Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:31-10-2015
Uruchomiony przez R (administrator)  R-KOMPUTER (02-11-2015 17:35:31)
Uruchomiony z C:\Users\R\Downloads
Załadowane profile: R (Dostępne profile: R)
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Opera)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Jerzy Znamirowski) C:\Program Files (x86)\HEXelon MAX 6\hexelon.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Dassault Systèmes SolidWorks Corp.) C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\sldworks_fs.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe
(Creative Technology Ltd.) C:\Windows\V0770Mon.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcMon.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.43\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.43\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.43\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.43\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.43\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.43\opera.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Disc Soft Ltd) C:\Users\R\AppData\Local\Temp\~nsu.tmp\Au_.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.43\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\33.0.1990.43\opera.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-07-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Onet.pl AutoUpdate] => C:\Program Files (x86)\Common Files\Onet.pl\AutoUpdate.exe [260096 2005-07-27] (Onet.pl)
HKLM-x32\...\Run: [Live! Central 3] => C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe [461312 2013-08-15] (Creative Technology Ltd)
HKLM-x32\...\Run: [FastAccess Web Alert] => C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\FAInstaller\FATRY.exe [2033648 2011-07-11] (Microsoft)
HKLM-x32\...\Run: [V0770Mon.exe] => C:\Windows\V0770Mon.exe [32884 2012-06-01] (Creative Technology Ltd.)
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1067736 2015-10-28] (Adobe Systems Incorporated)
HKU\S-1-5-21-2088091787-1988382606-1166808610-1000\...\Run: [HEXelon MAX] => C:\Program Files (x86)\HEXelon MAX 6\hexelon.exe [2816512 2007-06-28] (Jerzy Znamirowski)
HKU\S-1-5-21-2088091787-1988382606-1166808610-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [48145024 2015-10-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2088091787-1988382606-1166808610-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8551848 2015-10-19] (Piriform Ltd)
HKU\S-1-5-21-2088091787-1988382606-1166808610-1000\...\MountPoints2: D - D:\SETUP.EXE
HKU\S-1-5-21-2088091787-1988382606-1166808610-1000\...\MountPoints2: {715ee28a-0e01-11e5-9b29-00e04c156405} - D:\SETUP.EXE
HKU\S-1-5-21-2088091787-1988382606-1166808610-1000\...\MountPoints2: {715ee292-0e01-11e5-9b29-00e04c156405} - E:\SETUP.EXE
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SOLIDWORKS 2015 Fast Start.lnk [2015-08-10]
ShortcutTarget: SOLIDWORKS 2015 Fast Start.lnk -> C:\Windows\Installer\{F8093877-4F2C-40ED-9BA7-2F9F48F5176F}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SOLIDWORKS Pobieracz w tle.lnk [2015-08-10]
ShortcutTarget: SOLIDWORKS Pobieracz w tle.lnk -> C:\Program Files (x86)\Common Files\Menedżer instalacji SOLIDWORKS\BackgroundDownloading\sldBgDwld.exe (Dassault Systèmes SolidWorks Corp.)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.100.1
Tcpip\..\Interfaces\{ED3FF97D-C3B6-47FF-B360-F25AAA84B445}: [DhcpNameServer] 192.168.100.1

Internet Explorer:
==================
HKU\S-1-5-21-2088091787-1988382606-1166808610-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.onet.pl/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-22] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Brak nazwy -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> Brak pliku
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-22] (Oracle Corporation)
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://files.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab

FireFox:
========
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.onet.pl"
CHR Profile: C:\Users\R\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-19]
CHR Extension: (Google Docs) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-19]
CHR Extension: (Google Drive) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-19]
CHR Extension: (YouTube) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-08-19]
CHR Extension: (Google Search) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-08-19]
CHR Extension: (Google Sheets) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-19]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-28]
CHR Extension: (Gmail) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-19]

Opera: 
=======
OPR StartupUrls: "hxxp://google.pl/"

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-07-28] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego]
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [Brak podpisu cyfrowego]
S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2015-08-10] (SolidWorks) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2015-06-10] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R3 DroidCam; C:\Windows\System32\DRIVERS\droidcam.sys [33080 2015-08-19] (Dev47Apps)
R3 DroidCamVideo; C:\Windows\System32\DRIVERS\droidcamvideo.sys [227512 2015-08-19] (Dev47Apps)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-06-08] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation                           )
R3 V0770Vid; C:\Windows\System32\DRIVERS\V0770Vid.sys [379776 2012-06-01] (Creative Technology Ltd.)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-02 17:35 - 2015-11-02 17:35 - 00013382 _____ C:\Users\R\Downloads\FRST.txt
2015-11-02 17:34 - 2015-11-02 17:35 - 00000000 ____D C:\FRST
2015-11-02 17:33 - 2015-11-02 17:33 - 02198016 _____ (Farbar) C:\Users\R\Downloads\FRST64.exe
2015-11-02 16:59 - 2015-11-02 16:59 - 00224625 _____ C:\Users\R\Desktop\INFCACHE.rar
2015-11-01 21:44 - 2015-11-01 21:44 - 00909283 _____ C:\Users\R\Downloads\usbfehlerbehebung22.zip
2015-11-01 21:44 - 2015-11-01 21:44 - 00000000 ____D C:\Users\R\Downloads\usbfehlerbehebung22
2015-11-01 21:43 - 2015-11-01 21:43 - 00340088 _____ (Mindspark Interactive Network, Inc.) C:\Users\R\Downloads\DownSpeedTest.exe
2015-10-30 16:48 - 2015-11-02 17:23 - 00000787 _____ C:\Windows\setupact.log
2015-10-30 16:48 - 2015-10-30 16:48 - 00000000 _____ C:\Windows\setuperr.log
2015-10-29 22:56 - 2015-10-29 22:57 - 387165424 _____ (Creative Technology Ltd) C:\Users\R\Downloads\LCSH_7701D_W1_17 (2).exe
2015-10-29 22:55 - 2015-10-29 22:55 - 00032013 _____ C:\Users\R\Downloads\(brak nazwy)
2015-10-29 20:47 - 2015-10-29 20:51 - 01747115 _____ C:\Users\R\Desktop\zestawienie bloku moje LT2.dwg
2015-10-29 20:47 - 2015-10-29 20:49 - 01747059 _____ C:\Users\R\Desktop\zestawienie bloku moje LT2.bak
2015-10-29 18:43 - 2015-10-29 18:43 - 00281088 _____ C:\Users\R\Downloads\Wykresy________++++.xls
2015-10-29 18:42 - 2015-10-29 18:42 - 00281088 _____ C:\Users\R\Desktop\Wykresy________++++.xls
2015-10-29 17:24 - 2015-10-29 17:25 - 00281088 _____ C:\Users\R\Desktop\Wykresy________ - Kopia.xls
2015-10-29 17:24 - 2015-10-29 17:21 - 00054856 _____ C:\Users\R\Desktop\Wykresy________ - Kopia.xlsx
2015-10-29 17:08 - 2015-10-29 18:59 - 00054922 _____ C:\Users\R\Desktop\Wykresy________.xlsx
2015-10-28 22:17 - 2015-10-28 22:17 - 00070794 _____ C:\Users\R\Desktop\cc_20151028_221700.reg
2015-10-28 22:15 - 2015-10-28 22:15 - 06762072 _____ (Piriform Ltd) C:\Users\R\Downloads\ccsetup511.exe
2015-10-28 22:15 - 2015-10-28 22:15 - 00000826 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-10-28 22:15 - 2015-10-28 22:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-10-28 22:15 - 2015-10-28 22:15 - 00000000 ____D C:\Program Files\CCleaner
2015-10-28 17:17 - 2015-10-28 17:17 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-10-26 22:03 - 2015-10-26 20:25 - 09720252 _____ C:\Users\R\Desktop\P-15-801-+++ (1) WRSYSOWANE MOJE SH.bak
2015-10-26 20:22 - 2015-10-26 22:03 - 16430699 _____ C:\Users\R\Desktop\P-15-801-+++ (1) WRSYSOWANE MOJE SH.dwg
2015-10-26 20:20 - 2015-10-26 22:02 - 02261507 _____ C:\Users\R\Desktop\20151022_lay-out -22-10-2015..dwg
2015-10-26 20:11 - 2015-10-26 20:11 - 15604971 _____ C:\Users\R\Downloads\P-15-801-+++ (1).dwg
2015-10-26 20:06 - 2015-10-30 16:52 - 00000558 _____ C:\Windows\Tasks\Adobe Acrobat Update Task.job
2015-10-26 19:53 - 2015-10-26 19:53 - 00418986 _____ C:\Users\R\Downloads\220109-1132-MTC1-53201.dwg
2015-10-26 19:53 - 2015-10-26 19:53 - 00000195 ____H C:\Users\R\Downloads\220109-1132-MTC1-53201.dwl2
2015-10-26 19:53 - 2015-10-26 19:53 - 00000044 ____H C:\Users\R\Downloads\220109-1132-MTC1-53201.dwl
2015-10-26 19:35 - 2015-10-26 19:35 - 00000195 ____H C:\Users\R\Downloads\P-15-801-+++.dwl2
2015-10-26 19:35 - 2015-10-26 19:35 - 00000044 ____H C:\Users\R\Downloads\P-15-801-+++.dwl
2015-10-26 19:34 - 2015-10-26 19:34 - 00392837 _____ C:\Users\R\Downloads\220109-1132-MTC1-53202.dwg
2015-10-26 19:30 - 2015-10-26 19:30 - 15604971 _____ C:\Users\R\Downloads\P-15-801-+++.dwg
2015-10-24 13:54 - 2015-10-24 11:43 - 00149168 _____ C:\Users\R\Desktop\List of Shipping Parts_actual.xlsx
2015-10-23 22:18 - 2015-10-23 22:21 - 00684032 _____ C:\Users\R\Documents\Database1.accdb
2015-10-23 21:25 - 2015-10-23 23:08 - 00493213 _____ C:\Users\R\Desktop\Odzysk po awarii_QUERY.xlsx
2015-10-23 20:53 - 2015-10-23 21:25 - 00325346 _____ C:\Users\R\Desktop\Odzysk po awarii.xlsx
2015-10-23 20:47 - 2015-10-23 20:47 - 00000000 ____D C:\Users\R\AppData\Roaming\DataRecommendations
2015-10-23 20:47 - 2015-10-23 20:47 - 00000000 ____D C:\Users\R\AppData\Local\DataRecommendation
2015-10-23 20:25 - 2015-10-23 20:25 - 00277953 _____ C:\Users\R\Downloads\tabela-przestawna.xlsx
2015-10-23 19:56 - 2015-10-23 19:56 - 00000000 ___SD C:\Users\R\Documents\Moje źródła danych
2015-10-23 18:57 - 2015-10-24 00:25 - 00149045 _____ C:\Users\R\Desktop\List of Shipping Elements_CNIM+++++.xlsx
2015-10-23 14:11 - 2015-10-23 13:41 - 00066213 _____ C:\Users\R\Desktop\List of Shipping Elements_CNIM.xlsx
2015-10-22 20:36 - 2015-10-22 20:36 - 06566020 _____ C:\Users\R\Downloads\gunning2.wmv
2015-10-22 20:35 - 2015-10-22 20:35 - 17210886 _____ C:\Users\R\Downloads\TRUEFLOW.wmv
2015-10-22 20:34 - 2015-10-22 20:35 - 07077892 _____ C:\Users\R\Downloads\mixing.mpg
2015-10-22 19:48 - 2015-10-22 19:48 - 01012644 _____ C:\Users\R\Desktop\nowy blok.XXXXXdwg.dwg
2015-10-22 19:45 - 2015-10-22 19:45 - 01006980 _____ C:\Users\R\Desktop\Skrzynka nowa.dwg
2015-10-22 19:04 - 2015-10-22 19:04 - 00002549 _____ C:\Users\R\Downloads\Fwd_ zdjecia-mail-11.eml
2015-10-22 18:47 - 2015-10-22 18:47 - 50130016 _____ (Oracle Corporation) C:\Users\R\Downloads\jre-8u65-windows-i586.exe
2015-10-22 18:43 - 2015-10-22 18:43 - 02870984 _____ (ESET) C:\Users\R\Downloads\esetsmartinstaller_plk (2).exe
2015-10-22 17:09 - 2015-10-22 17:09 - 00453965 _____ C:\Users\R\Desktop\nowy blok.dwg
2015-10-21 16:53 - 2015-10-21 16:53 - 00000000 ____D C:\Mapy Cad-SolidWorks
2015-10-20 23:24 - 2015-10-20 23:24 - 00009113 _____ C:\Users\R\Desktop\Ciężar rur odgięcie_włazowe.xlsx
2015-10-20 16:41 - 2015-10-20 17:13 - 01455836 _____ C:\Users\R\Desktop\220109-1145-MTC1-54500.dwg
2015-10-20 16:41 - 2015-10-20 17:12 - 01454688 _____ C:\Users\R\Desktop\220109-1145-MTC1-54500.bak
2015-10-20 16:41 - 2015-10-20 17:11 - 01455743 _____ C:\Users\R\Downloads\220109-1145-MTC1-54500 (2).bak
2015-10-20 14:25 - 2015-10-21 20:09 - 00000000 ____D C:\Users\R\Desktop\Actual Solid
2015-10-19 21:57 - 2015-10-19 21:57 - 00322418 _____ C:\Users\R\Desktop\Część1_PRÓBA.bak
2015-10-18 20:41 - 2015-10-18 20:41 - 00000000 ____D C:\Users\R\AppData\Roaming\EDrawings
2015-10-17 08:47 - 2015-10-17 08:47 - 00000000 ____D C:\Users\R\Desktop\Okno włazowe_nowe
2015-10-16 16:04 - 2015-10-16 16:04 - 00000000 ____D C:\Users\R\Desktop\Solid_nowy_początek
2015-10-15 21:00 - 2015-10-15 21:35 - 00000000 ____D C:\Users\R\Desktop\całość
2015-10-15 20:17 - 2015-10-15 20:17 - 49533070 _____ C:\Users\R\Downloads\Rysio i jego szatka superbohatera.mp4
2015-10-15 15:58 - 2015-10-15 10:12 - 05361735 _____ C:\Users\R\Desktop\Odg-właz.zip
2015-10-15 15:58 - 2015-10-15 10:12 - 05361735 _____ C:\Users\R\Desktop\Odg-właz (2).zip
2015-10-09 18:20 - 2015-10-09 18:20 - 05366379 _____ C:\Users\R\Downloads\ECO (1).ZIP
2015-10-09 17:51 - 2015-10-09 17:51 - 00495410 _____ C:\Users\R\Downloads\1235277_10.dwg
2015-10-09 17:51 - 2015-10-09 17:51 - 00495410 _____ C:\Users\R\Downloads\1235277_10 (1).dwg
2015-10-08 16:15 - 2015-10-21 00:22 - 00000906 _____ C:\Users\R\Desktop\GG dysk.lnk
2015-10-08 16:15 - 2015-10-08 16:15 - 00000000 ___SD C:\Users\R\GG dysk
2015-10-08 16:14 - 2015-10-21 00:22 - 00000000 ____D C:\Users\R\AppData\Roaming\GG
2015-10-08 16:14 - 2015-10-08 16:14 - 00000000 ____D C:\Users\R\AppData\Roaming\Mozilla
2015-10-08 16:14 - 2015-10-08 16:14 - 00000000 ____D C:\Users\R\AppData\Roaming\Macromedia
2015-10-08 16:13 - 2015-10-21 00:22 - 00000000 ____D C:\Users\R\AppData\Local\GG
2015-10-08 16:13 - 2015-10-08 16:13 - 00400744 _____ C:\Users\R\Downloads\gg-install.exe
2015-10-07 19:29 - 2015-10-07 19:29 - 00332660 _____ C:\Users\R\Downloads\test z excela 5 podstawy.xlsx
2015-10-07 19:28 - 2015-10-07 19:28 - 00085504 _____ C:\Users\R\Downloads\test z excela 1.xls
2015-10-07 19:28 - 2015-10-07 19:28 - 00074752 _____ C:\Users\R\Downloads\test z excela 3 podstawy.xls
2015-10-07 18:12 - 2015-10-07 18:12 - 00052607 _____ C:\Users\R\Downloads\Excel Test Rekrutacja (1).xlsx
2015-10-07 18:12 - 2015-10-07 18:12 - 00033280 _____ C:\Users\R\Downloads\test z excela.xls
2015-10-07 18:11 - 2015-10-07 18:11 - 00028672 _____ C:\Users\R\Downloads\test podstawy excela.xls
2015-10-07 17:44 - 2015-10-07 17:44 - 00029078 _____ C:\Users\R\Downloads\Czesto Uzywane Wzory.xlsx
2015-10-07 17:44 - 2015-10-07 17:44 - 00029078 _____ C:\Users\R\Downloads\Czesto Uzywane Wzory (1).xlsx
2015-10-07 17:10 - 2015-10-07 17:10 - 00010706 _____ C:\Users\R\Downloads\Operacje Na Wielu Arkuszach.xlsx
2015-10-07 17:10 - 2015-10-07 17:10 - 00010706 _____ C:\Users\R\Downloads\Operacje Na Wielu Arkuszach (1).xlsx
2015-10-06 20:57 - 2015-10-06 21:06 - 00000000 ____D C:\Users\R\Desktop\Nowe wydruk+nauka
2015-10-06 19:31 - 2015-10-06 19:31 - 00010600 _____ C:\Users\R\Downloads\Wprowadzanie Formul (2).xlsx
2015-10-06 18:34 - 2015-10-06 18:34 - 00000000 ____D C:\Users\R\Downloads\ExcelSzkolenie.pl Cwiczenia Excel 2013 (1)
2015-10-06 18:16 - 2015-10-06 18:16 - 19638485 _____ C:\Users\R\Downloads\ExcelSzkolenie.pl Cwiczenia Excel 2013 (1).zip
2015-10-06 18:16 - 2015-10-06 18:16 - 00025238 _____ C:\Users\R\Downloads\Skroty Klawiszowe.xlsx
2015-10-06 17:57 - 2015-10-06 17:57 - 19638485 _____ C:\Users\R\Downloads\ExcelSzkolenie.pl Cwiczenia Excel 2013.zip
2015-10-06 17:57 - 2015-10-06 17:57 - 00012400 _____ C:\Users\R\Downloads\Tryb Zgodnosci.xlsx
2015-10-04 21:10 - 2015-10-04 21:10 - 00038787 _____ C:\Users\R\Downloads\Funkcje Podstawy (1).xlsx

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-11-02 17:28 - 2011-04-12 14:21 - 00739862 _____ C:\Windows\system32\perfh015.dat
2015-11-02 17:28 - 2011-04-12 14:21 - 00155436 _____ C:\Windows\system32\perfc015.dat
2015-11-02 17:28 - 2009-07-14 06:13 - 01668230 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-02 17:26 - 2015-06-08 17:41 - 00632906 _____ C:\Windows\WindowsUpdate.log
2015-11-02 17:24 - 2015-08-10 16:30 - 00000000 ____D C:\Users\R\AppData\Roaming\Skype
2015-11-02 17:23 - 2009-07-14 06:08 - 00032538 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-11-02 17:23 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-02 17:23 - 2009-07-14 05:45 - 00022944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-02 17:23 - 2009-07-14 05:45 - 00022944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-30 16:53 - 2015-08-06 19:49 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-10-30 16:48 - 2015-08-10 16:30 - 00000000 ____D C:\ProgramData\Skype
2015-10-29 15:58 - 2015-09-12 18:08 - 00000000 ____D C:\Users\R\AppData\Roaming\TeamViewer
2015-10-29 15:58 - 2015-06-11 19:25 - 00000000 ____D C:\Windows\Panther
2015-10-29 15:58 - 2015-06-08 18:29 - 00000000 ____D C:\Windows\Minidump
2015-10-29 15:58 - 2015-06-08 18:00 - 00000000 ____D C:\Users\R\AppData\Roaming\DAEMON Tools Lite
2015-10-29 15:52 - 2015-06-08 17:53 - 00172080 _____ C:\Users\R\AppData\Local\GDIPFONTCACHEV1.DAT
2015-10-29 15:51 - 2015-08-06 19:25 - 00000992 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-10-29 15:51 - 2015-06-08 17:36 - 00549584 _____ C:\Windows\system32\FNTCACHE.DAT
2015-10-28 17:18 - 2015-08-06 19:24 - 00000000 ____D C:\Users\R\AppData\Local\Adobe
2015-10-28 17:17 - 2015-08-06 19:25 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-28 17:17 - 2015-08-06 19:25 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-28 15:51 - 2015-09-17 21:54 - 00000434 _____ C:\Windows\Tasks\Opera scheduled Autoupdate 1433782814.job
2015-10-28 15:51 - 2015-06-08 17:58 - 00000000 ____D C:\Program Files (x86)\Opera
2015-10-22 20:34 - 2015-08-06 19:50 - 00002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-10-22 19:11 - 2015-08-10 16:42 - 00000000 ____D C:\ProgramData\Oracle
2015-10-22 19:11 - 2015-08-10 16:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-10-22 19:10 - 2015-08-28 17:18 - 00000000 ____D C:\Users\R\.oracle_jre_usage
2015-10-22 19:10 - 2015-08-10 16:42 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-10-22 19:10 - 2015-08-10 16:42 - 00000000 ____D C:\Program Files (x86)\Java
2015-10-22 19:08 - 2015-09-24 22:47 - 00000000 ____D C:\ProgramData\vWdsManProv
2015-10-22 19:08 - 2015-08-29 10:34 - 00000000 ____D C:\ProgramData\BWinManProB
2015-10-22 19:04 - 2015-09-08 15:15 - 00000000 ____D C:\Users\R\Documents\Pliki programu Outlook
2015-10-22 18:42 - 2015-08-09 19:16 - 00000000 ____D C:\AdwCleaner
2015-10-21 18:53 - 2015-09-03 22:37 - 00000000 _____ C:\Users\R\AppData\Local\Temptable.xml
2015-10-21 16:36 - 2015-08-10 15:33 - 00000000 ____D C:\Users\R\AppData\Local\TempSW Katalog dla kopii zapasowych
2015-10-17 09:46 - 2015-08-07 16:01 - 00000000 ____D C:\Users\R\AppData\Local\SolidWorks
2015-10-14 19:17 - 2015-08-10 15:21 - 00000000 ____D C:\SOLIDWORKS Data
2015-10-08 16:15 - 2015-06-08 17:39 - 00000000 ____D C:\Users\R

==================== Pliki w katalogu głównym wybranych folderów =======

2015-09-03 22:37 - 2015-10-21 18:53 - 0000000 _____ () C:\Users\R\AppData\Local\Temptable.xml
2015-08-19 15:33 - 2015-09-17 22:21 - 0000032 _____ () C:\ProgramData\droidcam-settings
2015-08-29 10:34 - 2015-09-24 22:47 - 0000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-08-22 09:37

==================== Koniec  FRST.txt ============================