Witam Mam problem z usunięciem wirusa DNS Unlocker.Jeśli mógłby ktoś pomóc byłbym bardzo wdzięczny.W załączniku logi z FRST.
Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:07-01-2015
Uruchomiony przez User (administrator) IDEA-PC (09-01-2016 09:55:32)
Uruchomiony z C:\Users\User\Desktop\Nowy folder
Załadowane profile: User (Dostępne profile: User)
Platform: Windows 8 (X64) Język: Polski (Polska)
Internet Explorer Wersja 10 (Domyślna przeglądarka: IE)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Procesy (filtrowane) =================
(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
(TODO: & lt; Company name & gt; ) C:\Program Files (x86)\iSafe\appstore\appstoreSvc.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
() C:\Program Files (x86)\iSafe\appstore\ipcdl.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(BitTorrent Inc.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Vimicro) C:\Program Files (x86)\USB Camera2\VM332STI.EXE
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(BitTorrent Inc.) C:\Users\User\AppData\Roaming\uTorrent\updates\3.4.5_41372\utorrentie.exe
(BitTorrent Inc.) C:\Users\User\AppData\Roaming\uTorrent\updates\3.4.5_41372\utorrentie.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.25\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\AutoUpdate.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
() C:\Users\User\AppData\Roaming\PriceFountain\UpdateProc\UpdateTask.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\34.0.2036.25\opera.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Rejestr (filtrowane) ===========================
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
HKLM\...\Run: [SmartAudio] = & gt; C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [cAudioFilterAgent] = & gt; C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [887968 2012-06-14] (Conexant Systems, Inc.)
HKLM\...\Run: [Energy Management] = & gt; C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17079376 2013-06-06] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] = & gt; C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191568 2013-06-06] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] = & gt; C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [332BigDog] = & gt; C:\Program Files (x86)\USB Camera2\VM332STI.EXE [548864 2012-03-20] (Vimicro)
HKLM-x32\...\Run: [YouCam Mirage] = & gt; C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] = & gt; C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] = & gt; C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] = & gt; C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [GrooveMonitor] = & gt; C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2839733263-1194978948-3527851078-1001\...\Run: [IPLA!] = & gt; C:\Program Files (x86)\ipla\ipla.exe [21360736 2014-12-12] (Redefine Sp z o.o.)
HKU\S-1-5-21-2839733263-1194978948-3527851078-1001\...\Run: [DAEMON Tools Lite] = & gt; C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-2839733263-1194978948-3527851078-1001\...\Run: [uTorrent] = & gt; C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe [2026520 2015-12-01] (BitTorrent Inc.)
HKU\S-1-5-21-2839733263-1194978948-3527851078-1001\...\Run: [AlcoholAutomount] = & gt; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft Development Team)
HKU\S-1-5-21-2839733263-1194978948-3527851078-1001\...\Run: [Skype] = & gt; C:\Program Files (x86)\Skype\Phone\Skype.exe [50749056 2015-12-08] (Skype Technologies S.A.)
HKU\S-1-5-21-2839733263-1194978948-3527851078-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
ShellIconOverlayIdentifiers: [GGDriveOverlay1] - & gt; {E68D0A50-3C40-4712-B90D-DCFA93FF2534} = & gt; C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] - & gt; {E68D0A51-3C40-4712-B90D-DCFA93FF2534} = & gt; C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] - & gt; {E68D0A52-3C40-4712-B90D-DCFA93FF2534} = & gt; C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] - & gt; {E68D0A53-3C40-4712-B90D-DCFA93FF2534} = & gt; C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] - & gt; {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} = & gt; C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] - & gt; {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} = & gt; C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] - & gt; {A759AFF6-5851-457D-A540-F4ECED148351} = & gt; C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] - & gt; {1574C9EF-7D58-488F-B358-8B78C1538F51} = & gt; C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
GroupPolicy: Ograniczenia - Chrome & lt; ======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia & lt; ======= UWAGA
==================== Internet (filtrowane) ====================
(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
Tcpip\Parameters: [DhcpNameServer] 217.8.168.244 157.25.5.18
Tcpip\Parameters: [NameServer] 199.203.131.151 82.163.143.181
Tcpip\..\Interfaces\{5421BF90-9AC8-4734-9F1D-11C1820C75EC}: [NameServer] 199.203.131.151 82.163.143.181
Tcpip\..\Interfaces\{55C68FF6-5D0A-4BF0-A4C7-636932D9A6DF}: [NameServer] 199.203.131.151 82.163.143.181
Tcpip\..\Interfaces\{7699BF39-B8B2-4DA8-96C1-C83CF2CC5BB7}: [NameServer] 199.203.131.151 82.163.143.181
Tcpip\..\Interfaces\{7699BF39-B8B2-4DA8-96C1-C83CF2CC5BB7}: [DhcpNameServer] 199.203.131.151
Tcpip\..\Interfaces\{A9C08463-DBEC-49C0-8AE7-9DBAAFFD7E2D}: [NameServer] 199.203.131.151 82.163.143.181
Tcpip\..\Interfaces\{A9C08463-DBEC-49C0-8AE7-9DBAAFFD7E2D}: [DhcpNameServer] 217.8.168.244 157.25.5.18
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia & lt; ======= UWAGA
HKU\S-1-5-21-2839733263-1194978948-3527851078-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia & lt; ======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie & ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie & ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786 & Mkt=pl-PL & Src=WD8 & Tid=00032955 & OHP=about%3Ablank & OSP=
HKU\S-1-5-21-2839733263-1194978948-3527851078-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\S-1-5-21-2839733263-1194978948-3527851078-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
HKU\S-1-5-21-2839733263-1194978948-3527851078-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie & ar=iesearch
HKU\S-1-5-21-2839733263-1194978948-3527851078-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786 & Mkt=pl-PL & Src=WD8 & Tid=000328B0 & OHP=about%3Ablank & OSP=
SearchScopes: HKLM - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - & gt; {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - & gt; {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-19 - & gt; DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-19 - & gt; {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-20 - & gt; DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-20 - & gt; {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2839733263-1194978948-3527851078-1001 - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2839733263-1194978948-3527851078-1001 - & gt; {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Skype Click to Call for Internet Explorer - & gt; {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - & gt; C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer - & gt; {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - & gt; C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
DPF: HKLM-x32 {B07F54E6-0806-47DB-B5D8-398F240776F2} file:///E:/viewer/ORDcmViewCD.ocx
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\4ztstvsn.default
FF SearchEngineOrder.1: Google
FF Plugin: @adobe.com/FlashPlayer - & gt; C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2015-12-28] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - & gt; c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - & gt; C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-28] ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - & gt; C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - & gt; C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp - & gt; C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf - & gt; C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - & gt; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - & gt; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - & gt; c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - & gt; C:\Program Files (x86)\Winamp Detect\npwachk.dll [2013-07-23] (Nullsoft, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - & gt; C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-07-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - & gt; C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-07-10] (Google Inc.)
FF Plugin-x32: Adobe Reader - & gt; C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2839733263-1194978948-3527851078-1001: @lightspark.github.com/Lightspark;version=1 - & gt; C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll [Brak pliku]
FF Extension: Brak nazwy - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\4ztstvsn.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [nie znaleziono]
FF Extension: Brak nazwy - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\4ztstvsn.default\extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [nie znaleziono]
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff = & gt; nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\4ztstvsn.default\extensions\faststartff@gmail.com = & gt; nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [shortcutff@gmail.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\4ztstvsn.default\extensions\shortcutff@gmail.com = & gt; nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\4ztstvsn.default\extensions\searchengine@gmail.com = & gt; nie znaleziono
Chrome:
=======
CHR dev: Chrome dev build wykryto! & lt; ======= UWAGA
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dysk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-12] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] & lt; ==== UWAGA
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-28]
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-11] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] & lt; ==== UWAGA
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-12]
Opera:
=======
OPR Extension: (Adblock Plus) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-01-06]
==================== Usługi (filtrowane) ========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R2 appstoreService; C:\Program Files (x86)\iSafe\appstore\appstoreSvc.exe [15192 2014-07-04] (TODO: & lt; Company name & gt; )
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-24] (Qualcomm Atheros Commnucations) [Brak podpisu cyfrowego]
S3 Autodesk Licensing Service; C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe [77944 2014-05-24] (Autodesk)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft Development Team)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [Brak podpisu cyfrowego]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2014-07-30] (Macrovision Europe Ltd.) [Brak podpisu cyfrowego]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Brak podpisu cyfrowego]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S3 KAUpdateService; C:\Program Files (x86)\The Book of Unwritten Tales 2\service\KAUpdateService.exe [36864 2015-01-27] () [Brak podpisu cyfrowego]
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272440 2015-03-09] (Lenovo)
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2015-07-06] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-24] (Atheros) [Brak podpisu cyfrowego]
===================== Sterowniki (filtrowane) ==========================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-24] (Qualcomm Atheros)
R3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2013-11-13] (Disc Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3265256 2012-09-20] (Broadcom Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-27] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-04-10] (Duplex Secure Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-07-06] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [281944 2015-07-06] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ( " CyberLink)
R3 WUDFWpdComp; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)
U3 a5l22iid; C:\Windows\System32\Drivers\a5l22iid.sys [0 ] (Intel Corporation) & lt; ==== UWAGA (zerobajtowy plik/folder)
U3 al5gnz0u; C:\Windows\System32\Drivers\al5gnz0u.sys [0 ] (Intel Corporation) & lt; ==== UWAGA (zerobajtowy plik/folder)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
==================== Jeden miesiąc - utworzone pliki i foldery ========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2016-01-09 09:55 - 2016-01-09 09:55 - 00000000 ____D C:\Users\User\Desktop\Nowy folder
2016-01-09 09:15 - 2016-01-09 09:30 - 00000000 ____D C:\Users\User\Downloads\Arrow.S01.Season.1.COMPLETE.720p.WEB-DL.H264-PublicHD
2016-01-08 09:39 - 2016-01-09 08:39 - 00000000 ____D C:\Users\User\AppData\LocalLow\uTorrent
2016-01-08 00:20 - 2016-01-08 00:20 - 00820955 _____ C:\Users\User\Downloads\Pytlakowski Piotr - Moj agent Masa.epub
2016-01-08 00:19 - 2016-01-08 00:19 - 01123801 _____ C:\Users\User\Downloads\Pytlakowski Piotr - Moj agent Masa.pdf
2016-01-06 20:26 - 2016-01-07 01:28 - 00000138 _____ C:\Users\User\Desktop\angielski.txt
2016-01-05 21:48 - 2016-01-05 21:48 - 00001633 _____ C:\Users\Public\Desktop\Commandos, Beyond the Call of Duty.lnk
2016-01-05 21:48 - 2016-01-05 21:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pyro Studios
2016-01-05 21:47 - 2016-01-05 21:48 - 00000000 ____D C:\Commandos, Beyond the Call of Duty
2016-01-05 21:44 - 2016-01-05 21:44 - 00000000 ____D C:\com
2016-01-05 21:20 - 2016-01-05 21:40 - 242517711 ____R C:\Users\User\Downloads\CBTCOD.rar
2016-01-04 20:27 - 2016-01-09 09:00 - 00000210 _____ C:\Users\User\Desktop\praca.txt
2015-12-31 10:16 - 2015-12-31 10:16 - 00024737 _____ C:\Users\User\Downloads\wykaz _PnU Kontrakt IRRK3_2_1 (1).xlsx
2015-12-31 10:15 - 2015-12-31 10:15 - 00024737 _____ C:\Users\User\Desktop\wykaz _PnU Kontrakt IRRK3_2_1.xlsx
2015-12-31 09:48 - 2015-12-31 09:48 - 00021706 _____ C:\Users\User\Downloads\wykaz _PnU Kontrakt IRRK3_2_1.xlsx
2015-12-29 20:35 - 2015-12-29 20:35 - 00000000 ____D C:\Users\User\Documents\Telltale Games
2015-12-29 20:35 - 2015-12-29 20:35 - 00000000 ____D C:\ProgramData\Steam
2015-12-29 20:29 - 2015-12-29 20:30 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2015-12-29 20:29 - 2015-12-29 20:29 - 00001749 _____ C:\Users\User\Desktop\The Walking Dead.lnk
2015-12-29 20:29 - 2015-12-29 20:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Catalyst
2015-12-29 19:19 - 2015-12-29 19:19 - 00000000 ____D C:\R.G. Catalyst
2015-12-29 14:42 - 2015-12-29 14:53 - 00000616 _____ C:\Users\User\Desktop\Nowy dokument tekstowy.txt
2015-12-29 13:10 - 2015-12-29 14:06 - 00000000 ____D C:\Users\User\Downloads\The Walking Dead_[R.G. Catalyst]
2015-12-28 19:50 - 2015-12-30 09:44 - 00000093 _____ C:\Users\User\Desktop\telefon onyszko.txt
2015-12-22 16:38 - 2015-12-22 16:39 - 00000000 ____D C:\Users\User\Downloads\Still Life
2015-12-20 10:46 - 2015-12-20 10:46 - 01651637 _____ C:\Users\User\Downloads\Carlo Ancelotti - Alciato_ Aleesandro; Ancelotti_ Carlo.pdf
2015-12-17 16:07 - 2016-01-09 09:07 - 00000094 _____ C:\Users\User\AppData\Roaming\WB.CFG
2015-12-17 15:07 - 2016-01-09 09:07 - 00000304 _____ C:\WINDOWS\Tasks\Price Fountain.job
2015-12-17 15:07 - 2015-12-17 15:07 - 00003442 _____ C:\WINDOWS\System32\Tasks\LollsSpectresV2
2015-12-17 15:07 - 2015-12-17 15:07 - 00002638 _____ C:\WINDOWS\System32\Tasks\Price Fountain
2015-12-17 15:07 - 2015-12-17 15:07 - 00000000 ____D C:\Users\User\AppData\Roaming\PriceFountain
2015-12-17 15:07 - 2015-12-17 15:07 - 00000000 ____D C:\Users\User\AppData\Local\LollsSpectres
2015-12-17 14:52 - 2015-12-17 14:52 - 29727656 _____ (Oracle Corporation) C:\Users\User\Downloads\setup [1].exe
2015-12-15 16:40 - 2015-12-15 16:40 - 00001293 _____ C:\Users\User\Desktop\The Black Mirror.lnk
2015-12-15 16:40 - 2015-12-15 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Adventure Company
2015-12-15 16:35 - 2015-12-15 16:35 - 00000000 ____D C:\Program Files (x86)\The Adventure Company
2015-12-15 09:18 - 2015-12-15 09:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-15 09:18 - 2015-12-15 09:18 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2015-12-14 19:11 - 2015-12-14 19:12 - 01599336 _____ (Malwarebytes) C:\Users\User\Downloads\JRT.exe
2015-12-14 17:39 - 2015-12-14 17:39 - 00000000 ____D C:\ProgramData\rionix
2015-12-14 16:24 - 2015-12-14 19:12 - 00000000 ____D C:\Users\User\Desktop\RescueTeam2
2015-12-14 13:18 - 2015-12-14 17:49 - 00000000 ____D C:\Users\User\Downloads\The.Black.Mirror
2015-12-14 12:04 - 2015-12-16 11:34 - 00000000 ____D C:\Users\User\Downloads\Black.Mirror.II.Proper-SKIDROW
2015-12-13 15:22 - 2015-12-13 15:22 - 00000000 ____D C:\DAWID
2015-12-12 12:20 - 2015-12-12 12:21 - 00000000 ____D C:\Users\User\Downloads\5357ff7f7b1dd.Black Mirror 3 - Spolszczenie
2015-12-12 12:03 - 2015-12-12 12:06 - 20597628 _____ C:\Users\User\Downloads\5357ff7f7b1dd.Black Mirror 3 - Spolszczenie.7z
2015-12-11 11:04 - 2015-12-11 11:04 - 00000000 ____D C:\ProgramData\Pendulo Studios
2015-12-11 07:23 - 2015-12-26 09:54 - 00826328 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-12-11 07:23 - 2015-12-26 09:54 - 00176096 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-11 07:21 - 2015-12-11 07:22 - 02364736 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-10 23:05 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2015-12-10 23:05 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2015-12-10 23:05 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2015-12-10 23:05 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2015-12-10 23:05 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2015-12-10 23:05 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2015-12-10 23:05 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2015-12-10 23:05 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2015-12-10 23:05 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2015-12-10 23:05 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2015-12-10 23:05 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2015-12-10 23:05 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2015-12-10 23:05 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2015-12-10 23:05 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2015-12-10 23:05 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2015-12-10 23:05 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2015-12-10 23:05 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2015-12-10 23:05 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2015-12-10 23:05 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2015-12-10 23:05 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2015-12-10 23:05 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2015-12-10 23:05 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2015-12-10 22:39 - 2015-12-10 22:39 - 00001202 _____ C:\Users\Public\Desktop\Play Yesterday.lnk
2015-12-10 22:39 - 2015-12-10 22:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pendulo Studios
2015-12-10 22:39 - 2015-12-10 22:39 - 00000000 ____D C:\Program Files (x86)\Pendulo Studios
2015-12-10 22:33 - 2015-12-10 22:33 - 00000000 ____D C:\Users\User\AppData\Local\Daedalic Entertainment
2015-12-10 21:12 - 2015-12-11 11:21 - 00001889 _____ C:\Users\Public\Desktop\Deponia.lnk
2015-12-10 21:12 - 2015-12-11 11:21 - 00001834 _____ C:\Users\Public\Desktop\Cat-A-Cat Games.lnk
2015-12-10 21:12 - 2015-12-11 11:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deponia
2015-12-10 21:12 - 2015-12-11 11:21 - 00000000 ____D C:\Program Files (x86)\Deponia
==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2016-01-09 09:55 - 2015-11-22 13:09 - 00000000 ____D C:\FRST
2016-01-09 09:55 - 2015-02-27 18:32 - 00000000 ____D C:\Users\User\AppData\Roaming\uTorrent
2016-01-09 09:51 - 2012-07-26 06:37 - 00000000 ____D C:\Windows
2016-01-09 09:32 - 2015-11-26 10:58 - 00000000 ____D C:\Users\User\Desktop\FRST-OlderVersion
2016-01-09 09:22 - 2015-07-15 09:53 - 00000992 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-01-09 09:21 - 2013-09-27 18:04 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-01-09 08:43 - 2013-09-28 16:06 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2839733263-1194978948-3527851078-1001
2016-01-09 08:41 - 2015-06-14 19:04 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2016-01-08 18:39 - 2012-07-26 08:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-08 18:37 - 2012-07-26 06:37 - 00000000 ____D C:\WINDOWS\Inf
2016-01-08 18:00 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2016-01-08 00:29 - 2014-09-15 14:21 - 00000000 ____D C:\Users\User\Documents\Biblioteka calibre
2016-01-05 22:43 - 2013-09-29 20:18 - 00000000 ____D C:\Users\User\AppData\Local\CrashDumps
2016-01-05 21:46 - 2013-10-10 23:18 - 00000000 ____D C:\Users\User\AppData\Roaming\DAEMON Tools Lite
2016-01-05 13:49 - 2014-11-21 22:48 - 00000000 ___HD C:\$Windows.~BT
2015-12-31 12:01 - 2013-11-14 18:30 - 00660480 ___SH C:\Users\User\Desktop\Thumbs.db
2015-12-30 22:58 - 2012-07-26 06:26 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-29 20:35 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-29 20:29 - 2013-10-08 10:00 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2015-12-28 23:24 - 2015-07-15 09:53 - 00003952 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-12-28 23:24 - 2013-09-27 18:04 - 00003818 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-12-23 21:43 - 2015-12-09 18:46 - 00000000 ____D C:\Users\User\Documents\Broken Sword 5
2015-12-21 14:28 - 2012-07-26 09:12 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-17 23:34 - 2013-09-28 12:21 - 00000000 ____D C:\Users\User\AppData\Roaming\GG
2015-12-17 13:01 - 2013-09-28 12:21 - 00000000 ____D C:\Users\User\AppData\Local\GG
2015-12-16 16:56 - 2013-06-06 17:05 - 00796622 _____ C:\WINDOWS\system32\perfh015.dat
2015-12-16 16:56 - 2013-06-06 17:05 - 00160246 _____ C:\WINDOWS\system32\perfc015.dat
2015-12-16 16:56 - 2012-07-26 08:28 - 01793398 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-15 09:19 - 2015-06-14 19:04 - 00000000 ____D C:\ProgramData\Skype
2015-12-15 09:18 - 2015-06-14 19:04 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-15 09:18 - 2015-06-14 19:04 - 00000000 ____D C:\Users\User\AppData\Local\Skype
2015-12-11 07:58 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\rescache
2015-12-11 07:20 - 2013-10-01 15:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-11 07:20 - 2013-10-01 15:54 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-11 07:05 - 2012-07-26 09:12 - 00000000 ___RD C:\WINDOWS\ToastData
2015-12-10 23:00 - 2015-06-03 08:46 - 00466456 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll
2015-12-10 23:00 - 2015-06-03 08:46 - 00444952 _____ (Creative Labs) C:\WINDOWS\SysWOW64\wrap_oal.dll
2015-12-10 23:00 - 2015-06-03 08:46 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\OpenAL32.dll
2015-12-10 23:00 - 2015-06-03 08:46 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\SysWOW64\OpenAL32.dll
2015-12-10 13:38 - 2015-12-09 10:37 - 273383424 ____R C:\Users\User\Downloads\Deponia_Chaos_On_[ENG+RUS].iso
2015-12-10 12:50 - 2015-04-11 19:17 - 00003886 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1428776264
2015-12-10 12:50 - 2015-04-11 19:17 - 00001062 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-12-10 12:50 - 2014-12-01 19:49 - 00000000 ____D C:\Program Files (x86)\Opera
2015-12-10 00:35 - 2015-12-09 10:31 - 00000000 ____D C:\Users\User\Downloads\Yesterday-SKIDROW
==================== Pliki w katalogu głównym wybranych folderów =======
2014-09-15 14:11 - 2014-09-15 14:12 - 0000060 _____ () C:\Users\User\AppData\Roaming\mainhst.zgh
2015-12-17 16:07 - 2016-01-09 09:07 - 0000094 _____ () C:\Users\User\AppData\Roaming\WB.CFG
2013-12-23 18:12 - 2015-11-19 12:26 - 0008192 _____ () C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-11 10:11 - 2014-07-22 09:37 - 0598016 _____ () C:\Users\User\AppData\Local\fuedrcbi.gdb
2014-07-11 10:11 - 2014-07-22 09:43 - 0943402 _____ () C:\Users\User\AppData\Local\fuedrcbi.gss
2013-10-11 11:25 - 2013-10-11 11:25 - 0000000 ___SH () C:\Users\User\AppData\Local\LumaEmu
2013-06-06 07:43 - 2013-06-06 07:43 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
==================== Bamital & volsnap =================
(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
C:\WINDOWS\system32\winlogon.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys = & gt; Plik podpisany cyfrowo
LastRegBack: 2016-01-05 12:35
==================== Koniec FRST.txt ============================