Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 09-07-2022 Uruchomiony przez majka (administrator) LAPTOP-MEBQKVH9 (LENOVO 81D2) (09-07-2022 12:01:17) Uruchomiony z C:\Users\majka\Downloads Załadowane profile: majka Platform: Microsoft Windows 10 Home Wersja 21H2 19044.1806 (X64) Język: Polski (Polska) Domyślna przeglądarka: Chrome Tryb startu: Normal ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Alps\GlidePoint\ApntEx.exe ->) (ALPS ALPINE CO., LTD. -> ALPSALPINE CO., LTD.) C:\Windows\System32\Alps\GlidePoint\Apoint.exe (Alps\GlidePoint\Apoint.exe ->) (ALPS ELECTRIC CO., LTD. -> ALPSALPINE CO., LTD.) C:\Windows\System32\Alps\GlidePoint\ApMsgFwd.exe (Alps\GlidePoint\HidMonitorSvc.exe ->) (ALPS ELECTRIC CO., LTD. -> ALPSALPINE CO., LTD.) C:\Windows\System32\Alps\GlidePoint\ApntEx.exe (Beijing Duodian Online Science and Technology Co.,Ltd -> ) C:\Program Files (x86)\Nox\bin\nox_adb.exe (C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMSVC.exe ->) (Nox Limited -> Nox Limited Corporation) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe (C:\Program Files\RogueKiller\RogueKillerSvc.exe ->) (ADLICE -> ) C:\Program Files\RogueKiller\RogueKiller64.exe (C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCopyAccelerator.exe (C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe (C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe <2> (DriverStore\FileRepository\u0359870.inf_amd64_fd45b4f03d50fa4e\B359830\atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0359870.inf_amd64_fd45b4f03d50fa4e\B359830\atieclxx.exe (explorer.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\59.0.3.0\crashpad_handler.exe <2> (explorer.exe ->) (Google LLC -> Google, Inc.) C:\Program Files\Google\Drive File Stream\59.0.3.0\GoogleDriveFS.exe <7> (explorer.exe ->) (Mega Limited -> Mega Limited) C:\Users\majka\AppData\Local\MEGAsync\MEGAsync.exe (explorer.exe ->) (Nox Limited -> Duodian Technology Co. Ltd.) C:\Program Files (x86)\Nox\bin\Nox.exe (FMService64.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\FMAPP.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <14> (services.exe ->) (ADLICE -> ) C:\Program Files\RogueKiller\RogueKillerSvc.exe (services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0359870.inf_amd64_fd45b4f03d50fa4e\B359830\atiesrxx.exe (services.exe ->) (ALPS ELECTRIC CO., LTD. -> ALPSALPINE CO., LTD.) C:\Windows\System32\Alps\GlidePoint\HidMonitorSvc.exe (services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (services.exe ->) (Dolby Laboratories, Inc. -> ) C:\Windows\System32\dolbyaposvc\DAX3API.exe <2> (services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2> (svchost.exe ->) (Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CastSrv.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Nox Limited -> Nox Limited Corporation) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMSVC.exe (svchost.exe ->) (SweetLabs Inc -> SweetLabs, Inc) C:\Users\majka\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe (SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [865568 2019-03-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [VDUpdateHelper.exe] => C:\Program Files (x86)\iVideoMate Video Downloader\VDUpdateHelper.exe (Brak pliku) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1313408 2017-07-05] (Canon Inc. -> CANON INC.) HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\59.0.3.0\GoogleDriveFS.exe [55420816 2022-06-08] (Google LLC -> Google, Inc.) HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\59.0.3.0\GoogleDriveFS.exe [55420816 2022-06-08] (Google LLC -> Google, Inc.) HKU\S-1-5-21-1145375136-889209143-3401833252-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\59.0.3.0\GoogleDriveFS.exe [55420816 2022-06-08] (Google LLC -> Google, Inc.) HKU\S-1-5-21-1145375136-889209143-3401833252-1002\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\AniaK\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Brak pliku) HKU\S-1-5-21-1145375136-889209143-3401833252-1002\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\AniaK\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Brak pliku) HKU\S-1-5-21-1145375136-889209143-3401833252-1002\...\RunOnce: [Uninstall 22.077.0410.0007] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\AniaK\AppData\Local\Microsoft\OneDrive\22.077.0410.0007" (Brak pliku) HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\59.0.3.0\GoogleDriveFS.exe [55420816 2022-06-08] (Google LLC -> Google, Inc.) HKLM\...\Windows x64\Print Processors\Canon MG2400 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBW.DLL [30208 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor MG2400 series: C:\WINDOWS\system32\CNMLMBW.DLL [391168 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor MG2400 series XPS: C:\WINDOWS\system32\CNMXLMBW.DLL [393728 2013-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\103.0.5060.114\Installer\chrmstp.exe [2022-07-06] (Google LLC -> Google LLC) Startup: C:\Users\majka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2022-05-10] ShortcutTarget: MEGAsync.lnk -> C:\Users\majka\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited) ==================== Zaplanowane zadania (filtrowane) ============ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {0577830D-C2C4-433F-B5AE-C1D173EC1B53} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2022-05-09] (Google Inc -> Google Inc.) Task: {0E94F308-513F-48B0-BB89-D167BD06F95B} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate Task: {63388735-8B3A-45C4-9A14-9D18A46744B1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {656ECE71-5B66-4A8F-81C6-602E1A6E389B} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-1145375136-889209143-3401833252-1001 => C:\Users\majka\AppData\Local\MEGAsync\MEGAupdater.exe [2531504 2022-06-23] (Mega Limited -> ) Task: {789CCDF2-B138-4372-B6E7-BDF0D5045721} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {8F77C062-BB24-460B-9624-E5F5DBB8DC61} - System32\Tasks\App Explorer => C:\Users\majka\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [7890976 2022-05-23] (SweetLabs Inc -> SweetLabs, Inc) <==== UWAGA Task: {9164C096-534E-4EE1-B61D-415EC8E43042} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe [147864 2022-05-12] (Lenovo -> Lenovo Group Ltd.) Task: {9569AA59-0A8B-493F-B2A3-E732D785F230} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB" Task: {A333EFCE-5BC6-440E-BC83-398D0F712257} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {AD4EE7C5-69C3-4CD1-A68E-7AC00C4027E5} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\a905f7ef-a24e-40ef-af64-e9ba73ccb5bc => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.) Task: {AF94E046-069B-4D1F-A750-65BB8917C95D} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => "%windir%\system32\sc.exe" START ImControllerService Task: {B14D42F9-C844-4149-AB49-7D2A8A4C6AAD} - System32\Tasks\RtkAudUService64_BG => C:\Windows\system32\RtkAudUService64.exe [865568 2019-03-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {B4D1D937-C595-4502-ABD7-151DB3B5105E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2022-05-09] (Google Inc -> Google Inc.) Task: {BECE8450-62D2-4206-9D88-F05821FE566A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {BF8AD040-C82A-4F78-9BE8-09D6A8C6F11F} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32 Task: {C03EFC2F-8D11-4E43-894D-413252D7649B} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\1a261351-b430-47e2-a585-719160de3724 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.) Task: {CFDC8294-4B59-40BA-841A-6CF747EAC50E} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [64256 2022-01-28] (Lenovo -> Lenovo Group Ltd.) Task: {E56872BA-7E4D-49D8-B310-816322FDD1E5} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\80a80272-1440-4a0f-b690-bfb6300b8bb7 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.) Task: {E6A2DBE4-16B7-4EA9-AD94-38DEADCD34BF} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\a0ae1ca4-c273-455d-9b4a-4295f03bb956 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.) Task: {F0540280-A085-47A6-876B-4A1E0DDB729E} - System32\Tasks\LenovoUtility Startup => C:\Windows\explorer.exe lenovo-utility:// Task: {FA79B6FC-D9B2-4F80-A7ED-23ACB4F7959F} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\f07077b7-8aba-4e3b-a491-4df7e5091adc => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{44654955-04be-4f0d-83f6-02121b4335e1}: [DhcpNameServer] 192.168.0.1 Edge: ======= Edge DefaultProfile: Default Edge Profile: C:\Users\majka\AppData\Local\Microsoft\Edge\User Data\Default [2022-07-08] Edge Profile: C:\Users\majka\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2022-07-08] FireFox: ======== FF DefaultProfile: pocfboz0.default FF ProfilePath: C:\Users\majka\AppData\Roaming\Mozilla\Firefox\Profiles\pocfboz0.default [2022-05-19] FF ProfilePath: C:\Users\majka\AppData\Roaming\Mozilla\Firefox\Profiles\mmj9frw4.default-release [2022-07-09] FF Homepage: Mozilla\Firefox\Profiles\mmj9frw4.default-release -> hxxps://www.google.pl/ FF Extension: (Simple YouTube to MP3/MP4 Converter) - C:\Users\majka\AppData\Roaming\Mozilla\Firefox\Profiles\mmj9frw4.default-release\Extensions\jid0-SQnwtgW1b8BsMB5PLV5WScEDWOjw@jetpack.xpi [2022-05-28] FF Extension: (Video DownloadHelper) - C:\Users\majka\AppData\Roaming\Mozilla\Firefox\Profiles\mmj9frw4.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2022-05-19] FF Extension: (Adblock Plus - darmowy adblocker) - C:\Users\majka\AppData\Roaming\Mozilla\Firefox\Profiles\mmj9frw4.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2022-06-02] FF Extension: (DownThemAll!) - C:\Users\majka\AppData\Roaming\Mozilla\Firefox\Profiles\mmj9frw4.default-release\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2022-07-08] FF Extension: (YouTube mp3 Downloader) - C:\Users\majka\AppData\Roaming\Mozilla\Firefox\Profiles\mmj9frw4.default-release\Extensions\{defe5404-0b6f-4cce-a119-ee0df858e5f9}.xpi [2022-05-28] FF Extension: (HTTP Header Live) - C:\Users\majka\AppData\Roaming\Mozilla\Firefox\Profiles\mmj9frw4.default-release\Extensions\{ed102056-8b4f-43a9-99cd-6d1b25abe87e}.xpi [2022-06-02] FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2019-07-02] (CANON INC.) [Brak podpisu cyfrowego] Chrome: ======= CHR Profile: C:\Users\majka\AppData\Local\Google\Chrome\User Data\Default [2022-07-09] CHR HomePage: Default -> hxxps://www.google.pl/ CHR Extension: (Adblock Plus - darmowy adblocker) - C:\Users\majka\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2022-07-05] CHR Extension: (Dokumenty Google offline) - C:\Users\majka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-06-15] CHR Extension: (Soundiiz) - C:\Users\majka\AppData\Local\Google\Chrome\User Data\Default\Extensions\laepkmccdapcecmnjnfngfpnbnpjcgbn [2022-05-09] CHR Extension: (Video DownloadHelper) - C:\Users\majka\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2022-05-09] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\majka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-05-09] CHR Extension: (Kamera) - C:\Users\majka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofmpffnppnlgkgmbgidhhjcglloeejpg [2022-05-09] CHR Profile: C:\Users\majka\AppData\Local\Google\Chrome\User Data\System Profile [2022-07-03] CHR HKU\S-1-5-21-1145375136-889209143-3401833252-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 ApHidMonitorService; C:\WINDOWS\system32\Alps\GlidePoint\HidMonitorSvc.exe [345376 2019-12-29] (ALPS ELECTRIC CO., LTD. -> ALPSALPINE CO., LTD.) R2 DolbyDAXAPI; C:\WINDOWS\system32\dolbyaposvc\DAX3API.exe [398344 2018-06-08] (Dolby Laboratories, Inc. -> ) R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [305520 2018-05-30] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140936 2013-05-14] (Canon Inc. -> ) R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [84240 2022-01-28] (Lenovo -> Lenovo Group Ltd.) R2 rkrtservice; C:\Program Files\RogueKiller\RogueKillerSvc.exe [14592472 2022-06-13] (ADLICE -> ) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 ApHidfiltrService; C:\WINDOWS\System32\drivers\ApHidFiltr.sys [285440 2019-12-29] (ALPS ELECTRIC CO., LTD. -> ALPSALPINE CO., LTD.) S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.) S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.) S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) R1 googledrivefs3758; C:\WINDOWS\System32\DRIVERS\googledrivefs3758.sys [384584 2022-04-14] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.) S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [65144 2021-10-08] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated) U3 TrueSight; C:\Windows\System32\drivers\truesight.sys [41920 2022-07-06] (ADLICE (Julien ASCOET) -> ) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation) R1 YSDrv; C:\Program Files (x86)\Bignox\BigNoxVM\RT\YSDrv.sys [312776 2022-07-01] (Microsoft Windows Hardware Compatibility Publisher -> Nox Limited Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2022-07-09 12:01 - 2022-07-09 12:01 - 000020789 _____ C:\Users\majka\Downloads\FRST.txt 2022-07-09 12:01 - 2022-07-09 12:01 - 000000000 ____D C:\Users\majka\Downloads\FRST-OlderVersion 2022-07-09 12:00 - 2022-07-09 12:01 - 002369024 _____ (Farbar) C:\Users\majka\Downloads\FRST64.exe 2022-07-09 12:00 - 2022-07-09 12:01 - 000000000 ____D C:\FRST 2022-07-08 11:26 - 2020-06-16 12:24 - 1215007288 _____ C:\Users\majka\Downloads\[KTNews] Koi wa Tsuzuku yo Dokomademo Ep.10 FINAŁ.mp4 2022-07-08 10:54 - 2020-06-13 17:23 - 889068734 _____ C:\Users\majka\Downloads\[KTNews] Koi wa Tsuzuku yo Dokomademo Ep.09.mp4 2022-07-08 10:23 - 2020-06-12 10:50 - 786354767 _____ C:\Users\majka\Downloads\[KTNews] Koi wa Tsuzuku yo Dokomademo Ep.08.mp4 2022-07-08 09:52 - 2020-05-19 17:50 - 810312895 _____ C:\Users\majka\Downloads\[KTNews] Koi wa Tsuzuku yo Dokomademo Ep.07.mp4 2022-07-08 09:20 - 2020-05-13 11:18 - 842620207 _____ C:\Users\majka\Downloads\[KTNews] Koi wa Tsuzuku yo Dokomademo Ep.06.mp4 2022-07-07 16:41 - 2020-04-21 11:32 - 774914148 _____ C:\Users\majka\Downloads\[KTNews] Koi wa Tsuzuku yo Dokomademo Ep.05.mp4 2022-07-07 16:31 - 2020-04-06 15:22 - 1048300406 _____ C:\Users\majka\Downloads\[KTNews] Koi wa Tsuzuku yo Dokomademo Ep.04.mp4 2022-07-07 14:26 - 2020-04-03 20:46 - 815848614 _____ C:\Users\majka\Downloads\[KTNews] Koi wa Tsuzuku yo Dokomademo Ep.03.mp4 2022-07-07 13:02 - 2022-07-08 09:05 - 000000000 ____D C:\Program Files\Mozilla Firefox 2022-07-06 16:47 - 2022-07-06 17:57 - 1110759082 _____ C:\Users\majka\Downloads\Bakuman (2015)-0.mkv 2022-07-06 16:46 - 2022-07-06 16:46 - 000056973 _____ C:\Users\majka\Downloads\Bakuman (2015).txt 2022-07-06 15:39 - 2022-07-06 15:48 - 892637545 _____ C:\Users\majka\Downloads\Bakuman (2015).mkv 2022-07-06 15:39 - 2022-07-06 15:39 - 000114086 _____ C:\Users\majka\Downloads\Bakuman (2015).srt 2022-07-06 14:01 - 2022-07-06 14:01 - 000000848 _____ C:\Users\Public\Desktop\UCheck.lnk 2022-07-06 14:01 - 2022-07-06 14:01 - 000000000 ____D C:\ProgramData\UCheck 2022-07-06 14:01 - 2022-07-06 14:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UCheck 2022-07-06 14:01 - 2022-07-06 14:01 - 000000000 ____D C:\Program Files\UCheck 2022-07-06 13:56 - 2022-07-06 14:26 - 000000000 ____D C:\ProgramData\RogueKiller 2022-07-06 13:56 - 2022-07-06 14:20 - 000041920 _____ C:\WINDOWS\system32\Drivers\truesight.sys 2022-07-06 13:56 - 2022-07-06 13:56 - 000000910 _____ C:\Users\Public\Desktop\RogueKiller.lnk 2022-07-06 13:56 - 2022-07-06 13:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller 2022-07-06 13:56 - 2022-07-06 13:56 - 000000000 ____D C:\Program Files\RogueKiller 2022-07-05 20:35 - 2022-07-06 14:20 - 076808192 _____ C:\WINDOWS\system32\config\SOFTWARE 2022-07-05 19:49 - 2022-07-05 20:35 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware 2022-07-04 11:51 - 2022-07-04 11:51 - 000039331 _____ C:\Users\majka\Documents\Potwierdzenie20220704_114742.pdf 2022-07-03 13:14 - 2022-07-03 13:14 - 000135072 _____ C:\Users\majka\Documents\CV Maja 2013 (1).pdf 2022-07-03 13:13 - 2022-07-03 13:13 - 000135072 _____ C:\Users\majka\Documents\CV Maja 2013.pdf 2022-07-01 13:25 - 2022-07-09 11:49 - 000000000 ____D C:\Users\majka\.BigNox 2022-07-01 13:25 - 2022-07-01 13:25 - 000001182 _____ C:\Users\majka\Desktop\Multi-Drive.lnk 2022-07-01 13:25 - 2022-07-01 13:25 - 000001101 _____ C:\Users\majka\Desktop\Nox.lnk 2022-07-01 13:25 - 2022-07-01 13:25 - 000000000 ____D C:\Program Files (x86)\Bignox 2022-07-01 11:27 - 2022-07-01 11:27 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll 2022-07-01 11:27 - 2022-07-01 11:27 - 000693248 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll 2022-07-01 11:27 - 2022-07-01 11:27 - 000640512 _____ C:\WINDOWS\system32\SettingSyncDownloadHelper.dll 2022-07-01 11:27 - 2022-07-01 11:27 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll 2022-07-01 11:27 - 2022-07-01 11:27 - 000270848 _____ C:\WINDOWS\system32\EsclScan.dll 2022-07-01 11:27 - 2022-07-01 11:27 - 000152064 _____ C:\WINDOWS\system32\EsclProtocol.dll 2022-07-01 11:27 - 2022-07-01 11:27 - 000061952 _____ C:\WINDOWS\system32\printticketvalidation.dll 2022-07-01 11:27 - 2022-07-01 11:27 - 000057344 _____ C:\WINDOWS\system32\APMonUI.dll 2022-07-01 11:27 - 2022-07-01 11:27 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mode.com 2022-07-01 11:27 - 2022-07-01 11:27 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mode.com 2022-07-01 11:27 - 2022-07-01 11:27 - 000024576 _____ C:\WINDOWS\system32\WsdProviderUtil.dll 2022-07-01 11:27 - 2022-07-01 11:27 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tree.com 2022-07-01 11:27 - 2022-07-01 11:27 - 000018944 _____ C:\WINDOWS\SysWOW64\WsdProviderUtil.dll 2022-07-01 11:27 - 2022-07-01 11:27 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tree.com 2022-07-01 11:27 - 2022-07-01 11:27 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\chcp.com 2022-07-01 11:27 - 2022-07-01 11:27 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chcp.com 2022-07-01 11:27 - 2022-07-01 11:27 - 000011801 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim 2022-07-01 11:13 - 2022-07-01 11:13 - 000000000 ___HD C:\$WinREAgent 2022-06-27 11:02 - 2022-06-27 11:02 - 000000000 ____D C:\Users\majka\Downloads\ChomikBox 2022-06-27 11:01 - 2022-06-27 14:30 - 000000000 ____D C:\Users\majka\AppData\Local\ChomikBox 2022-06-27 11:01 - 2022-06-27 14:30 - 000000000 ____D C:\Users\majka\.gstreamer-0.10 2022-06-23 18:03 - 2022-06-23 18:03 - 000000086 _____ C:\Users\majka\Desktop\Todome no Kisu (Kiss that Kills) - Drama-PL - Chomikuj.pl.url 2022-06-20 17:30 - 2022-06-20 17:29 - 000000280 _____ C:\Users\majka\Documents\CV Maja 2013.gdoc 2022-06-20 12:50 - 2022-07-03 13:11 - 000064205 _____ C:\Users\majka\Documents\CV Maja 2013.odt 2022-06-19 12:23 - 2022-06-19 12:23 - 000000000 ____D C:\Users\majka\AppData\Roaming\OpenOffice 2022-06-19 12:13 - 2022-06-19 12:13 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.12 2022-06-19 12:12 - 2022-06-19 12:13 - 000000000 ____D C:\Program Files (x86)\OpenOffice 4 2022-06-19 12:11 - 2022-06-19 12:11 - 000000000 ____D C:\Users\majka\Desktop\OpenOffice 4.1.12 (pl) Installation Files 2022-06-16 18:02 - 2022-06-16 18:02 - 000000000 ____D C:\Users\majka\Downloads\waneinformacjedowysanejpropozycjipolisyubezpieczenia 2022-06-16 18:02 - 2022-06-16 18:02 - 000000000 ____D C:\Users\majka\Downloads\propozycjaubezpieczeniaindywidualnegopzuyciesa (2) 2022-06-16 18:02 - 2022-06-16 18:02 - 000000000 ____D C:\Users\majka\Downloads\propozycjaubezpieczeniaindywidualnegopzuyciesa (1) 2022-06-16 18:02 - 2022-06-16 18:02 - 000000000 ____D C:\Users\majka\Downloads\propozycjaubezpieczeniaindywidualnegopzuyciesa 2022-06-15 09:44 - 2022-06-15 09:44 - 001563951 _____ C:\Users\majka\Downloads\propozycjaubezpieczeniaindywidualnegopzuyciesa (1).zip 2022-06-15 09:44 - 2022-06-15 09:44 - 001393266 _____ C:\Users\majka\Downloads\waneinformacjedowysanejpropozycjipolisyubezpieczenia.zip 2022-06-15 09:44 - 2022-06-15 09:44 - 001138675 _____ C:\Users\majka\Downloads\propozycjaubezpieczeniaindywidualnegopzuyciesa (2).zip 2022-06-15 09:43 - 2022-06-15 09:43 - 001138675 _____ C:\Users\majka\Downloads\propozycjaubezpieczeniaindywidualnegopzuyciesa.zip 2022-06-09 10:32 - 2022-06-09 10:32 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll 2022-06-09 10:32 - 2022-06-09 10:32 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll 2022-06-09 10:31 - 2022-06-09 10:31 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2022-07-09 11:59 - 2022-05-10 12:51 - 000000000 ____D C:\Users\majka\AppData\Local\Nox 2022-07-09 11:58 - 2022-05-19 13:02 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2022-07-09 11:57 - 2022-05-19 13:02 - 000000000 ____D C:\Users\majka\AppData\LocalLow\Mozilla 2022-07-09 11:49 - 2022-05-11 13:57 - 000000000 ___RD C:\Users\majka\Documents\Ebooki 2022-07-09 11:49 - 2022-05-10 16:59 - 000000000 __RHD C:\Users\majka\Documents\Rubbish 2022-07-09 11:49 - 2022-05-10 16:59 - 000000000 ___RD C:\Users\majka\Documents\wzory CV 2022-07-09 11:49 - 2022-05-10 16:59 - 000000000 ___RD C:\Users\majka\Documents\Sterowniki i oprogramowanie do drukarki Canon 2022-07-09 11:49 - 2022-05-10 16:59 - 000000000 ___RD C:\Users\majka\Documents\Scanned Documents 2022-07-09 11:49 - 2022-05-10 16:59 - 000000000 ___RD C:\Users\majka\Documents\Recordify 2022-07-09 11:49 - 2022-05-10 16:59 - 000000000 ___RD C:\Users\majka\Documents\PIT Maja 2022-07-09 11:49 - 2022-05-10 16:59 - 000000000 ___RD C:\Users\majka\Documents\My Bluetooth 2022-07-09 11:49 - 2022-05-10 16:59 - 000000000 ___RD C:\Users\majka\Documents\efile-backup 2022-07-09 11:49 - 2022-05-10 16:59 - 000000000 ___RD C:\Users\majka\Documents\Czcionki do Czytnika 2022-07-09 11:49 - 2022-05-10 16:59 - 000000000 ___RD C:\Users\majka\Documents\Charles Waldemar - Miłość, pasja i sława. Powieść o Paganinim Adiobook 2022-07-09 11:49 - 2022-05-10 16:59 - 000000000 ___RD C:\Users\majka\Documents\Audycja Kamienie - H E A T Poland z relacją z koncertu H E A T w Krakowie (26 11 2018) 2022-07-09 11:49 - 2022-05-10 16:44 - 000000000 ___RD C:\Users\majka\Documents\MEGAsync 2022-07-09 11:49 - 2022-05-10 12:54 - 000000000 ____D C:\Users\majka\AppData\Local\NoxSrv 2022-07-09 11:49 - 2022-05-09 13:51 - 000000000 ____D C:\Users\majka 2022-07-09 11:49 - 2022-05-08 13:01 - 000000000 ___RD C:\Users\majka\Documents\PPK 2 2022-07-09 11:49 - 2022-05-08 13:01 - 000000000 ___RD C:\Users\majka\Documents\PPK 2022-07-09 11:49 - 2022-05-08 13:01 - 000000000 ___RD C:\Users\majka\Documents\NaPrezent 2022-07-09 11:49 - 2022-05-08 13:01 - 000000000 ___RD C:\Users\majka\Documents\Miłość, pasja i sława - powieśc o Paganinim 2022-07-09 11:49 - 2022-05-08 13:01 - 000000000 ___RD C:\Users\majka\Documents\Klub-OgarniamSie-planery-na-start 2022-07-09 11:49 - 2022-05-08 13:00 - 000000000 ___RD C:\Users\majka\Documents\Klasyka-mobi 2022-07-09 11:49 - 2022-05-08 13:00 - 000000000 ___RD C:\Users\majka\Documents\efile 2022-07-09 11:49 - 2022-05-08 12:59 - 000000000 ___RD C:\Users\majka\Documents\Deklaracje PIT Maja 2022-07-09 11:49 - 2022-05-08 12:59 - 000000000 ___RD C:\Users\majka\Documents\Adresy społecznościowe Maja 2022-07-09 11:49 - 2022-05-08 12:55 - 000000000 ____D C:\Users\majka\.android 2022-07-09 11:49 - 2022-05-08 12:54 - 000000000 ____D C:\Users\majka\vmlogs 2022-07-09 11:49 - 2022-05-08 12:53 - 000000000 ___RD C:\Users\majka\Documents\Tata orzeczenie 2022-07-09 11:48 - 2022-05-09 15:12 - 000000000 ____D C:\Program Files (x86)\Google 2022-07-09 10:31 - 2022-06-08 18:58 - 000000298 _____ C:\Users\majka\d4ac4633ebd6440fa397b84f1bc94a3c.7z 2022-07-09 10:31 - 2022-05-09 14:39 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2022-07-09 09:10 - 2022-05-09 13:51 - 000000000 ____D C:\Users\majka\AppData\Local\Host App Service 2022-07-08 19:29 - 2022-05-09 13:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2022-07-08 19:08 - 2022-05-09 14:39 - 000000000 ___HD C:\Program Files\WindowsApps 2022-07-08 19:08 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\AppReadiness 2022-07-08 19:08 - 2022-05-08 12:19 - 000002459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2022-07-08 19:08 - 2022-05-08 12:19 - 000002297 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk 2022-07-08 09:05 - 2022-05-19 13:02 - 000001016 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2022-07-08 09:05 - 2022-05-19 13:02 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla 2022-07-08 09:05 - 2022-05-19 13:02 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2022-07-07 14:36 - 2022-05-09 14:04 - 000000000 ____D C:\Users\majka\AppData\Local\D3DSCache 2022-07-07 12:30 - 2022-05-09 14:10 - 000000000 ____D C:\Users\majka\AppData\Local\BlueStacks 2022-07-07 11:18 - 2022-05-09 14:10 - 000000000 ____D C:\Users\Public\BlueStacks 2022-07-06 14:25 - 2022-05-09 14:41 - 000785420 _____ C:\WINDOWS\system32\perfh015.dat 2022-07-06 14:25 - 2022-05-09 14:41 - 000152280 _____ C:\WINDOWS\system32\perfc015.dat 2022-07-06 14:25 - 2022-05-09 14:38 - 000000000 ____D C:\WINDOWS\INF 2022-07-06 14:25 - 2022-05-09 13:59 - 001767980 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2022-07-06 14:20 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\ServiceState 2022-07-06 14:20 - 2022-05-09 14:34 - 001310720 _____ C:\WINDOWS\system32\config\BBI 2022-07-06 14:20 - 2022-05-09 13:54 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2022-07-06 14:20 - 2022-05-08 12:18 - 000008192 ___SH C:\DumpStack.log.tmp 2022-07-06 14:02 - 2022-05-09 16:35 - 000002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2022-07-06 14:02 - 2022-05-09 16:35 - 000002223 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2022-07-05 19:03 - 2022-05-20 13:26 - 000000000 ____D C:\Users\majka\AppData\Local\JDownloader 2.0 2022-07-05 18:36 - 2022-05-09 14:34 - 000000000 ____D C:\WINDOWS\CbsTemp 2022-07-01 13:25 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\Registration 2022-07-01 11:59 - 2022-05-09 14:39 - 000000000 ___RD C:\WINDOWS\PrintDialog 2022-07-01 11:59 - 2022-05-09 14:39 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2022-07-01 11:59 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2022-07-01 11:59 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\SystemResources 2022-07-01 11:59 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\system32\WinMetadata 2022-07-01 11:59 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\system32\oobe 2022-07-01 11:59 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\system32\es-MX 2022-07-01 11:59 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\system32\DDFs 2022-07-01 11:59 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\ShellExperiences 2022-07-01 11:59 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\ShellComponents 2022-07-01 11:59 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\bcastdvr 2022-07-01 11:59 - 2022-05-09 13:47 - 000295848 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2022-07-01 11:26 - 2022-05-09 13:49 - 003010048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2022-06-30 09:33 - 2022-05-09 14:06 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1145375136-889209143-3401833252-1001 2022-06-30 09:33 - 2022-05-09 13:51 - 000002434 _____ C:\Users\majka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2022-06-29 15:26 - 2022-05-22 16:26 - 000000000 ____D C:\Users\majka\AppData\Roaming\Anvsoft 2022-06-28 13:59 - 2022-05-11 10:21 - 000000000 ____D C:\Users\majka\AppData\Local\ElevatedDiagnostics 2022-06-25 08:49 - 2022-05-09 14:04 - 000000000 ____D C:\ProgramData\Packages 2022-06-23 11:13 - 2022-05-10 16:29 - 000000000 ____D C:\Users\majka\AppData\Local\MEGAsync 2022-06-23 09:11 - 2018-04-17 21:02 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2022-06-20 12:44 - 2022-05-16 10:34 - 000000000 ____D C:\ProgramData\CanonIJPLM 2022-06-19 12:11 - 2022-05-09 14:39 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2022-06-17 09:35 - 2022-05-10 12:54 - 000000000 ____D C:\WINDOWS\system32\MRT 2022-06-17 09:33 - 2022-05-10 12:54 - 145918784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2022-06-16 17:00 - 2022-05-09 14:07 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1145375136-889209143-3401833252-1001 2022-06-16 09:54 - 2022-05-09 14:50 - 000000503 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics 2022-06-13 15:25 - 2022-05-09 15:12 - 000002068 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk 2022-06-11 08:49 - 2022-05-09 13:55 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2022-06-11 08:49 - 2022-05-09 13:55 - 000003472 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d8639b882c00e3 2022-06-10 18:42 - 2022-05-16 15:36 - 000000000 ____D C:\Users\majka\AppData\Local\CrashDumps 2022-06-09 10:51 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2022-06-09 10:51 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2022-06-09 10:51 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE 2022-06-09 10:51 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX 2022-06-09 10:51 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2022-06-09 10:51 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences 2022-06-09 10:51 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\system32\lv-LV 2022-06-09 10:51 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\system32\lt-LT 2022-06-09 10:51 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\system32\et-EE 2022-06-09 10:51 - 2022-05-09 14:39 - 000000000 ____D C:\WINDOWS\system32\Dism 2022-06-09 10:51 - 2022-05-09 14:34 - 000000000 ____D C:\WINDOWS\servicing ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) ==================== Koniec FRST.txt ========================