Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 12.05.2018
- Uruchomiony przez void (administrator) KO (16-05-2018 00:34:28)
- Uruchomiony z C:\Users\shitter\Desktop
- Załadowane profile: void (Dostępne profile: void & Administrator)
- Platform: Windows 8 (X64) Język: Polnisch (Polen)
- Internet Explorer Wersja 10 (Domyślna przeglądarka: Opera)
- Tryb startu: Normal
- Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
- ==================== Procesy (filtrowane) =================
- (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
- (AMD) C:\Windows\System32\atiesrxx.exe
- (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
- (SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
- (Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
- (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
- (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
- (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
- (pdfforge GmbH) C:\Program Files\PDF Architect 5\creator\common\creator-ws.exe
- (© pdfforge GmbH.) C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe
- (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
- (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
- (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
- (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
- (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
- (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
- (AMD) C:\Windows\System32\atieclxx.exe
- (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
- (SurfRight B.V.) C:\Program Files\HitmanPro\HitmanPro.exe
- (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
- (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
- (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
- (Intel Corporation) C:\Windows\System32\hkcmd.exe
- (Opera Software) C:\Program Files\Opera\52.0.2871.64\opera.exe
- (Intel Corporation) C:\Windows\System32\igfxpers.exe
- (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
- (alch) C:\Program Files (x86)\ClamWin\bin\ClamTray.exe
- (Opera Software) C:\Program Files\Opera\52.0.2871.64\opera.exe
- (Opera Software) C:\Program Files\Opera\52.0.2871.64\opera.exe
- (Opera Software) C:\Program Files\Opera\52.0.2871.64\opera.exe
- (Opera Software) C:\Program Files\Opera\52.0.2871.64\opera.exe
- (Opera Software) C:\Program Files\Opera\52.0.2871.64\opera.exe
- (Opera Software) C:\Program Files\Opera\52.0.2871.64\opera.exe
- (Opera Software) C:\Program Files\Opera\52.0.2871.64\opera.exe
- (Opera Software) C:\Program Files\Opera\52.0.2871.64\opera.exe
- () C:\Program Files (x86)\UsbFix\UsbFix.exe
- (Microsoft Corporation) C:\Windows\System32\dllhost.exe
- (Microsoft Corporation) C:\Windows\System32\dllhost.exe
- ==================== Rejestr (filtrowane) ===========================
- (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
- HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-25] (Synaptics Incorporated)
- HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2017-08-13] (IvoSoft)
- HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2000-01-01] (IDT, Inc.)
- HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [371976 2012-09-19] (IVT Corporation)
- HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [704424 2017-06-15] (Autodesk, Inc.)
- HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
- HKLM-x32\...\RunOnce: [] => [X]
- Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
- HKU\S-1-5-21-3145501433-2751271693-2052433869-1001\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1283112 2016-02-02] (Autodesk, Inc.)
- HKU\S-1-5-21-3145501433-2751271693-2052433869-1001\...\Run: [World of Tanks] => "C:\Games\World_of_Tanks\WargamingGameUpdater.exe"
- HKU\S-1-5-21-3145501433-2751271693-2052433869-1001\...\Run: [Akamai NetSession Interface] => "C:\Users\shitter\AppData\Local\Akamai\netsession_win.exe"
- HKU\S-1-5-21-3145501433-2751271693-2052433869-1001\...\Run: [ClamWin] => C:\Program Files (x86)\ClamWin\bin\ClamTray.exe [86016 2018-03-03] (alch)
- HKU\S-1-5-21-3145501433-2751271693-2052433869-1001\...\Policies\Explorer: []
- HKU\S-1-5-21-3145501433-2751271693-2052433869-1001\...\MountPoints2: {478ab8c4-e05d-11e7-be88-b8763f9fdb8e} - "G:\Setup.exe"
- HKU\S-1-5-21-3145501433-2751271693-2052433869-1001\...\MountPoints2: {487e5227-cef4-11e6-be8c-b8763f9fdb8e} - "F:\autorun.exe"
- HKU\S-1-5-21-3145501433-2751271693-2052433869-1001\...\MountPoints2: {c853757c-0361-11e8-be88-b8763f9fdb8e} - "H:\autorun.exe"
- HKU\S-1-5-21-3145501433-2751271693-2052433869-1001\...\MountPoints2: {c8537587-0361-11e8-be88-b8763f9fdb8e} - "H:\autorun.exe"
- HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1283112 2016-02-02] (Autodesk, Inc.)
- Startup: C:\Users\shitter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk [2017-11-09]
- ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
- ==================== Internet (filtrowane) ====================
- (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
- Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
- Tcpip\Parameters: [DhcpNameServer] 212.87.0.72 193.0.71.130
- Tcpip\..\Interfaces\{3B79996C-3219-4CC1-8163-8D6C46D62BC6}: [DhcpNameServer] 192.168.1.1
- Tcpip\..\Interfaces\{76E471E9-3FCC-4313-81F1-B79177EA5F48}: [DhcpNameServer] 212.87.0.72 193.0.71.130
- Internet Explorer:
- ==================
- HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HPNTDFJS
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HPNTDFJS
- HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
- HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
- HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
- HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
- HKU\S-1-5-21-3145501433-2751271693-2052433869-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HPNTDFJS
- HKU\S-1-5-21-3145501433-2751271693-2052433869-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HPNTDFJS
- Toolbar: HKU\S-1-5-21-3145501433-2751271693-2052433869-1001 -> Brak nazwy - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Brak pliku
- Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll [2012-09-19] (Skype Technologies)
- FireFox:
- ========
- FF DefaultProfile: yfoyhl1v.default
- FF ProfilePath: C:\Users\shitter\AppData\Roaming\Mozilla\Firefox\Profiles\yfoyhl1v.default [2018-05-16]
- FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll [2012-08-08] (Adobe Systems, Inc.)
- FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
- FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
- FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-12] (Adobe Systems Inc.)
- FF Plugin-x32: PDF Architect 5 -> C:\Program Files (x86)\PDF Architect 5\np-previewer.dll [2017-11-29] (pdfforge GmbH)
- Opera:
- =======
- OPR Extension: (Disconnect) - C:\Users\shitter\AppData\Roaming\Opera Software\Opera Stable\Extensions\hciohocinlhbdkbjldffomiadmnhjnoj [2017-03-25]
- OPR Extension: (Deaktivierungs-Add-on von Google Analytics) - C:\Users\shitter\AppData\Roaming\Opera Software\Opera Stable\Extensions\hmffjpdmbgflojiohllanjaggdenggdo [2017-04-23]
- OPR Extension: (uBlock Origin) - C:\Users\shitter\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2018-05-11]
- ==================== Usługi (filtrowane) ====================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1353208 2017-06-15] (Autodesk Inc.)
- R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1612552 2012-09-26] (IVT Corporation)
- R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [146184 2012-09-19] (IVT Corporation)
- R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [135488 2018-05-15] (SurfRight B.V.)
- S4 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-14] (Realsil Microelectronics Inc.) [Brak podpisu cyfrowego]
- R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
- R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
- R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6479136 2018-03-27] (Malwarebytes)
- S3 PDF Architect 5; C:\Program Files\PDF Architect 5\ws.exe [2832560 2017-11-29] (pdfforge GmbH)
- R2 PDF Architect 5 Creator; C:\Program Files\PDF Architect 5\creator\common\creator-ws.exe [874680 2017-11-29] (pdfforge GmbH)
- R2 PDF Architect 5 Manager; C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe [985848 2017-05-16] (© pdfforge GmbH.)
- R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [333824 2000-01-01] (IDT, Inc.) [Brak podpisu cyfrowego]
- S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [15440 2012-07-26] (Microsoft Corporation)
- ===================== Sterowniki (filtrowane) ======================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-10] (Advanced Micro Devices, Inc.)
- U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)
- R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
- R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)
- R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48608 2012-10-02] (Ralink Corporation)
- S3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2018-01-14] (Disc Soft Ltd)
- S3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2018-01-14] (Disc Soft Ltd)
- R3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [55232 2018-05-16] ()
- R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-04-11] (Malwarebytes)
- S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-04] (Realtek Semiconductor Corp.)
- R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [692832 2012-10-02] (Ralink Technology, Corp.)
- S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-25] (Synaptics Incorporated)
- R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-25] (Synaptics Incorporated)
- S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34216 2012-07-26] (Microsoft Corporation)
- S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [258288 2012-07-26] (Microsoft Corporation)
- R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)
- U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)
- ==================== NetSvcs (filtrowane) ===================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- ==================== Jeden miesiąc - utworzone pliki i foldery ========
- (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
- 2018-05-16 00:34 - 2018-05-16 00:35 - 000013650 _____ C:\Users\shitter\Desktop\FRST.txt
- 2018-05-16 00:33 - 2018-05-16 00:33 - 000001893 _____ C:\Users\shitter\Desktop\UsbFix Anti-Malware.lnk
- 2018-05-16 00:33 - 2018-05-16 00:33 - 000000000 ____D C:\Program Files (x86)\UsbFix
- 2018-05-16 00:32 - 2018-05-16 00:32 - 007092456 _____ (SOSVirus) C:\Users\shitter\Desktop\UsbFix_2018.exe
- 2018-05-16 00:25 - 2018-05-16 00:27 - 000001842 _____ C:\Users\shitter\Desktop\FIX.REG
- 2018-05-16 00:22 - 2018-05-16 00:22 - 000055232 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
- 2018-05-16 00:16 - 2018-05-16 00:18 - 000001560 _____ C:\Users\shitter\Desktop\Fixlog.txt
- 2018-05-16 00:15 - 2018-05-16 00:34 - 000000000 ____D C:\FRST
- 2018-05-16 00:15 - 2018-05-16 00:15 - 002404864 _____ (Farbar) C:\Users\shitter\Desktop\FRST64.exe
- 2018-05-16 00:13 - 2018-05-16 00:13 - 000000000 _____ C:\Users\shitter\Desktop\Neues Textdokument.txt
- 2018-05-16 00:00 - 2018-05-16 00:00 - 000000000 ____D C:\ProgramData\SystemAcCrux
- 2018-05-15 23:59 - 2018-05-15 23:59 - 000001029 _____ C:\Users\Public\Desktop\EaseUS Data Recovery Wizard.lnk
- 2018-05-15 23:59 - 2018-05-15 23:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Data Recovery Wizard
- 2018-05-15 23:59 - 2018-05-15 23:59 - 000000000 ____D C:\Program Files\EaseUS
- 2018-05-15 23:58 - 2018-05-15 23:58 - 041925200 _____ (EaseUS ) C:\Users\shitter\Desktop\drw_setup.exe
- 2018-05-15 23:56 - 2018-05-15 23:56 - 000001909 _____ C:\Users\Public\Desktop\HitmanPro.lnk
- 2018-05-15 23:56 - 2018-05-15 23:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
- 2018-05-15 23:56 - 2018-05-15 23:56 - 000000000 ____D C:\Program Files\HitmanPro
- 2018-05-15 23:55 - 2018-05-15 23:55 - 000001832 _____ C:\Users\shitter\Desktop\sc-cleaner.txt
- 2018-05-15 22:28 - 2018-05-15 22:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClamWin Antivirus
- 2018-05-15 22:27 - 2018-05-15 22:28 - 000000000 ____D C:\Users\shitter\AppData\Roaming\.clamwin
- 2018-05-15 22:27 - 2018-05-15 22:27 - 000000000 ____D C:\Program Files (x86)\ClamWin
- 2018-05-15 20:57 - 2018-05-15 21:17 - 172661090 _____ (alch ) C:\Users\shitter\Desktop\clamwin-0.99.4-setup.exe
- 2018-05-15 20:53 - 2018-05-15 21:01 - 000000000 ____D C:\ProgramData\HitmanPro
- 2018-05-15 20:16 - 2018-05-15 20:16 - 001150176 _____ C:\Users\shitter\Downloads\SlidePDF.Org-BEARING-CAPACITY.doc.pdf
- 2018-05-15 20:10 - 2018-05-15 20:10 - 001724416 _____ C:\Users\shitter\Desktop\Lecture 6 Water Movement.ppt
- 2018-05-15 20:10 - 2018-05-15 20:10 - 000502272 _____ C:\Users\shitter\Downloads\IOM-87_Module_B2_3.pps
- 2018-05-15 20:09 - 2018-05-15 20:10 - 007092736 _____ C:\Users\shitter\Downloads\Notes2forENGI3731.ppt
- 2018-05-15 20:08 - 2018-05-15 20:08 - 002875392 _____ C:\Users\shitter\Downloads\Buildings in Earthquakes.ppt
- 2018-05-15 20:07 - 2018-05-15 20:08 - 002548224 _____ C:\Users\shitter\Downloads\eqdamage.ppt
- 2018-05-15 20:07 - 2018-05-15 20:07 - 001226752 _____ C:\Users\shitter\Downloads\41751.ppt
- 2018-05-15 20:05 - 2018-05-15 20:05 - 001316352 _____ C:\Users\shitter\Downloads\CondAsmntPart3.ppt
- 2018-05-15 20:05 - 2018-05-15 20:05 - 000496640 _____ C:\Users\shitter\Downloads\CE498_Lecture_Nov_16.ppt
- 2018-05-15 20:04 - 2018-05-15 20:04 - 002687488 _____ C:\Users\shitter\Downloads\presentationonssyntheticdataworkshopslssusancarsley1_tcm77-390453.ppt
- 2018-05-15 20:04 - 2018-05-15 20:04 - 000906240 _____ C:\Users\shitter\Downloads\Stewart 22 May 2002 uncertainties (1).ppt
- 2018-05-15 20:03 - 2018-05-15 20:03 - 006140928 _____ C:\Users\shitter\Downloads\stelprdb1044821.ppt
- 2018-05-15 20:03 - 2018-05-15 20:03 - 004154368 _____ C:\Users\shitter\Downloads\relative_density.ppt
- 2018-05-15 20:03 - 2018-05-15 20:03 - 000247296 _____ C:\Users\shitter\Downloads\dept.ppt
- 2018-05-15 20:02 - 2018-05-15 20:03 - 005559296 _____ C:\Users\shitter\Downloads\6-NRCSSoilSurvey-Lindbo.ppt
- 2018-05-15 20:02 - 2018-05-15 20:02 - 001296896 _____ C:\Users\shitter\Downloads\SoilWater.ppt
- 2018-05-15 20:01 - 2018-05-15 20:01 - 000401920 _____ C:\Users\shitter\Downloads\EnvironmentalGeomechanicsARecentDevelopmentinGeotechnicalEngineering (2).ppt
- 2018-05-15 20:01 - 2018-05-15 20:01 - 000324608 _____ C:\Users\shitter\Downloads\Presentation3.ppt
- 2018-05-15 20:00 - 2018-05-15 20:00 - 001425920 _____ C:\Users\shitter\Downloads\Deepankar_Soil-Dynamics.ppt
- 2018-05-15 20:00 - 2018-05-15 20:00 - 001282560 _____ C:\Users\shitter\Downloads\20130702134014201-153622.ppt
- 2018-05-15 20:00 - 2018-05-15 20:00 - 001130496 _____ C:\Users\shitter\Downloads\7-Wikstrom-PhysicalPropertiesBioretentionSoils.ppt
- 2018-05-15 19:58 - 2018-05-15 19:59 - 006209024 _____ C:\Users\shitter\Downloads\L13_hazards_I.ppt
- 2018-05-15 19:57 - 2018-05-15 19:58 - 003884544 _____ C:\Users\shitter\Downloads\excavations.ppt
- 2018-05-15 19:57 - 2018-05-15 19:57 - 000282112 _____ C:\Users\shitter\Downloads\CIVL353-notes-17- particledistribution.ppt
- 2018-05-15 19:56 - 2018-05-15 19:56 - 005153792 _____ C:\Users\shitter\Downloads\13.Moon-origin.ppt
- 2018-05-15 19:56 - 2018-05-15 19:56 - 001527808 _____ C:\Users\shitter\Downloads\CSSM for Dummies.ppt
- 2018-05-15 19:54 - 2018-05-15 19:54 - 000401920 _____ C:\Users\shitter\Downloads\EnvironmentalGeomechanicsARecentDevelopmentinGeotechnicalEngineering (1).ppt
- 2018-05-15 19:52 - 2018-05-15 19:53 - 007134720 _____ C:\Users\shitter\Downloads\claymineralsandsoilstructure-best-topic-4-090427235131-phpapp02.ppt
- 2018-05-15 19:52 - 2018-05-15 19:52 - 000908800 _____ C:\Users\shitter\Downloads\Stewart 22 May 2002 uncertainties.ppt
- 2018-05-15 19:52 - 2018-05-15 19:52 - 000401920 _____ C:\Users\shitter\Downloads\EnvironmentalGeomechanicsARecentDevelopmentinGeotechnicalEngineering.ppt
- 2018-05-15 19:51 - 2018-05-15 19:51 - 000432145 _____ C:\Users\shitter\Downloads\Week1-CE341.pdf
- 2018-05-15 19:50 - 2018-05-15 19:50 - 014590754 _____ C:\Users\shitter\Downloads\IntroductiontoGeotechnicalEngineering.pptx
- 2018-05-15 14:50 - 2018-05-15 14:51 - 040865379 _____ C:\Users\shitter\Downloads\MAH00749.mp4
- 2018-05-15 14:50 - 2018-05-15 14:51 - 033047541 _____ C:\Users\shitter\Downloads\MAH00745.mp4
- 2018-05-14 10:14 - 2018-05-14 10:14 - 000529276 _____ C:\Users\shitter\Downloads\D20110981L.pdf
- 2018-05-14 01:45 - 2018-05-14 01:45 - 000107181 _____ C:\Users\shitter\Downloads\pp505-olowek-automatyczny-05mm-orenz.pdf
- 2018-05-13 23:13 - 2018-05-13 23:13 - 000642195 _____ C:\Users\shitter\Downloads\sd_92_6r15.pdf
- 2018-05-13 22:55 - 2018-05-13 22:55 - 000039957 _____ C:\Users\shitter\Downloads\cennik_zegarmistrz.pdf
- 2018-05-13 21:33 - 2018-05-13 21:33 - 002333100 _____ C:\Users\shitter\Downloads\2017-36-2_mhb_dipl_wirtschaftsingenieurwesen.pdf
- 2018-05-13 21:33 - 2018-05-13 21:33 - 002323931 _____ C:\Users\shitter\Downloads\2016-14-2_mhb_ma_ibdem_druck.pdf
- 2018-05-13 21:33 - 2018-05-13 21:33 - 001374985 _____ C:\Users\shitter\Downloads\2016-18-2_mhb_ma_wirtschaftsingenieurwesen.pdf
- 2018-05-13 21:33 - 2018-05-13 21:33 - 001113343 _____ C:\Users\shitter\Downloads\2016-17-2_mhb_ba_wirtschaftsingenieurwesen.pdf
- 2018-05-13 21:33 - 2018-05-13 21:33 - 000809533 _____ C:\Users\shitter\Downloads\2014-20-2_mhb_dipl_bwl_fuer_ressourcenwirtschaft_druck.pdf
- 2018-05-13 21:33 - 2018-05-13 21:33 - 000611947 _____ C:\Users\shitter\Downloads\2016-15-2_mhb_ma_imre_druck.pdf
- 2018-05-13 21:32 - 2018-05-13 21:32 - 004108861 _____ C:\Users\shitter\Downloads\2017-59-2_mhb_bachelor_bwl.pdf
- 2018-05-13 21:32 - 2018-05-13 21:32 - 000476404 _____ C:\Users\shitter\Downloads\2014-15-2_mhb_ba_geoinformatik_und_geophysik_druck.pdf
- 2018-05-11 17:47 - 2018-05-11 17:47 - 000140377 _____ C:\Users\shitter\Downloads\_Programowanie z Pythonem3_.pdf
- 2018-05-11 17:27 - 2018-05-11 17:27 - 000000000 ____D C:\Users\shitter\.ipython
- 2018-05-11 17:26 - 2018-05-11 17:26 - 000000000 ____D C:\Users\shitter\AppData\Roaming\jupyter
- 2018-05-11 17:25 - 2018-05-11 17:25 - 000000000 ____D C:\Users\shitter\AppData\Roaming\Jedi
- 2018-05-11 17:24 - 2018-05-11 19:05 - 000000000 ____D C:\Users\shitter\.spyder-py3
- 2018-05-11 13:24 - 2018-05-11 17:09 - 000000043 _____ C:\Users\shitter\.condarc
- 2018-05-11 13:24 - 2018-05-11 13:24 - 000000000 ____D C:\Users\shitter\AnacondaProjects
- 2018-05-11 13:23 - 2018-05-11 19:05 - 000000000 ____D C:\Users\shitter\.conda
- 2018-05-11 13:23 - 2018-05-11 13:23 - 000000000 ____D C:\Users\shitter\AppData\Local\conda
- 2018-05-11 13:22 - 2018-05-11 13:22 - 000000000 ____D C:\Users\shitter\.anaconda
- 2018-05-11 01:14 - 2018-05-15 23:55 - 000109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
- 2018-05-10 12:28 - 2018-05-10 12:29 - 000000000 ____D C:\Users\shitter\AppData\Local\FluxSoftware
- 2018-05-09 22:17 - 2018-05-09 22:17 - 005034059 _____ C:\Users\shitter\Downloads\2016-21-2_mhb_ma_geowissenschaften (1).pdf
- 2018-05-09 22:00 - 2018-05-09 22:00 - 005034059 _____ C:\Users\shitter\Downloads\2016-21-2_mhb_ma_geowissenschaften.pdf
- 2018-05-09 22:00 - 2018-05-09 22:00 - 001284888 _____ C:\Users\shitter\Downloads\2016-19-2_mhb_diplom_gtb.pdf
- 2018-05-09 11:27 - 2018-05-09 11:27 - 001318978 _____ C:\Users\shitter\Downloads\moduls_english_tu-bergakademie-freiberg.pdf
- 2018-05-09 11:26 - 2018-05-09 11:26 - 000525263 _____ C:\Users\shitter\Downloads\courses-of-study_en-de (1).pdf
- 2018-05-09 11:23 - 2018-05-09 11:23 - 000525263 _____ C:\Users\shitter\Downloads\courses-of-study_en-de.pdf
- 2018-05-09 11:13 - 2018-05-09 11:13 - 000234704 _____ C:\Users\shitter\Downloads\APPL_form_in_en.pdf
- 2018-05-09 11:05 - 2018-05-09 11:05 - 000083824 _____ C:\Users\shitter\Downloads\learning_agreement.pdf
- 2018-05-09 10:44 - 2018-05-09 10:44 - 000000000 ____D C:\Users\shitter\AppData\Roaming\Code
- 2018-05-09 10:44 - 2018-05-09 10:44 - 000000000 ____D C:\Users\shitter\.vscode
- 2018-05-09 10:44 - 2018-05-09 10:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
- 2018-05-09 10:43 - 2018-05-09 10:44 - 000000000 ____D C:\Program Files\Microsoft VS Code
- 2018-05-09 10:33 - 2018-05-09 10:33 - 000000000 ____D C:\Users\shitter\Documents\Python Scripts
- 2018-05-09 10:33 - 2018-05-09 10:33 - 000000000 ____D C:\Users\shitter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Anaconda3 (64-bit)
- 2018-05-09 10:19 - 2018-05-09 10:43 - 000000000 ____D C:\Users\shitter\Anaconda3
- 2018-05-09 10:15 - 2018-05-09 10:16 - 563168960 _____ (Anaconda, Inc.) C:\Users\shitter\Desktop\Anaconda3-5.1.0-Windows-x86_64.exe
- 2018-05-09 10:14 - 2018-05-09 10:16 - 548001744 _____ (Anaconda, Inc.) C:\Users\shitter\Desktop\Anaconda2-5.1.0-Windows-x86_64.exe
- 2018-05-09 01:28 - 2018-05-09 01:28 - 000279256 _____ C:\Users\shitter\Downloads\OPRACOWANIE.pdf
- 2018-05-08 18:26 - 2018-05-08 18:26 - 002623053 _____ C:\Users\shitter\Desktop\krok_2018_pl.pdf
- 2018-04-26 18:00 - 2018-04-26 18:00 - 000105041 _____ C:\Users\shitter\Downloads\bilet_59388111.pdf
- 2018-04-24 15:21 - 2018-05-11 03:04 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
- 2018-04-24 15:21 - 2018-05-10 14:19 - 000000936 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
- 2018-04-24 15:21 - 2018-04-24 15:21 - 000000924 _____ C:\Users\Public\Desktop\Firefox.lnk
- 2018-04-24 15:20 - 2018-05-11 03:04 - 000000000 ____D C:\Program Files\Mozilla Firefox
- 2018-04-23 20:36 - 2018-04-23 20:36 - 002107588 _____ C:\Users\shitter\Downloads\Krok_po_kroku_2017-2018.pdf
- 2018-04-23 17:00 - 2018-04-23 17:00 - 000013947 _____ C:\Users\shitter\Downloads\Californication_1x04_en.zip
- 2018-04-23 01:38 - 2018-04-23 01:38 - 009058096 _____ C:\Users\shitter\Downloads\olszewski.pptx
- 2018-04-23 00:46 - 2018-04-23 00:46 - 000090066 _____ C:\Users\shitter\Downloads\Mech.Gruntow-Cechy.Fizyczne.pdf
- 2018-04-23 00:34 - 2018-04-23 00:32 - 000000000 ____D C:\Users\shitter\Desktop\WhatsApp Documents
- 2018-04-22 10:08 - 2018-04-22 10:08 - 000708159 _____ C:\Users\shitter\Downloads\Mala_encyklopedia_gruntoznawstwa_fragment.pdf
- 2018-04-22 10:08 - 2018-04-22 10:08 - 000110087 _____ C:\Users\shitter\Downloads\laboratoryjne-badania-gruntow-i-gleb-pdf.pdf
- 2018-04-22 10:07 - 2018-04-22 10:07 - 007800055 _____ C:\Users\shitter\Downloads\Gruntoznawstwo_wyklad_1_[trybzgodnosci].pdf
- 2018-04-22 10:07 - 2018-04-22 10:07 - 000064912 _____ C:\Users\shitter\Downloads\100000302607_Myslinska_LaboratoryjneBadania.pdf
- 2018-04-22 10:06 - 2018-04-22 10:06 - 000433637 _____ C:\Users\shitter\Downloads\cw-3-AREOMETRYCZNA (1).pdf
- 2018-04-20 08:55 - 2018-04-20 08:55 - 000202174 _____ C:\Users\shitter\Downloads\Cennik_Oferty_Virgin_Mobile_Polska_ChceWszystko_wazny_od_30.04.2016.pdf
- 2018-04-19 09:08 - 2018-04-19 09:08 - 004441777 _____ C:\Users\shitter\Downloads\Certyfikacja-FRIS-Wiosenne-FRISowanie-2018.pdf
- 2018-04-18 13:37 - 2018-04-18 13:37 - 001889653 _____ C:\Users\shitter\Downloads\VVW-Netzplan_Rostock.pdf
- 2018-04-18 13:37 - 2018-04-18 13:37 - 001741117 _____ C:\Users\shitter\Downloads\VVW-Netzplan_Region.pdf
- 2018-04-17 14:13 - 2018-04-17 14:13 - 000518892 _____ C:\Users\shitter\Downloads\Myśl-inaczej.pdf
- 2018-04-17 00:12 - 2018-04-17 00:16 - 000000000 ____D C:\Users\shitter\medivia
- 2018-04-17 00:12 - 2018-04-17 00:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Medivia Online
- 2018-04-17 00:12 - 2018-04-17 00:12 - 000000000 ____D C:\Program Files (x86)\Medivia Online
- 2018-04-16 23:59 - 2018-04-16 23:59 - 000000477 _____ C:\Users\shitter\Downloads\zadanie1.zip
- ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========
- (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
- 2018-05-16 00:34 - 2017-03-26 00:39 - 000003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3145501433-2751271693-2052433869-1001
- 2018-05-16 00:32 - 2012-09-26 10:53 - 000000950 _____ C:\Windows\SysWOW64\bscs.ini
- 2018-05-16 00:29 - 2012-12-28 21:45 - 000003620 _____ C:\Windows\SysWOW64\LOCALSERVICE.INI
- 2018-05-16 00:29 - 2012-12-28 21:45 - 000000043 _____ C:\Windows\SysWOW64\LOCALDEVICE.INI
- 2018-05-16 00:24 - 2018-01-31 13:27 - 000829266 _____ C:\Windows\system32\perfh007.dat
- 2018-05-16 00:24 - 2018-01-31 13:27 - 000188428 _____ C:\Windows\system32\perfc007.dat
- 2018-05-16 00:24 - 2012-11-04 03:20 - 000858938 _____ C:\Windows\system32\perfh015.dat
- 2018-05-16 00:24 - 2012-11-04 03:20 - 000195472 _____ C:\Windows\system32\perfc015.dat
- 2018-05-16 00:24 - 2012-07-26 09:28 - 003010820 _____ C:\Windows\system32\PerfStringBackup.INI
- 2018-05-16 00:24 - 2012-07-26 07:37 - 000000000 ____D C:\Windows\Inf
- 2018-05-16 00:20 - 2018-01-31 12:32 - 000000000 ____D C:\Users\shitter\AppData\Local\ClassicShell
- 2018-05-16 00:19 - 2012-07-26 09:22 - 000000006 ____H C:\Windows\Tasks\SA.DAT
- 2018-05-16 00:04 - 2018-02-07 01:22 - 000000000 ____D C:\Users\shitter\AppData\LocalLow\Mozilla
- 2018-05-15 23:59 - 2017-10-13 19:23 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
- 2018-05-11 18:01 - 2012-07-26 10:12 - 000000000 ____D C:\Windows\system32\NDF
- 2018-05-11 17:28 - 2017-12-06 16:30 - 000000000 ____D C:\Users\shitter\.matplotlib
- 2018-05-11 17:27 - 2017-03-25 11:11 - 000000000 ____D C:\Users\shitter
- 2018-05-11 11:53 - 2018-01-22 08:02 - 000000000 ____D C:\Users\shitter\Desktop\magisterka
- 2018-05-11 11:51 - 2018-04-04 11:49 - 000000000 ____D C:\Users\shitter\AppData\Roaming\MPC-HC
- 2018-05-11 03:04 - 2012-07-26 07:26 - 000262144 ___SH C:\Windows\system32\config\BBI
- 2018-05-11 01:12 - 2016-10-25 20:51 - 000000000 ____D C:\Users\shitter\Documents\antiviruses
- 2018-05-11 01:12 - 2016-10-25 20:27 - 000000000 ____D C:\AdwCleaner
- 2018-05-11 01:11 - 2017-03-26 01:04 - 000000000 ____D C:\Users\shitter\AppData\Roaming\uTorrent
- 2018-05-10 15:10 - 2017-03-25 23:46 - 000000000 ____D C:\Users\shitter\AppData\Roaming\vlc
- 2018-05-08 15:40 - 2012-07-26 10:12 - 000000000 ___HD C:\Program Files\WindowsApps
- 2018-05-08 15:40 - 2012-07-26 10:12 - 000000000 ____D C:\Windows\AUInstallAgent
- 2018-04-26 18:40 - 2018-04-08 13:31 - 000000000 ____D C:\Users\shitter\AppData\Local\ChomikBox
- 2018-04-26 18:36 - 2018-04-08 13:31 - 000000000 ____D C:\Users\shitter\.gstreamer-0.10
- 2018-04-25 12:14 - 2017-03-25 12:10 - 000000000 ____D C:\Program Files\Opera
- 2018-04-24 14:19 - 2018-02-08 15:15 - 000000000 ____D C:\Users\shitter\Desktop\korki
- 2018-04-23 02:42 - 2017-12-07 16:31 - 000000000 ____D C:\Users\shitter\Documents\gis
- 2018-04-22 22:49 - 2017-03-25 12:29 - 000000000 ____D C:\Users\shitter\AppData\Local\Microsoft Help
- 2018-04-16 10:47 - 2017-02-15 13:14 - 000000000 ___RD C:\Users\shitter\Desktop\UW
- ==================== Pliki w katalogu głównym wybranych folderów =======
- 2012-07-26 04:06 - 2012-07-26 05:20 - 075810176 ___SH () C:\ProgramData\msbftbgnm.exe
- 2018-01-19 15:36 - 2018-01-19 15:36 - 000002723 _____ () C:\Users\shitter\AppData\Local\recently-used.xbel
- ==================== Bamital & volsnap ======================
- (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
- C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
- C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
- C:\Windows\explorer.exe => Plik podpisany cyfrowo
- C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
- C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
- C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
- C:\Windows\system32\services.exe => Plik podpisany cyfrowo
- C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
- C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
- C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
- C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
- C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
- C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
- C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
- C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo
- LastRegBack: 2018-05-11 13:13
- ==================== Koniec FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement