Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:23-12-2015
Uruchomiony przez user (administrator)  USER-KOMPUTER (01-01-2016 15:07:31)
Uruchomiony z F:\FRST
Załadowane profile: user (Dostępne profile: user)
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [12697368 2014-10-14] (Logitech Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-02-13] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKU\S-1-5-21-2801442270-617576118-1268728334-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{E257AFF4-59B6-48D1-A087-36D536BDB32C}: [NameServer] 192.168.0.1
Tcpip\..\Interfaces\{E5676A50-D008-478E-A29D-9BDCBF5B5E29}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\o7n5lh3z.default-1446717373185
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2801442270-617576118-1268728334-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\user\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-2801442270-617576118-1268728334-1000: SkypePlugin -> C:\Users\user\AppData\Local\SkypePlugin\7.6.0.295\npGatewayNpapi.dll [2015-09-14] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-2801442270-617576118-1268728334-1000: SkypePlugin64 -> C:\Users\user\AppData\Local\SkypePlugin\7.6.0.295\npGatewayNpapi-x64.dll [2015-09-14] (Skype Technologies S.A.)

Chrome: 
=======
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-19]
CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-19]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-19]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-19]
CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-19]
CHR Extension: (Google Sheets) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-19]
CHR Extension: (Google Docs Offline) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-19]
CHR Extension: (AdBlock) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-12-23]
CHR Extension: (Chrome Web Store Payments) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-19]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-19]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2014-09-06] ()
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2104840 2015-12-06] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-12-31] ()

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 adiusbaw; C:\Windows\System32\DRIVERS\adiusbawx64.sys [169496 2007-02-07] (Analog Devices Inc.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-01 15:02 - 2016-01-01 15:06 - 00000000 ____D C:\Users\user\Desktop\Raporty forum
2016-01-01 14:57 - 2016-01-01 14:59 - 00000000 ____D C:\AdwCleaner
2016-01-01 14:56 - 2016-01-01 14:56 - 01745920 _____ C:\Users\user\Downloads\adwcleaner_5.027.exe
2016-01-01 14:56 - 2016-01-01 14:56 - 00000000 ____D C:\Users\user\AppData\rundir
2015-12-23 17:47 - 2015-12-23 17:47 - 875539258 _____ C:\Windows\MEMORY.DMP
2015-12-23 17:47 - 2015-12-23 17:47 - 00454840 _____ C:\Windows\Minidump\122315-16593-01.dmp
2015-12-23 17:34 - 2015-12-23 17:34 - 00089057 _____ C:\Users\user\Downloads\GMER.txt
2015-12-23 16:42 - 2016-01-01 15:07 - 00000000 ____D C:\FRST
2015-12-23 16:36 - 2016-01-01 15:03 - 00002200 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-23 16:36 - 2016-01-01 15:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-19 20:59 - 2015-06-19 15:52 - 00000993 _____ C:\Users\user\Desktop\CCleaner.lnk
2015-12-19 20:54 - 2015-12-19 20:54 - 00001264 _____ C:\Users\user\Desktop\Revo Uninstaller.lnk
2015-12-19 20:54 - 2015-12-19 20:54 - 00000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2015-12-19 20:54 - 2015-12-19 20:54 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-12-19 19:28 - 2015-12-19 19:28 - 00000000 ____D C:\Users\user\AppData\Roaming\Google
2015-12-19 19:27 - 2016-01-01 15:05 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-12-19 19:09 - 2015-12-19 19:09 - 00000000 ____D C:\ProgramData\TEMP
2015-12-19 19:04 - 2015-12-19 19:04 - 00000000 ____D C:\ProgramData\Windows Monitor
2015-12-19 12:26 - 2015-12-19 12:26 - 00280464 _____ C:\Users\user\Downloads\Katarzyna+Sornat.+CV+wraz+ze+zdjęciem+i+klauzulą (2).pdf
2015-12-18 11:34 - 2015-12-18 11:34 - 00694599 _____ C:\Users\user\Downloads\PODDASZE.pdf
2015-12-18 11:33 - 2015-12-18 11:33 - 00528705 _____ C:\Users\user\Downloads\ELEWACJA ZACHODNIA.pdf
2015-12-18 11:33 - 2015-12-18 11:33 - 00175282 _____ C:\Users\user\Downloads\ELEWACJA POLNOCNA (1).pdf
2015-12-18 11:27 - 2015-12-18 11:27 - 00528594 _____ C:\Users\user\Downloads\PRZEKROJ (2).pdf
2015-12-18 09:43 - 2015-12-18 09:43 - 00000704 _____ C:\Users\user\Desktop\dzialki Zakopane Koscielisko.txt
2015-12-17 08:29 - 2015-12-17 08:29 - 00048689 _____ C:\Users\user\Desktop\Wiktor artysta.jpeg
2015-12-16 08:29 - 2015-12-16 08:29 - 00065280 _____ C:\Users\user\Downloads\PACKING LIST (6).pdf
2015-12-16 08:29 - 2015-12-16 08:29 - 00060783 _____ C:\Users\user\Downloads\COMMERCIAL INVOICE (4).pdf
2015-12-16 08:26 - 2015-12-16 08:26 - 00857357 _____ C:\Users\user\Downloads\Form A.jpeg
2015-12-16 08:24 - 2015-12-16 08:24 - 00035520 _____ C:\Users\user\Downloads\Bill of Lading copy.pdf
2015-12-15 13:45 - 2015-12-15 13:45 - 00828866 _____ C:\Users\user\Downloads\Załącznik nr 1 - Mapa. Zamieszczono 10.12.2015 r..pdf
2015-12-15 13:33 - 2015-12-16 11:11 - 00002660 _____ C:\Users\user\Desktop\Indie Kerala Munnar.txt
2015-12-15 05:05 - 2015-12-15 05:09 - 00046602 _____ C:\Users\user\Desktop\865 USD.jpeg
2015-12-14 13:35 - 2015-12-14 13:35 - 00081792 _____ C:\Users\user\Downloads\Confirmation_for_Booking_ID___80030860_Check-in_January_24__2016.pdf
2015-12-14 12:04 - 2015-12-14 12:04 - 00000156 _____ C:\Users\user\Desktop\ceny wyspy dojazd.txt
2015-12-14 10:32 - 2015-12-14 10:35 - 00000000 ____D C:\Users\user\Desktop\szale dostawa Krynica
2015-12-14 09:36 - 2015-12-14 09:36 - 00123785 _____ C:\Users\user\Desktop\Łukasza paszport.jpeg
2015-12-14 09:35 - 2015-12-14 09:33 - 00149313 _____ C:\Users\user\Desktop\mój paszport.jpeg
2015-12-13 10:32 - 2015-12-13 10:32 - 00280464 _____ C:\Users\user\Downloads\Katarzyna+Sornat.+CV+wraz+ze+zdjęciem+i+klauzulą (1).pdf
2015-12-13 10:31 - 2015-12-13 10:32 - 00280464 _____ C:\Users\user\Downloads\Katarzyna+Sornat.+CV+wraz+ze+zdjęciem+i+klauzulą.pdf
2015-12-12 22:32 - 2015-12-13 20:04 - 00000000 ____D C:\Users\user\Desktop\Khlong Saen Saeb - Route Guide and How to use it_files
2015-12-12 22:32 - 2015-12-12 22:32 - 00354419 _____ C:\Users\user\Desktop\Khlong Saen Saeb - Route Guide and How to use it.html
2015-12-12 22:30 - 2015-12-13 20:04 - 00000000 ____D C:\Users\user\Desktop\klong_files
2015-12-12 22:30 - 2015-12-12 22:30 - 00348012 _____ C:\Users\user\Desktop\klong.html
2015-12-12 19:44 - 2015-12-12 19:44 - 00000148 _____ C:\Users\user\Desktop\ekspedientka.txt
2015-12-11 12:25 - 2015-12-11 12:25 - 00191770 _____ C:\Users\user\Desktop\aeroflot bonus.jpeg
2015-12-11 11:24 - 2015-12-11 11:24 - 00041437 _____ C:\Users\user\Downloads\Electronic ticket receipt
2015-12-11 10:10 - 2015-12-11 10:10 - 00031911 _____ C:\Users\user\Downloads\SendungHistorie- MARSON (3).pdf
2015-12-11 10:08 - 2015-12-11 10:08 - 00020375 _____ C:\Users\user\Downloads\EZA-Steuerbescheid-2015-12-08_ MARSON.pdf
2015-12-11 10:07 - 2015-12-11 10:07 - 00580669 _____ C:\Users\user\Downloads\MX-2300N_20151208_104648 (1).pdf
2015-12-11 09:52 - 2015-12-11 09:52 - 00042442 _____ C:\Users\user\Downloads\PotwierdzenieOperacji_20151211_095210.pdf
2015-12-10 01:14 - 2015-12-10 01:31 - 00001864 _____ C:\Users\user\Desktop\10 grudnia Bangkok.txt
2015-12-09 21:56 - 2015-12-09 21:56 - 00082351 _____ C:\Users\user\Desktop\bilet na katamaran.jpeg
2015-12-09 18:52 - 2015-12-09 18:52 - 00055476 _____ C:\Users\user\Downloads\45971407_F_40121513_12_15_F.pdf
2015-12-09 13:50 - 2015-12-09 13:50 - 00000030 _____ C:\Users\user\Desktop\agoda hasło.txt
2015-12-09 12:40 - 2015-12-09 12:40 - 00006351 _____ C:\Users\user\Downloads\Lukasz_Marski_(Booking_No-_TGHHPD)_23_Jan_2016_Hangzhou_✈_Bangkok_-_Don_Mueang_-_Travel_Itinerary_ALL.zip
2015-12-09 12:35 - 2015-12-09 12:35 - 00031993 _____ C:\Users\user\Downloads\Your Electronic Ticket Receipt (3).pdf
2015-12-09 12:05 - 2015-12-09 12:05 - 00031993 _____ C:\Users\user\Downloads\Your Electronic Ticket Receipt (2).pdf
2015-12-08 10:55 - 2015-12-08 10:55 - 00580669 _____ C:\Users\user\Downloads\MX-2300N_20151208_104648.pdf
2015-12-08 08:21 - 2015-12-08 08:21 - 00019968 _____ C:\Users\user\Documents\w kontenerze w grudniu.xls
2015-12-07 18:13 - 2015-12-07 18:13 - 00060783 _____ C:\Users\user\Downloads\COMMERCIAL INVOICE (3).pdf
2015-12-07 18:09 - 2015-12-07 18:09 - 00060783 _____ C:\Users\user\Downloads\COMMERCIAL INVOICE (2).pdf
2015-12-07 18:08 - 2015-12-07 18:08 - 00065280 _____ C:\Users\user\Downloads\PACKING LIST (5).pdf
2015-12-07 18:07 - 2015-12-07 18:07 - 00060783 _____ C:\Users\user\Downloads\COMMERCIAL INVOICE (1).pdf
2015-12-06 09:05 - 2015-12-06 09:06 - 00000000 ____D C:\Users\user\Desktop\Papierosy
2015-12-06 07:02 - 2015-12-06 07:02 - 04484608 _____ C:\Users\user\Downloads\final order list (1).xls
2015-12-06 06:59 - 2015-12-06 07:00 - 10437632 _____ C:\Users\user\Downloads\final order list.xls
2015-12-05 10:38 - 2015-12-05 10:38 - 00094549 _____ C:\Users\user\Downloads\zam453 (1).pdf
2015-12-04 18:56 - 2015-12-04 18:56 - 00094549 _____ C:\Users\user\Downloads\zam453.pdf
2015-12-04 18:51 - 2015-12-04 18:51 - 00000212 _____ C:\Users\user\Desktop\thailand khanong mieszkanie.txt
2015-12-04 14:23 - 2015-12-04 14:23 - 00000267 _____ C:\Users\user\Desktop\wietnam hotele wyspa.txt
2015-12-04 08:18 - 2015-12-04 10:11 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-12-04 08:17 - 2015-12-04 13:42 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-12-04 08:17 - 2015-12-04 08:17 - 00002047 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2015-12-04 08:17 - 2015-12-04 08:17 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-12-04 08:16 - 2015-12-04 08:16 - 00199689 _____ C:\Users\user\Desktop\Urząd Kaucja.pdf
2015-12-04 08:13 - 2015-12-04 08:13 - 00286237 _____ C:\Users\user\Desktop\skan2 natalia urząd.jpeg
2015-12-04 08:11 - 2015-12-04 08:11 - 00139614 _____ C:\Users\user\Desktop\Hamburg skan.pdf
2015-12-04 08:10 - 2015-12-04 08:10 - 00139614 _____ C:\Users\user\Downloads\images.pdf
2015-12-04 08:06 - 2015-12-04 08:14 - 00264773 _____ C:\Users\user\Desktop\skan natalia.jpeg
2015-12-03 18:40 - 2015-12-03 18:40 - 01697292 _____ C:\Users\user\Downloads\Załącznik nr 1 - Mapa. Zamieszczono 23.11.2015 r..pdf
2015-12-03 18:39 - 2015-12-03 18:39 - 00299647 _____ C:\Users\user\Downloads\Informacja o wynikach przetargu z 17.11.2015 r. (1).pdf

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-01 15:05 - 2014-09-18 05:46 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-01 15:05 - 2013-03-31 16:11 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-01 15:04 - 2009-07-14 05:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-01 15:04 - 2009-07-14 05:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-01 15:03 - 2014-11-16 17:21 - 00001061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-01-01 15:03 - 2010-12-29 17:03 - 00001164 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-01-01 15:03 - 2009-07-14 04:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-01-01 15:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2016-01-01 14:56 - 2009-07-14 18:55 - 00743746 _____ C:\Windows\system32\perfh015.dat
2016-01-01 14:56 - 2009-07-14 18:55 - 00157336 _____ C:\Windows\system32\perfc015.dat
2016-01-01 14:56 - 2009-07-14 06:13 - 01679518 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-01 14:56 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-01-01 14:55 - 2015-11-08 00:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-26 14:17 - 2013-12-16 17:12 - 00000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2801442270-617576118-1268728334-1000UA.job
2015-12-26 13:45 - 2014-09-18 05:46 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-25 17:17 - 2013-12-16 17:12 - 00000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2801442270-617576118-1268728334-1000Core.job
2015-12-23 17:47 - 2011-01-02 04:00 - 00000000 ____D C:\Windows\Minidump
2015-12-23 17:47 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2015-12-23 16:35 - 2011-10-15 16:07 - 00000000 ____D C:\Program Files (x86)\Google
2015-12-19 22:23 - 2015-02-01 18:59 - 00000000 ____D C:\Users\user\AppData\Local\Windows Live
2015-12-19 20:50 - 2014-12-05 15:52 - 00000000 __SHD C:\Users\user\AppData\LocalLow\EmieBrowserModeList
2015-12-19 20:50 - 2014-09-23 05:46 - 00000000 __SHD C:\Users\user\AppData\LocalLow\EmieUserList
2015-12-19 20:50 - 2014-09-23 05:46 - 00000000 __SHD C:\Users\user\AppData\LocalLow\EmieSiteList
2015-12-19 19:43 - 2011-04-20 17:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasySetPackage
2015-12-19 19:43 - 2011-04-20 17:34 - 00000000 ____D C:\Program Files (x86)\LG Soft India
2015-12-19 19:43 - 2010-12-30 08:52 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-19 19:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2015-12-19 19:28 - 2015-02-01 19:01 - 00000000 ___RD C:\Users\user\OneDrive
2015-12-19 19:09 - 2015-10-23 14:26 - 00000000 _____ C:\Windows\SysWOW64\track
2015-12-19 19:00 - 2014-12-05 15:52 - 00000000 __SHD C:\Users\user\AppData\Local\EmieBrowserModeList
2015-12-19 19:00 - 2014-09-23 05:46 - 00000000 __SHD C:\Users\user\AppData\Local\EmieUserList
2015-12-19 19:00 - 2014-09-23 05:46 - 00000000 __SHD C:\Users\user\AppData\Local\EmieSiteList
2015-12-17 12:09 - 2009-07-14 06:08 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-12-17 08:29 - 2014-09-09 09:01 - 00000000 ___RD C:\Users\user\Documents\Scanned Documents
2015-12-13 20:04 - 2015-04-04 08:15 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-13 20:04 - 2013-12-25 23:42 - 00000000 ____D C:\ProgramData\Origin
2015-12-08 10:50 - 2011-05-11 10:19 - 00000012 _____ C:\Users\user\intlname.ols
2015-12-04 13:39 - 2011-10-15 16:07 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-04 13:39 - 2011-10-15 16:07 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-04 08:19 - 2011-02-02 16:34 - 00000000 ____D C:\Users\user\AppData\Local\Adobe

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-12-23 18:05

==================== Koniec  FRST.txt ============================