Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 07-10-2022 01 Uruchomiony przez szyme (administrator) DESKTOP-4O7VLSM (ASUSTeK COMPUTER INC. X556UQK) (08-10-2022 20:09:54) Uruchomiony z C:\Users\szyme\OneDrive\Pulpit Załadowane profile: szyme Platform: Microsoft Windows 10 Home Wersja 21H1 19043.2006 (X64) Język: Polski (Polska) Domyślna przeglądarka: FF Tryb startu: Normal ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe (C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (C:\Users\szyme\AppData\Roaming\uTorrent\updates\3.5.5_46514\utorrentie.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\106.0.1370.34\msedgewebview2.exe <7> (C:\Users\szyme\AppData\Roaming\uTorrent\uTorrent.exe ->) (BitTorrent Inc -> BitTorrent Inc.) C:\Users\szyme\AppData\Roaming\uTorrent\helper\helper.exe (C:\Users\szyme\AppData\Roaming\uTorrent\uTorrent.exe ->) (BitTorrent Inc -> BitTorrent Inc.) C:\Users\szyme\AppData\Roaming\uTorrent\updates\3.5.5_46514\utorrentie.exe <2> (DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\igfxEM.exe (explorer.exe ->) (BitTorrent Inc -> BitTorrent Inc.) C:\Users\szyme\AppData\Roaming\uTorrent\uTorrent.exe (Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <16> (services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (services.exe ->) (Autodesk, Inc. -> Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe (services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (services.exe ->) (FarStone Technology -> ) C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe (services.exe ->) (Farstone Technology Inc -> ) C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DCNTranProc.exe (services.exe ->) (Flexera Software LLC -> Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe (services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe (services.exe ->) (Intel Corporation) [Brak podpisu cyfrowego] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe (services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\igfxCUIService.exe (services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\IntelCpHDCPSvc.exe (services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\IntelCpHeciSvc.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\NisSrv.exe (services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_9dadb8756023efe0\Display.NvContainer\NVDisplay.Container.exe <2> (svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22072.207.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (svchost.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation -> Microsoft Corporation) HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [664872 2020-03-04] (Autodesk, Inc. -> Autodesk, Inc.) HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [456160 2018-11-22] (Power Software Limited -> Power Software Ltd) HKU\S-1-5-21-3558802612-3305223105-3970052290-1003\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3370272 2020-03-27] (Valve -> Valve Corporation) HKU\S-1-5-21-3558802612-3305223105-3970052290-1003\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [735336 2019-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd) HKU\S-1-5-21-3558802612-3305223105-3970052290-1003\...\Run: [com.squirrel.Teams.Teams] => C:\Users\szyme\AppData\Local\Microsoft\Teams\Update.exe [2342544 2020-03-28] (Microsoft 3rd Party Application Component -> Microsoft Corporation) HKU\S-1-5-21-3558802612-3305223105-3970052290-1003\...\Run: [SteamServerBrowser] => C:\Users\szyme\AppData\Roaming\SteamServerBrowser\SteamServerBrowser.exe [289304 2021-04-26] (Lyrha Software Technologies Inc. -> ) HKU\S-1-5-21-3558802612-3305223105-3970052290-1003\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [38502416 2022-09-12] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3558802612-3305223105-3970052290-1003\...\Run: [ut] => C:\Users\szyme\AppData\Roaming\uTorrent\uTorrent.exe [2185376 2022-09-19] (BitTorrent Inc -> BitTorrent Inc.) HKU\S-1-5-21-3558802612-3305223105-3970052290-1003\...\Run: [Microsoft Edge Update] => C:\Users\szyme\AppData\Local\Microsoft\EdgeUpdate\1.3.167.21\MicrosoftEdgeUpdateCore.exe [253888 2022-08-17] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-3558802612-3305223105-3970052290-1003\...\Run: [Opera Browser Assistant] => C:\Users\szyme\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4137936 2022-09-14] (Opera Norway AS -> Opera Software) HKU\S-1-5-21-3558802612-3305223105-3970052290-1003\...\Run: [MicrosoftEdgeAutoLaunch_34F879E07B548291BA080ADF0A90F778] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3852200 2022-10-06] (Microsoft Corporation -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\106.0.5249.103\Installer\chrmstp.exe [2022-10-06] (Google LLC -> Google LLC) Startup: C:\Users\szyme\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GenuineService.lnk [2020-08-17] ShortcutTarget: GenuineService.lnk -> C:\Users\szyme\Autodesk\Genuine Service\GenuineService.exe (Autodesk, Inc. -> Autodesk) ==================== Zaplanowane zadania (filtrowane) ============ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {0F4622D9-1862-40F1-98E6-BDEBE966E9C1} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4666896 2022-09-12] (Piriform Software Ltd -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "f8ee3624-9a11-4d78-95b6-84018ca1801a" --version "6.04.10044" --silent Task: {107E6A5B-2A84-44ED-85F9-ABE7C56E4CDD} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {13B79F07-5357-4ACF-B213-A205EDDBE44C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-08-30] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {174D451E-1B0E-4CA2-9BE2-F36EF74D5DFE} - System32\Tasks\CCleanerSkipUAC - szyme => C:\Program Files\CCleaner\CCleaner.exe [32204304 2022-09-12] (Piriform Software Ltd -> Piriform Software Ltd) Task: {1C270131-CF88-48FD-ADC7-8D28E2A79E40} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\szyme\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe LOGON (Brak pliku) Task: {49D52111-A14C-4271-A78A-E08AB9396A48} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-08-30] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {4DFED878-FCCA-446B-A742-D9326475B1AB} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2022-09-12] (Nvidia Corporation -> NVIDIA Corporation) Task: {572FE99D-3D7D-4FCF-8F32-9AB22EFE5A84} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-04-12] (Google Inc -> Google LLC) Task: {644B3EB0-7826-48EE-A78E-7E89B40E2417} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-3558802612-3305223105-3970052290-1003UA => C:\Users\szyme\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205744 2022-07-14] (Microsoft Corporation -> Microsoft Corporation) Task: {65A256EF-59EA-4FD8-BD13-D63C516C30E5} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1429248 2016-05-20] (Realtek Semiconductor Corp -> Realtek Semiconductor) Task: {6D1D72C4-9052-4684-92BA-072147030F83} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1552376 2022-09-26] (Adobe Inc. -> Adobe Inc.) Task: {758D18B5-4B92-47DD-931A-C26D9208EBF3} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) Task: {785FF6CD-CE2D-4F0A-A728-5B83DCE51AD7} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\szyme\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe SCHED (Brak pliku) Task: {80BEE9FA-4643-43F9-89E9-67359F24A5AD} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate Task: {8F33CD31-36F8-4738-9BD5-76D799CF4891} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-08-30] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {937C8FF3-61D5-4D8D-A3D1-5757FFEBC258} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-08-30] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {9B70F9F8-94F0-4DE4-87C8-402A5E68E120} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-09-12] (Piriform Software Ltd -> Piriform) Task: {A00FB934-7831-44EA-AEA4-04BA881CC68E} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {C76E82D4-6959-4F8F-84E2-13F7292B5F3E} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB" Task: {CF6708A3-F3C2-464C-80BA-A6F2775F398B} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-3558802612-3305223105-3970052290-1003Core => C:\Users\szyme\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205744 2022-07-14] (Microsoft Corporation -> Microsoft Corporation) Task: {D427A4C8-E9F1-402C-8B59-9AEA96147024} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-04-12] (Google Inc -> Google LLC) Task: {D6AC5804-6EA9-4A58-858E-D658D92E3FAD} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [855352 2016-02-19] (Intel(R) Trusted Connect Service -> Intel(R) Corporation) Task: {E324FE56-CC3A-43A1-9957-1554332CF579} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19786024 2016-02-23] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) Task: {EBBD8087-8BA0-4B2A-81E6-3B1DAFC7154E} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2022-09-12] (Nvidia Corporation -> NVIDIA Corporation) Task: {F2C6D650-C4BA-4A97-BB46-D84DCD92D1F9} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) Task: {F8F26C4A-7093-4EAD-B23A-86AADC02407A} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16475392 2016-05-20] (Realtek Semiconductor Corp -> Realtek Semiconductor) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 Tcpip\..\Interfaces\{73170480-a0f0-452f-9c86-710f25153564}: [DhcpNameServer] 192.168.8.1 Edge: ======= Edge Extension: (Brak nazwy) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nie znaleziono] Edge Extension: (Brak nazwy) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nie znaleziono] Edge Extension: (Brak nazwy) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nie znaleziono] Edge Extension: (Brak nazwy) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nie znaleziono] Edge Profile: C:\Users\szyme\AppData\Local\Microsoft\Edge\User Data\Default [2022-10-03] FireFox: ======== FF DefaultProfile: qvduvoqk.default-1621959798231 FF ProfilePath: C:\Users\szyme\AppData\Roaming\Mozilla\Firefox\Profiles\qvduvoqk.default-1621959798231 [2022-10-08] FF Notifications: Mozilla\Firefox\Profiles\qvduvoqk.default-1621959798231 -> hxxps://www.pyszne.pl; hxxps://www.sportbible.com; hxxps://modivo.pl; hxxps://hotmovs.com FF Extension: (uBlock Origin) - C:\Users\szyme\AppData\Roaming\Mozilla\Firefox\Profiles\qvduvoqk.default-1621959798231\Extensions\uBlock0@raymondhill.net.xpi [2022-09-20] FF HKLM\...\Firefox\Extensions: [{90ca575e-4c80-47b5-8a3b-ad862f38a292}] - C:\Program Files (x86)\SafeMyWeb\ff\safe_my_web-1.0.1-fx.xpi => nie znaleziono FF HKLM-x32\...\Firefox\Extensions: [{90ca575e-4c80-47b5-8a3b-ad862f38a292}] - C:\Program Files (x86)\SafeMyWeb\ff\safe_my_web-1.0.1-fx.xpi => nie znaleziono FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Brak pliku] FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Brak pliku] FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-03-28] (Foxit Software Incorporated -> Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-03-28] (Foxit Software Incorporated -> Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-03-28] (Foxit Software Incorporated -> Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-03-28] (Foxit Software Incorporated -> Foxit Corporation) FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll [2015-07-15] (Ganymede Sp. z o.o. -> ) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2022-09-08] (Adobe Inc. -> Adobe Systems Inc.) Chrome: ======= CHR Profile: C:\Users\szyme\AppData\Local\Google\Chrome\User Data\Default [2022-10-08] CHR Extension: (Dokumenty Google offline) - C:\Users\szyme\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-09-20] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\szyme\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29] CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb] Opera: ======= OPR Profile: C:\Users\szyme\AppData\Roaming\Opera Software\Opera Stable [2022-10-08] OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding} OPR Extension: (Rich Hints Agent) - C:\Users\szyme\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-07-02] OPR Extension: (Opera Crypto Wallet) - C:\Users\szyme\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2022-08-13] OPR Extension: (Amazon Assistant Promotion) - C:\Users\szyme\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2022-05-08] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1046904 2020-03-04] (Autodesk, Inc. -> Autodesk Inc.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2022-09-26] (Adobe Inc. -> Adobe Inc.) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4132456 2019-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd) R2 FBAgent; C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe [73032 2014-08-13] (FarStone Technology -> ) R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2016-03-02] (Intel Corporation) [Brak podpisu cyfrowego] S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-02] (Intel Corporation) [Brak podpisu cyfrowego] S2 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsupdatesvr.exe [133480 2016-04-03] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd) S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8765464 2022-10-02] (Malwarebytes Inc. -> Malwarebytes) S3 PrintNotify; C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll [3595776 2021-09-17] (Microsoft Corporation) [Brak podpisu cyfrowego] S2 rkrtservice; C:\Program Files\RogueKiller\RogueKillerSvc.exe [14711736 2022-09-13] (ADLICE -> ) R2 Tran_Process_Proc; C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DCNTranProc.exe [71024 2014-03-25] (Farstone Technology Inc -> ) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\NisSrv.exe [3125112 2022-08-30] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe [133560 2022-08-30] (Microsoft Windows Publisher -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_9dadb8756023efe0\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_9dadb8756023efe0\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 AiCharger; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [22656 2016-02-23] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.) S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.) S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.) R2 ASMMAP64; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [18048 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUS) R3 AsusSGDrv; C:\WINDOWS\system32\DRIVERS\AsusSGDrv.sys [143856 2017-04-11] (ASUSTeK Computer Inc. -> ASUS Corporation) R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.) S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2021-09-17] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [154112 2021-10-17] (Microsoft Corporation) [Brak podpisu cyfrowego] R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2019-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd) R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2019-04-12] (AVB Disc Soft, SIA -> Disc Soft Ltd) S3 farmntio; C:\Windows\system32\drivers\farmntio.sys [25144 2014-03-25] (FarStone Technology -> ) [Brak podpisu cyfrowego] R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-10-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2022-10-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 MpKslb4c1496d; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6D4F6763-6E38-48BD-9325-3E185A06FB3D}\MpKslDrv.sys [228632 2022-10-08] (Microsoft Windows -> Microsoft Corporation) R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software) S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64912 2017-05-18] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-08-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [453904 2022-08-30] (Microsoft Windows -> Microsoft Corporation) S3 wdm_usb; C:\WINDOWS\System32\drivers\usb2ser.sys [151184 2016-07-15] (NGO -> MBB) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [94480 2022-08-30] (Microsoft Windows -> Microsoft Corporation) S4 NvModuleTracker; \SystemRoot\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [X] S4 nvvad_WaveExtensible; \SystemRoot\system32\drivers\nvvad64v.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2022-10-08 19:44 - 2022-10-08 20:06 - 000000000 ____D C:\Users\szyme\Downloads\Luckiest Girl Alive (2022) [1080p] [WEBRip] [5.1] [YTS.MX] 2022-10-08 19:44 - 2022-10-08 19:44 - 000023357 _____ C:\Users\szyme\Downloads\Luckiest Girl Alive (2022) [1080p] [WEBRip] [5.1] [YTS.MX].torrent 2022-10-08 17:07 - 2022-10-08 17:07 - 000005964 _____ C:\WINDOWS\system32\as_1CBA.tmp.txt 2022-10-08 16:54 - 2022-10-08 16:54 - 003579152 _____ (Softmaking) C:\Users\szyme\Downloads\UltraZipSetup_s.exe 2022-10-08 16:46 - 2022-10-08 17:14 - 000000000 ____D C:\ProgramData\RogueKiller 2022-10-08 16:46 - 2022-10-08 16:46 - 000041920 _____ C:\WINDOWS\system32\Drivers\truesight.sys 2022-10-08 16:46 - 2022-10-08 16:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller 2022-10-08 16:46 - 2022-10-08 16:46 - 000000000 ____D C:\Program Files\RogueKiller 2022-10-08 09:41 - 2022-10-08 09:41 - 000000000 ____D C:\Program Files\Mozilla Firefox 2022-10-07 20:08 - 2022-10-07 20:16 - 000000000 ____D C:\Users\szyme\Downloads\Girl In The Shed The Kidnapping Of Abby Hernandez (2022) [1080p] [WEBRip] [YTS.MX] 2022-10-06 19:44 - 2022-10-06 20:21 - 000000000 ____D C:\Users\szyme\Downloads\Warrior (2011) [REPACK] [1080p] [BluRay] [5.1] [YTS.MX] 2022-10-02 16:16 - 2022-10-02 16:16 - 000000000 ____D C:\Users\szyme\AppData\Local\mbam 2022-10-02 16:15 - 2022-10-08 16:41 - 000000000 ___DC C:\Users\szyme\AppData\LocalLow\IGDump 2022-10-02 16:15 - 2022-10-02 16:15 - 000239544 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2022-10-02 16:15 - 2022-10-02 16:15 - 000002035 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk 2022-10-02 16:14 - 2022-10-02 16:14 - 000158640 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2022-10-02 16:14 - 2022-10-02 16:14 - 000021480 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys 2022-10-02 16:13 - 2022-10-08 16:43 - 000003416 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting 2022-10-02 16:13 - 2022-10-08 16:43 - 000000760 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job 2022-10-02 16:12 - 2022-10-02 16:12 - 000000000 ____D C:\ProgramData\Malwarebytes 2022-10-02 16:12 - 2022-10-02 16:12 - 000000000 ____D C:\Program Files\Malwarebytes 2022-10-02 16:08 - 2022-10-02 16:08 - 000254692 _____ C:\Users\szyme\OneDrive\Dokumenty\cc_20221002_160837.reg 2022-10-02 13:43 - 2022-10-08 20:10 - 000000000 ____D C:\FRST 2022-10-01 21:41 - 2022-10-01 21:41 - 000000000 ____D C:\WINDOWS\LastGood 2022-10-01 21:37 - 2022-10-01 21:44 - 000000000 ____D C:\Users\szyme\Downloads\Into The Wild (2007) 2022-10-01 20:23 - 2022-09-22 17:08 - 000771584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll 2022-10-01 20:23 - 2022-09-22 17:06 - 005751288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2022-10-01 20:22 - 2022-09-22 17:12 - 001905928 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe 2022-10-01 20:22 - 2022-09-22 17:12 - 001905928 _____ C:\WINDOWS\system32\vulkaninfo.exe 2022-10-01 20:22 - 2022-09-22 17:12 - 001478384 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2022-10-01 20:22 - 2022-09-22 17:12 - 001478384 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2022-10-01 20:22 - 2022-09-22 17:12 - 001472000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2022-10-01 20:22 - 2022-09-22 17:12 - 001432328 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll 2022-10-01 20:22 - 2022-09-22 17:12 - 001432328 _____ C:\WINDOWS\system32\vulkan-1.dll 2022-10-01 20:22 - 2022-09-22 17:12 - 001213416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2022-10-01 20:22 - 2022-09-22 17:12 - 001145608 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll 2022-10-01 20:22 - 2022-09-22 17:12 - 001145608 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2022-10-01 20:22 - 2022-09-22 17:08 - 001536504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2022-10-01 20:22 - 2022-09-22 17:08 - 001182712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2022-10-01 20:22 - 2022-09-22 17:08 - 000865784 _____ C:\WINDOWS\system32\nvofapi64.dll 2022-10-01 20:22 - 2022-09-22 17:08 - 000714728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe 2022-10-01 20:22 - 2022-09-22 17:08 - 000687616 _____ C:\WINDOWS\SysWOW64\nvofapi.dll 2022-10-01 20:22 - 2022-09-22 17:07 - 002127864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2022-10-01 20:22 - 2022-09-22 17:07 - 001607672 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2022-10-01 20:22 - 2022-09-22 17:07 - 001059320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2022-10-01 20:22 - 2022-09-22 17:07 - 000845304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2022-10-01 20:22 - 2022-09-22 17:07 - 000456184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe 2022-10-01 20:22 - 2022-09-22 17:06 - 010270208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2022-10-01 20:22 - 2022-09-22 17:06 - 008803832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2022-10-01 20:22 - 2022-09-22 17:06 - 005362680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2022-10-01 20:22 - 2022-09-22 17:06 - 003066872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2022-10-01 20:22 - 2022-09-22 17:05 - 000852984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe 2022-10-01 20:22 - 2022-09-22 17:04 - 006367384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2022-10-01 20:22 - 2022-09-22 02:35 - 000093312 _____ C:\WINDOWS\system32\nvinfo.pb 2022-10-01 20:07 - 2022-10-01 20:27 - 000000000 ____D C:\WINDOWS\LastGood.Tmp 2022-09-24 08:57 - 2022-09-24 08:57 - 000000000 ___HD C:\Users\szyme\Downloads\.opera 2022-09-23 16:54 - 2022-09-23 16:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\oCam 2022-09-23 16:54 - 2022-09-23 16:54 - 000000000 ____D C:\Program Files (x86)\oCam 2022-09-16 16:45 - 2022-09-16 16:45 - 000000000 ____D C:\Users\szyme\AppData\Roaming\com.adobe.dunamis 2022-09-15 19:44 - 2022-09-15 19:44 - 000413696 _____ C:\WINDOWS\system32\AzureCheck.dll 2022-09-15 19:44 - 2022-09-15 19:44 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll 2022-09-15 19:44 - 2022-09-15 19:44 - 000098816 _____ C:\WINDOWS\system32\Drivers\cimfs.sys 2022-09-15 19:44 - 2022-09-15 19:44 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe 2022-09-15 19:44 - 2022-09-15 19:44 - 000011813 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim 2022-09-14 21:55 - 2022-09-14 21:55 - 000000000 ___HD C:\$WinREAgent ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2022-10-08 20:10 - 2019-06-06 19:30 - 000000000 ___DC C:\Users\szyme\AppData\Local\BitTorrentHelper 2022-10-08 20:10 - 2019-04-13 20:33 - 000000000 ___DC C:\Users\szyme\AppData\Roaming\uTorrent 2022-10-08 19:40 - 2022-02-09 10:46 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2022-10-08 19:39 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2022-10-08 19:39 - 2019-04-12 18:13 - 000000000 ___DC C:\Users\szyme\AppData\LocalLow\Mozilla 2022-10-08 19:21 - 2019-04-12 20:26 - 000000000 ____D C:\Program Files (x86)\Google 2022-10-08 18:51 - 2020-07-26 11:37 - 000002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2022-10-08 18:51 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2022-10-08 18:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2022-10-08 16:46 - 2020-11-03 22:04 - 001767984 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2022-10-08 16:46 - 2019-12-07 17:08 - 000787066 _____ C:\WINDOWS\system32\perfh015.dat 2022-10-08 16:46 - 2019-12-07 17:08 - 000152910 _____ C:\WINDOWS\system32\perfc015.dat 2022-10-08 16:46 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF 2022-10-08 16:43 - 2020-09-12 20:11 - 000000000 ____D C:\Program Files\CCleaner 2022-10-08 16:42 - 2021-09-12 17:36 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla 2022-10-08 16:42 - 2021-05-25 18:22 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2022-10-08 16:42 - 2021-05-25 18:22 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2022-10-08 16:41 - 2021-02-14 00:46 - 000005693 ___RH C:\farstone_pe.letter 2022-10-08 16:41 - 2020-11-03 22:02 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2022-10-08 16:41 - 2020-11-03 21:54 - 000532968 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2022-10-08 16:41 - 2020-11-03 21:54 - 000008192 ___SH C:\DumpStack.log.tmp 2022-10-08 16:41 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState 2022-10-08 16:41 - 2019-04-12 18:01 - 000000000 __SHD C:\Users\szyme\IntelGraphicsProfiles 2022-10-08 16:41 - 2016-11-27 06:14 - 000000000 ____D C:\ProgramData\NVIDIA 2022-10-08 16:40 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2022-10-08 16:39 - 2020-11-03 22:02 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software 2022-10-08 16:39 - 2020-11-03 22:02 - 000000000 ____D C:\WINDOWS\system32\Tasks\ASUS 2022-10-08 16:39 - 2019-04-25 08:26 - 000000000 ___DC C:\Users\szyme\AppData\LocalLow\Temp 2022-10-08 16:36 - 2019-04-12 18:04 - 000000000 ___DC C:\Users\szyme\AppData\Local\NVIDIA Corporation 2022-10-08 16:36 - 2019-04-12 18:03 - 000000000 ___DC C:\Users\szyme\AppData\Local\NVIDIA 2022-10-08 16:36 - 2019-03-27 17:54 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2022-10-08 16:36 - 2019-03-27 17:54 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2022-10-08 16:36 - 2016-11-27 06:14 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2022-10-08 16:03 - 2020-11-03 21:54 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2022-10-08 15:55 - 2020-03-22 16:32 - 000000000 ____D C:\Users\szyme\OneDrive\Dokumenty\oCam 2022-10-08 15:06 - 2020-11-03 22:02 - 000004226 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{F6E3DF36-5DDE-4CDE-BAD2-636E8E94CE93} 2022-10-07 21:10 - 2019-04-12 19:57 - 000000000 ___DC C:\Users\szyme\AppData\Local\D3DSCache 2022-10-06 17:40 - 2019-04-12 20:27 - 000002309 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2022-10-04 09:12 - 2020-11-03 22:02 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2022-10-02 16:14 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2022-10-02 16:13 - 2020-11-03 22:02 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update 2022-10-02 16:07 - 2020-03-18 20:08 - 000000000 ____D C:\Program Files (x86)\Steam 2022-10-02 16:07 - 2019-05-04 08:34 - 000000000 ___DC C:\Users\szyme\AppData\Local\CrashDumps 2022-10-01 21:40 - 2019-03-27 17:54 - 000000000 __HDC C:\Intel 2022-10-01 21:40 - 2019-03-27 17:54 - 000000000 ____D C:\Program Files (x86)\Intel 2022-10-01 20:09 - 2019-03-27 17:54 - 000000000 ____D C:\Program Files (x86)\VulkanRT 2022-09-29 22:03 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2022-09-29 22:03 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2022-09-29 22:03 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2022-09-29 22:03 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources 2022-09-29 22:03 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata 2022-09-29 22:03 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup 2022-09-29 22:03 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism 2022-09-29 22:03 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs 2022-09-29 22:03 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning 2022-09-29 22:03 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2022-09-27 18:21 - 2022-02-05 21:49 - 000003894 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2022-09-27 18:21 - 2022-02-05 21:49 - 000003654 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2022-09-22 17:04 - 2017-12-12 20:25 - 007483880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2022-09-22 13:49 - 2019-04-12 18:03 - 000000000 ___DC C:\Users\szyme\AppData\Local\PlaceholderTileLogoFolder 2022-09-22 13:49 - 2019-04-12 18:01 - 000000000 ___DC C:\Users\szyme\AppData\Local\Packages 2022-09-22 13:49 - 2019-03-28 08:15 - 000000000 ____D C:\ProgramData\Packages 2022-09-16 16:37 - 2019-08-06 13:03 - 000001411 ____C C:\Users\szyme\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Przeglądarka Opera.lnk 2022-09-15 19:46 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2022-09-14 21:49 - 2019-04-12 22:01 - 000000000 ____D C:\WINDOWS\system32\MRT 2022-09-14 21:45 - 2019-04-12 22:01 - 141646296 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2022-09-14 17:52 - 2019-05-15 12:47 - 000002138 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2022-09-12 19:29 - 2022-06-10 19:06 - 000000445 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics ==================== Pliki w katalogu głównym wybranych folderów ======== 2020-03-22 16:31 - 2020-03-22 16:31 - 010173136 _____ (hxxp://ohsoft.net/ ) C:\Program Files (x86)\oCam_v495.0.exe 2019-04-12 18:04 - 2020-06-30 18:43 - 000000200 ____C () C:\Users\szyme\AppData\Roaming\sp_data.sys ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) ==================== Koniec FRST.txt ========================