Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja:01-12-2015
Uruchomiony przez oem (administrator)  OEM-KOMPUTER (04-12-2015 11:08:14)
Uruchomiony z C:\Users\oem\Downloads
Załadowane profile: oem (Dostępne profile: oem)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

Brak dostępu do procesu -> csrss.exe
Brak dostępu do procesu -> csrss.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\BBSvc.EXE
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Windows\System32\PnkBstrA.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Samsung Electronics.) C:\Windows\Samsung\ComSMMgr\SSMMgr.exe
(Sony Corporation) C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
Brak dostępu do procesu -> WUDFHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\SeaPort.EXE


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-02-02] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8505888 2010-02-23] (Realtek Semiconductor)
HKLM\...\Run: [Samsung Common SM] => C:\Windows\Samsung\ComSMMgr\ssmmgr.exe [372736 2005-07-03] (Samsung Electronics.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Reader Application Helper] => C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [892928 2012-07-12] (Sony Corporation)
HKU\S-1-5-21-2912906232-2957793955-1344214718-1000\...\Run: [GalaxyClient] => [X]
Startup: C:\Users\oem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk [2015-12-03]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 31.11.202.254 37.8.214.2
Tcpip\..\Interfaces\{E70F2AF0-5BB3-48E7-A692-41BB5A530D16}: [DhcpNameServer] 31.11.202.254 37.8.214.2

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2912906232-2957793955-1344214718-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-08-06] (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-12-17] (Kaspersky Lab ZAO)
BHO: Pomocnik rejestracji usługi Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2014-08-06] (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2014-08-06] (Kaspersky Lab ZAO)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKU\S-1-5-21-2912906232-2957793955-1344214718-1000 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Brak pliku
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @audioteka.pl/Audioteka.pl,version=1.0.0.1 -> D:\AUDIOTEKA\Plugins\npaudiotekadesktop.dll [2012-08-09] (Audioteka.pl)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin: @sony.com/ReaderDesktop -> C:\Program Files\Sony\ReaderDesktop\npreaderdetectmoz.dll [2012-07-12] (Sony Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin HKU\S-1-5-21-2912906232-2957793955-1344214718-1000: ubisoft.com/uplaypc -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-12-05] ()
FF HKLM\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru => nie znaleziono
FF HKLM\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-12-17] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-12-17] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-12-17] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-12-17] [Brak podpisu cyfrowego]
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-12-17] [Brak podpisu cyfrowego]

Chrome: 
=======
CHR StartupUrls: Default -> "hxxps://www.google.pl/#cns=0","hxxp://im-kancelaria.pl/","hxxps://plus.google.com/+KancelariaRadcyPrawnegoIgorMitekWarszawa"
CHR Profile: C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-03]
CHR Extension: (Dokumenty Google) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-03]
CHR Extension: (Dysk Google) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-03]
CHR Extension: (Kaspersky Protection) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2015-12-03]
CHR Extension: (YouTube) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-03]
CHR Extension: (Google Search) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-03]
CHR Extension: (Kaspersky URL Advisor) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2015-12-03]
CHR Extension: (Arkusze Google) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-03]
CHR Extension: (Dokumenty Google offline) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-03]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-03]
CHR Extension: (Gmail) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-03]
CHR Extension: (Blokowanie banerów) - C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2015-12-03]
CHR HKLM\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - hxxps://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-10-16]
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-10-16]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 avp; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-16] (Kaspersky Lab ZAO)
S3 GalaxyClientService; C:\Program Files\GalaxyClient\GalaxyClientService.exe [1616440 2015-10-17] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6952504 2015-10-17] (GOG.com)
S4 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2013-12-29] ()
S3 Sony SCSI Helper Service; C:\Program Files\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe [73728 2012-05-23] (Sony Corporation) [Brak podpisu cyfrowego]
S3 Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [833728 2014-11-18] (Valve Corporation) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S3 DAUpdaterSvc; C:\Program Files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [X]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 amdkmdag; C:\Windows\System32\DRIVERS\atipmdag.sys [5313536 2010-02-03] (ATI Technologies Inc.)
S2 DgiVecp; C:\Windows\System32\Drivers\DgiVecp.sys [41984 2004-05-17] (DeviceGuys, Inc.) [Brak podpisu cyfrowego]
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2014-08-06] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [94304 2014-08-06] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [576608 2014-08-06] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-10-16] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25184 2014-08-06] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-16] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [144992 2014-08-06] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2015-12-03] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-10-05] (Malwarebytes Corporation)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-04 11:08 - 2015-12-04 11:08 - 00015089 _____ C:\Users\oem\Downloads\FRST.txt
2015-12-04 11:06 - 2015-12-04 11:08 - 00000000 ____D C:\FRST
2015-12-04 11:05 - 2015-12-04 11:05 - 01721344 _____ (Farbar) C:\Users\oem\Downloads\FRST.exe
2015-12-04 10:55 - 2015-12-04 10:55 - 00097456 _____ C:\Users\oem\Downloads\Shortcut.txt
2015-12-04 07:37 - 2015-12-04 10:52 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-04 07:37 - 2015-12-04 10:42 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-03 20:20 - 2015-12-04 09:57 - 00000000 ____D C:\AdwCleaner
2015-12-03 20:18 - 2015-12-03 20:18 - 01736704 _____ C:\Users\oem\Downloads\adwcleaner.pl 5.023.exe
2015-12-03 18:19 - 2015-12-03 19:26 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-12-03 18:19 - 2015-12-03 18:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-12-03 18:19 - 2015-12-03 18:19 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-03 18:19 - 2015-12-03 18:19 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2015-12-03 18:19 - 2015-10-05 09:50 - 00094936 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-12-03 18:19 - 2015-10-05 09:50 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-12-03 18:19 - 2015-10-05 09:50 - 00023256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-12-03 18:16 - 2015-12-03 18:16 - 22908888 _____ (Malwarebytes ) C:\Users\oem\Downloads\mbam-setup-2.2.0.1024.exe
2015-12-03 15:30 - 2015-12-03 18:40 - 00002172 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-03 15:30 - 2015-12-03 15:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-03 11:31 - 2015-12-03 11:31 - 00572456 _____ (F-Secure Corporation) C:\Users\oem\Downloads\F-SecureOnlineScanner.exe
2015-12-02 12:45 - 2015-12-03 08:45 - 00000068 _____ C:\Users\oem\AppData\Roaming\WB.CFG
2015-12-02 11:44 - 2015-12-02 11:44 - 00000000 ____D C:\Windows\Downloaded Installations
2015-12-02 11:44 - 2015-12-02 11:44 - 00000000 ____D C:\Users\oem\AppData\Roaming\Shortcut
2015-12-02 11:43 - 2015-12-02 12:00 - 00000000 ____D C:\Users\oem\AppData\Local\ThermoregulationPhosphorescently
2015-11-30 14:11 - 2015-11-30 14:15 - 676629918 _____ C:\Users\oem\Downloads\posluchajki-basnie-z-czterech-stron-swiata.zip
2015-11-30 14:11 - 2015-11-30 14:14 - 338186254 _____ C:\Users\oem\Downloads\basnie-kutny.zip
2015-11-29 18:51 - 2015-11-29 18:51 - 00286930 _____ C:\Users\oem\Downloads\Warunki zatrudnienia Igor Mitek_DP (4).PDF
2015-11-29 18:21 - 2015-11-29 18:21 - 00286749 _____ C:\Users\oem\Downloads\Warunki zatrudnienia Igor Mitek_koordynator (1).pdf
2015-11-29 18:00 - 2015-11-29 18:01 - 02247146 _____ C:\Users\oem\Downloads\Druki i formularze do wypełnienia- Centrala (3).zip
2015-11-29 17:23 - 2015-11-29 17:40 - 00006144 _____ C:\Users\oem\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-11-24 11:34 - 2015-11-24 11:34 - 00011429 _____ C:\Users\oem\Downloads\1580563970.pdf
2015-11-20 12:54 - 2015-11-20 12:54 - 00186858 _____ C:\Users\oem\Downloads\1204866_100012145127.pdf
2015-11-20 12:47 - 2015-11-20 12:47 - 00206116 _____ C:\Users\oem\Downloads\3697866_000142635968.pdf
2015-11-14 19:49 - 2015-11-14 19:49 - 00342924 _____ C:\Users\oem\Downloads\D19820145Lj.pdf
2015-11-14 19:21 - 2015-11-14 19:21 - 02247146 _____ C:\Users\oem\Downloads\Druki i formularze do wypełnienia- Centrala (2).zip
2015-11-14 19:08 - 2015-11-14 19:08 - 00738702 _____ C:\Users\oem\Downloads\D2015000180401.pdf
2015-11-14 18:56 - 2015-11-14 18:57 - 00863028 _____ C:\Users\oem\Downloads\D2015000153701.pdf
2015-11-13 15:59 - 2015-11-13 15:59 - 00286930 _____ C:\Users\oem\Downloads\Warunki zatrudnienia Igor Mitek_DP (3).PDF
2015-11-13 15:58 - 2015-11-13 15:58 - 02247146 _____ C:\Users\oem\Downloads\Druki i formularze do wypełnienia- Centrala (1).zip
2015-11-12 16:52 - 2015-11-12 16:52 - 02247146 _____ C:\Users\oem\Downloads\Druki i formularze do wypełnienia- Centrala.zip
2015-11-12 16:51 - 2015-11-12 16:51 - 00286930 _____ C:\Users\oem\Downloads\Warunki zatrudnienia Igor Mitek_DP (2).PDF
2015-11-12 16:49 - 2015-11-12 16:49 - 00286930 _____ C:\Users\oem\Downloads\Warunki zatrudnienia Igor Mitek_DP (1).PDF
2015-11-11 18:11 - 2015-11-11 18:11 - 00612618 _____ C:\Users\oem\Downloads\251880umPL.pdf
2015-11-09 18:54 - 2015-11-09 18:55 - 01430789 _____ C:\Users\oem\Downloads\Pakiet informacji.zip
2015-11-09 18:48 - 2015-11-09 18:48 - 00286749 _____ C:\Users\oem\Downloads\Warunki zatrudnienia Igor Mitek_koordynator.pdf
2015-11-09 18:47 - 2015-11-09 18:47 - 00286930 _____ C:\Users\oem\Downloads\Warunki zatrudnienia Igor Mitek_DP.PDF
2015-11-09 12:50 - 2015-11-09 12:50 - 00123412 _____ C:\Users\oem\Downloads\FAKTURA-P-12709882-15100550208566-00019139.pdf

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-04 11:06 - 2009-07-14 03:37 - 00000000 ____D C:\Windows
2015-12-04 10:59 - 2009-07-14 05:34 - 00017776 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-04 10:59 - 2009-07-14 05:34 - 00017776 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-04 10:56 - 2010-03-01 16:52 - 01670590 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-04 10:56 - 2009-07-14 09:07 - 00740438 _____ C:\Windows\system32\perfh015.dat
2015-12-04 10:56 - 2009-07-14 09:07 - 00156012 _____ C:\Windows\system32\perfc015.dat
2015-12-04 10:56 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2015-12-04 10:52 - 2010-08-07 19:29 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2015-12-04 10:51 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-04 10:27 - 2012-10-13 06:55 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-03 20:02 - 2010-08-29 10:15 - 00000000 ____D C:\Program Files\Google
2015-12-03 19:59 - 2012-09-15 05:23 - 00000000 ____D C:\ProgramData\Google
2015-12-03 19:59 - 2010-08-29 10:14 - 00000000 ____D C:\Users\oem\AppData\Local\Google
2015-12-03 19:59 - 2010-08-07 16:00 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-12-03 19:59 - 2010-08-07 16:00 - 00000000 ____D C:\Program Files\Adobe
2015-12-03 18:40 - 2015-10-09 14:04 - 00000978 _____ C:\Users\Public\Desktop\GOG Galaxy.lnk
2015-12-03 18:40 - 2015-06-12 08:25 - 00002069 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-12-03 18:40 - 2015-04-22 07:35 - 00002681 _____ C:\Users\Public\Desktop\Skype.lnk
2015-12-03 18:40 - 2015-01-17 12:00 - 00001502 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audioteka.lnk
2015-12-03 18:40 - 2013-11-17 18:31 - 00000507 _____ C:\Users\Public\Desktop\SuperMemo UX.lnk
2015-12-03 18:40 - 2013-11-01 16:10 - 00000631 _____ C:\Users\Public\Desktop\Steam.lnk
2015-12-03 18:40 - 2012-11-06 19:10 - 00002024 _____ C:\Users\Public\Desktop\Reader for PC.lnk
2015-12-03 18:40 - 2011-05-29 14:29 - 00000469 _____ C:\Users\Public\Desktop\Uruchom Wiedźmin 2.lnk
2015-12-03 18:40 - 2010-08-24 15:34 - 00001739 _____ C:\Users\Public\Desktop\Wybór przeglądarki.lnk
2015-12-03 18:40 - 2010-08-07 09:37 - 00001432 _____ C:\Users\oem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-03 18:40 - 2010-03-01 16:38 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-12-03 18:40 - 2010-03-01 16:37 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-12-03 18:40 - 2009-07-14 05:46 - 00001479 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-03 18:40 - 2009-07-14 05:46 - 00001218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2015-12-03 18:40 - 2009-07-14 05:42 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2015-12-03 18:40 - 2009-07-14 05:42 - 00001292 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2015-12-03 18:40 - 2009-07-14 05:42 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2015-12-03 18:40 - 2009-07-14 05:42 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2015-12-03 18:40 - 2009-07-14 05:37 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2015-12-03 18:39 - 2015-04-22 14:16 - 00000548 _____ C:\Users\oem\Desktop\Rozliczenie Roczne 2014.lnk
2015-12-03 18:39 - 2014-08-06 09:51 - 00002261 _____ C:\Users\oem\Desktop\Bezpieczne pieniądze.lnk
2015-12-03 18:39 - 2013-12-29 19:10 - 00001170 _____ C:\Users\oem\Desktop\Uplay.lnk
2015-12-03 18:39 - 2010-08-07 19:24 - 00001402 _____ C:\Users\oem\Desktop\Internet Explorer.lnk
2015-12-03 18:39 - 2010-08-07 09:37 - 00002291 _____ C:\Users\oem\Desktop\InstalacjaESETSmartSecurity.lnk
2015-12-03 18:39 - 2010-08-07 09:37 - 00002080 _____ C:\Users\oem\Desktop\3DMark2001 SE.lnk
2015-12-03 18:35 - 2010-10-16 18:37 - 00000000 ____D C:\Users\oem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-12-03 09:47 - 2009-07-14 05:53 - 00003034 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-12-02 16:29 - 2010-08-07 09:37 - 00000000 ____D C:\Users\oem
2015-12-02 11:44 - 2014-07-17 11:41 - 00000000 ____D C:\Users\oem\AppData\Local\Downloaded Installations
2015-11-27 11:15 - 2015-10-09 14:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-11-18 12:05 - 2012-01-02 21:23 - 00224095 _____ C:\Users\oem\Documents\WYDATKI DOMOWE.xlsx
2015-11-13 09:29 - 2010-08-07 16:00 - 00000000 ____D C:\Users\oem\AppData\Roaming\Adobe
2015-11-13 09:28 - 2014-07-10 09:17 - 00000000 ____D C:\Users\oem\AppData\Local\Adobe
2015-11-13 09:25 - 2010-08-20 17:41 - 00000000 ____D C:\ProgramData\Adobe
2015-11-12 11:18 - 2015-07-31 07:28 - 00000000 ____D C:\Program Files\Common Files\AV
2015-11-11 15:27 - 2012-04-03 06:36 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-11-11 15:27 - 2011-05-19 18:17 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

==================== Pliki w katalogu głównym wybranych folderów =======

2015-12-02 12:45 - 2015-12-03 08:45 - 0000068 _____ () C:\Users\oem\AppData\Roaming\WB.CFG
2015-11-29 17:23 - 2015-11-29 17:40 - 0006144 _____ () C:\Users\oem\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-08-05 14:02 - 2012-08-05 14:02 - 0017408 _____ () C:\Users\oem\AppData\Local\WebpageIcons.db

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-11-30 08:40

==================== Koniec  FRST.txt ============================