Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 29-05-2023 Uruchomiony przez DINO (administrator) DINO-KOMPUTER (Acer Aspire 5750G) (30-05-2023 18:40:26) Uruchomiony z C:\Users\DINO\Downloads\FRST64.exe Załadowane profile: DINO & UpdatusUser Platforma: Windows JG Seven Service Pack 1 (X64) Język: Polski (Polska) Domyślna przeglądarka nie została wykryta! Tryb startu: Normal ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe (C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Dolby Laboratories, Inc. -> Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe (explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <14> (explorer.exe ->) (F.lux Software LLC -> f.lux Software LLC) C:\Users\DINO\AppData\Local\FluxSoftware\Flux\flux.exe (explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (nvvsvc.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2> (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [194704 2023-01-20] (ESET, spol. s r.o. -> ESET) HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories, Inc. -> Dolby Laboratories Inc.) HKLM-x32\...\Run: [jv16 PowerTools Widget] => C:\Program Files (x86)\jv16 PowerTools\jv16Widget.exe [7071104 2023-03-27] (Macecraft Software -> Macecraft Software) HKLM\...\Policies\Explorer: [NoRemoteRecursiveEvents] 1 HKLM\...\Policies\Explorer: [NoWelcomeScreen] 1 HKLM\SOFTWARE\Policies\Microsoft\MRT: Ograniczenia <==== UWAGA HKLM\Software\Policies\...\system: [AllowBlockingAppsAtShutdown] 0 HKLM\Software\Policies\...\system: [EnableSmartScreen] 0 HKU\S-1-5-21-2661780231-52211297-1186032446-1000\...\Run: [f.lux] => C:\Users\DINO\AppData\Local\FluxSoftware\Flux\flux.exe [1515848 2021-06-18] (F.lux Software LLC -> f.lux Software LLC) HKU\S-1-5-21-2661780231-52211297-1186032446-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [40454048 2023-05-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) HKU\S-1-5-21-2661780231-52211297-1186032446-1000\...\Policies\Explorer: [DisallowCpl] 1 HKU\S-1-5-21-2661780231-52211297-1186032446-1000\...\Policies\Explorer: [HideSCAHealth] 1 HKU\S-1-5-21-2661780231-52211297-1186032446-1000\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1 HKU\S-1-5-21-2661780231-52211297-1186032446-1000\...\Policies\Explorer: [NoInternetOpenWith] 1 HKU\S-1-5-21-2661780231-52211297-1186032446-1000\...\Policies\Explorer: [NoRecentDocsNetHood] 1 HKU\S-1-5-21-2661780231-52211297-1186032446-1000\...\Policies\Explorer: [NoResolveSearch] 1 HKU\S-1-5-21-2661780231-52211297-1186032446-1000\...\Policies\Explorer: [NoSaveSettings] 0 HKU\S-1-5-21-2661780231-52211297-1186032446-1000\...\Policies\Explorer: [NoSMMyPictures] 1 HKU\S-1-5-21-2661780231-52211297-1186032446-1000\...\Policies\Explorer: [NoStartMenuMyMusic] 1 HKU\S-1-5-21-2661780231-52211297-1186032446-1000\...\MountPoints2: F - F:\Autorun.exe HKU\S-1-5-21-2661780231-52211297-1186032446-1001\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe (Brak pliku) HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\109.1.47.186\Installer\chrmstp.exe [2023-02-20] (Brave Software, Inc. -> Brave Software, Inc.) HKLM\Software\...\Winlogon\GPExtensions: [AutorunsDisabled] -> AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [241984 2011-09-08] (NVIDIA Corporation -> NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [203072 2011-09-08] (NVIDIA Corporation -> NVIDIA Corporation) ==================== Zaplanowane zadania (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {03D1AB1E-F6A1-4956-B265-34E125A8DE52} - \Microsoft\Windows\Media Center\ehDRMInit -> Brak pliku <==== UWAGA Task: {092B9E4D-EA67-408B-8E02-52B76A2800BE} - System32\Tasks\CCleanerSkipUAC - DINO => C:\Program Files\CCleaner\CCleaner.exe [34264480 2023-05-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) Task: {15E761B1-B66E-46EF-84F0-8B0B03B086B0} - \Microsoft\Windows\Media Center\ActivateWindowsSearch -> Brak pliku <==== UWAGA Task: {1EC85639-CF85-498C-BF9E-F6A387C87213} - \Microsoft\Windows\Media Center\OCURDiscovery -> Brak pliku <==== UWAGA Task: {250FA825-3088-4E1E-8503-27ED65FF9144} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> Brak pliku <==== UWAGA Task: {28933516-8777-41F3-9463-FBC57181D3E4} - \Microsoft\Windows\Media Center\RegisterSearch -> Brak pliku <==== UWAGA Task: {2929971F-B981-4726-ADE5-6314967D2587} - \Microsoft\Windows Defender\MpIdleTask -> Brak pliku <==== UWAGA Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> Brak pliku <==== UWAGA Task: {309473B4-529C-4980-9C19-F423C2850EE6} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{4E992B9C-D730-40C2-95C3-609CB6EDFBFF} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174968 2023-02-20] (Brave Software, Inc. -> BraveSoftware Inc.) Task: {40E606D0-987D-4701-9C00-87215E90A990} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-05-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) Task: {4861053F-8937-48FD-9612-DEC537817F14} - \Microsoft\Windows\Media Center\OCURActivate -> Brak pliku <==== UWAGA Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - \Microsoft\Windows\Shell\WindowsParentalControlsMigration -> Brak pliku <==== UWAGA Task: {4C803F12-D7C9-47AC-BD04-52300590C9ED} - \Microsoft\Windows\Media Center\PvrRecoveryTask -> Brak pliku <==== UWAGA Task: {529DC13C-5F82-44E9-9DDB-1DA3FA18953B} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> Brak pliku <==== UWAGA Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - \Microsoft\Windows\Shell\WindowsParentalControls -> Brak pliku <==== UWAGA Task: {6CCB8367-CBA1-46FF-9219-9514D29AA608} - \Microsoft\Windows\Media Center\UpdateRecordPath -> Brak pliku <==== UWAGA Task: {7786CC62-3362-4A07-AAF0-B85F9F493527} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> Brak pliku <==== UWAGA Task: {805BFF06-CB49-4743-868B-25F0FE900C75} - System32\Tasks\Opera scheduled Autoupdate 1655208720 => C:\Users\DINO\AppData\Local\Programs\Opera\launcher.exe [2635160 2023-04-27] (Opera Norway AS -> Opera Software) Task: {97885C45-F289-48AC-9409-BA8F43988809} - \Microsoft\Windows\Media Center\DispatchRecoveryTasks -> Brak pliku <==== UWAGA Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - \Microsoft\Windows\SystemRestore\SR -> Brak pliku <==== UWAGA Task: {9BE4829D-A70A-41E5-8CD1-7C705ADE55CC} - \Microsoft\Windows\Media Center\PvrScheduleTask -> Brak pliku <==== UWAGA Task: {A7CB1038-24F6-4B51-B41F-C8BACE461A1A} - \Microsoft\Windows\Media Center\ReindexSearchRoot -> Brak pliku <==== UWAGA Task: {AA083FB6-A8D4-4BDA-B124-9300B6EEE883} - \Microsoft\Windows\Media Center\PBDADiscoveryW1 -> Brak pliku <==== UWAGA Task: {AB4A6C42-F37E-42FE-9791-AD8DCE393185} - \Microsoft\Windows\Media Center\PBDADiscovery -> Brak pliku <==== UWAGA Task: {B13AC85A-3537-40E5-8EAB-51BE0F23E87B} - \Microsoft\Windows\Media Center\ConfigureInternetTimeService -> Brak pliku <==== UWAGA Task: {B8143406-27D1-4AD7-9B7C-A8B98EB990AB} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-05-12] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "62d2369e-302b-4cf2-8ff5-3d45be9f8ef4" --version "6.12.10490" --silent Task: {BE67175E-3EC6-4847-9FBC-A239FDA4D02C} - \Microsoft\Windows Defender\MP Scheduled Scan -> Brak pliku <==== UWAGA Task: {C003F51E-1185-4D61-AF9A-929399D20FE8} - \Microsoft\Windows\Media Center\RecordingRestart -> Brak pliku <==== UWAGA Task: {C4B7B24E-39C0-4FFA-93BD-A7DA46262E07} - System32\Tasks\Opera scheduled assistant Autoupdate 1655208720 => C:\Users\DINO\AppData\Local\Programs\Opera\launcher.exe [2635160 2023-04-27] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\DINO\AppData\Local\Programs\Opera\assistant" $(Arg0) Task: {C7A603A6-8379-4921-B2C2-7A31006C2160} - \Microsoft\Windows\Media Center\mcupdate -> Brak pliku <==== UWAGA Task: {CB3D64BF-C0C9-45FF-BFB0-FF1A8F680186} - \Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask -> Brak pliku <==== UWAGA Task: {D696E509-372D-47F6-86DB-2761BE3C052F} - \Microsoft\Windows\Media Center\PBDADiscoveryW2 -> Brak pliku <==== UWAGA Task: {DA41DE71-8431-42FB-9DB0-EB64A961DEAD} - \Microsoft\Windows\Maintenance\WinSAT -> Brak pliku <==== UWAGA Task: {DAC0F199-3DC9-46C2-A3F5-E24F73ED9244} - \Microsoft\Windows\Media Center\InstallPlayReady -> Brak pliku <==== UWAGA Task: {DFE4B82C-9CA2-44F4-9702-6564B7159632} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{4D1AF814-2BC0-42CC-852B-2BF35BA02500} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174968 2023-02-20] (Brave Software, Inc. -> BraveSoftware Inc.) Task: {EB02381F-D652-4B1C-894A-712498C62C51} - \Microsoft\Windows\MUI\LPRemove -> Brak pliku <==== UWAGA Task: {F5E37E91-5842-488B-BA5A-15389FA4357F} - \Microsoft\Windows\Media Center\PeriodicScanRetry -> Brak pliku <==== UWAGA (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.211.165 Tcpip\..\Interfaces\{8AED98AE-837E-4E63-BB02-8BD04FFBA48A}: [DhcpNameServer] 192.168.211.165 FireFox: ======== FF DefaultProfile: shkzytsv.default FF ProfilePath: C:\Users\DINO\AppData\Roaming\Mozilla\Firefox\Profiles\shkzytsv.default [2022-05-12] FF ProfilePath: C:\Users\DINO\AppData\Roaming\Mozilla\Firefox\Profiles\ml7jy084.default-release [2023-05-27] FF Homepage: Mozilla\Firefox\Profiles\ml7jy084.default-release -> hxxps://www.google.pl/ FF Extension: (Brak nazwy) - C:\Users\DINO\AppData\Roaming\Mozilla\Firefox\Profiles\ml7jy084.default-release\Extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi [2022-11-04] [Brak podpisu cyfrowego] FF Extension: (Brak nazwy) - C:\Users\DINO\AppData\Roaming\Mozilla\Firefox\Profiles\ml7jy084.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2022-12-06] [Brak podpisu cyfrowego] Opera: ======= OPR Profile: C:\Users\DINO\AppData\Roaming\Opera Software\Opera Stable [2023-05-30] OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding} OPR Extension: (Rich Hints Agent) - C:\Users\DINO\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2023-03-09] OPR Extension: (Opera Wallet) - C:\Users\DINO\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2023-05-20] OPR Extension: (Amazon Assistant Promotion) - C:\Users\DINO\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2022-06-14] OPR Extension: (Adblock Plus - darmowy adblocker) - C:\Users\DINO\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2023-04-28] Brave: ======= BRA Profile: C:\Users\DINO\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2023-05-30] BRA Extension: (Brave Local Data Files Updater) - C:\Users\DINO\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2023-05-28] BRA Extension: (Brave NTP background images) - C:\Users\DINO\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2023-02-20] BRA Extension: (Wallet Data Files Updater) - C:\Users\DINO\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2023-05-29] BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\DINO\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2023-05-14] BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\DINO\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2023-02-20] BRA Extension: (Brave NTP sponsored images) - C:\Users\DINO\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodhafecfemgejckecbnmpobnhmoaoag [2023-05-30] BRA Extension: (Brave Ad Block Updater (Default (plaintext))) - C:\Users\DINO\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2023-05-29] BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\DINO\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2023-03-19] BRA Extension: (Brave Ad Block Updater (Oficjalne Polskie Filtry do AdBlocka, uBlocka Origin i AdGuarda (plaintext))) - C:\Users\DINO\AppData\Local\BraveSoftware\Brave-Browser\User Data\ngcohbdfildjnmfnicgdipopmlhdcokg [2023-05-08] BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\DINO\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-05-28] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174968 2023-02-20] (Brave Software, Inc. -> BraveSoftware Inc.) S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174968 2023-02-20] (Brave Software, Inc. -> BraveSoftware Inc.) R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [3549872 2023-01-20] (ESET, spol. s r.o. -> ESET) R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [3549872 2023-01-20] (ESET, spol. s r.o. -> ESET) S4 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2022-05-13] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) S4 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2022-05-13] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) R2 Themes; C:\Windows\system32\themeservice.dll [44544 2021-06-04] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 BraveElevationService; "C:\Program Files\BraveSoftware\Brave-Browser\Application\109.1.47.186\elevation_service.exe" [X] ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 athr; C:\Windows\System32\DRIVERS\athrx.sys [2755584 2011-07-20] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.) R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [198416 2023-01-20] (ESET, spol. s r.o. -> ESET) R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [119904 2023-01-20] (ESET, spol. s r.o. -> ESET) R1 edevmonm; C:\Windows\System32\DRIVERS\edevmonm.sys [120928 2023-01-20] (ESET, spol. s r.o. -> ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [237208 2023-01-20] (ESET, spol. s r.o. -> ESET) R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [55392 2023-01-20] (ESET, spol. s r.o. -> ESET) R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [81696 2023-01-20] (ESET, spol. s r.o. -> ESET) R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [66768 2023-01-20] (ESET, spol. s r.o. -> ESET) R1 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [122504 2023-01-20] (ESET, spol. s r.o. -> ESET) S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [171768 2022-05-13] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) S3 tap_ovpnconnect; C:\Windows\System32\DRIVERS\tap_ovpnconnect.sys [30720 2022-03-17] (The OpenVPN Project) [Brak podpisu cyfrowego] S3 ALSysIO; \??\C:\Users\DINO\AppData\Local\Temp\ALSysIO64.sys [X] <==== UWAGA U4 CertPropSvc; Brak ImagePath U4 DPS; Brak ImagePath U2 edgeupdate; Brak ImagePath U3 edgeupdatem; Brak ImagePath U4 ehRecvr; Brak ImagePath U4 ehSched; Brak ImagePath U4 gupdate; Brak ImagePath U4 gupdatem; Brak ImagePath U4 JavaQuickStarterService; Brak ImagePath U4 Mcx2Svc; Brak ImagePath U3 MicrosoftEdgeElevationService; Brak ImagePath U4 MozillaMaintenance; Brak ImagePath U4 ose; Brak ImagePath U2 osppsvc; Brak ImagePath U4 RemoteRegistry; Brak ImagePath U4 SCardSvr; Brak ImagePath S3 scfilter; System32\DRIVERS\scfilter.sys [X] U4 SCPolicySvc; Brak ImagePath U3 TBS; Brak ImagePath U4 WdiServiceHost; Brak ImagePath U4 WdiSystemHost; Brak ImagePath U3 WMPNetworkSvc; Brak ImagePath U4 WPCSvc; Brak ImagePath U2 wscsvc; Brak ImagePath U4 wuauserv; Brak ImagePath ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) (Wszystkie) ========= (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2023-05-30 18:33 - 2023-05-30 18:41 - 000019124 _____ C:\Users\DINO\Downloads\FRST.txt 2023-05-30 18:28 - 2023-05-30 18:40 - 000000000 ____D C:\FRST 2023-05-30 18:05 - 2023-05-30 18:05 - 002383360 _____ (Farbar) C:\Users\DINO\Downloads\FRST64.exe 2023-05-29 21:56 - 2023-05-29 22:06 - 000000000 ____D C:\ProgramData\RogueKiller 2023-05-13 12:14 - 2023-05-13 12:14 - 000001048 _____ C:\Users\DINO\Desktop\RealeraDX.lnk 2023-05-12 19:51 - 2023-05-12 19:51 - 000000000 ____D C:\Users\DINO\Downloads\RealeraRelease_v1 2023-05-09 21:38 - 2023-05-09 21:40 - 006140486 _____ C:\Users\DINO\Downloads\P. Stutz - Metody. Zmień swoje problemy w odwagę, wiarę i kreatywność.pdf ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2023-05-30 18:22 - 2009-07-14 06:45 - 000035952 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2023-05-30 18:22 - 2009-07-14 06:45 - 000035952 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2023-05-30 17:59 - 2022-08-12 10:59 - 000000000 ____D C:\Program Files\CCleaner 2023-05-29 22:00 - 2011-04-12 15:21 - 000739932 _____ C:\Windows\system32\perfh015.dat 2023-05-29 22:00 - 2011-04-12 15:21 - 000155474 _____ C:\Windows\system32\perfc015.dat 2023-05-29 22:00 - 2009-07-14 07:13 - 001668226 _____ C:\Windows\system32\PerfStringBackup.INI 2023-05-29 22:00 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf 2023-05-29 21:54 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2023-05-29 21:46 - 2022-05-12 17:35 - 000001082 _____ C:\Users\DINO\Desktop\Nowy dokument tekstowy.txt 2023-05-28 14:53 - 2022-10-15 12:28 - 000000760 _____ C:\Windows\Tasks\CCleanerCrashReporting.job 2023-05-22 15:36 - 2022-08-22 01:27 - 000004128 _____ C:\Windows\system32\Tasks\CCleaner Update 2023-05-21 14:53 - 2022-10-15 12:28 - 000003360 _____ C:\Windows\system32\Tasks\CCleanerCrashReporting 2023-05-21 13:11 - 2022-09-11 18:07 - 000000000 ____D C:\Users\DINO\AppData\Roaming\TS3Client 2023-05-20 22:07 - 2022-06-27 14:21 - 000000000 ____D C:\Users\DINO\AppData\Roaming\vlc 2023-05-20 21:16 - 2022-08-17 16:19 - 000000000 ____D C:\Users\DINO\AppData\Roaming\discord 2023-05-20 21:07 - 2022-08-17 16:18 - 000000000 ____D C:\Users\DINO\AppData\Local\Discord 2023-05-15 02:21 - 2022-07-06 22:50 - 000001089 _____ C:\Users\DINO\Desktop\Stronki z filmami.txt 2023-05-07 21:46 - 2022-06-17 00:18 - 000000000 ____D C:\Users\DINO\AppData\Local\CrashDumps 2023-05-06 15:46 - 2022-08-17 16:19 - 000002154 _____ C:\Users\DINO\Desktop\Discord.lnk 2023-05-02 14:29 - 2022-06-14 14:12 - 000004122 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1655208720 ==================== Pliki w katalogu głównym wybranych folderów ======== 2022-08-11 14:39 - 2022-08-11 14:39 - 000007605 _____ () C:\Users\DINO\AppData\Local\Resmon.ResmonCfg ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) testsigning: ==> Ustawiony "Tryb testu". Sprawdź obecność niepodpisanego sterownika <==== UWAGA LastRegBack: 2023-05-24 22:17 ==================== Koniec FRST.txt ========================