Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:15-06-2016
Uruchomiony przez Mariolka (administrator)  JESTĘMARIOLKĘ (16-06-2016 15:17:38)
Uruchomiony z C:\Users\Mariolka\Downloads
Załadowane profile: Mariolka (Dostępne profile: Mariolka & axure)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Atheros) C:\Program Files (x86)\Qualcomm Atheros WiFi Driver Installation\Ath_WlanAgent.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291280 2012-12-20] (Intel Corporation)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [389368 2014-02-17] (IVT Corporation)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [406328 2013-09-09] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [205624 2013-05-30] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-887697183-1252705721-1128697598-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{325FB739-3A2A-4A9D-9F02-87E0273B0106}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-11-18] (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office16\URLREDIR.DLL [2015-07-31] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2015-11-12] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office16\URLREDIR.DLL [2015-07-31] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-11-12] (Microsoft Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-11-10] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-11-10] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-11-10] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-11-10] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\SKYPE4~1.DLL [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)

Chrome: 
=======
CHR HomePage: ChromeDefaultData -> hxxp://google.pl/
CHR StartupUrls: ChromeDefaultData -> "hxxp://google.pl/"
CHR Profile: C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\ChromeDefaultData
CHR Extension: (Dokumenty Google) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2016-06-10]
CHR Extension: (Dysk Google) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-06-10]
CHR Extension: (YouTube) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-06-10]
CHR Extension: (Adblock Plus) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-06-11]
CHR Extension: (Avast SafePrice) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-06-11]
CHR Extension: (Arkusze Google) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-06-10]
CHR Extension: (Dokumenty Google offline) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-06-11]
CHR Extension: (AdBlock) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-06-11]
CHR Extension: (Avast Online Security) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-06-11]
CHR Extension: (Skype) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-06-10]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-10]
CHR Extension: (Gmail) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-06-10]
CHR Profile: C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-03-21]
CHR Extension: (Dokumenty Google) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-03-21]
CHR Extension: (Dysk Google) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-21]
CHR Extension: (YouTube) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-21]
CHR Extension: (Arkusze Google) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-03-21]
CHR Extension: (Dokumenty Google offline) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-21]
CHR Extension: (AdBlock) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-06-07]
CHR Extension: (Skype) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-06-07]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-06]
CHR Extension: (Gmail) - C:\Users\Mariolka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-21]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1579880 2014-02-17] (IVT Corporation)
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [145656 2013-12-16] (IVT Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1444544 2016-03-01] (Disc Soft Ltd)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Brak podpisu cyfrowego]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2015-01-12] (Microsoft Corporation)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [730304 2015-12-21] (Wacom Technology, Corp.)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Qualcomm Atheros WiFi Driver Installation\Ath_WlanAgent.exe [77824 2012-06-19] (Atheros) [Brak podpisu cyfrowego]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 ATP; C:\Windows\System32\DRIVERS\AsusTP.sys [70928 2013-12-12] (ASUS Corporation)
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [33968 2012-12-19] (IVT Corporation)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [54064 2013-04-26] (Ralink Corporation)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-03-16] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-03-16] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [33968 2012-12-19] (IVT Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-06-16 15:17 - 2016-06-16 15:17 - 00015669 _____ C:\Users\Mariolka\Downloads\FRST.txt
2016-06-16 15:06 - 2016-06-16 15:17 - 00000000 ____D C:\FRST
2016-06-16 15:06 - 2016-06-16 15:09 - 00010932 _____ C:\Users\Mariolka\Downloads\Fixlog.txt
2016-06-16 15:06 - 2016-06-16 15:06 - 02385920 _____ (Farbar) C:\Users\Mariolka\Downloads\FRST64.exe
2016-06-15 18:17 - 2016-06-15 18:17 - 00463536 _____ C:\Users\axure\Downloads\mobile_PDP_review-fixed.rp
2016-06-15 15:47 - 2016-06-15 15:47 - 00380928 _____ C:\Users\Mariolka\Downloads\n6w1ei6j.exe
2016-06-15 14:07 - 2016-06-15 14:08 - 00028592 _____ C:\Users\Mariolka\Downloads\Addition.txt
2016-06-15 13:53 - 2016-06-15 13:53 - 03703360 _____ C:\Users\Mariolka\Downloads\adwcleaner_5.200.exe
2016-06-14 16:29 - 2016-06-14 16:29 - 00000000 ____D C:\Users\Mariolka\Documents\Niestandardowe szablony pakietu Office
2016-06-14 09:34 - 2016-06-14 09:34 - 00059599 _____ C:\Users\Mariolka\Downloads\spolki-prawa-handlowego.pdf
2016-06-13 00:24 - 2016-06-13 00:24 - 02281502 _____ C:\Users\axure\Downloads\Axure_Branded_Website_Example.rp
2016-06-13 00:19 - 2016-06-13 00:20 - 05715914 _____ C:\Users\axure\Downloads\Sample_Branded.rp
2016-06-12 17:51 - 2016-06-12 17:51 - 00109168 _____ C:\Users\axure\AppData\Local\GDIPFONTCACHEV1.DAT
2016-06-12 11:52 - 2016-06-12 11:52 - 00199930 _____ C:\Users\Mariolka\Downloads\historia (1).PDF
2016-06-12 00:29 - 2016-06-12 00:29 - 00199930 _____ C:\Users\Mariolka\Downloads\historia.PDF
2016-06-11 18:12 - 2016-06-11 18:12 - 00000000 ____D C:\Users\axure\AppData\Roaming\Adobe
2016-06-11 18:12 - 2016-06-11 18:12 - 00000000 ____D C:\Users\axure\AppData\Local\bluesoleil
2016-06-11 18:11 - 2016-06-12 19:24 - 00000000 ____D C:\Users\axure\AppData\Local\Google
2016-06-11 18:06 - 2016-06-13 01:17 - 00000000 ____D C:\Users\axure\Documents\Axure
2016-06-11 18:06 - 2016-06-11 18:06 - 00000032 RSHOT C:\Users\axure\AppData\Local\t80.dat
2016-06-11 18:06 - 2016-06-11 18:06 - 00000000 ____D C:\Users\axure\AppData\Local\IsolatedStorage
2016-06-11 18:05 - 2016-06-15 18:17 - 00000000 ____D C:\Users\axure\AppData\Local\Axure
2016-06-11 18:05 - 2016-06-11 18:05 - 00000000 ____D C:\Users\axure\AppData\Local\Adobe
2016-06-11 17:57 - 2016-06-11 17:57 - 01539512 _____ C:\Users\Mariolka\Downloads\Loader-v2.2.2-By-Nsc.rar
2016-06-11 17:57 - 2016-06-11 17:57 - 00000000 ____D C:\Users\Mariolka\Downloads\Loader-v2.2.2-By-Nsc
2016-06-11 17:47 - 2016-06-11 17:47 - 00001065 _____ C:\Users\Public\Desktop\Axure RP 8.lnk
2016-06-11 17:45 - 2016-06-11 17:45 - 00007805 _____ C:\Users\Mariolka\Downloads\axure rp key generator (1).pdf
2016-06-11 17:44 - 2016-06-11 17:44 - 00007805 _____ C:\Users\Mariolka\Downloads\axure rp key generator.pdf
2016-06-11 17:41 - 2016-06-11 17:41 - 00000000 ____D C:\Users\Mariolka\Documents\My Axure RP Libraries
2016-06-11 17:41 - 2016-06-11 17:41 - 00000000 ____D C:\Users\Mariolka\AppData\Roaming\Axure
2016-06-11 17:41 - 2016-06-11 17:41 - 00000000 ____D C:\ProgramData\Axure
2016-06-11 17:36 - 2016-06-11 17:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Axure
2016-06-11 17:36 - 2016-06-11 17:47 - 00000000 ____D C:\Program Files (x86)\Axure
2016-06-11 17:36 - 2016-06-11 17:36 - 00001178 _____ C:\Users\Public\Desktop\Axure RP Pro 6.5.lnk
2016-06-11 17:33 - 2016-06-11 17:34 - 60905341 _____ C:\Users\Mariolka\Downloads\Axure RP Pro 6.5.0 Key.rar
2016-06-10 23:37 - 2016-06-15 13:55 - 00000000 ____D C:\AdwCleaner
2016-06-10 23:37 - 2016-06-10 23:37 - 03677248 _____ C:\Users\Mariolka\Downloads\adwcleaner.pl 5.119.exe
2016-06-10 06:40 - 2016-06-10 06:40 - 00573105 _____ C:\Users\Mariolka\Downloads\Grammarway answers.pdf
2016-06-08 22:55 - 2016-06-08 22:55 - 00232841 _____ C:\Users\Mariolka\Downloads\artykuły do egzaminu (1).zip
2016-06-08 18:01 - 2016-06-08 18:01 - 09945293 _____ C:\Users\Mariolka\Downloads\English for Print Making.pdf
2016-06-08 17:57 - 2016-06-08 17:57 - 00232841 _____ C:\Users\Mariolka\Downloads\artykuły do egzaminu.zip
2016-06-07 23:55 - 2016-06-07 23:55 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet Wacom
2016-05-18 11:48 - 2016-05-18 11:48 - 00645673 _____ C:\Users\Mariolka\Downloads\m skrzypczyk.pdf
2016-05-17 00:10 - 2016-05-17 00:17 - 542717334 _____ C:\Users\Mariolka\Downloads\documents-export-2016-05-16.zip

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-06-16 15:18 - 2016-03-16 16:23 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-06-16 15:12 - 2016-03-16 16:23 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-16 15:11 - 2016-03-16 15:03 - 05043760 _____ C:\Windows\system32\FNTCACHE.DAT
2016-06-16 15:11 - 2014-01-21 16:40 - 00000948 _____ C:\Windows\SysWOW64\bscs.ini
2016-06-16 15:11 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-16 15:08 - 2016-03-21 01:00 - 00000000 ____D C:\Users\Mariolka\AppData\LocalLow\Temp
2016-06-16 15:07 - 2016-03-16 15:20 - 00001176 _____ C:\Users\Mariolka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-06-16 14:27 - 2011-04-12 15:21 - 00739932 _____ C:\Windows\system32\perfh015.dat
2016-06-16 14:27 - 2011-04-12 15:21 - 00155474 _____ C:\Windows\system32\perfc015.dat
2016-06-16 14:27 - 2009-07-14 07:13 - 01668226 _____ C:\Windows\system32\PerfStringBackup.INI
2016-06-16 14:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-06-15 15:45 - 2016-03-16 23:00 - 00000000 ____D C:\Users\Mariolka\Documents\FIFA 12
2016-06-15 14:22 - 2009-07-14 06:45 - 00028896 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-06-15 14:22 - 2009-07-14 06:45 - 00028896 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-06-15 13:55 - 2016-03-16 16:24 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-15 13:55 - 2016-03-16 16:24 - 00001302 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-06-15 08:17 - 2016-03-16 17:30 - 00000000 ____D C:\Users\Mariolka\AppData\Local\Adobe
2016-06-11 18:05 - 2015-06-11 17:54 - 00000000 ____D C:\Users\axure
2016-06-11 18:05 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-06-09 16:12 - 2016-03-18 20:50 - 00000000 ____D C:\Users\Mariolka\Downloads\MoorHunt
2016-06-08 18:03 - 2016-03-16 15:20 - 00000000 ____D C:\Users\Mariolka
2016-06-08 15:47 - 2016-03-16 23:12 - 00000775 _____ C:\Users\Public\Desktop\FIFA 12.lnk
2016-06-07 23:54 - 2016-03-22 00:53 - 00000000 ____D C:\Program Files\Tablet
2016-06-07 17:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-06-06 18:20 - 2016-03-20 23:27 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-06-06 15:40 - 2016-03-20 23:43 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-05-22 21:45 - 2016-03-16 17:30 - 00000000 ____D C:\ProgramData\Adobe
2016-05-22 20:40 - 2016-03-16 15:20 - 00000000 ____D C:\Users\Mariolka\AppData\Roaming\Adobe

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-06-07 17:27

==================== Koniec  FRST.txt ============================