Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:23-12-2015
Uruchomiony przez user (administrator)  USER-KOMPUTER (23-12-2015 16:55:43)
Uruchomiony z F:\FRST
Załadowane profile: user (Dostępne profile: user)
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
() C:\ProgramData\ApplicationHosting\ApplicationHosting.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
() C:\Users\user\AppData\Roaming\NetService\netservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\ProgramData\Solotough\Solotough.exe
() C:\Users\user\AppData\Roaming\WinNetSvc\WinNetSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\ProgramData\Solotough\Solotough.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [12697368 2014-10-14] (Logitech Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-02-13] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKU\S-1-5-21-2801442270-617576118-1268728334-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
AppInit_DLLs: C:\ProgramData\Solotough\StrongBam.dll => C:\ProgramData\Solotough\StrongBam.dll [518656 2015-12-19] ()
AppInit_DLLs-x32: C:\ProgramData\Solotough\Volit.dll => C:\ProgramData\Solotough\Volit.dll [320512 2015-12-19] ()
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{E257AFF4-59B6-48D1-A087-36D536BDB32C}: [NameServer] 192.168.0.1
Tcpip\..\Interfaces\{E5676A50-D008-478E-A29D-9BDCBF5B5E29}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.aqovd.com?oem=mbtkplv3&uid=5QJ0RDRC_ST31000340AS&tm=1450548273
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.aqovd.com?oem=mbtkplv3&uid=5QJ0RDRC_ST31000340AS&tm=1450548273
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.aqovd.com?oem=mbtkplv3&uid=5QJ0RDRC_ST31000340AS&tm=1450548273
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.aqovd.com?oem=mbtkplv3&uid=5QJ0RDRC_ST31000340AS&tm=1450548273
HKU\S-1-5-21-2801442270-617576118-1268728334-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBP-OqRkK_4g5H3zXx0q1D1XXsHhKKzkrHJ9dPgC7rPiFy61fqYkKGTeGZ9oRxNh6FOZcIX-y_PqkBLRxFV6otRriO7AA31RsILk9eKHz1Rz4Iu-gCQlCINO0BuKzwG6Aj1QYGO23ahvHLrkj8STQXg7T2Qf2XI89Xk0jF4oBa7tJE,&q={searchTerms}
HKU\S-1-5-21-2801442270-617576118-1268728334-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBP-OqRkK_4g5H3zXx0q1D1XXsHhKKzkrHJ9dPgC7rPiFy61fqYkKGTeGZ9oRxNh6FOZcIX-y_PqkBLRxFV6otRriO7AA31RsIHmGrUh4EucnEzZqAVn1Y5ogmpWez0hqwOOoVwqlX-jqrE9D7rH5qJr9SStRqYdV8IUvwPSi-y0cI,
HKU\S-1-5-21-2801442270-617576118-1268728334-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.aqovd.com?oem=mbtkplv3&uid=5QJ0RDRC_ST31000340AS&tm=1450548273
HKU\S-1-5-21-2801442270-617576118-1268728334-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBP-OqRkK_4g5H3zXx0q1D1XXsHhKKzkrHJ9dPgC7rPiFy61fqYkKGTeGZ9oRxNh6FOZcIX-y_PqkBLRxFV6otRriO7AA31RsILk9eKHz1Rz4Iu-gCQlCINO0BuKzwG6Aj1QYGO23ahvHLrkj8STQXg7T2Qf2XI89Xk0jF4oBa7tJE,&q={searchTerms}
HKU\S-1-5-21-2801442270-617576118-1268728334-1000\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBP-OqRkK_4g5H3zXx0q1D1XXsHhKKzkrHJ9dPgC7rPiFy61fqYkKGTeGZ9oRxNh6FOZcIX-y_PqkBLRxFV6otRriO7AA31RsILk9eKHz1Rz4Iu-gCQlCINO0BuKzwG6Aj1QYGO23ahvHLrkj8STQXg7T2Qf2XI89Xk0jF4oBa7tJE,&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL = hxxp://www.globasearch.com/?serie=219&installkey=R205ERhakGhveLWemg10&b=3&q={searchTerms}
SearchScopes: HKLM-x32 -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBP-OqRkK_4g5H3zXx0q1D1XXsHhKKzkrHJ9dPgC7rPiFy61fqYkKGTeGZ9oRxNh6FOZcIX-y_PqkBLRxFV6otRriO7AA31RsILk9eKHz1Rz4Iu-gCQlCINO0BuKzwG6Aj1QYGO23ahvHLrkj8STQXg7T2Qf2XI89Xk0jF4oBa7tJE,&q={searchTerms}
SearchScopes: HKLM-x32 -> {ielnksrch} URL = hxxp://www.globasearch.com/?serie=219&installkey=R205ERhakGhveLWemg10&b=3&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2801442270-617576118-1268728334-1000 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBP-OqRkK_4g5H3zXx0q1D1XXsHhKKzkrHJ9dPgC7rPiFy61fqYkKGTeGZ9oRxNh6FOZcIX-y_PqkBLRxFV6otRriO7AA31RsILk9eKHz1Rz4Iu-gCQlCINO0BuKzwG6Aj1QYGO23ahvHLrkj8STQXg7T2Qf2XI89Xk0jF4oBa7tJE,&q={searchTerms}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\o7n5lh3z.default-1446717373185
FF NewTab: C:\\ProgramData\\Solotoughs\\ff.NT
FF DefaultSearchEngine: findit
FF Homepage: www.aqovd.com?oem=mbtkplv3&uid=5QJ0RDRC_ST31000340AS&tm=1450548273
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2801442270-617576118-1268728334-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\user\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-2801442270-617576118-1268728334-1000: SkypePlugin -> C:\Users\user\AppData\Local\SkypePlugin\7.6.0.295\npGatewayNpapi.dll [2015-09-14] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-2801442270-617576118-1268728334-1000: SkypePlugin64 -> C:\Users\user\AppData\Local\SkypePlugin\7.6.0.295\npGatewayNpapi-x64.dll [2015-09-14] (Skype Technologies S.A.)
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\o7n5lh3z.default-1446717373185\searchplugins\findit.xml [2015-12-23]
FF Extension: "Builder Camera - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\o7n5lh3z.default-1446717373185\Extensions\@3FB2CFB1E91AAF73CC3D4C765EE585E13FB2.xpi [2015-12-19] [Brak podpisu cyfrowego]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\!3FB2CFB1E91AAF73CC3D4C765EE585E13FB2.js [2015-12-19] <==== UWAGA
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\3FB2CFB1E91AAF73CC3D4C765EE585E13FB2 [2015-12-19] <==== UWAGA

Chrome: 
=======
CHR HomePage: Default -> www.aqovd.com?oem=mbtkplv3&uid=5QJ0RDRC_ST31000340AS&tm=1450548273
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-19]
CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-19]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-19]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-19]
CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-19]
CHR Extension: (Google Sheets) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-19]
CHR Extension: (Google Docs Offline) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-19]
CHR Extension: (Chrome Web Store Payments) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-19]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-19]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 ApplicationHosting; C:\ProgramData\\ApplicationHosting\\ApplicationHosting.exe [437248 2015-12-19] () [Brak podpisu cyfrowego]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2014-09-06] ()
R2 NetTcpHandler; C:\Users\user\AppData\Roaming\NetService\netservice.exe [173088 2015-07-09] ()
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2104840 2015-12-06] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-12-31] ()
R2 Solotough; C:\ProgramData\\Solotough\\Solotough.exe [437248 2015-12-19] () [Brak podpisu cyfrowego]
R2 WinNetSvc; C:\Users\user\AppData\Roaming\WinNetSvc\WinNetSvc.exe [4845408 2015-12-16] ()

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 adiusbaw; C:\Windows\System32\DRIVERS\adiusbawx64.sys [169496 2007-02-07] (Analog Devices Inc.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-23 16:42 - 2015-12-23 16:55 - 00000000 ____D C:\FRST
2015-12-23 16:36 - 2015-12-23 16:40 - 00002395 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-23 16:36 - 2015-12-23 16:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-19 20:59 - 2015-06-19 15:52 - 00000993 _____ C:\Users\user\Desktop\CCleaner.lnk
2015-12-19 20:54 - 2015-12-19 20:54 - 00001264 _____ C:\Users\user\Desktop\Revo Uninstaller.lnk
2015-12-19 20:54 - 2015-12-19 20:54 - 00000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2015-12-19 20:54 - 2015-12-19 20:54 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-12-19 20:06 - 2015-12-19 20:06 - 00003568 _____ C:\Windows\System32\Tasks\{38B8823F-E39B-484D-8425-E5C9B25FC365}
2015-12-19 19:28 - 2015-12-19 19:28 - 00000000 ____D C:\Users\user\AppData\Roaming\Google
2015-12-19 19:27 - 2015-12-19 19:43 - 00000000 ____D C:\Users\user\AppData\Roaming\WinNetSvc
2015-12-19 19:27 - 2015-12-19 19:27 - 00000568 __RSH C:\ProgramData\ntuser.pol
2015-12-19 19:27 - 2015-12-19 19:27 - 00000000 _____ C:\END
2015-12-19 19:09 - 2015-12-19 19:09 - 00000000 ____D C:\ProgramData\TEMP
2015-12-19 19:05 - 2015-12-19 20:24 - 00000000 ____D C:\Users\user\AppData\Roaming\systweak
2015-12-19 19:05 - 2015-12-19 19:05 - 00003168 _____ C:\Windows\System32\Tasks\Builder Camera
2015-12-19 19:05 - 2015-12-19 19:05 - 00003148 _____ C:\Windows\System32\Tasks\Builder Camera2
2015-12-19 19:05 - 2015-12-19 19:05 - 00000000 ____D C:\Users\user\AppData\Local\Builder Camera
2015-12-19 19:05 - 2015-11-20 19:27 - 00019888 _____ () C:\Windows\system32\roboot64.exe
2015-12-19 19:04 - 2015-12-23 16:40 - 00000000 ____D C:\Users\user\AppData\Roaming\RunDir
2015-12-19 19:04 - 2015-12-23 16:30 - 00002385 _____ C:\Windows\SysWOW64\findit.xml
2015-12-19 19:04 - 2015-12-19 19:43 - 00000000 ____D C:\Users\user\AppData\Roaming\NetService
2015-12-19 19:04 - 2015-12-19 19:04 - 00000000 ____D C:\ProgramData\Windows Monitor
2015-12-19 19:04 - 2015-12-19 19:04 - 00000000 ____D C:\ProgramData\Solotoughs
2015-12-19 19:03 - 2015-12-23 16:30 - 00000000 ____D C:\ProgramData\Solotough
2015-12-19 19:03 - 2015-12-19 19:03 - 00000000 ____D C:\ProgramData\ApplicationHosting
2015-12-19 18:52 - 2015-12-19 18:52 - 00003332 _____ C:\Windows\System32\Tasks\Bluetooth Driver Installer
2015-12-19 12:26 - 2015-12-19 12:26 - 00280464 _____ C:\Users\user\Downloads\Katarzyna+Sornat.+CV+wraz+ze+zdjęciem+i+klauzulą (2).pdf
2015-12-18 11:34 - 2015-12-18 11:34 - 00694599 _____ C:\Users\user\Downloads\PODDASZE.pdf
2015-12-18 11:33 - 2015-12-18 11:33 - 00528705 _____ C:\Users\user\Downloads\ELEWACJA ZACHODNIA.pdf
2015-12-18 11:33 - 2015-12-18 11:33 - 00175282 _____ C:\Users\user\Downloads\ELEWACJA POLNOCNA (1).pdf
2015-12-18 11:27 - 2015-12-18 11:27 - 00528594 _____ C:\Users\user\Downloads\PRZEKROJ (2).pdf
2015-12-18 09:43 - 2015-12-18 09:43 - 00000704 _____ C:\Users\user\Desktop\dzialki Zakopane Koscielisko.txt
2015-12-17 08:29 - 2015-12-17 08:29 - 00048689 _____ C:\Users\user\Desktop\Wiktor artysta.jpeg
2015-12-16 08:29 - 2015-12-16 08:29 - 00065280 _____ C:\Users\user\Downloads\PACKING LIST (6).pdf
2015-12-16 08:29 - 2015-12-16 08:29 - 00060783 _____ C:\Users\user\Downloads\COMMERCIAL INVOICE (4).pdf
2015-12-16 08:26 - 2015-12-16 08:26 - 00857357 _____ C:\Users\user\Downloads\Form A.jpeg
2015-12-16 08:24 - 2015-12-16 08:24 - 00035520 _____ C:\Users\user\Downloads\Bill of Lading copy.pdf
2015-12-15 13:45 - 2015-12-15 13:45 - 00828866 _____ C:\Users\user\Downloads\Załącznik nr 1 - Mapa. Zamieszczono 10.12.2015 r..pdf
2015-12-15 13:33 - 2015-12-16 11:11 - 00002660 _____ C:\Users\user\Desktop\Indie Kerala Munnar.txt
2015-12-15 05:05 - 2015-12-15 05:09 - 00046602 _____ C:\Users\user\Desktop\865 USD.jpeg
2015-12-14 13:35 - 2015-12-14 13:35 - 00081792 _____ C:\Users\user\Downloads\Confirmation_for_Booking_ID___80030860_Check-in_January_24__2016.pdf
2015-12-14 12:04 - 2015-12-14 12:04 - 00000156 _____ C:\Users\user\Desktop\ceny wyspy dojazd.txt
2015-12-14 10:32 - 2015-12-14 10:35 - 00000000 ____D C:\Users\user\Desktop\szale dostawa Krynica
2015-12-14 09:36 - 2015-12-14 09:36 - 00123785 _____ C:\Users\user\Desktop\Łukasza paszport.jpeg
2015-12-14 09:35 - 2015-12-14 09:33 - 00149313 _____ C:\Users\user\Desktop\mój paszport.jpeg
2015-12-13 10:32 - 2015-12-13 10:32 - 00280464 _____ C:\Users\user\Downloads\Katarzyna+Sornat.+CV+wraz+ze+zdjęciem+i+klauzulą (1).pdf
2015-12-13 10:31 - 2015-12-13 10:32 - 00280464 _____ C:\Users\user\Downloads\Katarzyna+Sornat.+CV+wraz+ze+zdjęciem+i+klauzulą.pdf
2015-12-12 22:32 - 2015-12-13 20:04 - 00000000 ____D C:\Users\user\Desktop\Khlong Saen Saeb - Route Guide and How to use it_files
2015-12-12 22:32 - 2015-12-12 22:32 - 00354419 _____ C:\Users\user\Desktop\Khlong Saen Saeb - Route Guide and How to use it.html
2015-12-12 22:30 - 2015-12-13 20:04 - 00000000 ____D C:\Users\user\Desktop\klong_files
2015-12-12 22:30 - 2015-12-12 22:30 - 00348012 _____ C:\Users\user\Desktop\klong.html
2015-12-12 19:44 - 2015-12-12 19:44 - 00000148 _____ C:\Users\user\Desktop\ekspedientka.txt
2015-12-11 12:25 - 2015-12-11 12:25 - 00191770 _____ C:\Users\user\Desktop\aeroflot bonus.jpeg
2015-12-11 11:24 - 2015-12-11 11:24 - 00041437 _____ C:\Users\user\Downloads\Electronic ticket receipt
2015-12-11 10:10 - 2015-12-11 10:10 - 00031911 _____ C:\Users\user\Downloads\SendungHistorie- MARSON (3).pdf
2015-12-11 10:08 - 2015-12-11 10:08 - 00020375 _____ C:\Users\user\Downloads\EZA-Steuerbescheid-2015-12-08_ MARSON.pdf
2015-12-11 10:07 - 2015-12-11 10:07 - 00580669 _____ C:\Users\user\Downloads\MX-2300N_20151208_104648 (1).pdf
2015-12-11 09:52 - 2015-12-11 09:52 - 00042442 _____ C:\Users\user\Downloads\PotwierdzenieOperacji_20151211_095210.pdf
2015-12-10 01:14 - 2015-12-10 01:31 - 00001864 _____ C:\Users\user\Desktop\10 grudnia Bangkok.txt
2015-12-09 21:56 - 2015-12-09 21:56 - 00082351 _____ C:\Users\user\Desktop\bilet na katamaran.jpeg
2015-12-09 18:52 - 2015-12-09 18:52 - 00055476 _____ C:\Users\user\Downloads\45971407_F_40121513_12_15_F.pdf
2015-12-09 13:50 - 2015-12-09 13:50 - 00000030 _____ C:\Users\user\Desktop\agoda hasło.txt
2015-12-09 12:40 - 2015-12-09 12:40 - 00006351 _____ C:\Users\user\Downloads\Lukasz_Marski_(Booking_No-_TGHHPD)_23_Jan_2016_Hangzhou_✈_Bangkok_-_Don_Mueang_-_Travel_Itinerary_ALL.zip
2015-12-09 12:35 - 2015-12-09 12:35 - 00031993 _____ C:\Users\user\Downloads\Your Electronic Ticket Receipt (3).pdf
2015-12-09 12:05 - 2015-12-09 12:05 - 00031993 _____ C:\Users\user\Downloads\Your Electronic Ticket Receipt (2).pdf
2015-12-08 10:55 - 2015-12-08 10:55 - 00580669 _____ C:\Users\user\Downloads\MX-2300N_20151208_104648.pdf
2015-12-08 08:21 - 2015-12-08 08:21 - 00019968 _____ C:\Users\user\Documents\w kontenerze w grudniu.xls
2015-12-07 18:13 - 2015-12-07 18:13 - 00060783 _____ C:\Users\user\Downloads\COMMERCIAL INVOICE (3).pdf
2015-12-07 18:09 - 2015-12-07 18:09 - 00060783 _____ C:\Users\user\Downloads\COMMERCIAL INVOICE (2).pdf
2015-12-07 18:08 - 2015-12-07 18:08 - 00065280 _____ C:\Users\user\Downloads\PACKING LIST (5).pdf
2015-12-07 18:07 - 2015-12-07 18:07 - 00060783 _____ C:\Users\user\Downloads\COMMERCIAL INVOICE (1).pdf
2015-12-06 09:05 - 2015-12-06 09:06 - 00000000 ____D C:\Users\user\Desktop\Papierosy
2015-12-06 07:02 - 2015-12-06 07:02 - 04484608 _____ C:\Users\user\Downloads\final order list (1).xls
2015-12-06 06:59 - 2015-12-06 07:00 - 10437632 _____ C:\Users\user\Downloads\final order list.xls
2015-12-05 10:38 - 2015-12-05 10:38 - 00094549 _____ C:\Users\user\Downloads\zam453 (1).pdf
2015-12-04 18:56 - 2015-12-04 18:56 - 00094549 _____ C:\Users\user\Downloads\zam453.pdf
2015-12-04 18:51 - 2015-12-04 18:51 - 00000212 _____ C:\Users\user\Desktop\thailand khanong mieszkanie.txt
2015-12-04 14:23 - 2015-12-04 14:23 - 00000267 _____ C:\Users\user\Desktop\wietnam hotele wyspa.txt
2015-12-04 08:18 - 2015-12-04 10:11 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-12-04 08:17 - 2015-12-04 13:42 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-12-04 08:17 - 2015-12-04 08:17 - 00002047 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2015-12-04 08:17 - 2015-12-04 08:17 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-12-04 08:16 - 2015-12-04 08:16 - 00199689 _____ C:\Users\user\Desktop\Urząd Kaucja.pdf
2015-12-04 08:13 - 2015-12-04 08:13 - 00286237 _____ C:\Users\user\Desktop\skan2 natalia urząd.jpeg
2015-12-04 08:11 - 2015-12-04 08:11 - 00139614 _____ C:\Users\user\Desktop\Hamburg skan.pdf
2015-12-04 08:10 - 2015-12-04 08:10 - 00139614 _____ C:\Users\user\Downloads\images.pdf
2015-12-04 08:06 - 2015-12-04 08:14 - 00264773 _____ C:\Users\user\Desktop\skan natalia.jpeg
2015-12-03 18:40 - 2015-12-03 18:40 - 01697292 _____ C:\Users\user\Downloads\Załącznik nr 1 - Mapa. Zamieszczono 23.11.2015 r..pdf
2015-12-03 18:39 - 2015-12-03 18:39 - 00299647 _____ C:\Users\user\Downloads\Informacja o wynikach przetargu z 17.11.2015 r. (1).pdf
2015-12-01 09:15 - 2015-12-01 09:15 - 04198956 _____ C:\Users\user\Downloads\MX-2300N_20151201_091330.pdf
2015-12-01 08:59 - 2015-12-01 08:59 - 00000758 _____ C:\Users\user\Downloads\list (14).txt
2015-12-01 08:58 - 2015-12-01 08:58 - 00000856 _____ C:\Users\user\Downloads\AW-_WG-_Towary_w_kontenerze_ALL.zip
2015-12-01 08:58 - 2015-12-01 08:58 - 00000758 _____ C:\Users\user\Downloads\list (13).txt
2015-12-01 08:39 - 2015-12-01 08:39 - 00129961 _____ C:\Users\user\Downloads\MX-2300N_20150720_135540 (2).pdf
2015-12-01 08:38 - 2015-12-01 08:38 - 00129961 _____ C:\Users\user\Downloads\MX-2300N_20150720_135540 (1).pdf
2015-11-29 19:44 - 2015-11-29 19:44 - 00000004 _____ C:\Users\user\Downloads\list (12).txt
2015-11-29 19:44 - 2015-11-29 19:44 - 00000004 _____ C:\Users\user\Downloads\list (11).txt
2015-11-29 17:32 - 2015-11-29 17:33 - 00000088 _____ C:\Users\user\Desktop\mieszkanie pattaya.txt
2015-11-26 07:02 - 2015-11-26 07:02 - 00016208 _____ C:\Users\user\Downloads\Untitled
2015-11-25 20:48 - 2015-11-25 20:48 - 00087612 _____ C:\Users\user\Desktop\min tien dzień.html
2015-11-25 20:48 - 2015-11-25 20:48 - 00000000 ____D C:\Users\user\Desktop\min tien dzień_files
2015-11-25 19:11 - 2015-11-25 20:02 - 00000000 ____D C:\Users\user\Desktop\towary w kontenerze
2015-11-25 19:06 - 2015-11-25 19:06 - 00129130 _____ C:\Users\user\Downloads\mar.son.pdf
2015-11-25 19:05 - 2015-11-25 19:05 - 05576227 _____ C:\Users\user\Downloads\DTR_DUO_2015.09.29[1].pdf
2015-11-25 18:04 - 2015-11-25 18:04 - 00000000 ____D C:\Users\user\Desktop\towar w kontenerze
2015-11-25 13:17 - 2015-11-25 13:17 - 00000209 _____ C:\Users\user\Desktop\Fallout New Vegas.url
2015-11-25 13:17 - 2015-11-25 13:17 - 00000000 ____D C:\Users\user\Documents\my games
2015-11-25 08:09 - 2015-11-25 09:10 - 00000000 ____D C:\Users\user\Desktop\25 listopada
2015-11-24 21:36 - 2015-11-24 22:47 - 00000000 ____D C:\Users\user\Desktop\Nowy folder
2015-11-23 08:18 - 2015-11-23 10:22 - 00003680 _____ C:\Users\user\Desktop\Shenzhen.txt

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-23 16:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2015-12-23 16:44 - 2014-09-18 05:46 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-23 16:44 - 2009-07-14 05:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-23 16:44 - 2009-07-14 05:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-23 16:40 - 2014-11-16 17:21 - 00001293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-23 16:40 - 2010-12-29 17:03 - 00001555 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-23 16:35 - 2011-10-15 16:07 - 00000000 ____D C:\Program Files (x86)\Google
2015-12-23 16:34 - 2009-07-14 18:55 - 00743746 _____ C:\Windows\system32\perfh015.dat
2015-12-23 16:34 - 2009-07-14 18:55 - 00157336 _____ C:\Windows\system32\perfc015.dat
2015-12-23 16:34 - 2009-07-14 06:13 - 01679518 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-23 16:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-12-23 16:29 - 2014-09-18 05:46 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-23 16:29 - 2013-03-31 16:11 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-19 22:23 - 2015-02-01 18:59 - 00000000 ____D C:\Users\user\AppData\Local\Windows Live
2015-12-19 20:50 - 2014-12-05 15:52 - 00000000 __SHD C:\Users\user\AppData\LocalLow\EmieBrowserModeList
2015-12-19 20:50 - 2014-09-23 05:46 - 00000000 __SHD C:\Users\user\AppData\LocalLow\EmieUserList
2015-12-19 20:50 - 2014-09-23 05:46 - 00000000 __SHD C:\Users\user\AppData\LocalLow\EmieSiteList
2015-12-19 20:17 - 2013-12-16 17:12 - 00000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2801442270-617576118-1268728334-1000UA.job
2015-12-19 19:43 - 2011-04-20 17:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasySetPackage
2015-12-19 19:43 - 2011-04-20 17:34 - 00000000 ____D C:\Program Files (x86)\LG Soft India
2015-12-19 19:43 - 2010-12-30 08:52 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-19 19:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2015-12-19 19:28 - 2015-02-01 19:01 - 00000000 ___RD C:\Users\user\OneDrive
2015-12-19 19:27 - 2009-07-14 04:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-12-19 19:27 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2015-12-19 19:09 - 2015-10-23 14:26 - 00000000 _____ C:\Windows\SysWOW64\track
2015-12-19 19:05 - 2015-11-08 00:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-19 19:00 - 2014-12-05 15:52 - 00000000 __SHD C:\Users\user\AppData\Local\EmieBrowserModeList
2015-12-19 19:00 - 2014-09-23 05:46 - 00000000 __SHD C:\Users\user\AppData\Local\EmieUserList
2015-12-19 19:00 - 2014-09-23 05:46 - 00000000 __SHD C:\Users\user\AppData\Local\EmieSiteList
2015-12-19 18:43 - 2013-12-16 17:12 - 00000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2801442270-617576118-1268728334-1000Core.job
2015-12-17 12:09 - 2009-07-14 06:08 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-12-17 08:29 - 2014-09-09 09:01 - 00000000 ___RD C:\Users\user\Documents\Scanned Documents
2015-12-13 20:04 - 2015-04-04 08:15 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-13 20:04 - 2013-12-25 23:42 - 00000000 ____D C:\ProgramData\Origin
2015-12-08 10:50 - 2011-05-11 10:19 - 00000012 _____ C:\Users\user\intlname.ols
2015-12-04 13:39 - 2011-10-15 16:07 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-04 13:39 - 2011-10-15 16:07 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-04 08:19 - 2011-02-02 16:34 - 00000000 ____D C:\Users\user\AppData\Local\Adobe
2015-11-23 23:13 - 2015-11-04 15:00 - 00000000 ____D C:\Users\user\Desktop\Memy

Niektóre pliki w TEMP:
====================
C:\Users\user\AppData\Local\Temp\avg896E.exe
C:\Users\user\AppData\Local\Temp\avgB087.exe
C:\Users\user\AppData\Local\Temp\Conlab.exe
C:\Users\user\AppData\Local\Temp\Freshcom.exe
C:\Users\user\AppData\Local\Temp\Newtough.exe
C:\Users\user\AppData\Local\Temp\nss406A.exe
C:\Users\user\AppData\Local\Temp\Zotjob.exe


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-12-10 11:45

==================== Koniec  FRST.txt ============================