Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 20-08-2017
Uruchomiony przez user (administrator)  MARSCY (23-08-2017 10:40:22)
Uruchomiony z C:\Users\user\Downloads
Załadowane profile: user (Dostępne profile: user)
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Nero AG) C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cnext.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
(ROCCAT GmbH Co., Ltd.) F:\Rocat Stery\Ryos MK Monitor.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\CNext\CCCSlim\MOM.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\CNext\CCCSlim\CCC.exe
(Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
(Valve Corporation) E:\Steamek\Steam\Steam.exe
(Valve Corporation) E:\Steamek\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) E:\Steamek\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [12697368 2014-10-14] (Logitech Inc.)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4926664 2016-02-26] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [NBKeyScan] => C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2221352 2008-02-18] (Nero AG)
HKU\S-1-5-21-2801442270-617576118-1268728334-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-2801442270-617576118-1268728334-1000\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1828136 2008-02-28] (Nero AG)
HKU\S-1-5-21-2801442270-617576118-1268728334-1000\...\MountPoints2: {0d000cea-0e11-11e6-9623-001d7d0b33f6} - L:\autorun.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ryos Driver.lnk [2016-04-15]
ShortcutTarget: Ryos Driver.lnk -> F:\Rocat Stery\Ryos MK Monitor.exe (ROCCAT GmbH Co., Ltd.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{E257AFF4-59B6-48D1-A087-36D536BDB32C}: [NameServer] 192.168.0.1
Tcpip\..\Interfaces\{E5676A50-D008-478E-A29D-9BDCBF5B5E29}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  Brak pliku

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\o7n5lh3z.default-1446717373185 [2017-08-23]
FF Homepage: Mozilla\Firefox\Profiles\o7n5lh3z.default-1446717373185 -> hxxp://battlelog.battlefield.com/bf3
FF Extension: (Better Battlelog (BBLog)) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\o7n5lh3z.default-1446717373185\Extensions\better-battlelog@getbblog.com [2016-06-22]
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2801442270-617576118-1268728334-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\user\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-2801442270-617576118-1268728334-1000: SkypePlugin -> C:\Users\user\AppData\Local\SkypePlugin\7.6.0.295\npGatewayNpapi.dll [2015-09-14] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-2801442270-617576118-1268728334-1000: SkypePlugin64 -> C:\Users\user\AppData\Local\SkypePlugin\7.6.0.295\npGatewayNpapi-x64.dll [2015-09-14] (Skype Technologies S.A.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default [2017-08-23]
CHR Extension: (Prezentacje Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-19]
CHR Extension: (Dokumenty Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-19]
CHR Extension: (Dysk Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-19]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-19]
CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-19]
CHR Extension: (Arkusze Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-19]
CHR Extension: (Dokumenty Google offline) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-08-11]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-19]
CHR Extension: (Chrome Media Router) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-09]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1404936 2017-01-10] ()
R2 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-02-18] (Nero AG)
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [529704 2008-02-28] (Nero AG)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2118664 2016-12-05] (Electronic Arts)
S2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [2180112 2016-12-05] (Electronic Arts)
R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [Brak podpisu cyfrowego]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-12-31] ()

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 adiusbaw; C:\Windows\System32\DRIVERS\adiusbawx64.sys [169496 2007-02-07] (Analog Devices Inc.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [Brak podpisu cyfrowego]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-08-23 10:40 - 2017-08-23 10:41 - 000012135 _____ C:\Users\user\Downloads\FRST.txt
2017-08-23 10:36 - 2017-08-23 10:36 - 002395648 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe
2017-08-22 18:55 - 2017-08-22 18:55 - 000002412 _____ C:\Users\Public\Desktop\Star Wars® Knights of the Old Republic® COLLECTION.lnk
2017-08-22 18:52 - 2017-08-22 18:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LucasArts
2017-08-22 18:52 - 2017-08-22 18:52 - 000000000 ____D C:\Program Files (x86)\LucasArts
2017-08-21 13:19 - 2017-08-21 13:19 - 000442790 _____ C:\Users\user\Downloads\Corporate Promotion! 2017 (3).pdf
2017-08-21 13:18 - 2017-08-21 13:18 - 000442790 _____ C:\Users\user\Downloads\Corporate Promotion! 2017 (2).pdf
2017-08-21 10:19 - 2017-08-21 10:19 - 000442790 _____ C:\Users\user\Downloads\Corporate Promotion! 2017 (1).pdf
2017-08-21 10:01 - 2017-08-21 10:01 - 000442790 _____ C:\Users\user\Downloads\Corporate Promotion! 2017.pdf
2017-08-20 21:13 - 2017-08-21 22:20 - 000004782 _____ C:\Users\user\Desktop\htl bkk.txt
2017-08-18 11:05 - 2017-08-18 11:04 - 000394508 _____ C:\Users\user\Desktop\faktura Czeladż.jpeg
2017-08-16 11:06 - 2017-08-16 11:06 - 000000000 ____D C:\Users\user\Desktop\Nowy folder (2)
2017-08-16 08:05 - 2017-08-16 08:12 - 000000000 ____D C:\Users\user\Desktop\Nowy folder
2017-08-15 16:07 - 2017-08-15 16:07 - 000188210 _____ C:\Users\user\Downloads\Lista sędziów Sądu Rejonowego w Bydgoszczy.pdf
2017-08-13 06:19 - 2017-08-13 06:32 - 000000000 ____D C:\Users\user\Desktop\kwiat dla Ali
2017-08-12 12:57 - 2017-08-12 13:01 - 000000000 ____D C:\Users\user\Desktop\do wys
2017-08-12 11:30 - 2017-08-12 13:00 - 000000000 ____D C:\Users\user\Desktop\z Ala 2
2017-08-12 10:01 - 2017-08-12 11:43 - 000000000 ____D C:\Users\user\Desktop\z Alą
2017-08-10 09:22 - 2017-08-10 16:05 - 000000000 ____D C:\Users\user\Desktop\koh Mun Nork
2017-08-09 17:03 - 2017-08-09 17:02 - 000471316 _____ C:\Users\user\Desktop\karolinka.jpeg
2017-08-08 22:38 - 2017-08-08 22:38 - 000004701 _____ C:\Users\user\Desktop\Wiktor na Ko Tao 2017.txt
2017-08-08 20:37 - 2017-08-08 20:38 - 000000000 ____D C:\Users\user\Desktop\sukienki etniczne
2017-08-08 19:06 - 2017-08-08 19:06 - 000006430 _____ C:\Users\user\Downloads\RG20170544 (3).pdf
2017-08-08 12:05 - 2017-08-08 12:05 - 000002210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2017-08-08 12:05 - 2017-08-08 12:05 - 000002172 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk
2017-08-07 19:16 - 2017-08-07 19:16 - 000113223 _____ C:\Users\user\Downloads\PotwierdzenieTransakcji_20170807_191706.PDF
2017-08-07 06:19 - 2017-08-07 06:19 - 000006430 _____ C:\Users\user\Downloads\RG20170544 (2).pdf
2017-08-07 06:15 - 2017-08-07 06:15 - 000006430 _____ C:\Users\user\Downloads\RG20170544 (1).pdf
2017-08-07 06:14 - 2017-08-07 06:14 - 000006430 _____ C:\Users\user\Downloads\RG20170544.pdf
2017-08-07 06:13 - 2017-08-07 06:13 - 000017691 _____ C:\Users\user\Downloads\EZA-Steuerbescheid-2017-08-04_11-28-28-CUSTAX48510000328630219030817213242.pdf
2017-08-07 06:01 - 2017-08-07 06:26 - 000000000 ____D C:\Users\user\Desktop\6 sierpnia
2017-08-06 14:53 - 2017-08-06 14:53 - 000000000 _____ C:\Users\user\Desktop\Zamówienie.txt
2017-08-06 13:02 - 2017-08-07 06:02 - 000000000 ____D C:\Users\user\Desktop\Jezioro
2017-08-05 11:11 - 2017-08-05 11:26 - 000002289 _____ C:\Users\user\Desktop\Chiang mai.txt
2017-08-01 23:23 - 2017-08-01 23:23 - 000000236 _____ C:\Users\user\Desktop\SWKOTR.txt
2017-08-01 08:06 - 2017-08-01 09:57 - 000000350 _____ C:\Users\user\Documents\Wójtówka członkowie.txt
2017-07-31 21:29 - 2017-07-31 21:29 - 001584639 _____ C:\Users\user\Downloads\MX-2614N_20170721_125622 (1).pdf
2017-07-31 05:17 - 2017-07-31 05:17 - 000152287 _____ C:\Users\user\Downloads\herb - chwasty wodne.pdf
2017-07-31 05:17 - 2017-07-31 05:17 - 000152287 _____ C:\Users\user\Downloads\herb - chwasty wodne (1).pdf
2017-07-30 22:12 - 2017-07-31 05:57 - 000000000 ____D C:\Users\user\Desktop\wyslac na fb
2017-07-30 22:04 - 2017-07-30 22:26 - 000000000 ____D C:\Users\user\Desktop\30 lipca filmy
2017-07-30 21:43 - 2017-07-30 22:44 - 000000000 ____D C:\Users\user\Desktop\30 lipca
2017-07-29 14:48 - 2017-07-29 14:48 - 000032525 _____ C:\Users\user\Downloads\Your Electronic Ticket Receipt (13).pdf
2017-07-29 14:44 - 2017-07-29 14:44 - 000032532 _____ C:\Users\user\Downloads\Your Electronic Ticket Receipt (12).pdf
2017-07-29 10:59 - 2017-08-22 17:27 - 000004923 _____ C:\Users\user\Documents\wylot Wiktor Natalka wrzesien.txt
2017-07-28 16:05 - 2017-07-28 16:05 - 001622660 _____ C:\Users\user\Downloads\Pamfil_11_04_2016.pdf
2017-07-28 16:00 - 2017-07-28 16:01 - 001645169 _____ C:\Users\user\Downloads\Pamfil_27_04_2017.pdf
2017-07-28 12:46 - 2017-07-28 12:48 - 000000000 ____D C:\Users\user\Desktop\kwiat do zdjecia
2017-07-28 12:23 - 2017-07-28 12:47 - 000000000 ____D C:\Users\user\Desktop\kwiat 3
2017-07-28 12:01 - 2017-07-28 12:48 - 000000000 ____D C:\Users\user\Desktop\kwiat 2
2017-07-28 11:02 - 2017-07-28 11:02 - 000000649 _____ C:\Users\user\Downloads\list (21).txt
2017-07-28 07:24 - 2017-07-28 11:52 - 000000000 ____D C:\Users\user\Desktop\kwiat
2017-07-27 22:39 - 2017-07-27 22:38 - 000120317 _____ C:\Users\user\Desktop\ulubieniec Trivatanów.jpeg
2017-07-27 22:35 - 2017-07-27 22:35 - 000000149 _____ C:\Users\user\Documents\tao.txt
2017-07-27 21:57 - 2017-07-27 21:56 - 000121998 _____ C:\Users\user\Desktop\mun nork.jpeg
2017-07-27 20:15 - 2017-07-27 20:15 - 000021504 _____ C:\Users\user\Documents\dokumenty do pasking listu.xls
2017-07-27 19:58 - 2017-07-27 20:14 - 000017408 _____ C:\Users\user\Documents\packing list Indie 2017.xls
2017-07-27 19:58 - 2017-07-27 19:58 - 000018432 _____ C:\Users\user\Documents\packing list roboczo.xls
2017-07-27 16:53 - 2017-07-27 16:53 - 000107392 _____ C:\Users\user\Downloads\Gate & Flower Pot (4).dwg
2017-07-27 16:52 - 2017-07-27 16:52 - 000238643 _____ C:\Users\user\Downloads\Gate & Flower Pot-Model (2).pdf
2017-07-27 13:21 - 2017-07-27 20:14 - 000011087 _____ C:\Users\user\Downloads\packing List no 288 (2).xlsx
2017-07-27 06:49 - 2017-07-28 14:52 - 000000000 ____D C:\Users\user\Desktop\załaczniki
2017-07-26 16:22 - 2017-07-26 16:22 - 000194436 _____ C:\Users\user\Desktop\Fabianki bajorko.jpeg
2017-07-26 16:19 - 2017-07-26 16:18 - 000092725 _____ C:\Users\user\Desktop\Bambu.jpeg
2017-07-26 16:18 - 2017-07-26 16:17 - 000148405 _____ C:\Users\user\Desktop\taxi diver.jpeg
2017-07-26 16:12 - 2017-07-26 16:12 - 000116808 _____ C:\Users\user\Desktop\Łukasz z dziadkiem.jpeg
2017-07-26 10:06 - 2017-07-26 10:06 - 000000023 _____ C:\Users\user\Documents\adres e mailowy Dyrektor Generalny Lasów.txt
2017-07-26 09:50 - 2017-07-26 09:50 - 001426502 _____ C:\Users\user\Downloads\D19640093Lj (2).pdf
2017-07-26 08:52 - 2017-07-26 08:52 - 000435760 _____ C:\Users\user\Desktop\odp o pradzie.jpeg
2017-07-25 09:19 - 2017-07-25 09:20 - 018560098 _____ C:\Users\user\Documents\IMG_3782-1.mp4
2017-07-25 09:04 - 2017-07-25 09:01 - 018604684 _____ C:\Users\user\Desktop\IMG_3782-1.mp4
2017-07-25 08:29 - 2017-07-25 08:29 - 000000000 ____D C:\Users\user\AppData\Local\FreemakeVideoConverter
2017-07-25 08:28 - 2017-08-07 16:53 - 000000000 ____D C:\ProgramData\Freemake
2017-07-25 08:28 - 2017-08-07 16:52 - 000000000 ____D C:\Program Files (x86)\Freemake
2017-07-25 08:28 - 2017-07-25 08:29 - 000000000 ____D C:\Users\user\Documents\Freemake
2017-07-25 08:26 - 2017-07-25 08:26 - 001012744 _____ (Ellora Assets Corporation ) C:\Users\user\Downloads\FreemakeVideoConverterSetup (3).exe
2017-07-24 14:00 - 2017-07-24 14:00 - 000010866 _____ C:\Users\user\Downloads\packing List no 288 (1).xlsx
2017-07-24 13:46 - 2017-07-24 13:46 - 000010866 _____ C:\Users\user\Downloads\packing List no 288.xlsx
2017-07-24 13:32 - 2017-07-24 13:32 - 000016384 _____ C:\Users\user\Downloads\balance sheet Bharat.xls
2017-07-24 13:31 - 2017-07-24 13:31 - 000016896 _____ C:\Users\user\Downloads\invoice Adwani Jun (1).xls
2017-07-24 13:14 - 2017-07-24 13:14 - 000377344 _____ C:\Users\user\Documents\towary kontener Indie lipiec.xls
2017-07-24 12:40 - 2017-07-24 12:40 - 000238643 _____ C:\Users\user\Downloads\Gate & Flower Pot-Model (1).pdf
2017-07-24 12:39 - 2017-07-24 12:39 - 000107392 _____ C:\Users\user\Downloads\Gate & Flower Pot (3).dwg
2017-07-24 12:06 - 2017-07-24 13:12 - 000000000 ____D C:\Users\user\Desktop\towary w kontenerze Indie
2017-07-24 11:59 - 2017-07-24 12:00 - 001153871 _____ C:\Users\user\Downloads\MX-2614N_20170721_125658.pdf
2017-07-24 11:59 - 2017-07-24 11:59 - 001584639 _____ C:\Users\user\Downloads\MX-2614N_20170721_125622.pdf

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-08-23 10:40 - 2015-12-23 17:42 - 000000000 ____D C:\FRST
2017-08-23 08:17 - 2013-12-16 18:12 - 000000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2801442270-617576118-1268728334-1000UA.job
2017-08-22 18:52 - 2010-12-30 09:52 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-08-22 18:02 - 2013-01-12 16:06 - 000000000 ____D C:\Users\user\AppData\Roaming\TS3Client
2017-08-22 18:00 - 2010-12-29 18:02 - 000000000 ____D C:\Users\user\AppData\Local\VirtualStore
2017-08-22 17:17 - 2013-12-16 18:12 - 000000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2801442270-617576118-1268728334-1000Core.job
2017-08-22 06:26 - 2009-07-14 06:45 - 000026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-08-22 06:26 - 2009-07-14 06:45 - 000026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-08-22 06:22 - 2009-07-14 19:55 - 000743746 _____ C:\Windows\system32\perfh015.dat
2017-08-22 06:22 - 2009-07-14 19:55 - 000157336 _____ C:\Windows\system32\perfc015.dat
2017-08-22 06:22 - 2009-07-14 07:13 - 001679518 _____ C:\Windows\system32\PerfStringBackup.INI
2017-08-22 06:22 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2017-08-22 06:17 - 2013-03-31 17:11 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-08-18 11:04 - 2014-09-09 10:01 - 000000000 ___RD C:\Users\user\Documents\Scanned Documents
2017-08-17 22:06 - 2015-12-23 17:36 - 000002201 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-17 22:06 - 2015-12-23 17:36 - 000002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-16 06:01 - 2017-07-16 08:12 - 000000000 ____D C:\Users\user\Desktop\wesele Bydgoszcz
2017-08-12 17:12 - 2015-12-04 09:17 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-09 15:25 - 2015-12-04 09:18 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-08-08 12:05 - 2011-10-15 17:07 - 000000000 ____D C:\Program Files (x86)\Google
2017-08-07 16:53 - 2017-06-27 14:34 - 000000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2017-08-07 16:53 - 2017-06-27 14:34 - 000000000 ____D C:\Users\user\AppData\Local\Discord
2017-08-06 16:37 - 2016-03-24 12:23 - 003583480 ____H C:\Users\user\AppData\Local\IconCache.db.backup
2017-07-24 11:43 - 2015-06-28 14:14 - 000000404 _____ C:\Users\user\Documents\kosiarka bijakowa.txt

==================== Pliki w katalogu głównym wybranych folderów =======

2016-04-18 20:15 - 2016-04-18 20:19 - 000000029 _____ () C:\Users\user\AppData\Roaming\default.rss

Niektóre pliki w TEMP:
====================
2017-07-25 08:27 - 2017-07-25 08:28 - 032623536 _____ (Ellora Assets Corporation                                   ) C:\Users\user\AppData\Local\Temp\FreemakeVideoConverterFull.exe
2017-03-23 14:28 - 2015-07-15 19:53 - 001114112 _____ (Microsoft Corporation) C:\Users\user\AppData\Local\Temp\kernel32.dll

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-08-21 11:10

==================== Koniec  FRST.txt ============================