Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 09-12-2020
Uruchomiony przez Mirek (administrator)  MIREK-KOMPUTER (ASUSTeK Computer Inc. K72Jr) (10-12-2020 19:48:13)
Uruchomiony z C:\Users\Mirek\Desktop
Załadowane profile: Mirek
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska)
Domyślna przeglądarka: Chrome
Tryb startu: Normal

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(@ByELDI -> @ByELDI) [Brak podpisu cyfrowego] C:\Program Files\KMSpico\Service_KMS.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Opera Software AS -> Opera Software) C:\Program Files (x86)\Opera\72.0.3815.400\opera_autoupdate.exe <4>
(Opera Software AS -> Opera Software) C:\Program Files (x86)\Opera\launcher.exe
(Piriform Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Program Files (x86)\Opera\assistant\browser_assistant.exe [3154456 2020-11-25] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-3946908048-3976235628-1492576225-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9292504 2016-12-21] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-3946908048-3976235628-1492576225-1000\...\MountPoints2: {e37437a8-be34-11e6-8e2e-20cf306baa2c} - E:\autorun.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-08-17] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\87.0.4280.88\Installer\chrmstp.exe [2020-12-02] (Google LLC -> Google LLC)
Startup: C:\Users\Mirek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wysyłanie do programu OneNote.lnk [2018-01-24]
ShortcutTarget: Wysyłanie do programu OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)

==================== Zaplanowane zadania (filtrowane) ============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {0791E754-B3BB-41C5-A500-2D5C84DD89A4} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2177600 2019-10-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {082FB8CF-49F2-4ACF-8E15-C3324BF057C0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [7173848 2016-12-21] (Piriform Ltd -> Piriform Ltd)
Task: {1B63CEED-BB95-497B-8905-15D24D3BE0A0} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27295856 2019-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {20B6625F-7FD8-452B-AE9C-24D50FD1C40C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [152216 2016-10-28] (Google Inc -> Google Inc.)
Task: {3EFDA312-3993-4E2A-B653-3E813AB59A6F} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_28_0_0_161_pepper.exe
Task: {49CE676C-6BAD-4FF9-AD8C-2F15FB236340} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\Overseer.exe [1741416 2020-09-17] (Avast Software s.r.o. -> Avast Software)
Task: {83E3A115-ACFA-4B54-9C2B-13F95EE7C622} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [152216 2016-10-28] (Google Inc -> Google Inc.)
Task: {8997B6DB-FC4E-4148-A611-566640A03395} - System32\Tasks\Opera scheduled assistant Autoupdate 1582725894 => C:\Program Files (x86)\Opera\launcher.exe [1529880 2020-11-25] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Program Files (x86)\Opera\assistant" $(Arg0)
Task: {A43148C4-2798-4244-AB18-0432DCF813E6} - System32\Tasks\{913FFABF-B847-40A7-9A85-A0392B0033BE} => C:\Windows\system32\pcalua.exe -a C:\Users\Mirek\AppData\Local\Temp\7zO4F364B56\setup.exe -d C:\Users\Mirek\AppData\Local\Temp\7zO4F364B56\ <==== UWAGA
Task: {A93EF25F-9D37-4D1E-832C-886CACD4EC4D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27295856 2019-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {AD2E53C3-C4FC-4932-994C-B5359F993E6F} - System32\Tasks\Opera scheduled Autoupdate 1471373984 => C:\Program Files (x86)\Opera\launcher.exe [1529880 2020-11-25] (Opera Software AS -> Opera Software)
Task: {BCCD94E7-44D4-4716-9F71-A50D2CFBD6F7} - System32\Tasks\{B65F59F6-BE2B-4394-B4FC-2ED3EC1F484C} => C:\Windows\system32\pcalua.exe -a C:\Users\Mirek\AppData\Local\Temp\7zO4115FA7A\setup.exe -d C:\Users\Mirek\AppData\Local\Temp\7zO4115FA7A\ <==== UWAGA
Task: {E28E3E32-2CE6-4E01-B5BC-81AC3AF669DB} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2177600 2019-10-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {EED398F0-25A2-4AF7-86AA-6F3E5E571719} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [162864 2019-10-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {FE8A7404-5636-429C-B6A6-EDE23B9BE7E4} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [162864 2019-10-17] (Microsoft Corporation -> Microsoft Corporation)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)


==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{08CFCC45-31E4-495B-8505-B8044726ECC3}: [DhcpNameServer] 192.168.43.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_205.dll [2017-11-04] (Adobe Systems Incorporated -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-06-30] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_205.dll [2017-11-04] (Adobe Systems Incorporated -> )
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-04-06] (Microsoft Corporation -> Microsoft Corporation)

Chrome: 
=======
CHR Profile: C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default [2020-12-10]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Extension: (Prezentacje) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-16]
CHR Extension: (Dokumenty) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-16]
CHR Extension: (Dysk Google) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-24]
CHR Extension: (YouTube) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-29]
CHR Extension: (Arkusze) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-11-18]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-03]
CHR Extension: (Gmail) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-11-20]

Opera: 
=======
OPR Extension: (Rich Hints Agent) - C:\Users\Mirek\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2020-10-22]

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11642472 2019-10-14] (Microsoft Corporation -> Microsoft Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2020-12-10] (Malwarebytes Inc -> Malwarebytes)
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [745664 2016-01-11] (@ByELDI -> @ByELDI) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Windows -> Microsoft Corporation)

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 amdkmdag; C:\Windows\System32\DRIVERS\atipmdag.sys [6233088 2010-01-22] (Microsoft Windows Hardware Compatibility Publisher -> ATI Technologies Inc.)
R3 athr; C:\Windows\System32\DRIVERS\athrx.sys [2753536 2011-06-27] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [153312 2020-12-10] (Malwarebytes Corporation -> Malwarebytes)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [57344 2009-06-10] (Microsoft Windows -> Atheros Communications, Inc.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [220160 2020-12-10] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [197792 2020-12-10] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [77496 2020-12-10] (Malwarebytes Inc -> Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248968 2020-12-10] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [127088 2020-12-10] (Malwarebytes Inc -> Malwarebytes)
U0 aswVmm; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2020-12-10 19:50 - 2020-12-10 19:50 - 000000000 ____D C:\Users\Mirek\AppData\LocalLow\IGDump
2020-12-10 19:48 - 2020-12-10 19:50 - 000012498 _____ C:\Users\Mirek\Desktop\FRST.txt
2020-12-10 19:41 - 2020-12-10 19:41 - 000197792 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2020-12-10 19:41 - 2020-12-10 19:41 - 000127088 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2020-12-10 19:41 - 2020-12-10 19:41 - 000077496 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2020-12-10 19:41 - 2020-12-10 19:41 - 000001644 _____ C:\Users\Mirek\Desktop\AdwCleaner[C00].txt
2020-12-10 19:38 - 2020-12-10 19:40 - 000000000 ____D C:\AdwCleaner
2020-12-10 19:36 - 2020-12-10 19:38 - 008447152 _____ (Malwarebytes) C:\Users\Mirek\Desktop\adwcleaner_8.0.8.exe
2020-12-10 19:27 - 2020-12-10 19:27 - 000003377 _____ C:\Users\Mirek\Desktop\raport ze skanowania.txt
2020-12-10 19:26 - 2020-12-10 19:26 - 000003244 _____ C:\Users\Mirek\Desktop\wynik skanowania.txt
2020-12-10 19:12 - 2020-12-10 19:12 - 000000000 ____D C:\Users\Mirek\AppData\Local\CrashDumps
2020-12-10 19:05 - 2020-12-10 19:05 - 000000000 ____D C:\Users\Mirek\AppData\Local\mbam
2020-12-10 19:03 - 2020-12-10 19:03 - 000248968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2020-12-10 19:03 - 2020-12-10 19:03 - 000220160 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2020-12-10 19:03 - 2020-12-10 19:03 - 000001960 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-12-10 19:03 - 2020-12-10 19:03 - 000001948 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-12-10 19:03 - 2020-12-10 19:03 - 000001948 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2020-12-10 19:03 - 2020-12-10 19:02 - 000153312 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2020-12-10 19:02 - 2020-12-10 19:02 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-12-10 19:01 - 2020-12-10 19:12 - 064333800 _____ (Malwarebytes ) C:\Users\Mirek\Desktop\mb3-setup-1878.1878-3.8.3.2965.exe
2020-12-10 18:36 - 2020-12-10 18:36 - 000000000 ____D C:\Program Files\Malwarebytes
2020-12-10 18:33 - 2020-12-10 18:35 - 002040904 _____ (Malwarebytes) C:\Users\Mirek\Desktop\MBSetup-076981.076981-Consumer.exe
2020-12-10 16:30 - 2020-12-10 19:48 - 000000000 ____D C:\FRST
2020-12-10 16:28 - 2020-12-10 16:29 - 002288640 _____ (Farbar) C:\Users\Mirek\Desktop\FRST64.exe
2020-12-10 16:25 - 2020-12-10 16:25 - 000040538 _____ C:\Users\Mirek\Desktop\OTL.Txt
2020-12-10 16:24 - 2020-12-10 16:24 - 000037232 _____ C:\Users\Mirek\Desktop\Extras.Txt
2020-12-10 16:11 - 2020-12-10 16:11 - 000602112 _____ (OldTimer Tools) C:\Users\Mirek\Desktop\OTL.exe
2020-12-07 13:07 - 2020-12-07 13:07 - 000586896 _____ C:\Users\Mirek\Downloads\Program_Klub_2021.pdf
2020-11-28 16:22 - 2020-11-28 16:22 - 000014520 _____ C:\Users\Mirek\Desktop\junior.pdf
2020-11-28 16:22 - 2020-11-28 16:22 - 000010756 _____ C:\Users\Mirek\Desktop\trampkarz.pdf
2020-11-18 15:39 - 2020-11-18 15:39 - 000004850 _____ C:\Users\Mirek\Desktop\na co dzien.m3u

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2020-12-10 19:46 - 2009-07-14 18:55 - 000752400 _____ C:\Windows\system32\perfh015.dat
2020-12-10 19:46 - 2009-07-14 18:55 - 000159714 _____ C:\Windows\system32\perfc015.dat
2020-12-10 19:46 - 2009-07-14 06:13 - 001694026 _____ C:\Windows\system32\PerfStringBackup.INI
2020-12-10 19:46 - 2009-07-14 05:45 - 000016064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-12-10 19:46 - 2009-07-14 05:45 - 000016064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-12-10 19:46 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2020-12-10 19:41 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-12-10 19:26 - 2016-08-16 21:07 - 000000000 ____D C:\Program Files\KMSpico
2020-12-10 16:55 - 2019-12-10 00:31 - 000000000 ____D C:\Users\Mirek\Desktop\sez 19-20
2020-12-10 16:55 - 2018-12-06 22:17 - 000000000 ____D C:\Users\Mirek\Desktop\sez 18-19
2020-12-10 15:36 - 2019-09-12 14:31 - 000000000 ____D C:\Users\Mirek\Desktop\odcinki 19-20
2020-12-08 18:28 - 2016-05-15 13:28 - 000000000 ____D C:\Users\Mirek\Desktop\eM
2020-12-07 19:10 - 2016-10-06 09:16 - 000000000 ____D C:\Users\Mirek\Desktop\czesto
2020-12-07 19:08 - 2017-12-01 00:36 - 000000000 ____D C:\Users\Mirek\Desktop\sez 17-18
2020-12-05 18:25 - 2016-10-07 08:53 - 000000000 ____D C:\Users\Mirek\Desktop\sezon 16-17
2020-12-05 18:24 - 2018-12-06 22:17 - 000000000 ____D C:\Users\Mirek\Desktop\nowe sez 18-19
2020-12-04 23:23 - 2020-01-07 19:45 - 000000000 ____D C:\Users\Mirek\Desktop\program klub
2020-12-04 21:44 - 2016-10-28 17:03 - 000003482 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-12-04 21:44 - 2016-10-28 17:03 - 000003354 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-12-03 17:13 - 2020-09-06 14:09 - 000000000 ____D C:\Users\Mirek\Desktop\odcinki 20-21
2020-12-02 23:56 - 2016-10-28 17:03 - 000002230 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-12-02 23:56 - 2016-10-28 17:03 - 000002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-12-02 23:56 - 2016-10-28 17:03 - 000002189 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2020-12-02 23:43 - 2016-08-16 19:46 - 000000000 ____D C:\Program Files (x86)\Opera
2020-12-01 22:50 - 2016-08-16 19:59 - 000003900 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1471373984
2020-11-28 10:27 - 2020-02-26 15:04 - 000004062 _____ C:\Windows\system32\Tasks\Opera scheduled assistant Autoupdate 1582725894
2020-11-24 13:47 - 2019-12-30 09:51 - 000000000 ____D C:\Users\Mirek\Desktop\nowe sez 19-20
2020-11-21 07:24 - 2016-10-06 09:03 - 000000000 ____D C:\Users\Mirek\Desktop\czesto 3
2020-11-20 15:04 - 2016-10-06 10:51 - 000000000 ____D C:\Users\Mirek\Desktop\często 6
2020-11-20 15:00 - 2016-10-06 10:43 - 000000000 ____D C:\Users\Mirek\Desktop\rzadko
2020-11-20 14:55 - 2018-10-31 10:41 - 000000000 ____D C:\Users\Mirek\Desktop\mirek aranzacje
2020-11-20 14:55 - 2017-02-17 11:20 - 000000000 ____D C:\Users\Mirek\Desktop\Ara
2020-11-20 14:55 - 2017-02-17 08:52 - 000000000 ____D C:\Users\Mirek\Desktop\Aranżacje
2020-11-20 14:54 - 2017-02-17 11:16 - 000000000 ____D C:\Users\Mirek\Desktop\Aranże
2020-11-20 14:54 - 2017-02-17 09:07 - 000000000 ____D C:\Users\Mirek\Desktop\ars
2020-11-18 14:44 - 2016-10-06 10:20 - 000000000 ____D C:\Users\Mirek\Desktop\często 5
2020-11-12 17:15 - 2018-03-19 17:33 - 000000000 ____D C:\Users\Mirek\Desktop\Sędzia
2020-11-12 17:14 - 2018-08-05 20:04 - 000000000 ____D C:\Users\Mirek\Desktop\TERMINARZE

==================== Pliki w katalogu głównym wybranych folderów ========

2019-02-19 13:25 - 2019-02-19 13:25 - 038966928 _____ (Adobe Systems Incorporated) C:\Program Files (x86)\AdbeRdr11000_pl_PL.exe
2017-01-25 06:59 - 2017-01-25 07:00 - 000033134 _____ () C:\Users\Mirek\AppData\Roaming\UserTile.png

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)


==================== BCD ================================

Mened�er rozruchu systemu Windows
---------------------------------
Identyfikator              {bootmgr}
device                  partition=\Device\HarddiskVolume1
description             Windows Boot Manager
locale                  pl-PL
inherit                 {globalsettings}
default                 {current}
resumeobject            {40abfdad-63e9-11e6-b0ff-c3ef8bcee8b8}
displayorder            {current}
toolsdisplayorder       {memdiag}
timeout                 30

Modu� �aduj�cy rozruchu systemu Windows
---------------------------------------
Identyfikator              {current}
device                  partition=C:
path                    \Windows\system32\winload.exe
description             Windows 7
locale                  pl-PL
inherit                 {bootloadersettings}
recoverysequence        {40abfdaf-63e9-11e6-b0ff-c3ef8bcee8b8}
recoveryenabled         Yes
osdevice                partition=C:
systemroot              \Windows
resumeobject            {40abfdad-63e9-11e6-b0ff-c3ef8bcee8b8}
nx                      OptIn

Modu� �aduj�cy rozruchu systemu Windows
---------------------------------------
Identyfikator              {40abfdaf-63e9-11e6-b0ff-c3ef8bcee8b8}
device                  ramdisk=[C:]\Recovery\40abfdaf-63e9-11e6-b0ff-c3ef8bcee8b8\Winre.wim,{40abfdb0-63e9-11e6-b0ff-c3ef8bcee8b8}
path                    \windows\system32\winload.exe
description             Windows Recovery Environment
inherit                 {bootloadersettings}
osdevice                ramdisk=[C:]\Recovery\40abfdaf-63e9-11e6-b0ff-c3ef8bcee8b8\Winre.wim,{40abfdb0-63e9-11e6-b0ff-c3ef8bcee8b8}
systemroot              \windows
nx                      OptIn
winpe                   Yes

Wznawianie ze stanu hibernacji
------------------------------
Identyfikator              {40abfdad-63e9-11e6-b0ff-c3ef8bcee8b8}
device                  partition=C:
path                    \Windows\system32\winresume.exe
description             Windows Resume Application
locale                  pl-PL
inherit                 {resumeloadersettings}
filedevice              partition=C:
filepath                \hiberfil.sys
debugoptionenabled      No

Modu� testuj�cy pami�� systemu Windows
--------------------------------------
Identyfikator              {memdiag}
device                  partition=\Device\HarddiskVolume1
path                    \boot\memtest.exe
description             Diagnostyka pami�ci systemu Windows
locale                  pl-PL
inherit                 {globalsettings}
badmemoryaccess         Yes

Ustawienia us�ug EMS
--------------------
Identyfikator              {emssettings}
bootems                 Yes

Ustawienia debugera
-------------------
Identyfikator              {dbgsettings}
debugtype               Serial
debugport               1
baudrate                115200

Uszkodzenia pami�ci RAM
-----------------------
Identyfikator              {badmemory}

Ustawienia globalne
-------------------
Identyfikator              {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}

Ustawienia modu�u �aduj�cego rozruchu
-------------------------------------
Identyfikator              {bootloadersettings}
inherit                 {globalsettings}
                        {hypervisorsettings}

Ustawienia funkcji hypervisor
-----------------------------
Identyfikator              {hypervisorsettings}
hypervisordebugtype     Serial
hypervisordebugport     1
hypervisorbaudrate      115200

Ustawienia modu�u �aduj�cego wznawiania
---------------------------------------
Identyfikator              {resumeloadersettings}
inherit                 {globalsettings}

Opcje urz�dzenia
----------------
Identyfikator              {40abfdb0-63e9-11e6-b0ff-c3ef8bcee8b8}
description             Ramdisk Options
ramdisksdidevice        partition=C:
ramdisksdipath          \Recovery\40abfdaf-63e9-11e6-b0ff-c3ef8bcee8b8\boot.sdi


LastRegBack: 2016-09-08 15:03
==================== Koniec  FRST.txt ========================