Analiza logów po wykryciu folderów Recycled i Recycle.bin na pendrive – jak odzyskać dane?

Cytat:

Task: {11A962B6-E772-4FBC-83BE-B948293B0EE9} - System32\Tasks\BitGuard => Sc.exe start BitGuard <==== UWAGA
Task: {14EF9DAD-2814-4AD6-BC29-C422173E4DF9} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2080163923-706103286-1564130818-1000Core => C:\Users\Damian\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-11-01] (Facebook Inc.)
Task: {643F18AC-738B-4F59-ABDB-FA0D5EC08705} - \AdobeFlashPlayerUpdate 2 -> Brak pliku <==== UWAGA
Task: {81A3F5E0-B9B4-4981-B5FF-A160986800E8} - \AdobeFlashPlayerUpdate -> Brak pliku <==== UWAGA
Task: {D500BF76-512E-4E3D-B6BB-ADC74F906C33} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2080163923-706103286-1564130818-1000UA => C:\Users\Damian\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-11-01] (Facebook Inc.)
Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2080163923-706103286-1564130818-1000Core.job => C:\Users\Damian\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2080163923-706103286-1564130818-1000UA.job => C:\Users\Damian\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKU\S-1-5-21-2080163923-706103286-1564130818-1000\...\Run: [Facebook Update] => C:\Users\Damian\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-11-01] (Facebook Inc.)
HKU\S-1-5-21-2080163923-706103286-1564130818-1000\...\Run: [Messenger (Yahoo!)] => C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe [6595928 2012-05-25] (Yahoo! Inc.)
HKU\S-1-5-21-2080163923-706103286-1564130818-1000\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://search.babylon.com/?affID=119816&babsrc=HP_ss_din2g&mntrId=6CD560D81958BC0C
SearchScopes: HKU\.DEFAULT -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =
SearchScopes: HKU\S-1-5-21-2080163923-706103286-1564130818-1000 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKU\S-1-5-21-2080163923-706103286-1564130818-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=119816&babsrc=SP_ss&mntrId=6CD560D81958BC0C
BHO-x32: &Yahoo! Toolbar Helper -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll [2013-08-07] (Yahoo! Inc.)
Toolbar: HKLM-x32 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll [2013-08-07] (Yahoo! Inc.)
CHR Extension: (Yahoo! Toolbar for Chrome) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\Default\Extensions\eihhgekonheiliaidomffpplfhecmkag [2013-11-02]
S2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-08-27] () [Brak podpisu cyfrowego] <==== UWAGA
U3 BcmSqlStartupSvc; Brak ImagePath
S1 bohamjmc; \??\C:\windows\system32\drivers\bohamjmc.sys [X]
S1 buygqfez; \??\C:\windows\system32\drivers\buygqfez.sys [X]
U2 CLKMSVC10_3A60B698; Brak ImagePath
U2 CLKMSVC10_C3B3B687; Brak ImagePath
S1 cuagyxmj; \??\C:\windows\system32\drivers\cuagyxmj.sys [X]
S1 dprqnwfl; \??\C:\windows\system32\drivers\dprqnwfl.sys [X]
U2 DriverService; Brak ImagePath
S1 hyzxoqpo; \??\C:\windows\system32\drivers\hyzxoqpo.sys [X]
U2 iATAgentService; Brak ImagePath
U2 idealife Update Service; Brak ImagePath
S1 idfnwknd; \??\C:\windows\system32\drivers\idfnwknd.sys [X]
U3 IGRS; Brak ImagePath
U2 IviRegMgr; Brak ImagePath
S1 jhuscufh; \??\C:\windows\system32\drivers\jhuscufh.sys [X]
S1 nattyghf; \??\C:\windows\system32\drivers\nattyghf.sys [X]
U2 nvUpdatusService; Brak ImagePath
U2 Oasis2Service; Brak ImagePath
U2 PCCarerService; Brak ImagePath
U2 ReadyComm.DirectRouter; Brak ImagePath
S1 rhvbbxpt; \??\C:\windows\system32\drivers\rhvbbxpt.sys [X]
U2 RichVideo; Brak ImagePath
U2 RtLedService; Brak ImagePath
U2 SeaPort; Brak ImagePath
U2 SoftwareService; Brak ImagePath
U3 SQLWriter; Brak ImagePath
U2 Stereo Service; Brak ImagePath