API tools faq
paste
Advertisement
Guest User

Untitled

a guest
May 13th, 2016
160
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 34.23 KB | None | 0 0
raw download clone embed print report
  1. Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:09-05-2016
  2. Uruchomiony przez robin (administrator) WIN8 (13-05-2016 16:11:55)
  3. Uruchomiony z C:\Users\robin\Downloads
  4. Załadowane profile: robin (Dostępne profile: robin)
  5. Platform: Windows 8.1 Pro (X64) Język: Polski (Polska)
  6. Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
  7. Tryb startu: Normal
  8. Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Procesy (filtrowane) =================
  11.  
  12. (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
  13.  
  14. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  15. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  16. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  17. (Intel Corporation) C:\Windows\System32\igfxCUIService.exe
  18. () C:\Program Files\Pawelu\Ugijaf.exe
  19. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
  20. () C:\ProgramData\Holdtam\Holdtam.exe
  21. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  22. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  23. () C:\Program Files (x86)\Paragon Software\Paragon ExtFS for Windows\extservice.exe
  24. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  25. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  26. (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
  27. (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
  28. () C:\Program Files\Pawelu\Gawapep64.exe
  29. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  30. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  31. (Intel Corporation) C:\Windows\System32\igfxEM.exe
  32. (Intel Corporation) C:\Windows\System32\igfxHK.exe
  33. (Intel Corporation) C:\Windows\System32\igfxTray.exe
  34. () C:\Users\robin\AppData\Roaming\cpuminer\cpm.exe
  35. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  36. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  37. (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17031_none_fa50b3979b1bcb4a\TiWorker.exe
  38. (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  39. () C:\Program Files (x86)\Cifipijush\cfprnwTsk.exe
  40. () C:\Program Files (x86)\Cifipijush\cfprnwTsk.exe
  41. (Microsoft Corporation) C:\Windows\System32\rundll32.exe
  42. () C:\Program Files (x86)\Garmin\Express SelfUpdater\esu.exe
  43. (Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
  44.  
  45.  
  46. ==================== Rejestr (filtrowane) ===========================
  47.  
  48. (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
  49.  
  50. HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
  51. HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2015-02-05] (NVIDIA Corporation)
  52. HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  53. HKLM\...\Run: [cpuminer] => C:\Users\robin\AppData\Roaming\cpuminer\cpm.exe [1452032 2016-05-10] ()
  54. HKLM-x32\...\Run: [SMART Board Service] => C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe [2186096 2012-03-21] (SMART Technologies)
  55. HKLM-x32\...\Run: [SMART Ink] => C:\Program Files (x86)\SMART Technologies\Education Software\SMARTInk.exe [94064 2012-03-21] (SMART Technologies)
  56. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation)
  57. HKLM-x32\...\Run: [tasklist.exe -start] => c:\users\robin\appdata\roaming\tasklist.exe [2174464 2016-05-12] (TODO: <公司名>)
  58. HKU\S-1-5-21-1694957538-263036223-2447365843-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3077712 2016-04-30] (Valve Corporation)
  59. HKU\S-1-5-21-1694957538-263036223-2447365843-1001\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
  60. HKU\S-1-5-21-1694957538-263036223-2447365843-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1399208 2016-04-08] (Garmin Ltd. or its subsidiaries)
  61. HKU\S-1-5-21-1694957538-263036223-2447365843-1001\...\MountPoints2: {3616cc1a-cd7e-11e4-8278-8c89a506f535} - "D:\setup.exe"
  62. HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1399208 2016-04-08] (Garmin Ltd. or its subsidiaries)
  63. AppInit_DLLs: C:\ProgramData\Holdtam\Zonetam.dll => C:\ProgramData\Holdtam\Zonetam.dll [361984 2016-05-12] ()
  64. AppInit_DLLs-x32: C:\ProgramData\Holdtam\Sao-Cof.dll => Brak pliku
  65.  
  66. ==================== Internet (filtrowane) ====================
  67.  
  68. (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
  69.  
  70. AutoConfigURL: [S-1-5-21-1694957538-263036223-2447365843-1001] => hxxp://unstops.org/wpad.dat?7dba601ddbb1f3a5686b7e71bc7eb80710030178
  71. Tcpip\Parameters: [DhcpNameServer] 192.168.88.1
  72. Tcpip\..\Interfaces\{2C916818-43FA-4B50-9610-D453D1B204E7}: [DhcpNameServer] 192.168.88.1
  73. Tcpip\..\Interfaces\{EDB42A71-7798-4A59-9E52-EBB29E70C25D}: [DhcpNameServer] 194.204.159.1
  74. ManualProxies: 0hxxp://unstops.org/wpad.dat?7dba601ddbb1f3a5686b7e71bc7eb80710030178
  75.  
  76. Internet Explorer:
  77. ==================
  78. SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  79. BHO: SMART Notebook Download Utility -> {67BCF957-85FC-4036-8DC4-D4D80E00A77B} -> C:\Program Files (x86)\SMART Technologies\Education Software\Win64\NotebookPlugin.dll [2012-03-28] (SMART Technologies ULC.)
  80. BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
  81. BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
  82. BHO-x32: SMART Notebook Download Utility -> {67BCF957-85FC-4036-8DC4-D4D80E00A77B} -> C:\Program Files (x86)\SMART Technologies\Education Software\Win32\NotebookPlugin.dll [2012-03-28] (SMART Technologies ULC.)
  83. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-20] (Oracle Corporation)
  84. BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Arc\Plugins\ArcPluginIE.dll [2015-08-20] (Perfect World Entertainment Inc)
  85. BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
  86. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-20] (Oracle Corporation)
  87.  
  88. FireFox:
  89. ========
  90. FF ProfilePath: C:\Users\robin\AppData\Roaming\Profiles\6zbxvxqf.default
  91. FF Homepage: about:home
  92. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-02-05] ()
  93. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-02-05] ()
  94. FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-20] (Oracle Corporation)
  95. FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-20] (Oracle Corporation)
  96. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
  97. FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Arc\Plugins\npArcPluginFF.dll [2015-08-20] (Perfect World Entertainment Inc)
  98. FF user.js: detected! => C:\Users\robin\AppData\Roaming\Profiles\6zbxvxqf.default\user.js [2016-05-12]
  99. FF Extension: uBlock - C:\Users\robin\AppData\Roaming\Mozilla\Firefox\Profiles\lyj3e569.default\Extensions\{2b10c1c8-a11f-4bad-fe9c-1c11e82cac42}.xpi [2015-12-09]
  100. FF Extension: uBlock - C:\Users\robin\AppData\Roaming\Profiles\6zbxvxqf.default\Extensions\{2b10c1c8-a11f-4bad-fe9c-1c11e82cac42}.xpi [2015-12-09]
  101.  
  102. ==================== Usługi (filtrowane) ========================
  103.  
  104. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  105.  
  106. R2 17BB43AC-7B46-4FF0-8F87-449C9E1A5F94; C:\Program Files\Pawelu\Ugijaf.exe [276328 2016-05-12] ()
  107. S3 ArcService; C:\Program Files (x86)\Arc\ArcService.exe [88400 2015-08-20] (Perfect World Entertainment Inc)
  108. S3 aspnet_state; C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [32768 2003-02-20] (Microsoft Corporation) [Brak podpisu cyfrowego]
  109. S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
  110. S3 Boonty Games; C:\Program Files (x86)\Common Files\BOONTY Shared\Service\Boonty.exe [69120 2015-08-06] (BOONTY) [Brak podpisu cyfrowego]
  111. S2 cfprnwSrv; C:\Program Files (x86)\Cifipijush\cfprnwSrv.exe [984232 2016-05-12] ()
  112. S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [238376 2015-07-12] (EasyAntiCheat Ltd)
  113. S3 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [792592 2016-04-08] (Garmin Ltd. or its subsidiaries)
  114. R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2015-02-05] (NVIDIA Corporation)
  115. R2 Holdtam; C:\ProgramData\\Holdtam\\Holdtam.exe [943104 2016-05-12] () [Brak podpisu cyfrowego]
  116. R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
  117. S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
  118. S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4362656 2016-02-24] (INCA Internet Co., Ltd.)
  119. R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-02-05] (NVIDIA Corporation)
  120. R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833360 2015-02-05] (NVIDIA Corporation)
  121. S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-18] (Electronic Arts)
  122. R2 ParagonMounter; C:\Program Files (x86)\Paragon Software\Paragon ExtFS for Windows\extservice.exe [487936 2015-09-02] () [Brak podpisu cyfrowego]
  123. S4 Response Hardware; C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe [19312 2012-03-02] (SMART Technologies ULC)
  124. S4 SMARTHelperService; C:\Program Files (x86)\SMART Technologies\Education Software\SMARTHelperService.exe [580976 2012-03-21] (SMART Technologies)
  125. S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
  126. S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
  127.  
  128. ===================== Sterowniki (filtrowane) ==========================
  129.  
  130. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  131.  
  132. U3 axscsidrv; C:\Windows\System32\Drivers\axscsidrv.sys [293888 2015-03-18] (Alcohol Soft Development Team)
  133. R2 Dokan; C:\Windows\System32\DRIVERS\dokan.sys [57464 2015-08-27] (Windows (R) Win 7 DDK provider)
  134. S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
  135. R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
  136. S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)
  137. R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
  138. R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-02-05] (NVIDIA Corporation)
  139. R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2015-02-05] (NVIDIA Corporation)
  140. S3 SMARTMouseFilterx64; C:\Windows\System32\drivers\SMARTMouseFilterx64.sys [13168 2012-03-21] (SMART Technologies ULC)
  141. R3 SMARTVHidMiniVistaAmd64; C:\Windows\System32\drivers\SMARTVHidMiniVistaAmd64.sys [16368 2012-03-21] (SMART Technologies ULC)
  142. R3 SMARTVTabletPCx64; C:\Windows\System32\drivers\SMARTVTabletPCx64.sys [24944 2012-03-21] (SMART Technologies ULC)
  143. R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2015-03-15] (Duplex Secure Ltd.)
  144. S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
  145. S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
  146. S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
  147.  
  148. ==================== NetSvcs (filtrowane) ===================
  149.  
  150. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  151.  
  152.  
  153. ==================== Jeden miesiąc - utworzone pliki i foldery ========
  154.  
  155. (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
  156.  
  157. 2016-05-13 16:05 - 2016-05-13 16:05 - 00000000 ____D C:\Users\robin\AppData\LocalLow000000BB90B91D78
  158. 2016-05-12 22:39 - 2016-05-12 22:39 - 00003270 _____ C:\Windows\System32\Tasks\psv_Jayzap
  159. 2016-05-12 22:39 - 2016-05-12 22:39 - 00000000 ____D C:\Users\robin\AppData\LocalLow00000062469C1FE8
  160. 2016-05-12 22:04 - 2016-05-12 19:24 - 00001006 _____ C:\Users\robin\Desktop\hosts.txt
  161. 2016-05-12 22:02 - 2016-05-12 22:29 - 00000000 ____D C:\Users\robin\Doctor Web
  162. 2016-05-12 20:21 - 2016-05-12 20:21 - 00075746 _____ C:\Users\robin\Downloads\Shortcut.txt
  163. 2016-05-12 20:20 - 2016-05-12 20:21 - 00051003 _____ C:\Users\robin\Downloads\Addition.txt
  164. 2016-05-12 20:19 - 2016-05-13 16:12 - 00013679 _____ C:\Users\robin\Downloads\FRST.txt
  165. 2016-05-12 20:19 - 2016-05-13 16:11 - 00000000 ____D C:\FRST
  166. 2016-05-12 20:18 - 2016-05-12 20:19 - 02381312 _____ (Farbar) C:\Users\robin\Downloads\FRST64.exe
  167. 2016-05-12 20:15 - 2016-05-12 22:39 - 00000080 _____ C:\Users\robin\Desktop\NTSD - skrót.lnk
  168. 2016-05-12 20:15 - 2016-05-12 22:39 - 00000080 _____ C:\Users\robin\Desktop\Magicka - skrót.lnk
  169. 2016-05-12 20:15 - 2016-05-12 22:39 - 00000080 _____ C:\Users\robin\Desktop\Homeworld2 - skrót.lnk
  170. 2016-05-12 20:15 - 2016-05-12 22:39 - 00000080 _____ C:\Users\robin\Desktop\homeworld - skrót.lnk
  171. 2016-05-12 20:15 - 2016-05-12 22:39 - 00000080 _____ C:\Users\robin\Desktop\EoCApp - skrót.lnk
  172. 2016-05-12 20:15 - 2016-05-12 22:39 - 00000080 _____ C:\Users\robin\Desktop\cataclysm - skrót.lnk
  173. 2016-05-12 20:15 - 2016-05-12 22:39 - 00000080 _____ C:\Users\robin\Desktop\Battlecry - skrót.lnk
  174. 2016-05-12 19:32 - 2016-05-12 19:32 - 00000000 ____D C:\Users\robin\AppData\Roaming\Tencent
  175. 2016-05-12 19:32 - 2016-05-12 19:32 - 00000000 ____D C:\ProgramData\Tencent
  176. 2016-05-12 19:32 - 2016-05-12 19:32 - 00000000 ____D C:\Program Files (x86)\Tencent
  177. 2016-05-12 19:31 - 2016-05-12 19:32 - 00000000 ____D C:\Users\robin\AppData\Local\app
  178. 2016-05-12 19:31 - 2016-05-03 10:40 - 01443152 _____ ( ) C:\Users\robin\AppData\Roaming\AutoTime_51477.exe
  179. 2016-05-12 19:30 - 2016-05-12 20:14 - 00000000 ____D C:\ProgramData\WindowsMsg
  180. 2016-05-12 19:30 - 2016-05-12 19:30 - 00003010 _____ C:\Windows\System32\Tasks\ttwifi
  181. 2016-05-12 19:30 - 2016-05-12 19:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ttwifi
  182. 2016-05-12 19:30 - 2016-05-12 17:49 - 02174464 _____ (TODO: <公司名>) C:\Users\robin\AppData\Roaming\tasklist.exe
  183. 2016-05-12 19:29 - 2016-05-12 22:38 - 00000000 ____D C:\Users\robin\AppData\Roaming\Biina
  184. 2016-05-12 19:29 - 2016-05-12 22:38 - 00000000 ____D C:\Users\robin\AppData\LocalLow\Company
  185. 2016-05-12 19:29 - 2016-05-12 19:29 - 00008788 _____ C:\Windows\System32\Tasks\cfprnwTsk
  186. 2016-05-12 19:29 - 2016-05-12 19:29 - 00000000 ____D C:\Users\robin\AppData\Roaming\PhdakpSalm
  187. 2016-05-12 19:29 - 2016-05-12 19:29 - 00000000 ____D C:\Users\robin\AppData\Local\tuto_monetize_120160512
  188. 2016-05-12 19:29 - 2016-05-12 19:29 - 00000000 ____D C:\uninst
  189. 2016-05-12 19:29 - 2016-05-11 10:32 - 00936414 _____ ( ) C:\Users\robin\AppData\Roaming\setup_52.exe
  190. 2016-05-12 19:29 - 2016-04-19 12:39 - 00114176 _____ C:\ProgramData\hp.exe
  191. 2016-05-12 19:28 - 2016-05-12 22:38 - 00000000 ____D C:\Program Files\Pawelu
  192. 2016-05-12 19:28 - 2016-05-12 22:38 - 00000000 ____D C:\Program Files (x86)\Sesoward
  193. 2016-05-12 19:28 - 2016-05-12 22:38 - 00000000 ____D C:\Program Files (x86)\badu
  194. 2016-05-12 19:28 - 2016-05-12 20:14 - 00000000 ____D C:\Program Files\PaweluUn
  195. 2016-05-12 19:28 - 2016-05-12 19:29 - 00000000 ____D C:\Users\robin\AppData\Roaming\gplyra
  196. 2016-05-12 19:28 - 2016-05-12 19:29 - 00000000 ____D C:\Users\robin\AppData\Roaming\cpuminer
  197. 2016-05-12 19:28 - 2016-05-12 19:29 - 00000000 ____D C:\Users\robin\AppData\Local\Tempfolder
  198. 2016-05-12 19:28 - 2016-05-12 19:29 - 00000000 ____D C:\Program Files (x86)\Sesoward_c55f86
  199. 2016-05-12 19:28 - 2016-05-12 19:28 - 00008876 _____ C:\Windows\System32\Tasks\Cifipijush Renew
  200. 2016-05-12 19:28 - 2016-05-12 19:28 - 00000000 ____D C:\Users\robin\AppData\Roaming\UPUpdata
  201. 2016-05-12 19:28 - 2016-05-12 19:28 - 00000000 ____D C:\Users\Public\Thunder Network
  202. 2016-05-12 19:28 - 2016-05-12 19:28 - 00000000 ____D C:\ProgramData\Thunder Network
  203. 2016-05-12 19:28 - 2016-05-12 19:28 - 00000000 ____D C:\Program Files (x86)\Mopucultckoeph
  204. 2016-05-12 19:28 - 2016-05-12 19:28 - 00000000 ____D C:\Program Files (x86)\Cifipijush
  205. 2016-05-12 19:25 - 2016-05-12 19:24 - 00001006 _____ C:\Windows\system32\Drivers\etc\hp.bak
  206. 2016-05-12 19:24 - 2016-05-13 16:07 - 00000000 ____D C:\ProgramData\Holdtam
  207. 2016-05-12 19:24 - 2016-05-12 19:28 - 00000000 ____D C:\ProgramData\Holdtams
  208. 2016-05-12 19:24 - 2016-05-12 19:24 - 06494208 _____ C:\Users\robin\AppData\Roaming\agent.dat
  209. 2016-05-12 19:24 - 2016-05-12 19:24 - 01626777 _____ C:\Users\robin\AppData\Roaming\Villa-Ing.tst
  210. 2016-05-12 19:24 - 2016-05-12 19:24 - 00072717 _____ C:\Users\robin\AppData\Roaming\X-hold.tst
  211. 2016-05-12 19:24 - 2016-05-12 19:24 - 00018432 _____ C:\Users\robin\AppData\Roaming\Main.dat
  212. 2016-05-12 19:24 - 2016-05-12 19:23 - 00943104 _____ C:\Users\robin\AppData\Roaming\X-hold.exe
  213. 2016-05-12 19:24 - 2016-05-12 19:23 - 00943104 _____ C:\Users\robin\AppData\Roaming\Villa-Ing.exe
  214. 2016-05-12 19:23 - 2016-05-12 19:23 - 00127488 _____ C:\Users\robin\AppData\Roaming\Installer.dat
  215. 2016-05-06 11:25 - 2016-05-08 10:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
  216. 2016-05-05 15:20 - 2016-05-07 18:50 - 00000000 ____D C:\Users\robin\Desktop\Warcraft3
  217. 2016-05-03 22:04 - 2016-05-03 22:04 - 00000000 ____D C:\Users\robin\AppData\LocalLow\Unity
  218. 2016-05-03 20:12 - 2016-05-12 22:39 - 00001323 _____ C:\Users\robin\Desktop\Homeworld Deserts of Kharak.lnk
  219. 2016-05-03 20:12 - 2016-05-03 20:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Homeworld Deserts of Kharak
  220. 2016-05-03 18:44 - 2016-05-03 20:12 - 00000000 ____D C:\Program Files (x86)\Homeworld Deserts of Kharak
  221. 2016-04-29 23:06 - 2016-04-29 23:06 - 00000000 ____D C:\Users\robin\Documents\BnS
  222. 2016-04-29 23:06 - 2016-04-29 23:06 - 00000000 ____D C:\Users\robin\AppData\Roaming\Awesomium
  223. 2016-04-29 23:06 - 2016-02-24 09:15 - 04362656 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\GameMon.des
  224. 2016-04-29 23:05 - 2005-01-03 08:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\npptNT2.sys
  225. 2016-04-29 23:05 - 2003-07-18 23:17 - 00005174 _____ C:\Windows\SysWOW64\nppt9x.vxd
  226. 2016-04-29 23:04 - 2016-04-29 23:04 - 00000000 ____D C:\Program Files\Common Files\INCA Shared
  227. 2016-04-28 20:42 - 2016-04-28 20:42 - 00002328 _____ C:\Users\robin\AppData\Local\recently-used.xbel
  228. 2016-04-28 20:37 - 2016-04-28 20:37 - 00019090 _____ C:\Users\robin\Documents\List_motywacyjny.odt
  229. 2016-04-28 17:07 - 2016-05-12 22:40 - 00002240 _____ C:\Users\Public\Desktop\Blade & Soul.lnk
  230. 2016-04-28 17:07 - 2016-04-28 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT
  231. 2016-04-28 17:06 - 2016-04-28 17:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCWest
  232. 2016-04-28 16:58 - 2016-05-07 17:05 - 00000033 _____ C:\Users\robin\Desktop\Nowy dokument tekstowy.txt
  233. 2016-04-27 19:25 - 2016-05-12 22:40 - 00001073 _____ C:\Users\Public\Desktop\Gameforge Live.lnk
  234. 2016-04-27 19:25 - 2016-04-28 17:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
  235. 2016-04-27 19:25 - 2016-04-27 19:25 - 00000000 ____D C:\Users\robin\AppData\Local\Gameforge4d
  236. 2016-04-27 19:24 - 2016-04-27 19:25 - 00000000 ____D C:\Program Files (x86)\GameforgeLive
  237. 2016-04-27 17:43 - 2016-04-27 17:43 - 00000000 ____D C:\Users\robin\AppData\Roaming\.mono
  238. 2016-04-27 17:43 - 2016-04-27 17:43 - 00000000 ____D C:\ProgramData\.mono
  239. 2016-04-27 17:15 - 2016-04-27 17:36 - 00000000 ____D C:\Program Files (x86)\Hearthstone
  240. 2016-04-27 17:13 - 2016-05-12 22:40 - 00001900 _____ C:\Users\Public\Desktop\Garmin Express.lnk
  241. 2016-04-26 22:35 - 2016-04-26 22:35 - 00001107 _____ C:\Users\robin\Desktop\Skrypt_Ping.txt
  242. 2016-04-26 20:09 - 2016-04-26 20:09 - 00000000 ____D C:\Users\robin\Desktop\Nowy folder (2)
  243. 2016-04-25 17:55 - 2016-04-25 17:55 - 00000000 ____D C:\Users\robin\AppData\Local\The_Long_Dark_Save_Editor
  244. 2016-04-24 15:01 - 2016-04-24 15:01 - 00000000 ____D C:\Users\robin\AppData\LocalLow\Hinterland
  245. 2016-04-24 14:58 - 2016-04-24 15:01 - 00000000 ____D C:\Users\robin\Desktop\Nowy folder
  246. 2016-04-24 13:51 - 2016-05-12 22:40 - 00001652 _____ C:\Users\Public\Desktop\Zeus & Poseidon.lnk
  247. 2016-04-24 13:51 - 2016-04-24 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Impressions Games
  248. 2016-04-23 17:19 - 2016-04-23 17:21 - 00000000 ____D C:\Users\robin\AppData\Roaming\download
  249. 2016-04-23 17:19 - 2014-07-25 04:39 - 00293320 ____N (深圳市迅雷网络技术有限公司) C:\Users\robin\AppData\Roaming\xldl.dll
  250. 2016-04-15 21:16 - 2016-04-16 10:10 - 00000000 ____D C:\Windows\Minidump
  251. 2016-04-15 19:30 - 2016-05-12 22:39 - 00000386 _____ C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dysk wymienny (I).lnk
  252.  
  253. ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========
  254.  
  255. (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
  256.  
  257. 2016-05-13 16:10 - 2015-02-13 19:52 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1694957538-263036223-2447365843-1001
  258. 2016-05-13 16:09 - 2015-04-09 08:08 - 00001873 _____ C:\Users\robin\Desktop\Mozilla Firefox.lnk
  259. 2016-05-13 16:08 - 2015-02-13 20:16 - 00000000 ____D C:\Program Files (x86)\Steam
  260. 2016-05-13 16:08 - 2015-02-13 19:58 - 00000000 ____D C:\Users\robin\AppData\Roaming\ClassicShell
  261. 2016-05-13 16:04 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
  262. 2016-05-13 02:09 - 2015-02-13 19:52 - 00001951 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
  263. 2016-05-13 02:09 - 2015-02-13 19:15 - 00001516 _____ C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
  264. 2016-05-12 22:45 - 2014-03-18 11:56 - 01972030 _____ C:\Windows\system32\PerfStringBackup.INI
  265. 2016-05-12 22:45 - 2014-03-18 11:28 - 00858252 _____ C:\Windows\system32\perfh015.dat
  266. 2016-05-12 22:45 - 2014-03-18 11:28 - 00190254 _____ C:\Windows\system32\perfc015.dat
  267. 2016-05-12 22:40 - 2016-03-27 11:34 - 00001408 _____ C:\Users\Public\Desktop\Paragon ExtFS for Windows.lnk
  268. 2016-05-12 22:40 - 2016-02-05 19:16 - 00000842 _____ C:\Users\Public\Desktop\Total War Rome II.lnk
  269. 2016-05-12 22:40 - 2016-02-02 21:07 - 00001798 _____ C:\Users\Public\Desktop\CDBurnerXP.lnk
  270. 2016-05-12 22:40 - 2016-02-02 21:07 - 00001748 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
  271. 2016-05-12 22:40 - 2016-01-30 18:03 - 00000699 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Age of Mythology.lnk
  272. 2016-05-12 22:40 - 2016-01-30 18:03 - 00000681 _____ C:\Users\Public\Desktop\Age of Mythology.lnk
  273. 2016-05-12 22:40 - 2015-12-15 18:13 - 00000775 _____ C:\Users\Public\Desktop\World of Tanks.lnk
  274. 2016-05-12 22:40 - 2015-10-07 17:19 - 00000997 _____ C:\Users\Public\Desktop\Algodoo.lnk
  275. 2016-05-12 22:40 - 2015-10-02 16:45 - 00000959 _____ C:\Users\Public\Desktop\Stronghold Crusader HD.lnk
  276. 2016-05-12 22:40 - 2015-09-18 21:42 - 00001359 _____ C:\Users\Public\Desktop\Command and Conquer Red Alert 2.lnk
  277. 2016-05-12 22:40 - 2015-08-06 12:39 - 00001844 _____ C:\Users\Public\Desktop\Tank-O-Box.lnk
  278. 2016-05-12 22:40 - 2015-08-01 19:23 - 00000872 _____ C:\Users\Public\Desktop\CCleaner.lnk
  279. 2016-05-12 22:40 - 2015-07-17 14:05 - 00000888 _____ C:\Users\Public\Desktop\Launch Gates of Troy.lnk
  280. 2016-05-12 22:40 - 2015-06-29 17:49 - 00000940 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk
  281. 2016-05-12 22:40 - 2015-04-24 20:24 - 00001150 _____ C:\Users\Public\Desktop\Battle.net.lnk
  282. 2016-05-12 22:40 - 2015-04-02 17:36 - 00001049 _____ C:\Users\Public\Desktop\qBittorrent.lnk
  283. 2016-05-12 22:40 - 2015-03-30 21:04 - 00002125 _____ C:\Users\Public\Desktop\Medieval II Total War.lnk
  284. 2016-05-12 22:40 - 2015-03-26 14:01 - 00000784 _____ C:\Users\Public\Desktop\Zeus - Pan Olimpu.lnk
  285. 2016-05-12 22:40 - 2015-03-18 20:21 - 00001183 _____ C:\Users\Public\Desktop\Alcohol 52%.lnk
  286. 2016-05-12 22:40 - 2015-02-28 15:18 - 00000954 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
  287. 2016-05-12 22:40 - 2015-02-15 20:59 - 00002233 _____ C:\Users\Public\Desktop\Response Symulator.lnk
  288. 2016-05-12 22:40 - 2015-02-15 20:47 - 00002168 _____ C:\Users\Public\Desktop\SMART Notebook 11.lnk
  289. 2016-05-12 22:40 - 2015-02-13 20:16 - 00000969 _____ C:\Users\Public\Desktop\Steam.lnk
  290. 2016-05-12 22:39 - 2016-04-03 12:48 - 00000979 _____ C:\Users\robin\Desktop\Total War Rome 2 - Emperor Edition.lnk
  291. 2016-05-12 22:39 - 2016-03-06 18:17 - 00001259 _____ C:\Users\robin\Desktop\Cisco Packet Tracer.lnk
  292. 2016-05-12 22:39 - 2016-03-05 13:20 - 00001258 _____ C:\Users\robin\Desktop\DiskInternals Research.lnk
  293. 2016-05-12 22:39 - 2016-02-20 21:09 - 00001224 _____ C:\Users\robin\Desktop\NARUTO SHIPPUDEN Ultimate Ninja STORM 4.lnk
  294. 2016-05-12 22:39 - 2016-02-13 16:35 - 00003171 _____ C:\Users\robin\Desktop\Shortcut to SecureDownloadManager.exe.lnk
  295. 2016-05-12 22:39 - 2015-12-16 22:05 - 00001019 _____ C:\Users\robin\Desktop\SpeedFan.lnk
  296. 2016-05-12 22:39 - 2015-12-16 19:00 - 00002564 _____ C:\Users\robin\Desktop\Windows 7 USB DVD Download Tool.lnk
  297. 2016-05-12 22:39 - 2015-12-14 19:28 - 00001278 _____ C:\Users\robin\Desktop\FurMark.lnk
  298. 2016-05-12 22:39 - 2015-12-04 17:06 - 00001356 _____ C:\Users\robin\Desktop\Homeworld2.lnk
  299. 2016-05-12 22:39 - 2015-10-30 18:31 - 00001952 _____ C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\More Great Games.lnk
  300. 2016-05-12 22:39 - 2015-09-08 20:15 - 00001261 _____ C:\Users\robin\Desktop\Cisco Packet Tracer Student.lnk
  301. 2016-05-12 22:39 - 2015-08-29 20:09 - 00001052 _____ C:\Users\robin\Desktop\NapiProjekt.lnk
  302. 2016-05-12 22:39 - 2015-08-05 15:01 - 00001023 _____ C:\Users\robin\Desktop\Little Fighter 2.lnk
  303. 2016-05-12 22:39 - 2015-07-25 12:48 - 00000807 _____ C:\Users\robin\Desktop\World of Warships.lnk
  304. 2016-05-12 22:39 - 2015-07-23 13:27 - 00002152 _____ C:\Users\robin\Desktop\JDownloader 2.lnk
  305. 2016-05-12 22:39 - 2015-05-30 15:38 - 00002032 _____ C:\Users\robin\Desktop\Star Wars Jedi Knight II Jedi Outcast spielen.lnk
  306. 2016-05-12 22:39 - 2015-02-28 15:18 - 00000942 _____ C:\Users\robin\Desktop\GIMP 2.lnk
  307. 2016-05-12 22:39 - 2015-02-13 19:15 - 00000469 _____ C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
  308. 2016-05-12 22:39 - 2015-02-13 19:15 - 00000467 _____ C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
  309. 2016-05-12 22:39 - 2015-02-13 19:15 - 00000000 ____D C:\Users\robin
  310. 2016-05-12 21:29 - 2015-10-07 17:19 - 00000000 ____D C:\Users\robin\Documents\Algodoo
  311. 2016-05-12 20:21 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf
  312. 2016-05-12 19:36 - 2015-06-24 15:05 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
  313. 2016-05-12 19:30 - 2015-07-23 14:42 - 00000000 ____D C:\Users\robin\Downloads\007 b
  314. 2016-05-12 19:10 - 2015-03-18 20:26 - 01743360 ___SH C:\Users\robin\Downloads\Thumbs.db
  315. 2016-05-12 18:42 - 2015-04-24 20:24 - 00000000 ____D C:\Users\robin\AppData\Local\Battle.net
  316. 2016-05-12 16:00 - 2015-04-24 20:24 - 00000000 ____D C:\Program Files (x86)\Battle.net
  317. 2016-05-11 16:51 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
  318. 2016-05-11 16:38 - 2015-05-19 17:30 - 00236544 ___SH C:\Users\robin\Desktop\Thumbs.db
  319. 2016-05-08 10:05 - 2015-02-13 19:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
  320. 2016-05-06 23:47 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
  321. 2016-05-05 20:31 - 2015-02-17 20:07 - 00000000 ____D C:\Users\robin\Documents\Pobieranie
  322. 2016-05-04 19:26 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
  323. 2016-05-03 18:42 - 2015-02-17 20:08 - 00004471 _____ C:\Users\robin\Documents\ax_files.xml
  324. 2016-04-28 21:34 - 2016-03-10 17:51 - 00127488 ___SH C:\Users\robin\Documents\Thumbs.db
  325. 2016-04-28 20:42 - 2015-02-28 15:20 - 00000000 ____D C:\Users\robin\AppData\Local\gtk-2.0
  326. 2016-04-28 20:42 - 2015-02-28 15:18 - 00000000 ____D C:\Users\robin\.gimp-2.8
  327. 2016-04-28 20:11 - 2016-03-17 20:02 - 00000000 ____D C:\Users\robin\Documents\Sieci
  328. 2016-04-28 17:07 - 2015-03-30 20:53 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
  329. 2016-04-27 17:19 - 2015-02-13 20:01 - 00000000 ____D C:\ProgramData\Package Cache
  330. 2016-04-27 17:14 - 2015-05-02 19:52 - 00000000 ____D C:\Program Files (x86)\Garmin
  331. 2016-04-27 17:14 - 2015-04-24 20:24 - 00000000 ____D C:\Users\robin\AppData\Roaming\Battle.net
  332. 2016-04-27 17:14 - 2015-04-24 20:21 - 00000000 ____D C:\ProgramData\Battle.net
  333. 2016-04-27 17:13 - 2015-05-02 20:19 - 00003554 _____ C:\Windows\System32\Tasks\GarminUpdaterTask
  334. 2016-04-27 17:13 - 2015-05-02 20:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
  335. 2016-04-22 21:03 - 2015-02-17 20:08 - 00012677 _____ C:\Users\robin\Documents\Bez tytułu 1.odt
  336. 2016-04-22 09:57 - 2015-07-31 12:38 - 00453288 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
  337. 2016-04-14 21:21 - 2016-03-10 16:05 - 00000000 ____D C:\Users\robin\Documents\Bazy danych
  338. 2016-04-14 19:37 - 2015-04-23 19:13 - 00000000 ____D C:\Users\robin\AppData\Roaming\vlc
  339.  
  340. ==================== Pliki w katalogu głównym wybranych folderów =======
  341.  
  342. 2015-12-04 17:07 - 2003-09-03 08:46 - 0010960 _____ () C:\Program Files (x86)\EULA.txt
  343. 2015-12-04 17:07 - 2015-12-04 17:36 - 0001103 _____ () C:\Program Files (x86)\INSTALL.LOG
  344. 2015-12-04 17:07 - 2003-12-18 12:33 - 0020102 _____ () C:\Program Files (x86)\Readme.txt
  345. 2016-05-12 19:24 - 2016-05-12 19:24 - 6494208 _____ () C:\Users\robin\AppData\Roaming\agent.dat
  346. 2016-05-12 19:31 - 2016-05-03 10:40 - 1443152 _____ ( ) C:\Users\robin\AppData\Roaming\AutoTime_51477.exe
  347. 2016-05-12 19:23 - 2016-05-12 19:23 - 0127488 _____ () C:\Users\robin\AppData\Roaming\Installer.dat
  348. 2016-05-12 19:24 - 2016-05-12 19:24 - 0018432 _____ () C:\Users\robin\AppData\Roaming\Main.dat
  349. 2016-05-12 19:29 - 2016-05-11 10:32 - 0936414 _____ ( ) C:\Users\robin\AppData\Roaming\setup_52.exe
  350. 2016-05-12 19:30 - 2016-05-12 17:49 - 2174464 _____ (TODO: <公司名>) C:\Users\robin\AppData\Roaming\tasklist.exe
  351. 2016-05-12 19:24 - 2016-05-12 19:23 - 0943104 _____ () C:\Users\robin\AppData\Roaming\Villa-Ing.exe
  352. 2016-05-12 19:24 - 2016-05-12 19:24 - 1626777 _____ () C:\Users\robin\AppData\Roaming\Villa-Ing.tst
  353. 2016-05-12 19:24 - 2016-05-12 19:23 - 0943104 _____ () C:\Users\robin\AppData\Roaming\X-hold.exe
  354. 2016-05-12 19:24 - 2016-05-12 19:24 - 0072717 _____ () C:\Users\robin\AppData\Roaming\X-hold.tst
  355. 2016-04-23 17:19 - 2014-07-25 04:39 - 0293320 ____N (深圳市迅雷网络技术有限公司) C:\Users\robin\AppData\Roaming\xldl.dll
  356. 2015-04-03 16:38 - 2015-04-03 16:38 - 0000093 _____ () C:\Users\robin\AppData\Local\fusioncache.dat
  357. 2016-04-28 20:42 - 2016-04-28 20:42 - 0002328 _____ () C:\Users\robin\AppData\Local\recently-used.xbel
  358. 2015-09-15 21:00 - 2016-03-09 18:19 - 0007599 _____ () C:\Users\robin\AppData\Local\Resmon.ResmonCfg
  359. 2016-05-12 19:29 - 2016-04-19 12:39 - 0114176 _____ () C:\ProgramData\hp.exe
  360. 2016-02-17 18:09 - 2016-02-17 18:09 - 0000117 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc
  361.  
  362. Pliki do przeniesienia lub usunięcia:
  363. ====================
  364. C:\ProgramData\hp.exe
  365.  
  366.  
  367. Niektóre pliki w TEMP:
  368. ====================
  369. C:\Users\robin\AppData\Local\Temp\23333.exe
  370. C:\Users\robin\AppData\Local\Temp\8utoel5nxR.exe
  371. C:\Users\robin\AppData\Local\Temp\nsw1F18.tmp.exe
  372. C:\Users\robin\AppData\Local\Temp\QQPCMgr_Setup.exe
  373. C:\Users\robin\AppData\Local\Temp\SIntf16.dll
  374. C:\Users\robin\AppData\Local\Temp\SIntf32.dll
  375. C:\Users\robin\AppData\Local\Temp\SIntfNT.dll
  376. C:\Users\robin\AppData\Local\Temp\wpUmW8oU9q.exe
  377.  
  378.  
  379. ==================== Bamital & volsnap =================
  380.  
  381. (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
  382.  
  383. C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
  384. C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
  385. C:\Windows\explorer.exe => Plik podpisany cyfrowo
  386. C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
  387. C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
  388. C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
  389. C:\Windows\system32\services.exe => Plik podpisany cyfrowo
  390. C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
  391. C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
  392. C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
  393. C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
  394. C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
  395. C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
  396. C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
  397. C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo
  398.  
  399.  
  400. UWAGA: ==> Nie można uzyskać dostępu do BCD.
  401.  
  402.  
  403. LastRegBack: 2016-05-04 16:53
  404.  
  405. ==================== Koniec FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!