Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 06-04-2023
Uruchomiony przez Bartosz (administrator)  DESKTOP-1P7IBCU (07-04-2023 17:44:16)
Uruchomiony z C:\Users\Bartosz\Downloads
Załadowane profile: Bartosz
Platforma: Microsoft Windows 10 Pro Wersja 22H2 19045.2728 (X64) Język: Polski (Polska)
Domyślna przeglądarka: FF
Tryb startu: Normal

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCopyAccelerator.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <30>
(services.exe ->) (Microsoft Corporation) [Brak podpisu cyfrowego] C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\NisSrv.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2210.0.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.23022.140.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2013-05-14] (Brother Industries, Ltd.) [Brak podpisu cyfrowego]
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4522496 2012-12-27] (Brother Industries, Ltd.) [Brak podpisu cyfrowego]
HKLM-x32\...\Run: [BrHelp] => C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe [2009088 2013-01-18] (Brother Industries, Ltd.) [Brak podpisu cyfrowego]
HKU\S-1-5-21-1021472211-3131425956-1835072169-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4362600 2023-03-24] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1021472211-3131425956-1835072169-1001\...\Run: [ALLUpdate] => C:\Program Files\ALLPlayer\ALLUpdate.exe [3930344 2018-11-10] (ALLPlayer Group sp. z o.o. -> ALLPlayer.org)
HKU\S-1-5-21-1021472211-3131425956-1835072169-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [371304 2019-07-13] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-1021472211-3131425956-1835072169-1001\...\Run: [EpicGamesLauncher] => D:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [31756176 2020-04-30] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1021472211-3131425956-1835072169-1001\...\Run: [Spotify] => C:\Users\Bartosz\AppData\Roaming\Spotify\Spotify.exe [19310968 2023-04-01] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-1021472211-3131425956-1835072169-1001\...\Run: [Discord] => C:\Users\Bartosz\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1021472211-3131425956-1835072169-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Bartosz\AppData\Local\Microsoft\Teams\Update.exe [2453656 2021-02-14] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-1021472211-3131425956-1835072169-1001\...\Run: [com.blitz.app] => C:\Users\Bartosz\AppData\Local\Programs\Blitz\Blitz.exe [139129544 2023-03-15] (Swift Media Entertainment, Inc. -> Blitz, Inc.)
HKU\S-1-5-21-1021472211-3131425956-1835072169-1001\...\Run: [uTorrent] => C:\Users\Bartosz\AppData\Roaming\uTorrent\uTorrent.exe [2719752 2023-03-10] (Rainberry Inc -> BitTorrent Inc.)
HKU\S-1-5-21-1021472211-3131425956-1835072169-1001\...\Run: [ut] => C:\Users\Bartosz\AppData\Roaming\uTorrent\uTorrent.exe [2719752 2023-03-10] (Rainberry Inc -> BitTorrent Inc.)
HKU\S-1-5-21-1021472211-3131425956-1835072169-1001\...\Run: [Microsoft Edge Update] => C:\Users\Bartosz\AppData\Local\Microsoft\EdgeUpdate\1.3.173.55\MicrosoftEdgeUpdateCore.exe [263584 2023-04-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1021472211-3131425956-1835072169-1001\...\MountPoints2: {64981654-3e76-11ec-b16d-3085a93de9b3} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-1021472211-3131425956-1835072169-1001\...\MountPoints2: {7972ec4d-0608-11e7-bf30-3085a93de9b3} - "F:\setup.exe" 
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\111.0.5563.147\Installer\chrmstp.exe [2023-03-30] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA

==================== Zaplanowane zadania (filtrowane) ============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {08A8C2F3-65CB-4072-A336-D152662EFE84} - System32\Tasks\Microsoft\Windows\termsrv\RemoteFX\RemoteFXvGPUDisableTask => C:\WINDOWS\System32\RemoteFXvGPUDisablement.exe Disable (Brak pliku)
Task: {257D633B-3F89-4DE0-8AF1-8234F13322A6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-08-10] (Google Inc -> Google Inc.)
Task: {51B776BC-977E-4D84-BE16-38B95F0846CC} - System32\Tasks\Microsoft\Windows\termsrv\RemoteFX\RemoteFXWarningTask => C:\WINDOWS\System32\RemoteFXvGPUDisablement.exe Warning (Brak pliku)
Task: {6457CB17-5382-452A-916D-1DCE135E25EC} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [718752 2023-03-22] (Mozilla Corporation -> Mozilla Foundation)
Task: {691F452F-CFB7-4B13-9F50-9125D1297127} - System32\Tasks\Opera scheduled Autoupdate 1646142067 => C:\Users\Bartosz\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Brak pliku)
Task: {6B212378-38DE-40DD-B8C8-4FCD7E588D14} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCmdRun.exe [1645904 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {88836206-D8F4-4779-9062-38C34222500F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1560056 2023-02-01] (Adobe Inc. -> Adobe Inc.)
Task: {A491A57B-3C8A-4E6B-8C80-3B53A6806ECB} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1021472211-3131425956-1835072169-1001UA => C:\Users\Bartosz\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205744 2022-07-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {AD0D4961-38EA-49E1-AACA-9D7FE0244364} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCmdRun.exe [1645904 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C4446162-C49D-432E-BE9B-9D97724E033A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCmdRun.exe [1645904 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CA80AD35-AD2D-42E1-94B0-6417CBA13EBE} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676768 2023-03-22] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {D3A7759D-084C-41A6-BECB-D6314656E5E0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCmdRun.exe [1645904 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D57287C2-CAD4-4DA5-9DE5-BC434DD8FE02} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1021472211-3131425956-1835072169-1001Core => C:\Users\Bartosz\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205744 2022-07-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {F8AD1334-AD15-4A7D-9FBA-B51FC84DBEC6} - System32\Tasks\Driver Booster SkipUAC (Bartosz) => C:\Program Files (x86)\IObit\Driver Booster\5.5.1\DriverBooster.exe [6074128 2018-07-06] (IObit Information Technology -> IObit)
Task: {FD1F793E-BCC3-4FBC-B71B-FCD7E7017346} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-08-10] (Google Inc -> Google Inc.)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)


==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7c278129-509c-4bd4-b19b-0aa3e5d7ccf8}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d4c5f0ca-5b2e-46c2-81a8-07d82faba501}: [DhcpNameServer] 192.168.0.1 192.168.0.1

Edge: 
=======
DownloadDir: C:\Users\Bartosz\Downloads
Edge Extension: (Brak nazwy) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nie znaleziono]
Edge Extension: (Brak nazwy) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nie znaleziono]
Edge Extension: (Brak nazwy) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nie znaleziono]
Edge Extension: (Brak nazwy) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nie znaleziono]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Bartosz\AppData\Local\Microsoft\Edge\User Data\Default [2023-03-14]
Edge DownloadDir: Default -> C:\Users\Bartosz\Downloads

FireFox:
========
FF DefaultProfile: wacqrsu3.default-1615227724883
FF ProfilePath: C:\Users\Bartosz\AppData\Roaming\Mozilla\Firefox\Profiles\wacqrsu3.default-1615227724883 [2023-04-07]
FF NewTab: Mozilla\Firefox\Profiles\wacqrsu3.default-1615227724883 -> hxxps://poshukach.com?fr=ps&gp=496722&altserp=1
FF Notifications: Mozilla\Firefox\Profiles\wacqrsu3.default-1615227724883 -> hxxps://www.filmweb.pl
FF SearchPlugin: C:\Users\Bartosz\AppData\Roaming\Mozilla\Firefox\Profiles\wacqrsu3.default-1615227724883\searchplugins\Poshukach Engin Search.xml [2022-03-01]
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-03-21] (Adobe Inc. -> Adobe Systems Inc.)

Chrome: 
=======
CHR Profile: C:\Users\Bartosz\AppData\Local\Google\Chrome\User Data\Default [2023-02-23]
CHR Notifications: Default -> hxxps://mail.google.com
CHR Extension: (Safe Torrent Scanner) - C:\Users\Bartosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2022-06-21]
CHR Extension: (Dokumenty Google offline) - C:\Users\Bartosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-01-29]
CHR Extension: (Blokada reklam dla serwisu Youtube ™) - C:\Users\Bartosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\hflefjhkfeiaignkclmphmokmmbhbhik [2018-08-10]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Bartosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-04]
CHR Extension: (uBlock Adblocker Plus) - C:\Users\Bartosz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnhflmgomffaphmnbcogleagmloijbkd [2018-08-24]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-02-01] (Adobe Inc. -> Adobe Inc.)
S4 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [9880840 2022-12-06] (BattlEye Innovations e.K. -> )
S4 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2012-10-26] (Brother Industries, Ltd.) [Brak podpisu cyfrowego]
S4 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4452456 2019-07-13] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S4 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2022-07-11] (Epic Games Inc. -> Epic Games, Inc.)
S4 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [2128360 2022-09-09] (GOG Sp. z o.o. -> GOG.com)
S4 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7166552 2022-09-09] (GOG Sp. z o.o. -> GOG.com)
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [226976 2023-03-15] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 ucldr_battlegrounds_gl; C:\Program Files\Common Files\Wellbia.com\ucldr_battlegrounds_gl.exe [5963304 2022-12-18] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\NisSrv.exe [3224328 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MsMpEng.exe [133544 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [10533960 2022-12-18] (PUBG CORPORATION -> KRAFTON, Inc)
S4 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_50916785244854f2\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_50916785244854f2\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 BrSerIb; C:\WINDOWS\System32\drivers\BrSerIb.sys [95344 2012-07-31] (Brother Industries, Ltd. -> Brother Industries Ltd.)
S3 BrUsbSIb; C:\WINDOWS\System32\drivers\BrUsbSIb.sys [21872 2012-06-22] (Brother Industries, Ltd. -> Brother Industries Ltd.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2019-07-13] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2019-07-13] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R1 HWiNFO; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [65320 2019-02-15] (Martin Malik - REALiX -> REALiX(tm))
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-08-05] (Martin Malik - REALiX -> REALiX(tm))
R3 SteamStreamingMicrophone; C:\WINDOWS\system32\drivers\SteamStreamingMicrophone.sys [40736 2017-07-28] (Valve Corp. -> )
R3 SteamStreamingSpeakers; C:\WINDOWS\system32\drivers\SteamStreamingSpeakers.sys [40736 2017-07-21] (Valve Corp. -> )
S3 VClone; C:\WINDOWS\System32\drivers\VClone.sys [34816 2014-05-03] (Elaborate Bytes AG) [Brak podpisu cyfrowego]
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49608 2023-03-28] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [495896 2023-03-28] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99624 2023-03-28] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [1432232 2022-12-19] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S4 nvvhci; \SystemRoot\System32\drivers\nvvhci.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2023-04-07 17:44 - 2023-04-07 17:45 - 000018038 _____ C:\Users\Bartosz\Downloads\FRST.txt
2023-04-07 17:43 - 2023-04-07 17:43 - 002379776 _____ (Farbar) C:\Users\Bartosz\Downloads\FRST64.exe
2023-04-07 17:43 - 2023-04-07 17:43 - 000000000 ____D C:\Users\Bartosz\Downloads\FRST-OlderVersion
2023-04-07 16:12 - 2023-04-07 16:12 - 000000358 _____ C:\Users\Bartosz\Desktop\Football Manager 2020.url
2023-04-07 14:15 - 2023-04-07 14:15 - 008791352 _____ (Malwarebytes) C:\Users\Bartosz\Downloads\adwcleaner(1).exe
2023-04-07 14:06 - 2023-04-07 14:06 - 000000000 ____D C:\ProgramData\Dbg
2023-04-07 13:25 - 2023-04-07 13:25 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2023-04-07 13:20 - 2023-03-17 18:38 - 002172456 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2023-04-07 13:20 - 2023-03-17 18:38 - 002172456 _____ C:\WINDOWS\system32\vulkaninfo.exe
2023-04-07 13:20 - 2023-03-17 18:38 - 001607720 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2023-04-07 13:20 - 2023-03-17 18:38 - 001607720 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2023-04-07 13:20 - 2023-03-17 18:38 - 001487368 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2023-04-07 13:20 - 2023-03-17 18:38 - 001479248 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2023-04-07 13:20 - 2023-03-17 18:38 - 001479248 _____ C:\WINDOWS\system32\vulkan-1.dll
2023-04-07 13:20 - 2023-03-17 18:38 - 001227248 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2023-04-07 13:20 - 2023-03-17 18:38 - 001211432 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2023-04-07 13:20 - 2023-03-17 18:38 - 001211432 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2023-04-07 13:20 - 2023-03-17 18:34 - 001535984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2023-04-07 13:20 - 2023-03-17 18:34 - 001194520 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2023-04-07 13:20 - 2023-03-17 18:34 - 000851472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2023-04-07 13:20 - 2023-03-17 18:34 - 000671768 _____ C:\WINDOWS\system32\nvofapi64.dll
2023-04-07 13:20 - 2023-03-17 18:34 - 000506376 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2023-04-07 13:20 - 2023-03-17 18:33 - 000741920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2023-04-07 13:20 - 2023-03-17 18:32 - 002165768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2023-04-07 13:20 - 2023-03-17 18:32 - 001621000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2023-04-07 13:20 - 2023-03-17 18:32 - 000979464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2023-04-07 13:20 - 2023-03-17 18:32 - 000759840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2023-04-07 13:20 - 2023-03-17 18:30 - 013767176 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2023-04-07 13:20 - 2023-03-17 18:30 - 011647472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2023-04-07 13:20 - 2023-03-17 18:30 - 006083552 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2023-04-07 13:20 - 2023-03-17 18:30 - 005911536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2023-04-07 13:20 - 2023-03-17 18:30 - 003429896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2023-04-07 13:20 - 2023-03-17 18:30 - 000457696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2023-04-07 13:20 - 2023-03-17 18:29 - 005834760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2023-04-07 13:20 - 2023-03-17 18:28 - 000852960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2023-04-07 13:20 - 2023-03-17 10:32 - 000104369 _____ C:\WINDOWS\system32\nvinfo.pb
2023-04-07 13:11 - 2023-04-07 13:17 - 894781320 _____ (NVIDIA Corporation) C:\Users\Bartosz\Downloads\531.41-desktop-win10-win11-64bit-international-dch-whql.exe
2023-04-05 18:05 - 2023-04-05 20:17 - 000005219 _____ C:\Users\Bartosz\Desktop\Nowy dokument tekstowy.txt
2023-03-28 17:03 - 2023-03-28 17:03 - 000049343 _____ C:\Users\Bartosz\Downloads\eKonto nr _82033031 za 2023-02.pdf
2023-03-28 17:02 - 2023-03-28 17:02 - 000205883 _____ C:\Users\Bartosz\Downloads\TwojeDokumenty-3.pdf
2023-03-28 17:01 - 2023-03-28 17:01 - 000205883 _____ C:\Users\Bartosz\Downloads\TwojeDokumenty-2.pdf
2023-03-28 17:00 - 2023-03-28 17:00 - 000205883 _____ C:\Users\Bartosz\Downloads\TwojeDokumenty-1.pdf
2023-03-28 17:00 - 2023-03-28 17:00 - 000004692 _____ C:\Users\Bartosz\Downloads\smime.p7s
2023-03-28 16:55 - 2023-03-28 16:55 - 000205883 _____ C:\Users\Bartosz\Downloads\TwojeDokumenty.pdf
2023-03-24 23:45 - 2023-03-24 23:45 - 000000000 ____D C:\Users\Bartosz\AppData\Roaming\NVIDIA
2023-03-22 17:40 - 2023-03-24 23:35 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-03-15 19:49 - 2023-03-15 19:49 - 000000000 ___HD C:\$WinREAgent
2023-03-14 19:28 - 2023-03-14 20:18 - 000000000 ____D C:\Users\Bartosz\Downloads\dokument611483
2023-03-14 19:28 - 2023-03-14 20:10 - 000000000 ____D C:\Users\Bartosz\Downloads\dokument611479
2023-03-14 19:28 - 2023-03-14 19:28 - 003645741 _____ C:\Users\Bartosz\Downloads\dokument611479.zip
2023-03-14 19:28 - 2023-03-14 19:28 - 000180806 _____ C:\Users\Bartosz\Downloads\dokument611483.zip
2023-03-11 01:07 - 2023-03-11 01:07 - 000000253 _____ C:\Users\Bartosz\Desktop\dm.slf

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2023-04-07 17:44 - 2018-08-10 15:32 - 000000000 ____D C:\FRST
2023-04-07 17:42 - 2018-01-16 16:36 - 000000000 ____D C:\Users\Bartosz\AppData\LocalLow\Mozilla
2023-04-07 17:40 - 2021-05-02 23:00 - 001767980 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-04-07 17:40 - 2019-12-07 17:09 - 000784296 _____ C:\WINDOWS\system32\perfh015.dat
2023-04-07 17:40 - 2019-12-07 17:09 - 000152192 _____ C:\WINDOWS\system32\perfc015.dat
2023-04-07 17:40 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-04-07 17:36 - 2021-05-02 22:56 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-04-07 17:36 - 2021-05-02 22:50 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-04-07 17:36 - 2020-05-29 17:03 - 000008192 ___SH C:\DumpStack.log.tmp
2023-04-07 17:36 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-04-07 17:36 - 2018-08-10 13:02 - 000000000 ____D C:\Program Files (x86)\Google
2023-04-07 16:58 - 2020-04-30 19:42 - 000000000 ____D C:\Users\Bartosz\AppData\Local\EpicGamesLauncher
2023-04-07 16:38 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2023-04-07 16:34 - 2018-08-05 16:43 - 000000000 ____D C:\ProgramData\NVIDIA
2023-04-07 16:32 - 2018-08-05 18:28 - 000000000 ____D C:\Users\Bartosz\AppData\Local\DBG
2023-04-07 14:16 - 2018-11-15 21:44 - 000000000 ____D C:\Program Files (x86)\Steam
2023-04-07 14:11 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-04-07 14:05 - 2018-08-05 16:47 - 000000000 ____D C:\Users\Bartosz\AppData\Local\PlaceholderTileLogoFolder
2023-04-07 14:05 - 2018-08-05 16:47 - 000000000 ____D C:\ProgramData\Packages
2023-04-07 14:05 - 2018-08-05 16:45 - 000000000 ____D C:\Users\Bartosz\AppData\Local\Packages
2023-04-07 14:04 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-04-07 14:04 - 2019-09-06 21:01 - 000000000 ____D C:\Users\Bartosz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2023-04-07 13:27 - 2018-08-05 16:50 - 000000000 ____D C:\Users\Bartosz\AppData\Local\NVIDIA
2023-04-07 13:24 - 2018-08-05 18:58 - 000000000 ____D C:\Users\Bartosz\AppData\Local\NVIDIA Corporation
2023-04-07 13:23 - 2018-08-05 16:43 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2023-04-07 13:23 - 2018-08-05 16:43 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2023-04-07 13:23 - 2018-08-05 16:43 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2023-04-07 13:20 - 2022-07-23 15:29 - 000003834 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1021472211-3131425956-1835072169-1001UA
2023-04-07 13:20 - 2022-07-23 15:29 - 000003774 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1021472211-3131425956-1835072169-1001Core
2023-04-07 13:07 - 2018-08-10 15:23 - 000000000 ____D C:\Users\Bartosz\AppData\Local\CrashDumps
2023-04-06 17:18 - 2021-05-02 22:56 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-04-06 17:18 - 2021-05-02 22:56 - 000003442 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-04-05 20:20 - 2022-01-27 18:21 - 000019536 _____ C:\Users\Bartosz\Desktop\Nowy Arkusz programu Microsoft Office Excel.xlsx
2023-04-05 19:05 - 2020-04-30 21:18 - 000000081 _____ C:\Users\Bartosz\AppData\Local\.bidstack.fault
2023-04-02 17:21 - 2018-08-10 15:18 - 000000000 ____D C:\Users\Bartosz\AppData\Local\D3DSCache
2023-04-01 19:27 - 2023-01-17 17:45 - 000002286 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-04-01 19:27 - 2020-08-28 16:47 - 000002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-04-01 18:15 - 2021-12-13 18:39 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1021472211-3131425956-1835072169-1001
2023-04-01 18:15 - 2021-05-02 22:56 - 000003384 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1021472211-3131425956-1835072169-1001
2023-04-01 18:15 - 2021-05-02 22:51 - 000002433 _____ C:\Users\Bartosz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-04-01 15:24 - 2021-02-28 11:45 - 000000000 ____D C:\Users\Bartosz\AppData\Roaming\Blitz
2023-04-01 12:23 - 2020-05-08 14:04 - 000000000 ____D C:\Users\Bartosz\AppData\Local\Spotify
2023-04-01 12:17 - 2020-05-08 14:03 - 000000000 ____D C:\Users\Bartosz\AppData\Roaming\Spotify
2023-04-01 09:26 - 2021-05-19 21:14 - 000000032 _____ C:\Users\Bartosz\AppData\Roaming\.machineId
2023-03-30 19:02 - 2022-10-17 18:01 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2023-03-30 19:02 - 2022-10-17 18:01 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2023-03-30 19:02 - 2021-05-02 22:56 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2023-03-30 16:59 - 2018-08-10 13:04 - 000002307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-03-29 14:40 - 2018-08-05 18:55 - 000000000 ____D C:\ProgramData\Package Cache
2023-03-28 20:23 - 2018-08-07 11:25 - 000000000 ____D C:\Users\Bartosz\AppData\Roaming\uTorrent
2023-03-28 16:52 - 2020-01-25 11:09 - 000000000 ____D C:\Users\Bartosz\AppData\Local\BitTorrentHelper
2023-03-28 14:01 - 2018-08-05 16:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-03-25 01:51 - 2020-05-14 17:37 - 000000000 ____D C:\Users\Bartosz\AppData\Roaming\discord
2023-03-25 01:45 - 2020-05-14 17:37 - 000000000 ____D C:\Users\Bartosz\AppData\Local\Discord
2023-03-24 23:35 - 2018-10-23 19:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-03-24 18:09 - 2021-10-10 21:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2023-03-24 18:09 - 2018-10-23 19:08 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-03-17 18:28 - 2021-04-11 14:14 - 007932992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2023-03-17 18:27 - 2022-11-12 14:46 - 006796224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2023-03-17 10:32 - 2021-04-11 14:17 - 000086568 _____ C:\WINDOWS\system32\FvSDK_x64.dll
2023-03-17 10:32 - 2021-04-11 14:17 - 000075304 _____ C:\WINDOWS\SysWOW64\FvSDK_x86.dll
2023-03-17 10:32 - 2021-04-11 14:15 - 000121880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2023-03-16 18:32 - 2021-05-02 22:50 - 000461808 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-03-15 23:25 - 2019-12-07 17:12 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-03-15 23:25 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-03-15 23:25 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-03-15 23:25 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-03-15 23:25 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2023-03-15 23:25 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-03-15 22:39 - 2020-04-30 19:42 - 000000000 ____D C:\Users\Bartosz\AppData\Local\UnrealEngine
2023-03-15 22:39 - 2020-04-30 19:42 - 000000000 ____D C:\ProgramData\Epic
2023-03-15 19:55 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-03-15 19:54 - 2021-05-02 22:51 - 003015680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-03-15 19:48 - 2018-08-05 17:06 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-03-15 19:46 - 2018-08-05 17:06 - 153620824 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-03-11 12:03 - 2023-01-09 23:23 - 000019187 _____ C:\Users\Bartosz\Desktop\DART.xlsx

==================== Pliki w katalogu głównym wybranych folderów ========

2018-04-12 01:34 - 2018-04-12 01:34 - 000059904 _____ (Microsoft Corporation) C:\Users\Bartosz\dnMEuInbOw.exe
2021-05-19 21:14 - 2023-04-01 09:26 - 000000032 _____ () C:\Users\Bartosz\AppData\Roaming\.machineId
2022-03-05 00:18 - 2022-03-05 00:18 - 000006556 _____ () C:\Users\Bartosz\AppData\Roaming\2d06f24c-b68d-4bd2-8ebb-5b930375838e.tmp
2021-12-05 00:04 - 2021-12-05 00:04 - 000005215 _____ () C:\Users\Bartosz\AppData\Roaming\fd094f75-56c5-4a76-9481-a23dce05117b.tmp
2020-04-30 21:18 - 2023-04-05 19:05 - 000000081 _____ () C:\Users\Bartosz\AppData\Local\.bidstack.fault
2018-08-07 11:29 - 2018-08-07 11:29 - 000000002 _____ () C:\Users\Bartosz\AppData\Local\imw.ini
2020-12-18 23:24 - 2020-12-18 23:24 - 000000000 ___SH () C:\Users\Bartosz\AppData\Local\LumaEmu
2020-01-28 10:44 - 2020-01-28 10:44 - 000000822 _____ () C:\Users\Bartosz\AppData\Local\recently-used.xbel
2018-08-27 20:54 - 2019-04-17 11:37 - 000007601 _____ () C:\Users\Bartosz\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

==================== Koniec  FRST.txt ========================