Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 26-02-2017
Uruchomiony przez oem2 (administrator)  OEM (27-02-2017 12:45:59)
Uruchomiony z C:\Users\oem2\Downloads
Załadowane profile: oem2 (Dostępne profile: oem2)
Platform: Windows 8.1 Pro (Update) (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(© pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
(DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKU\S-1-5-21-1102267148-3212572079-3134952296-1001\...\MountPoints2: {28753b83-e3ed-11e6-8268-605718103217} - "E:\WD Drive Unlock.exe" autoplay=true
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} => C:\Program Files\żěŃą\X64\KZipShell.dll -> Brak pliku

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4E46F935-C47B-4B29-9FDC-B9886C5433D6}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-01-25] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-06-30] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-25] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-06-30] (Adobe Systems Incorporated)
BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2016-08-05] (pdfforge GmbH)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-06-30] (Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-06-30] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-06-30] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files (x86)\PDF Architect 4\creator-ie-plugin.dll [2016-08-05] (pdfforge GmbH)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-06-30] (Adobe Systems Incorporated)

Chrome: 
=======
CHR Session Restore: Default -> [funkcja włączona]
CHR Profile: C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default [2017-02-27]
CHR Extension: (Dysk Google) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-12]
CHR Extension: (YouTube) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-12]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-22]
CHR Extension: (Gmail) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-12]
CHR Extension: (Chrome Media Router) - C:\Users\oem2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-14]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-25] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [237272 2015-08-27] (Dell Inc.)
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1392792 2015-10-30] (Intel Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-04] (Intel Corporation)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2438880 2016-08-05] (pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-08-05] (pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-08-05] (pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [972056 2016-05-18] (© pdfforge GmbH.)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-12-03] (DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-24] (OSR Open Systems Resources, Inc.)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 dptf_acpi; C:\Windows\System32\drivers\dptf_acpi.sys [55784 2015-10-30] (Intel Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [52200 2015-10-30] (Intel Corporation)
R3 dptf_pch; C:\Windows\System32\drivers\dptf_pch.sys [50664 2015-10-30] (Intel Corporation)
R3 esif_lf; C:\Windows\system32\DRIVERS\esif_lf.sys [260072 2015-10-30] (Intel Corporation)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-02-16] (REALiX(tm))
R3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-08-08] (Intel Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-08-08] (Intel Corporation)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [191944 2014-05-09] (Intel Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100824 2013-12-04] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3515152 2016-01-11] (Intel Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 RTLU3E8023-W8-64; C:\Windows\system32\DRIVERS\rtu30x64w8.sys [70656 2013-06-18] (Realtek                                            )
R3 SensorsServiceDriver; C:\Windows\System32\drivers\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 USBPcap; C:\Windows\system32\DRIVERS\USBPcap.sys [51104 2016-08-02] (USBPcap)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-02-27 12:42 - 2017-02-27 12:42 - 00000000 ____D C:\Users\oem2\Downloads\FRST-OlderVersion
2017-02-27 12:36 - 2017-02-27 12:37 - 00322166 _____ C:\Windows\ntbtlog.txt
2017-02-27 12:36 - 2017-02-27 12:37 - 00034281 _____ C:\Users\oem2\Downloads\Fixlog.txt
2017-02-27 12:07 - 2017-02-27 12:43 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1102267148-3212572079-3134952296-1001
2017-02-17 19:52 - 2017-02-17 19:52 - 01667593 _____ C:\Users\oem2\Downloads\wydzielony operat.pdf
2017-02-17 12:15 - 2017-02-17 12:15 - 00039145 _____ C:\Users\oem2\Downloads\FRST (1).txt
2017-02-17 12:15 - 2017-02-17 12:15 - 00030981 _____ C:\Users\oem2\Downloads\Addition (1).txt
2017-02-17 12:15 - 2017-02-17 12:15 - 00002320 _____ C:\Users\oem2\Downloads\gmer (1).txt
2017-02-17 09:28 - 2017-02-17 09:28 - 17281559 _____ C:\Users\oem2\Downloads\download (3).zip
2017-02-17 07:40 - 2017-02-17 07:40 - 00000996 _____ C:\Users\oem2\AppData\Local\recently-used.xbel
2017-02-17 07:35 - 2017-02-17 07:35 - 00000000 ____D C:\Users\oem2\AppData\Local\fontconfig
2017-02-16 22:19 - 2017-02-16 22:19 - 00000000 ____D C:\Windows\LastGood.Tmp
2017-02-16 22:18 - 2017-02-16 22:18 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2017-02-16 22:09 - 2017-02-16 22:09 - 01923938 _____ C:\Users\oem2\Downloads\sty 20_2017_odp rdos_paulownuia.pdf
2017-02-16 14:16 - 2017-02-27 12:39 - 00002323 _____ C:\Users\oem2\Desktop\Osoba 1 - Chrome (1).lnk
2017-02-16 12:59 - 2017-02-16 12:59 - 00002320 _____ C:\Users\oem2\Downloads\gmer.txt
2017-02-16 12:23 - 2017-02-16 12:23 - 00380928 _____ C:\Users\oem2\Downloads\js8xc3w1.exe
2017-02-16 12:22 - 2017-02-16 12:22 - 00066230 _____ C:\Users\oem2\Downloads\Shortcut.txt
2017-02-16 12:21 - 2017-02-27 12:46 - 00012784 _____ C:\Users\oem2\Downloads\FRST.txt
2017-02-16 12:21 - 2017-02-16 12:22 - 00030981 _____ C:\Users\oem2\Downloads\Addition.txt
2017-02-16 12:19 - 2017-02-27 12:45 - 00000000 ____D C:\FRST
2017-02-16 12:18 - 2017-02-27 12:42 - 02423296 _____ (Farbar) C:\Users\oem2\Downloads\FRST64.exe
2017-02-16 11:38 - 2017-02-27 12:36 - 00002262 _____ C:\Users\oem2\Desktop\Osoba 1 - Chrome.lnk
2017-02-16 10:50 - 2017-02-27 12:37 - 00000008 __RSH C:\Users\oem2\ntuser.pol
2017-02-16 10:48 - 2017-02-16 10:48 - 00027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2017-02-16 10:47 - 2017-02-16 10:47 - 06324670 _____ C:\Users\oem2\Downloads\Lista_projektow_POPW_30_11_2016 (3).xlsx
2017-02-16 10:46 - 2017-02-27 12:37 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-02-16 10:07 - 2017-02-16 10:07 - 00052663 _____ C:\Users\oem2\Downloads\Biznesplan_szkolenie_przykład_19.12..odt
2017-02-16 10:06 - 2017-02-14 12:30 - 00052701 _____ C:\Users\oem2\Documents\Biznesplan_szkolenie_przykład_19.12..docx_0.odt
2017-02-16 10:04 - 2017-02-16 10:04 - 01128916 _____ (www.hellopdf.com ) C:\Users\oem2\Downloads\pdf2wordsetup.exe
2017-02-16 09:50 - 2017-02-16 09:50 - 00256188 _____ C:\Users\oem2\Downloads\UMOWA INWESTYCYJNA 1 (1).pages
2017-02-16 09:48 - 2017-02-16 09:48 - 00256188 _____ C:\Users\oem2\Downloads\UMOWA INWESTYCYJNA 1.pages
2017-02-16 08:02 - 2017-02-16 08:02 - 00462195 _____ C:\Users\oem2\Downloads\Ekspertyza-IUNG-gleba-2017.pdf
2017-02-16 07:35 - 2017-02-16 07:35 - 06324670 _____ C:\Users\oem2\Downloads\Lista_projektow_POPW_30_11_2016 (2).xlsx
2017-02-15 13:36 - 2017-02-15 13:36 - 00040338 _____ C:\Users\oem2\Downloads\Potwierdzenie wykonania operacji_20170215_133143.pdf
2017-02-15 13:25 - 2017-02-15 13:25 - 00157385 _____ C:\Users\oem2\Downloads\Polisa_50000522390_15022017_123114 (2).pdf
2017-02-15 13:24 - 2017-02-15 13:24 - 00157385 _____ C:\Users\oem2\Downloads\Polisa_50000522390_15022017_123114 (1).pdf
2017-02-15 13:23 - 2017-02-15 13:23 - 00480967 _____ C:\Users\oem2\Downloads\podpis.pdf
2017-02-15 12:43 - 2017-02-15 12:43 - 00157385 _____ C:\Users\oem2\Downloads\Polisa_50000522390_15022017_123114.pdf
2017-02-15 08:13 - 2017-02-15 08:13 - 00089427 _____ C:\Users\oem2\Downloads\Kalkulacja_1000002035815_14022017_141019 (2).pdf
2017-02-15 08:12 - 2017-02-15 08:12 - 00089427 _____ C:\Users\oem2\Downloads\Kalkulacja_1000002035815_14022017_141019 (1).pdf
2017-02-15 08:12 - 2017-02-15 08:12 - 00089178 _____ C:\Users\oem2\Downloads\Kalkulacja_1000002035815_14022017_141142 (1).pdf
2017-02-14 15:05 - 2017-02-14 15:05 - 00089427 _____ C:\Users\oem2\Downloads\Kalkulacja_1000002035815_14022017_141019.pdf
2017-02-14 15:05 - 2017-02-14 15:05 - 00089178 _____ C:\Users\oem2\Downloads\Kalkulacja_1000002035815_14022017_141142.pdf
2017-02-14 15:05 - 2017-02-14 15:05 - 00089175 _____ C:\Users\oem2\Downloads\Kalkulacja_1000002035815_14022017_141112.pdf
2017-02-14 11:25 - 2017-02-14 11:26 - 06324670 _____ C:\Users\oem2\Downloads\Lista_projektow_POPW_30_11_2016 (1).xlsx
2017-02-14 11:25 - 2017-02-14 11:25 - 06324670 _____ C:\Users\oem2\Downloads\Lista_projektow_POPW_30_11_2016.xlsx
2017-02-10 12:02 - 2017-02-10 12:02 - 00514926 _____ C:\Users\oem2\Downloads\52-PELCZAR MARIOLA (3).pdf
2017-02-09 13:32 - 2017-02-09 13:32 - 00514926 _____ C:\Users\oem2\Downloads\52-PELCZAR MARIOLA (2).pdf
2017-02-09 11:31 - 2017-02-09 11:31 - 00376248 _____ C:\Users\oem2\Downloads\ubezpieczenie kredyt hipoteczny (1).pdf
2017-02-09 11:31 - 2017-02-09 11:31 - 00207606 _____ C:\Users\oem2\Downloads\karta płatnicza (1).pdf
2017-02-09 11:17 - 2017-02-09 11:17 - 00041658 _____ C:\Users\oem2\Downloads\potwierdzenie przelewu.pdf
2017-02-09 11:16 - 2017-02-09 11:16 - 00513534 _____ C:\Users\oem2\Downloads\160109903153.PDF
2017-02-08 14:49 - 2017-02-08 14:49 - 00172062 _____ C:\Users\oem2\Downloads\mBiznes konto S nr _76429121 za 2017-01.pdf
2017-02-08 13:40 - 2017-02-08 13:40 - 00147901 _____ C:\Users\oem2\Downloads\karta_classic.pdf
2017-02-07 15:34 - 2017-02-07 15:34 - 00045511 _____ C:\Users\oem2\Desktop\CROWDFUNDING.odt
2017-02-07 10:48 - 2017-02-07 10:48 - 00624136 _____ C:\Users\oem2\Downloads\OWUOC 187 2015.pdf
2017-02-07 09:40 - 2017-02-07 09:40 - 00514926 _____ C:\Users\oem2\Downloads\52-PELCZAR MARIOLA (1).pdf
2017-02-06 14:05 - 2017-02-06 14:05 - 00608461 _____ C:\Users\oem2\Downloads\Boatex-2017-Zaproszenie-105 (1).pdf
2017-02-06 14:03 - 2017-02-06 14:03 - 00608461 _____ C:\Users\oem2\Downloads\Boatex-2017-Zaproszenie-105.pdf
2017-02-06 11:41 - 2017-02-06 11:41 - 00514926 _____ C:\Users\oem2\Downloads\52-PELCZAR MARIOLA.pdf
2017-02-03 15:24 - 2017-02-03 15:24 - 01450382 _____ C:\Users\oem2\Downloads\D20001037Lj.pdf
2017-02-02 14:06 - 2017-02-02 14:06 - 00403660 _____ C:\Users\oem2\Downloads\PL.pdf
2017-02-01 17:46 - 2017-02-01 17:46 - 00001919 _____ C:\Users\Public\Desktop\TMS Trader.lnk
2017-02-01 17:46 - 2017-02-01 17:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TMS Trader
2017-02-01 17:46 - 2017-02-01 17:46 - 00000000 ____D C:\ProgramData\MetaQuotes
2017-02-01 17:46 - 2017-02-01 17:46 - 00000000 ____D C:\Program Files (x86)\TMS Trader
2017-02-01 17:45 - 2017-02-01 17:46 - 00000000 ____D C:\Users\oem2\AppData\Roaming\MetaQuotes
2017-02-01 17:45 - 2017-02-01 17:45 - 00575664 _____ (MetaQuotes Software Corp.) C:\Users\oem2\Downloads\tmstrader.exe
2017-02-01 14:59 - 2017-02-01 14:59 - 00041727 _____ C:\Users\oem2\Downloads\Koszty przeprowadzenia otwartej emisji akcji na platformie beesfund.xlsx
2017-02-01 09:45 - 2017-02-17 12:22 - 00000000 ____D C:\Users\oem2\AppData\Roaming\Skype
2017-02-01 09:45 - 2017-02-01 09:45 - 00002715 _____ C:\Users\Public\Desktop\Skype.lnk
2017-02-01 09:45 - 2017-02-01 09:45 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-02-01 09:45 - 2017-02-01 09:45 - 00000000 ____D C:\Users\oem2\Tracing
2017-02-01 09:45 - 2017-02-01 09:45 - 00000000 ____D C:\ProgramData\Skype
2017-02-01 09:45 - 2017-02-01 09:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-02-01 09:44 - 2017-02-01 09:44 - 01629664 _____ (Skype Technologies S.A.) C:\Users\oem2\Downloads\SkypeSetup.exe
2017-01-31 15:51 - 2017-01-31 15:51 - 00728453 _____ C:\Users\oem2\Downloads\Oswiadczenie dotyczace zdolnosci pochlaniania co2.pdf
2017-01-31 10:27 - 2017-01-31 10:27 - 00014410 _____ C:\Users\oem2\Downloads\RP_384491_7_20170131102748.pdf
2017-01-31 10:27 - 2017-01-31 10:27 - 00014408 _____ C:\Users\oem2\Downloads\RP_384491_7_20170131102751.pdf
2017-01-30 11:00 - 2017-01-30 11:00 - 00000022 _____ C:\Users\oem2\Desktop\rze dom.txt
2017-01-29 19:17 - 2017-01-29 19:35 - 00000000 ____D C:\Users\oem2\AppData\Roaming\TeamViewer
2017-01-29 19:17 - 2017-01-29 19:18 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2017-01-29 19:17 - 2017-01-29 19:17 - 00001059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2017-01-29 19:17 - 2017-01-29 19:17 - 00001047 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
2017-01-29 19:17 - 2016-11-28 11:55 - 00035112 _____ (TeamViewer GmbH) C:\Windows\system32\Drivers\teamviewervpn.sys
2017-01-29 19:16 - 2017-01-29 19:16 - 12974632 _____ (TeamViewer GmbH) C:\Users\oem2\Downloads\TeamViewer_Setup_pl-tln.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-02-27 12:42 - 2016-06-16 15:34 - 01738750 _____ C:\Windows\system32\PerfStringBackup.INI
2017-02-27 12:42 - 2013-08-23 00:12 - 00773004 _____ C:\Windows\system32\perfh015.dat
2017-02-27 12:42 - 2013-08-23 00:12 - 00156654 _____ C:\Windows\system32\perfc015.dat
2017-02-27 12:42 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2017-02-27 12:37 - 2016-06-16 17:52 - 00000000 __SHD C:\Users\oem2\IntelGraphicsProfiles
2017-02-27 12:37 - 2016-06-16 15:31 - 00000000 ____D C:\Users\oem2
2017-02-27 12:37 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-02-27 12:36 - 2016-09-23 09:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2017-02-27 12:36 - 2016-09-12 09:05 - 00002236 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-27 12:36 - 2016-09-12 09:05 - 00002224 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-02-27 12:36 - 2016-06-16 15:31 - 00001180 _____ C:\Users\oem2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-02-27 12:36 - 2016-06-16 15:31 - 00000000 ____D C:\Users\oem2\AppData\Roaming\Adobe
2017-02-27 12:36 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\GroupPolicy
2017-02-27 12:32 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2017-02-27 12:05 - 2016-06-16 17:39 - 00003960 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{C07F2B4D-0FF3-47CE-8A7B-B7DD8B832F97}
2017-02-27 12:02 - 2016-09-26 12:55 - 00000000 ____D C:\Users\oem2\AppData\Local\Adobe
2017-02-17 12:29 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\NDF
2017-02-17 07:41 - 2017-01-05 11:30 - 00000000 ____D C:\Users\oem2\.gimp-2.8
2017-02-17 07:40 - 2017-01-05 11:37 - 00000000 ____D C:\Users\oem2\AppData\Local\gtk-2.0
2017-02-16 11:29 - 2016-09-26 13:15 - 00000000 ___RD C:\Users\oem2\Creative Cloud Files
2017-02-16 11:29 - 2016-09-26 13:15 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-02-16 10:55 - 2013-08-22 15:44 - 00364184 _____ C:\Windows\system32\FNTCACHE.DAT
2017-02-13 13:19 - 2016-09-23 08:55 - 00000000 ____D C:\Users\oem2\Desktop\MAR
2017-02-03 13:17 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2017-01-30 14:25 - 2017-01-27 18:18 - 00000000 ____D C:\Users\oem2\.smplayer
2017-01-29 10:29 - 2017-01-27 18:27 - 00001760 _____ C:\Users\oem2\Desktop\MPC-HC x64.lnk

==================== Pliki w katalogu głównym wybranych folderów =======

2017-02-17 07:40 - 2017-02-17 07:40 - 0000996 _____ () C:\Users\oem2\AppData\Local\recently-used.xbel

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-02-13 09:02

==================== Koniec  FRST.txt ============================