Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:01-12-2015
Uruchomiony przez Sławomir (administrator)  SŁAWOMIR (03-12-2015 19:19:31)
Uruchomiony z C:\Users\Sławomir\Desktop\Nowy folder
Załadowane profile: Sławomir (Dostępne profile: Sławomir)
Platform: Windows 10 Home (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\ProgramData\MobileBrServ\mbbService.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(SeriousBit) C:\Program Files\NetBalancer\SeriousBit.NetBalancer.Service.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(SeriousBit) C:\Program Files\NetBalancer\SeriousBit.NetBalancer.Tray.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1120.13270.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10240.16565_none_1162030161f5c19b\TiWorker.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] => "C:\Windows\system32\hkcmd.exe"
HKLM\...\Run: [Persistence] => "C:\Windows\system32\igfxpers.exe"
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-07-17] (Synaptics Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-760449999-2195902697-3486916076-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8418584 2015-07-17] (Piriform Ltd)
HKU\S-1-5-21-760449999-2195902697-3486916076-1001\...\Run: [NetBalancer] => C:\Program Files\NetBalancer\SeriousBit.NetBalancer.Tray.exe [1803112 2015-10-02] (SeriousBit)
HKU\S-1-5-21-760449999-2195902697-3486916076-1001\...\RunOnce: [Uninstall C:\Users\SBawomir\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sławomir\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-760449999-2195902697-3486916076-1001\...\RunOnce: [Uninstall C:\Users\SBawomir\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sławomir\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
HKU\S-1-5-21-760449999-2195902697-3486916076-1001\...\RunOnce: [Uninstall C:\Users\SBawomir\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sławomir\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
HKU\S-1-5-21-760449999-2195902697-3486916076-1001\...\RunOnce: [Uninstall C:\Users\SBawomir\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sławomir\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-08-20]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{57f0fa6c-5b9c-4d7b-a7e8-f5707dafd17d}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{982fa59b-3ce8-4b31-bfdc-65ebd896e0a2}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPALL14/178
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPALL14/178
HKU\S-1-5-21-760449999-2195902697-3486916076-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPALL14/178
HKU\S-1-5-21-760449999-2195902697-3486916076-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPALL14/178
HKU\S-1-5-21-760449999-2195902697-3486916076-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.uk.msn.com/HPALL14/178
SearchScopes: HKLM -> {F121D11E-15AA-45C5-B9D4-93984185AD76} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {F121D11E-15AA-45C5-B9D4-93984185AD76} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-760449999-2195902697-3486916076-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}
SearchScopes: HKU\S-1-5-21-760449999-2195902697-3486916076-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}
SearchScopes: HKU\S-1-5-21-760449999-2195902697-3486916076-1001 -> {F121D11E-15AA-45C5-B9D4-93984185AD76} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll [2013-09-05] (Adobe Systems, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)

Chrome: 
=======
CHR Profile: C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-10]
CHR Extension: (Dokumenty Google) - C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-10]
CHR Extension: (Dysk Google) - C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Google Search) - C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Arkusze Google) - C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-10]
CHR Extension: (Dokumenty Google offline) - C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18]
CHR Extension: (Skype Click to Call) - C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-11-16]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-10]
CHR Extension: (Gmail) - C:\Users\Sławomir\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-10]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [Brak podpisu cyfrowego]
R2 Huawei E3272; C:\ProgramData\MobileBrServ\mbbservice.exe [240720 2013-12-03] ()
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [328608 2015-07-30] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 NetBalancerService; C:\Program Files\NetBalancer\SeriousBit.NetBalancer.Service.exe [130408 2015-10-02] (SeriousBit)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-06-24] (Realtek Semiconductor)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-07-17] (Synaptics Incorporated)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)
R3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 GPIO; C:\Windows\System32\drivers\iaiogpioe.sys [31232 2013-11-11] (Intel Corporation)
R0 MBI; C:\Windows\System32\drivers\MBI.sys [29464 2014-01-23] (Intel Corporation)
R1 nbdrv; C:\Windows\system32\DRIVERS\nbdrv.sys [42128 2015-02-05] (SeriousBit)
R3 netr28x; C:\Windows\system32\DRIVERS\netr28x.sys [2554528 2015-06-12] (MediaTek Inc.)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [310528 2015-06-05] (Realtek Semiconductor Corp.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1219200 2015-06-03] (Ralink Technology, Corp.)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [29936 2013-12-13] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-07-17] (Synaptics Incorporated)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-03 19:18 - 2015-12-03 19:19 - 00000000 ____D C:\FRST
2015-12-03 19:16 - 2015-12-03 19:16 - 00016148 _____ C:\WINDOWS\system32\SŁAWOMIR_Sławomir_HistoryPrediction.bin
2015-12-03 19:00 - 2015-12-03 19:00 - 00000000 ___HD C:\OneDriveTemp
2015-11-24 18:56 - 2015-11-24 18:56 - 00000000 ____D C:\Users\Sławomir\Desktop\protokoły
2015-11-23 13:02 - 2015-11-23 13:02 - 00057590 _____ C:\Users\Sławomir\Downloads\Wyniki II WTK jow (1).xlsx
2015-11-23 13:01 - 2015-11-23 13:01 - 00057590 _____ C:\Users\Sławomir\Downloads\Wyniki II WTK jow.xlsx
2015-11-21 17:39 - 2015-11-21 17:39 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2015-11-21 15:32 - 2015-11-21 15:32 - 00863895 _____ C:\Users\Sławomir\Desktop\l6019022dstbai378191 (1).pdf
2015-11-17 15:16 - 2015-11-17 15:16 - 00106724 _____ C:\Users\Sławomir\Downloads\3_term_3_liga _wyniki.pdf
2015-11-17 15:13 - 2015-11-17 15:13 - 00106724 _____ C:\Users\Sławomir\Desktop\3_term_3_liga _wyniki.pdf
2015-11-17 15:08 - 2015-11-17 15:08 - 00001089 _____ C:\Users\Sławomir\Desktop\ATS Stargard.html
2015-11-17 15:08 - 2015-11-17 15:08 - 00000000 ____D C:\Users\Sławomir\Desktop\ATS Stargard_files
2015-11-17 15:04 - 2015-11-17 15:10 - 00000000 ____D C:\Users\Sławomir\Desktop\ZPZTS_files
2015-11-17 15:04 - 2015-11-17 15:04 - 00000947 _____ C:\Users\Sławomir\Desktop\ZPZTS.html
2015-11-17 15:01 - 2015-11-17 15:01 - 00049205 _____ C:\Users\Sławomir\Downloads\2_term_3_liga _wyniki (2).pdf
2015-11-16 21:47 - 2015-11-16 21:47 - 00001586 _____ C:\Users\Sławomir\Desktop\Skype.lnk
2015-11-16 19:26 - 2015-11-16 19:26 - 00003266 _____ C:\WINDOWS\System32\Tasks\{B9E71C2D-5CB1-433C-9B43-5B4C15A36A5E}
2015-11-16 19:25 - 2015-11-16 19:26 - 01503872 _____ (Skype Technologies S.A.) C:\Users\Sławomir\Downloads\SkypeSetup.exe
2015-11-16 09:39 - 2015-11-16 09:39 - 00610784 _____ C:\Users\Sławomir\Desktop\l6019022dstbai643710.pdf
2015-11-16 09:38 - 2015-11-16 09:38 - 00863895 _____ C:\Users\Sławomir\Desktop\l6019022dstbai378191.pdf
2015-11-15 23:10 - 2015-11-15 23:10 - 00058355 _____ C:\Users\Sławomir\Downloads\Wyniki II WTK k .xlsx
2015-11-12 15:29 - 2015-11-12 15:29 - 00034616 _____ C:\Users\Sławomir\Downloads\wyniki II WTK mł (2).xlsx
2015-11-12 14:04 - 2015-11-12 14:04 - 00043008 _____ C:\Users\Sławomir\Downloads\05licencje okresowe142015 (2) (2) (3).xls
2015-11-12 13:01 - 2015-11-12 13:01 - 00034616 _____ C:\Users\Sławomir\Downloads\wyniki II WTK mł (1).xlsx
2015-11-12 12:58 - 2015-11-12 12:58 - 00034616 _____ C:\Users\Sławomir\Downloads\wyniki II WTK mł.xlsx
2015-11-07 09:00 - 2015-11-07 09:00 - 00003401 _____ C:\Users\Sławomir\Downloads\WORD (1).pdf
2015-11-06 23:46 - 2015-11-06 23:46 - 01160024 _____ C:\Users\Sławomir\Downloads\Protokół 31.10.2015 v-2.66.xlsm
2015-11-06 23:46 - 2015-11-06 23:46 - 00000099 ____H C:\Users\Sławomir\Downloads\.~lock.Protokół 31.10.2015 v-2.66.xlsm#
2015-11-03 16:00 - 2015-11-03 19:10 - 00000000 ____D C:\Users\Sławomir\Documents\SharpDevelop Projects
2015-11-03 15:59 - 2015-11-03 15:59 - 00000000 ____D C:\Users\Sławomir\AppData\Roaming\NuGet
2015-11-03 15:59 - 2015-11-03 15:59 - 00000000 ____D C:\Users\Sławomir\AppData\Roaming\ICSharpCode
2015-11-03 15:58 - 2015-11-03 15:58 - 00002211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharpDevelop 5.1 RC.lnk
2015-11-03 15:58 - 2015-11-03 15:58 - 00002199 _____ C:\Users\Public\Desktop\SharpDevelop 5.1 RC.lnk
2015-11-03 15:58 - 2015-11-03 15:58 - 00000000 ____D C:\Program Files (x86)\SharpDevelop
2015-11-03 15:54 - 2015-11-03 15:57 - 12146116 _____ C:\Users\Sławomir\Downloads\SharpDevelop_5.1.0.5134_RC_Setup.msi

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-03 19:20 - 2015-08-07 15:23 - 02037190 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-03 19:20 - 2015-07-10 17:30 - 00885018 _____ C:\WINDOWS\system32\perfh015.dat
2015-12-03 19:20 - 2015-07-10 17:30 - 00191462 _____ C:\WINDOWS\system32\perfc015.dat
2015-12-03 19:20 - 2015-07-10 12:02 - 00000000 ____D C:\WINDOWS\INF
2015-12-03 19:19 - 2015-09-23 10:48 - 00000000 ____D C:\Users\Sławomir\Desktop\Nowy folder
2015-12-03 19:19 - 2015-07-10 11:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-03 19:19 - 2015-07-10 10:05 - 00000000 ____D C:\Windows
2015-12-03 19:18 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-03 19:18 - 2015-03-28 10:31 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-03 19:11 - 2015-03-28 10:31 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-03 19:00 - 2015-08-10 08:26 - 00001070 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-03 19:00 - 2015-08-07 15:50 - 00000000 __SHD C:\Users\Sławomir\IntelGraphicsProfiles
2015-12-03 19:00 - 2015-03-21 13:54 - 00000000 __RDO C:\Users\Sławomir\OneDrive
2015-12-03 18:59 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-03 18:58 - 2015-07-10 10:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-03 18:49 - 2015-08-10 08:26 - 00001074 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-03 18:42 - 2015-07-10 12:04 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-03 16:40 - 2015-09-22 14:07 - 00034547 _____ C:\Users\Sławomir\Desktop\Treningi.odt
2015-12-03 14:23 - 2015-03-21 15:43 - 00004216 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{0D125E2A-87AF-40DC-99ED-740FAB1837C5}
2015-12-02 18:43 - 2015-08-10 08:27 - 00004132 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-02 18:43 - 2015-08-10 08:26 - 00003900 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-11-27 21:57 - 2015-08-07 15:25 - 00000000 ____D C:\Users\Sławomir
2015-11-25 19:01 - 2015-03-29 21:12 - 00000000 ____D C:\Users\Sławomir\AppData\Roaming\Skype
2015-11-25 16:09 - 2015-09-21 14:36 - 01427282 _____ C:\WINDOWS\ProcessedPackets.KTL
2015-11-25 16:09 - 2015-09-21 14:36 - 00583108 _____ C:\WINDOWS\Packet.KTL
2015-11-25 16:09 - 2015-09-21 14:36 - 00008739 _____ C:\WINDOWS\SentOSPackets.KTL
2015-11-25 16:09 - 2015-08-20 11:31 - 00010110 _____ C:\WINDOWS\Control.KTL
2015-11-21 13:58 - 2015-03-29 21:12 - 00000000 ____D C:\ProgramData\Skype
2015-11-16 19:34 - 2015-10-10 20:35 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-11-13 08:47 - 2015-08-10 08:28 - 00002273 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-11-03 19:20 - 2015-10-02 17:53 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-11-03 19:20 - 2015-10-02 17:53 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Pliki w katalogu głównym wybranych folderów =======

2015-08-20 18:48 - 2015-08-20 20:25 - 0001253 _____ () C:\ProgramData\hpzinstall.log

Niektóre pliki w TEMP:
====================
C:\Users\Sławomir\AppData\Local\Temp\Updater.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-11-04 16:10

==================== Koniec  FRST.txt ============================