\Av\avgwdsvcx.exe [579776 2015-11-20] (AVG Technologies CZ, s.r.o.)
S2 dbupdate; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [136048 2015-10-21] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [136048 2015-10-21] (Dropbox, Inc.)
R2 EpsonCustomerResearchParticipation; C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe [593392 2015-09-06] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [142432 2015-04-06] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_05; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_JT50RP.EXE [142432 2012-02-27] (SEIKO EPSON CORPORATION)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
===================== Sterowniki (filtrowane) ==========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [149936 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [255920 2015-11-06] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [231344 2015-08-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [31664 2015-11-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [229296 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [308656 2015-08-14] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [193968 2015-11-06] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [36784 2015-08-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [231856 2015-10-08] (AVG Technologies CZ, s.r.o.)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [25016 2015-06-29] (Disc Soft Ltd)
R3 L1E; C:\Windows\System32\DRIVERS\L1E62x86.sys [47104 2009-07-13] (Atheros Communications, Inc.)
S1 lwnfd_1_10_0_12; system32\drivers\lwnfd_1_10_0_12.sys [X]
==================== NetSvcs (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
==================== Jeden miesiąc - utworzone pliki i foldery ========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2016-01-08 20:43 - 2016-01-08 20:43 - 00022168 _____ C:\Users\Alex\Desktop\Addition.txt
2016-01-08 20:42 - 2016-01-08 20:43 - 00016167 _____ C:\Users\Alex\Desktop\FRST.txt
2016-01-08 20:42 - 2016-01-08 20:43 - 00000000 ____D C:\FRST
2016-01-08 20:39 - 2016-01-08 20:39 - 01721856 _____ (Farbar) C:\Users\Alex\Desktop\FRST.exe
2016-01-08 18:23 - 2016-01-08 18:23 - 00001121 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-01-08 18:23 - 2016-01-08 18:23 - 00001109 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-01-08 18:23 - 2016-01-08 18:23 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-01-08 18:21 - 2016-01-08 18:22 - 46370744 _____ C:\Users\Alex\Desktop\Firefox Setup 43.0.4.exe
2016-01-08 18:08 - 2016-01-08 18:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-01-08 18:08 - 2016-01-08 18:08 - 00000000 ____D C:\Program Files\CCleaner
2016-01-08 18:07 - 2016-01-08 18:07 - 06805440 _____ (Piriform Ltd) C:\Users\Alex\Desktop\ccsetup513.exe
2016-01-08 16:56 - 2016-01-08 16:56 - 00000000 ____D C:\Users\Alex\Desktop\Stare dane programu Firefox
2016-01-08 16:18 - 2016-01-08 16:18 - 00000197 _____ C:\Users\Alex\Desktop\mega przepisy.txt
2016-01-08 12:03 - 2016-01-08 12:04 - 00000000 ____D C:\ProgramData\QWdMQ
2016-01-07 21:34 - 2016-01-07 21:34 - 00651009 _____ C:\Users\Alex\Desktop\agro.lucy
2016-01-07 21:33 - 2016-01-07 21:35 - 00000000 ____D C:\Users\Alex\Desktop\Notatni gro
2016-01-07 20:13 - 2016-01-07 20:13 - 00000972 _____ C:\Users\Alex\AppData\Local\recently-used.xbel
2016-01-05 20:03 - 2016-01-05 20:03 - 00000049 _____ C:\Users\Alex\Desktop\nr haslo .txt
2016-01-05 19:24 - 2016-01-05 19:24 - 04138979 _____ C:\Users\Alex\Desktop\Notatka bez tytułu_1452018198888.lucy
2016-01-04 17:45 - 2016-01-04 17:56 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Opera Software
2016-01-04 17:45 - 2016-01-04 17:56 - 00000000 ____D C:\Users\Alex\AppData\Local\Opera Software
2015-12-24 22:52 - 2015-12-24 22:52 - 05948194 _____ C:\Users\Alex\Desktop\fulltext190.pdf
2015-12-23 21:20 - 2015-12-23 21:20 - 00983634 _____ C:\Users\Alex\Desktop\Silomaster_www_A4.pdf
2015-12-22 14:26 - 2016-01-07 21:28 - 00000000 ____D C:\Users\Alex\Desktop\Projekt z bydła
2015-12-16 11:49 - 2015-12-16 11:49 - 00000000 ____D C:\Users\Gość\AppData\Local\CEF
2015-12-16 11:48 - 2015-12-16 11:49 - 00000000 ____D C:\Users\Gość\AppData\Local\Adobe
2015-12-16 11:48 - 2015-12-16 11:48 - 00000000 ____D C:\Users\Gość\AppData\LocalLow\Adobe
2015-12-16 11:40 - 2015-12-16 11:40 - 00000000 ____D C:\Users\Gość\AppData\Roaming\AVG
2015-12-16 11:40 - 2015-12-16 11:40 - 00000000 ____D C:\Users\Gość\AppData\Local\Dropbox
2015-12-13 23:35 - 2015-12-13 23:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-12-09 19:00 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-12-09 19:00 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2015-12-09 19:00 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2015-12-09 19:00 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-12-09 19:00 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-12-09 19:00 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-12-09 19:00 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-12-09 19:00 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-12-09 19:00 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-12-09 19:00 - 2015-11-10 19:39 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-12-09 19:00 - 2015-11-10 19:39 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-12-09 19:00 - 2015-11-10 18:40 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-12-09 19:00 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-12-09 19:00 - 2015-11-10 01:24 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-12-09 19:00 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-12-09 19:00 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-12-09 19:00 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-12-09 19:00 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-12-09 19:00 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-12-09 19:00 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-12-09 19:00 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-12-09 19:00 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-12-09 19:00 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-12-09 19:00 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-12-09 19:00 - 2015-11-10 01:03 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-12-09 19:00 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-12-09 19:00 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-12-09 19:00 - 2015-11-10 00:57 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-12-09 19:00 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-12-09 19:00 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-12-09 19:00 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-12-09 19:00 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-12-09 19:00 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-12-09 19:00 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-12-09 19:00 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-12-09 19:00 - 2015-11-10 00:36 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-12-09 19:00 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-12-09 19:00 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-12-09 19:00 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-12-09 19:00 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-12-09 18:59 - 2015-11-20 19:34 - 02956800 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-12-09 18:59 - 2015-11-20 19:34 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-12-09 18:59 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-12-09 18:59 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-12-09 18:59 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-12-09 18:59 - 2015-11-20 19:34 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-12-09 18:59 - 2015-11-20 19:34 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-12-09 18:59 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-12-09 18:59 - 2015-11-20 19:33 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-12-09 18:59 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-12-09 18:59 - 2015-11-20 19:33 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-12-09 18:59 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2015-12-09 18:59 - 2015-11-05 10:48 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2015-12-09 18:59 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-12-09 18:59 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2016-01-08 20:42 - 2009-07-14 03:37 - 00000000 ____D C:\Windows
2016-01-08 20:34 - 2015-10-21 20:27 - 00001136 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2016-01-08 20:33 - 2015-04-18 14:35 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-08 20:33 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2016-01-08 18:33 - 2009-07-14 05:34 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-08 18:33 - 2009-07-14 05:34 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-08 18:32 - 2015-10-21 20:27 - 00001132 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2016-01-08 18:32 - 2015-04-06 21:02 - 00000000 ____D C:\Users\Alex\AppData\Roaming\uTorrent
2016-01-08 18:25 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-08 18:23 - 2015-04-06 20:12 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-01-08 18:08 - 2015-10-07 20:36 - 00000000 ____D C:\Users\Alex\AppData\Roaming\AIMP3
2016-01-08 18:08 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2016-01-08 12:05 - 2015-04-06 19:42 - 00000000 ____D C:\ProgramData\MFAData
2016-01-08 12:03 - 2015-11-03 21:46 - 00000074 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2016-01-08 12:03 - 2015-11-03 21:46 - 00000000 ____D C:\ProgramData\vWMiniProv
2016-01-07 21:36 - 2015-04-06 18:56 - 00000000 ____D C:\Users\Alex\AppData\Roaming\vlc
2016-01-07 20:14 - 2015-04-06 22:25 - 00000000 ____D C:\Users\Alex\.gimp-2.8
2016-01-07 20:13 - 2015-04-06 22:30 - 00000000 ____D C:\Users\Alex\AppData\Local\gtk-2.0
2016-01-04 17:56 - 2015-11-03 21:44 - 00000000 ____D C:\Program Files\Opera
2016-01-02 19:41 - 2015-04-06 21:07 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Anvsoft
2015-12-29 13:54 - 2015-04-18 14:35 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-12-29 13:54 - 2015-04-18 14:35 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-12-23 19:32 - 2015-04-06 18:43 - 01549696 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-23 19:32 - 2009-07-14 09:07 - 00697674 _____ C:\Windows\system32\perfh015.dat
2015-12-23 19:32 - 2009-07-14 09:07 - 00134784 _____ C:\Windows\system32\perfc015.dat
2015-12-22 21:56 - 2015-07-25 19:17 - 00000000 ____D C:\Users\Alex\AppData\Roaming\dvdcss
2015-12-20 12:12 - 2015-04-07 21:17 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-19 14:00 - 2015-04-07 21:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-16 11:50 - 2015-07-18 17:08 - 00000000 ____D C:\Users\Gość\AppData\Local\Mozilla
2015-12-16 11:48 - 2015-07-06 13:44 - 00000000 ____D C:\Users\Gość\AppData\Roaming\Adobe
2015-12-16 11:40 - 2015-07-30 18:12 - 00000000 ____D C:\Users\Gość\AppData\Local\Avg
2015-12-14 18:55 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2015-12-13 23:36 - 2015-10-21 20:27 - 00000000 ____D C:\Program Files\Dropbox
2015-12-12 18:45 - 2015-04-06 22:30 - 00000000 ____D C:\Users\Alex\.thumbnails
2015-12-10 05:53 - 2009-07-14 05:33 - 00407456 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-09 18:07 - 2015-10-25 14:28 - 00000906 _____ C:\Users\Public\Desktop\AVG Protection.lnk
2015-12-09 18:07 - 2015-04-06 19:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
==================== Pliki w katalogu głównym wybranych folderów =======
2015-12-07 21:44 - 2015-12-07 21:44 - 0003584 _____ () C:\Users\Alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-01-07 20:13 - 2016-01-07 20:13 - 0000972 _____ () C:\Users\Alex\AppData\Local\recently-used.xbel
2015-11-03 21:46 - 2016-01-08 12:03 - 0000074 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
==================== Bamital & volsnap =================
(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
C:\Windows\explorer.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\services.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\User32.dll = & gt; Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe = & gt; Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll = & gt; Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll = & gt; Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys = & gt; Plik podpisany cyfrowo
LastRegBack: 2015-12-30 00:26
==================== Koniec FRST.txt ============================