Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 15-08-2023 01
Uruchomiony przez przyb (administrator)  DESKTOP-1MJT6FO (15-08-2023 17:21:51)
Uruchomiony z C:\Users\przyb\Downloads\FRST64.exe
Załadowane profile: przyb
Platforma: Microsoft Windows 11 Home Wersja 22H2 22621.2134 (X64) Język: Polski (Polska)
Domyślna przeglądarka: FF
Tryb startu: Normal

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.217.834.0_x64__zpdnekdrzrea0\Spotify.exe <6>
(C:\Program Files (x86)\Panda Security\Panda Security Protection\pselamsvc.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSNWSC.exe
(C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe
(C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe ->) (Electronic Arts, Inc. -> The Qt Company Ltd.) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\QtWebEngineProcess.exe <2>
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Users\przyb\Downloads\adwcleaner.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.13900.0.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\115.0.1901.203\msedgewebview2.exe <6>
(C:\ProgramData\Wargaming.net\GameCenter\wgc.exe ->) (Wargaming Group Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\dlls\wgc_renderer_host.exe <3>
(C:\ProgramData\Wargaming.net\GameCenter\wgc.exe ->) (Wargaming.net Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\WargamingErrorMonitor.exe
(explorer.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe
(explorer.exe ->) (The qBittorrent Project) [Brak podpisu cyfrowego] C:\Program Files\qBittorrent\qbittorrent.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <12>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <15>
(Panda Security S.L. -> Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(services.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe <2>
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23070.1004-0\MsMpEng.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdig.inf_amd64_c885f29e168e777a\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Panda Security S.L. -> Panda Security S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\pselamsvc.exe
(services.exe ->) (Panda Security S.L. -> Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(services.exe ->) (Panda Security S.L. -> Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
(services.exe ->) (Panda Security S.L. -> Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2331.4.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> ) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.217.834.0_x64__zpdnekdrzrea0\XboxGameBarSpotify.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.GamingServices_13.78.12002.0_x64__8wekyb3d8bbwe\tcui-app.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2307.1001.5.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Windows -> ) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.13900.0.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(Wargaming Group Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [186984 2022-11-02] (Panda Security S.L. -> Panda Security, S.L.)
HKLM\...\Policies\Explorer: [NoThumbnailCache] 0
HKLM\...\Policies\Explorer: [DisableThumbnailCache] 0
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Ograniczenia <==== UWAGA
HKU\S-1-5-21-559121952-1472471594-2593221854-1001\...\Run: [MicrosoftEdgeAutoLaunch_A2995B52FBFC27EA3F81CFC4FCD45E47] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4088272 2023-08-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-559121952-1472471594-2593221854-1001\...\Policies\Explorer: [NoThumbnailCache] 0
HKU\S-1-5-21-559121952-1472471594-2593221854-1001\...\Policies\Explorer: [DisableThumbnailCache] 0
HKLM\Software\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
GroupPolicy: Ograniczenia ? <==== UWAGA
Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA

==================== Zaplanowane zadania (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {063BC6B1-0377-4E1D-A096-450AAFE7A9D4} - Brak ścieżki do pliku. <==== UWAGA
Task: {08626D54-34D9-4558-BB78-CB2BDF382DA8} - Brak ścieżki do pliku. <==== UWAGA
Task: {0D4BE8DF-7A6C-4556-BFF6-83F41962C96A} - Brak ścieżki do pliku. <==== UWAGA
Task: {52E63B03-8926-4821-B1AE-7B665C3E74F1} - Brak ścieżki do pliku. <==== UWAGA
Task: {53E71A47-3754-4B31-A51A-7086B2ADEB45} - Brak ścieżki do pliku. <==== UWAGA
Task: {618FDDCC-AD03-419B-ACDB-EDBF3E6C1FC5} - \Microsoft\Windows\Windows Media Sharing\UpdateLibrary -> Brak pliku <==== UWAGA
Task: {836E2477-AAAB-400B-AC1B-F956C3211F75} - Brak ścieżki do pliku. <==== UWAGA
Task: {87BF85F4-2CE1-4160-96EA-52F554AA28A2} - \Microsoft\Windows\Autochk\Proxy -> Brak pliku <==== UWAGA
Task: {93ED6CE0-4ED9-424D-87F7-B9A1E24C9FFA} - Brak ścieżki do pliku. <==== UWAGA
Task: {BD30B767-86C3-4867-8DDE-468207782635} - Brak ścieżki do pliku. <==== UWAGA
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - Brak ścieżki do pliku. <==== UWAGA
Task: {E9F64890-A855-4903-8FDA-4A721F46E431} - Brak ścieżki do pliku. <==== UWAGA
Task: {EAA8C55C-89FB-450A-ACB9-63FA08F9CDBB} - Brak ścieżki do pliku. <==== UWAGA
Task: {EDABA638-9012-43E9-8C24-F71E1389A8AB} - Brak ścieżki do pliku. <==== UWAGA
Task: {F0DA4499-68E7-487C-A7B6-9529A9724755} - Brak ścieżki do pliku. <==== UWAGA
Task: {6431AAFE-91D9-4EC3-8544-C12503A3C475} - System32\Tasks\Microsoft\Windows\Application Experience\MareBackup => Command(1): %windir%\system32\compattelrunner.exe -> -m:aeinv.dll -f:UpdateSoftwareInventoryW invsvc
Task: {6431AAFE-91D9-4EC3-8544-C12503A3C475} - System32\Tasks\Microsoft\Windows\Application Experience\MareBackup => Command(2): %windir%\system32\compattelrunner.exe -> -m:appraiser.dll -f:DoScheduledTelemetryRun
Task: {6431AAFE-91D9-4EC3-8544-C12503A3C475} - System32\Tasks\Microsoft\Windows\Application Experience\MareBackup => Command(3): %windir%\system32\compattelrunner.exe -> -m:aemarebackup.dll -f:BackupMareData
Task: {4C794A4A-0D01-40EC-A46E-4A9B0894BB93} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [686496 2023-08-08] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{822c49a7-4c0d-42f7-a9ed-f554626da83f}: [DhcpNameServer] 192.168.1.1

Edge: 
=======
Edge Profile: C:\Users\przyb\AppData\Local\Microsoft\Edge\User Data\Default [2023-08-15]
Edge HomePage: Default -> bing.com
Edge DefaultSearchURL: Default -> hxxps://www.bing.com/search?PC=U523&q={searchTerms}
Edge Extension: (Norton Safe Web) - C:\Users\przyb\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bdaafgjhhjkdplpffldcncdignokfkbo [2023-07-24]
Edge Extension: (Microsoft Rewards) - C:\Users\przyb\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bnplfnhcidhhdapmblniehfaaompjlck [2023-07-17]
Edge Extension: (Enhancer for YouTube™) - C:\Users\przyb\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dlgfaleeejmphhnemjgiaekdbonkagkd [2023-08-15]
Edge Extension: (Darmowy VPN dla Microsoft Edge - Troywell VPN) - C:\Users\przyb\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\embopepfkojckgmldidcjbefilokcgmg [2023-08-15]
Edge Extension: (Vod Panel) - C:\Users\przyb\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ffdpmjengmnmkhgoidfgpmfacdpcfhhk [2023-07-17]
Edge Extension: (NordVPN - VPN Proxy for Privacy and Security) - C:\Users\przyb\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fphgeikpdcdcheaochkhldmnfblfogla [2023-08-08]
Edge Extension: (Microsoft Bing Homepage and Search Engine) - C:\Users\przyb\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hcfdaddfkgbmekbgcepcnpfiopaigpnn [2023-07-17]
Edge Extension: (Redaktor Microsoft: sprawdzanie pisowni i gramatyki) - C:\Users\przyb\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hokifickgkhplphjiodbggjmoafhignh [2023-08-15]
Edge Extension: (Edge relevant text changes) - C:\Users\przyb\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-08-08]
Edge Extension: (Privacy Badger) - C:\Users\przyb\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mkejgcgkdlddbggjhhflekkondicpnop [2023-07-17]
Edge Extension: (Cookie-Editor) - C:\Users\przyb\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\neaplmfkghagebokkhpjpoebhdledlfi [2023-07-17]
Edge Extension: (uBlock Origin) - C:\Users\przyb\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\odfafepnkmbhccpbejgmiehpchacaeak [2023-07-20]

FireFox:
========
FF DefaultProfile: sywa2fas.default
FF ProfilePath: C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\sywa2fas.default [2023-07-16]
FF ProfilePath: C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release [2023-08-15]
FF Extension: (Activist – Balanced) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\activist-balanced-colorway@mozilla.org.xpi [2023-07-16]
FF Extension: (Bloker reklam AdGuard) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\adguardadblocker@adguard.com.xpi [2023-07-20]
FF Extension: (Enhancer for YouTube™) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\enhancerforyoutube@maximerf.addons.mozilla.org.xpi [2023-08-11]
FF Extension: (Sprawdzanie ortografii i gramatyki – LanguageTool) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\languagetool-webextension@languagetool.org.xpi [2023-07-16]
FF Extension: (Fire Fox, The Anime Girl: Nebula Space [Blue]) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\nadekon-theme-anime-fire-fox-girl-nebula@nadekon.net.xpi [2023-07-16]
FF Extension: (Google Translator for Firefox) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\translator@zoli.bod.xpi [2023-07-16]
FF Extension: (uBlock Origin) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\uBlock0@raymondhill.net.xpi [2023-07-26]
FF Extension: (pp) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{083ade0b-47c5-4fd7-bf9f-b6fdca3ee898}.xpi [2023-07-16]
FF Extension: (Mr Hacker) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{0ddb788f-946a-4db3-85f4-2db4a4f280eb}.xpi [2023-07-20]
FF Extension: (Flagfox) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2023-08-02]
FF Extension: (Black Music Notes II by M♥Donna) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{111bb872-0d97-4185-8b44-9b81e010588e}.xpi [2023-07-20]
FF Extension: (Dark space - The best dynamic theme) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{22b0eca1-8c02-4c0d-a5d7-6604ddd9836e}.xpi [2023-07-16]
FF Extension: (IDM multimedia & CAD Centre) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{2c262e8a-e95a-4f07-944f-333f460baa56}.xpi [2023-07-16]
FF Extension: (Search by Image) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{2e5ff8c8-32fe-46d0-9fc8-6b8986621f3c}.xpi [2023-07-16]
FF Extension: (Black Rain (Animated)) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{3e866059-1715-4a17-906c-02db9b30930e}.xpi [2023-07-16]
FF Extension: (Purple Night) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{4634d9ed-e1f8-4a04-81ee-9425b66e1642}.xpi [2023-07-16]
FF Extension: (candy happy happy colorful pretty) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{48d3eaef-26d9-4edd-9041-981eb48ba56f}.xpi [2023-07-16]
FF Extension: (DarkMagic) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{5f3d72a6-5ae0-4d03-8bf4-21f2b0ab1010}.xpi [2023-07-16]
FF Extension: (automaticDark - Time-Based Theme Changer) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{9ed7d361-ccd9-4cad-9846-977da2651fb5}.xpi [2023-07-16]
FF Extension: (Colorful Abstract Neon) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{9fd56529-f621-4820-8128-f0bbbdbd8a73}.xpi [2023-07-16]
FF Extension: (avril lavigne hot black hot pink) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{a0f70dd0-ebc2-4632-9a10-19771d6eb49c}.xpi [2023-07-16]
FF Extension: (Aero Glass Dark) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{a3f854d1-b110-43e1-b4b4-09fe9587e5f3}.xpi [2023-07-16]
FF Extension: (Matte Black (Sky Blue)) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{a7d78215-c3ea-4ecb-aaed-10bbe30f8ecb}.xpi [2023-07-16]
FF Extension: (Hacker (Animated)) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{ba344789-d1ee-4222-9c4b-5208529b0ee6}.xpi [2023-07-16]
FF Extension: (Cosmic Cloud) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{cdabc232-3126-426f-8624-3d4b1609e431}.xpi [2023-07-16]
FF Extension: (RGB Waves) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{d96c4a4b-04e1-4fda-bd4e-81bc3fe30822}.xpi [2023-07-16]
FF Extension: (Translucent Fox) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{e3e97940-d781-43bd-b700-2558c26953fa}.xpi [2023-07-16]
FF Extension: (Dark Fox) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{e7fe4ffe-f256-4f85-906d-072fdd698585}.xpi [2023-07-16]
FF Extension: (Turquoise small neon Fox V2) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{ebf61f67-d063-4ce8-a57a-b84a30ed2b2a}.xpi [2023-07-16]
FF Extension: (BTS FESTA 2017) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{f4805da0-4e79-44bb-b2f5-2d86e08515b4}.xpi [2023-07-20]
FF Extension: (Urban VPN proxy) - C:\Users\przyb\AppData\Roaming\Mozilla\Firefox\Profiles\g0pufkms.default-release\Extensions\{fca67f41-776b-438a-9382-662171858615}.xpi [2023-07-16]
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 EAAntiCheatService; C:\Program Files\EA\AC\eaanticheat.gameservice.exe [47714848 2023-08-07] (Electronic Arts, Inc. -> Electronic Arts)
R3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [11527272 2023-08-11] (Electronic Arts, Inc. -> Electronic Arts)
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [118504 2022-10-31] (Panda Security S.L. -> Panda Security, S.L.)
S3 Panda VPN Service; C:\Program Files (x86)\Panda Security\Panda Security Protection\Hydra.Sdk.Windows.Service.exe [320848 2017-11-20] (AnchorFree Inc -> )
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [84176 2019-02-19] (Panda Security S.L. -> Panda Security, S.L.)
R2 pselamsvc; C:\Program Files (x86)\Panda Security\Panda Security Protection\pselamsvc.exe [195224 2022-09-26] (Panda Security S.L. -> Panda Security S.L.)
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [78840 2022-11-02] (Panda Security S.L. -> Panda Security, S.L.)
S2 rkrtservice; C:\Program Files\RogueKiller\RogueKillerSvc.exe [15971760 2023-06-22] (ADLICE -> )
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23070.1004-0\NisSrv.exe [3104488 2023-08-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23070.1004-0\MsMpEng.exe [133576 2023-08-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nvmdig.inf_amd64_c885f29e168e777a\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nvmdig.inf_amd64_c885f29e168e777a\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 aftap0901; C:\Windows\System32\drivers\aftap0901.sys [48624 2017-11-16] (AnchorFree Inc -> The OpenVPN Project)
S3 atvi-randgrid; C:\ProgramData\Battle.net_components\randgridauks\randgrid.sys [2986792 2023-07-20] (Activision Publishing Inc -> Activision Blizzard, Inc.)
S3 epmdkdrv; C:\Windows\system32\epmdkdrv.sys [27728 2022-12-29] (Microsoft Windows Hardware Compatibility Publisher -> )
R0 EPMVolFl; C:\Windows\System32\drivers\EPMVolFl.sys [30136 2022-12-29] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Codename Longhorn DDK provider)
R0 EUDCPEPM; C:\Windows\System32\drivers\EUDCPEPM.sys [76344 2022-12-29] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
R1 EUEDKEPM; C:\Windows\System32\drivers\EUEDKEPM.sys [24656 2022-12-29] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
S3 FXVAD; C:\Windows\system32\drivers\fxvad.sys [326656 2022-04-15] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2022-05-18] (Microsoft Windows Hardware Compatibility Publisher -> LogMeIn Inc.)
R2 inpoutx64; C:\Windows\System32\Drivers\inpoutx64.sys [15008 2023-08-14] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])
R1 NNSDNS; C:\Windows\system32\DRIVERS\NNSDNS.sys [146184 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\system32\DRIVERS\NNSHTTP.sys [215264 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\system32\DRIVERS\NNSHTTPS.sys [128744 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSIDS; C:\Windows\system32\DRIVERS\NNSIDS.sys [146664 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSNAHSL; C:\Windows\system32\DRIVERS\NNSNAHSL.sys [151152 2022-10-10] (Microsoft Windows Hardware Compatibility Publisher -> Panda Security, S.L.)
R1 NNSNHWFP; C:\Windows\system32\DRIVERS\NNSNHWFP.sys [211208 2022-12-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSPICC; C:\Windows\system32\DRIVERS\NNSPICC.sys [164568 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\system32\DRIVERS\NNSPOP3.sys [137960 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSPROT; C:\Windows\system32\DRIVERS\NNSPROT.sys [407264 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSPRV; C:\Windows\system32\DRIVERS\NNSPRV.sys [575720 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\system32\DRIVERS\NNSSMTP.sys [125672 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\system32\DRIVERS\NNSSTRM.sys [335064 2022-11-06] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R2 PSINAflt; C:\Windows\system32\DRIVERS\PSINAflt.sys [198376 2022-11-03] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
S0 psinelam; C:\Windows\System32\DRIVERS\psinelam.sys [26080 2022-10-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [176360 2022-11-03] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R1 PSINKNC; C:\Windows\system32\DRIVERS\PSINKNC.sys [218856 2022-11-03] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [150760 2022-11-03] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R2 PSINProt; C:\Windows\system32\DRIVERS\PSINProt.sys [162536 2022-11-03] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R2 PSINReg; C:\Windows\system32\DRIVERS\PSINReg.sys [130280 2022-11-03] (WatchGuard Technologies, Inc. -> Panda Security, S.L.)
R3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [72984 2019-02-20] (Panda Security S.L. -> Panda Security, S.L.)
R3 rtcx21; C:\Windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_516e5c9b75c49dc2\rtcx21x64.sys [539648 2022-05-06] (Microsoft Windows -> Realtek)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [55704 2023-08-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [572656 2023-08-09] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [104688 2023-08-09] (Microsoft Windows -> Microsoft Corporation)
S3 EAAntiCheat; system32\drivers\eaanticheat.sys [X]
S3 EuGdiDrv; \SystemRoot\system32\EuGdiDrv.sys [X]
S3 HWiNFO_180; \??\C:\Users\przyb\AppData\Local\Temp\HWiNFO64A_180.SYS [X] <==== UWAGA
U3 SARPSvc; Brak ImagePath
U3 SAVASvc; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2023-08-15 17:21 - 2023-08-15 17:22 - 000026267 _____ C:\Users\przyb\Downloads\FRST.txt
2023-08-15 17:21 - 2023-08-15 17:22 - 000000000 ____D C:\FRST
2023-08-15 17:21 - 2023-08-15 17:21 - 008791352 _____ (Malwarebytes) C:\Users\przyb\Downloads\adwcleaner.exe
2023-08-15 17:21 - 2023-08-15 17:21 - 002385408 _____ (Farbar) C:\Users\przyb\Downloads\FRST64.exe
2023-08-15 17:21 - 2023-08-15 17:21 - 000000000 ____D C:\AdwCleaner
2023-08-15 17:18 - 2023-08-15 17:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BleachBit
2023-08-15 17:18 - 2023-08-15 17:18 - 012134688 _____ (BleachBit.org) C:\Users\przyb\Downloads\BleachBit-4.4.2-setup.exe
2023-08-15 17:18 - 2023-08-15 17:18 - 000000000 ____D C:\Program Files (x86)\BleachBit
2023-08-15 16:37 - 2023-08-15 16:37 - 000798244 _____ C:\Windows\system32\perfh015.dat
2023-08-15 16:37 - 2023-08-15 16:37 - 000158294 _____ C:\Windows\system32\perfc015.dat
2023-08-15 15:23 - 2023-08-15 15:23 - 002466102 _____ C:\Users\przyb\Downloads\FIFA 23 Rating Squad Update For EEP FIFER FIFA 22.rar
2023-08-15 14:51 - 2023-08-15 14:51 - 000028987 _____ C:\Users\przyb\Downloads\[Electro-Torrent.pl] Naznaczony Czerwone drzwi _ Insidious The Red Door (2023) [1080p.AMZN.WEB-DL.H.264.DDP5.1-FOX] [Lektor PL] [Predator].torrent
2023-08-15 14:48 - 2023-08-15 14:48 - 000037568 _____ C:\Users\przyb\Downloads\[Electro-Torrent.pl] Naznaczony Czerwone drzwi _ Insidious The Red Door (2023) [MULTi.1080p.MA.WEB-DL.H264.DDP5.1.Atmos-K83] [Lektor i Napisy PL] [Predator].torrent
2023-08-15 11:19 - 2023-08-15 11:19 - 000040285 _____ C:\Users\przyb\Downloads\[Electro-Torrent.pl] Judgment [v1.12] 2022 [MULTI-ENG] [EMPRESS] [ISO].torrent
2023-08-15 11:16 - 2023-08-15 11:16 - 000041920 _____ C:\Windows\system32\Drivers\truesight.sys
2023-08-15 11:16 - 2019-02-20 07:31 - 000072984 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSKMAD.sys
2023-08-14 20:22 - 2023-08-14 20:22 - 000305520 _____ C:\Windows\system32\FNTCACHE.DAT
2023-08-14 20:15 - 2023-08-14 09:30 - 000065656 _____ (Kerish Products) C:\Windows\system32\GPUTemp.dll
2023-08-14 20:14 - 2023-08-14 20:14 - 000015008 _____ (Highresolution Enterprises [www.highrez.co.uk]) C:\Windows\system32\Drivers\inpoutx64.sys
2023-08-14 20:14 - 2011-01-20 04:07 - 000098304 _____ (Highresolution Enterprises) C:\Windows\SysWOW64\inpout32.dll
2023-08-14 20:13 - 2023-08-14 20:14 - 052050544 _____ (Kerish Products LLP ) C:\Users\przyb\Downloads\Kerish_Doctor_4.91.exe
2023-08-14 16:41 - 2023-08-14 16:41 - 002606880 _____ (Malwarebytes) C:\Users\przyb\Downloads\MBSetup.exe
2023-08-14 16:40 - 2023-08-14 16:40 - 000000000 ____D C:\Windows\pss
2023-08-13 22:00 - 2023-08-13 22:00 - 012889266 _____ C:\Users\przyb\Downloads\BleachBit-4.4.2-portable.zip
2023-08-13 14:21 - 2023-08-13 14:21 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Microsoft\MMC
2023-08-13 14:02 - 2023-08-15 11:16 - 000012288 ___SH C:\DumpStack.log.tmp
2023-08-13 14:02 - 2023-08-13 14:02 - 000000000 ____D C:\Windows\Minidumps
2023-08-13 14:00 - 2023-08-13 14:00 - 000001153 _____ C:\Users\przyb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Garry's Mod.lnk
2023-08-13 13:26 - 2023-08-13 13:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2023-08-13 13:26 - 2023-08-13 13:26 - 000000000 ____D C:\Program Files\RogueKiller
2023-08-13 13:25 - 2023-08-13 13:25 - 047549200 _____ (Adlice Software ) C:\Users\przyb\Downloads\RogueKiller_setup.exe
2023-08-13 12:09 - 2023-08-13 12:09 - 000001480 _____ C:\Users\przyb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator.lnk
2023-08-13 10:22 - 2023-08-13 10:52 - 000000028 _____ C:\Windows\OutLog.txt
2023-08-13 10:22 - 2023-08-13 10:22 - 000000039 _____ C:\Users\przyb\AppData\Roaming\epm_user.ini
2023-08-13 10:22 - 2023-08-13 10:22 - 000000000 _____ C:\Windows\BcdLog.txt
2023-08-13 10:20 - 2023-08-13 10:20 - 000000000 ____D C:\Users\przyb\AppData\Local\EPMUI
2023-08-13 10:18 - 2023-08-13 10:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master
2023-08-13 10:18 - 2023-02-06 01:50 - 006035648 _____ C:\Windows\system32\BootMan.exe
2023-08-13 10:18 - 2023-02-06 01:50 - 000025792 _____ C:\Windows\system32\EuEpmGdi.dll
2023-08-13 10:18 - 2022-12-29 13:34 - 000174216 _____ C:\Windows\system32\setupepmdrvx64.exe
2023-08-13 10:18 - 2022-12-29 13:34 - 000030136 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\Drivers\EPMVolFl.sys
2023-08-13 10:18 - 2022-12-29 13:34 - 000000057 _____ C:\Windows\system32\setupepmdrv.ini
2023-08-13 10:03 - 2023-08-13 10:18 - 000000000 ____D C:\Program Files\EaseUS
2023-08-13 10:03 - 2023-08-13 10:03 - 000000000 ____D C:\ProgramData\SystemAcCrux
2023-08-13 10:03 - 2022-12-29 13:30 - 000076344 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\system32\Drivers\EUDCPEPM.sys.0
2023-08-12 19:35 - 2023-08-12 19:35 - 000000000 ____D C:\Users\przyb\AppData\Local\LogMeIn
2023-08-12 19:35 - 2023-08-12 19:35 - 000000000 ____D C:\ProgramData\LogMeIn
2023-08-12 17:39 - 2023-08-12 19:29 - 000000000 ____D C:\Users\przyb\AppData\Local\GameAnalytics
2023-08-10 22:12 - 2023-08-10 22:13 - 000000000 ____D C:\Users\przyb\AppData\Local\Activision
2023-08-10 12:42 - 2023-08-10 12:42 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2023-08-09 22:23 - 2023-08-09 22:23 - 000004478 _____ C:\Users\przyb\AppData\Local\937504910
2023-08-09 21:28 - 2023-08-09 21:28 - 000000000 ____D C:\Users\przyb\AppData\Roaming\NVIDIA
2023-08-09 13:49 - 2023-08-09 13:51 - 000000000 ___HD C:\$WinREAgent
2023-08-09 13:26 - 2023-08-15 16:33 - 000000000 ____D C:\Users\przyb\AppData\Local\D3DSCache
2023-08-09 13:24 - 2023-08-10 21:32 - 000000000 ____D C:\Users\przyb\AppData\Local\NVIDIA
2023-08-09 13:24 - 2023-08-09 13:24 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation
2023-08-09 13:24 - 2023-08-09 13:24 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2023-08-09 13:21 - 2023-08-05 17:16 - 001487480 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2023-08-09 13:21 - 2023-08-05 17:16 - 001226872 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2023-08-09 13:21 - 2023-08-05 17:16 - 000849088 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2023-08-09 13:21 - 2023-08-05 17:16 - 000849088 _____ C:\Windows\system32\vulkaninfo.exe
2023-08-09 13:21 - 2023-08-05 17:16 - 000713920 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2023-08-09 13:21 - 2023-08-05 17:16 - 000713920 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2023-08-09 13:21 - 2023-08-05 17:16 - 000653504 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2023-08-09 13:21 - 2023-08-05 17:16 - 000653504 _____ C:\Windows\system32\vulkan-1.dll
2023-08-09 13:21 - 2023-08-05 17:16 - 000637120 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2023-08-09 13:21 - 2023-08-05 17:16 - 000637120 _____ C:\Windows\SysWOW64\vulkan-1.dll
2023-08-09 13:21 - 2023-08-05 17:12 - 001538072 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2023-08-09 13:21 - 2023-08-05 17:12 - 001195024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2023-08-09 13:21 - 2023-08-05 17:12 - 000920600 _____ (NVIDIA Corporation) C:\Windows\system32\nvml.dll
2023-08-09 13:21 - 2023-08-05 17:12 - 000668680 _____ C:\Windows\system32\nvofapi64.dll
2023-08-09 13:21 - 2023-08-05 17:12 - 000503928 _____ C:\Windows\SysWOW64\nvofapi.dll
2023-08-09 13:21 - 2023-08-05 17:11 - 002167816 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2023-08-09 13:21 - 2023-08-05 17:11 - 001621512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2023-08-09 13:21 - 2023-08-05 17:11 - 000992264 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2023-08-09 13:21 - 2023-08-05 17:11 - 000776216 _____ (NVIDIA Corporation) C:\Windows\system32\nvidia-smi.exe
2023-08-09 13:21 - 2023-08-05 17:11 - 000769048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2023-08-09 13:21 - 2023-08-05 17:10 - 014520856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2023-08-09 13:21 - 2023-08-05 17:10 - 012066840 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2023-08-09 13:21 - 2023-08-05 17:10 - 006190728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2023-08-09 13:21 - 2023-08-05 17:10 - 005550728 _____ (NVIDIA Corporation) C:\Windows\system32\nvcudadebugger.dll
2023-08-09 13:21 - 2023-08-05 17:10 - 003483272 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2023-08-09 13:21 - 2023-08-05 17:10 - 000459384 _____ (NVIDIA Corporation) C:\Windows\system32\nvdebugdump.exe
2023-08-09 13:21 - 2023-08-05 17:09 - 005845000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2023-08-09 13:21 - 2023-08-05 17:09 - 000853000 _____ (NVIDIA Corporation) C:\Windows\system32\MCU.exe
2023-08-09 13:21 - 2023-08-05 17:08 - 007858112 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2023-08-09 13:21 - 2023-08-05 17:08 - 006738024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2023-08-09 13:21 - 2023-08-05 06:08 - 000121880 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2023-08-09 13:21 - 2023-08-05 06:08 - 000108142 _____ C:\Windows\system32\nvinfo.pb
2023-08-09 13:18 - 2023-08-09 13:18 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2023-08-09 13:15 - 2023-08-09 13:15 - 000012288 _____ C:\Windows\system32\UserMgrLog.etl
2023-08-09 13:14 - 2023-08-09 13:15 - 000024576 _____ C:\Windows\system32\umstartup.etl
2023-08-08 20:33 - 2023-08-15 11:48 - 000000000 ____D C:\Users\przyb\AppData\Local\CrashDumps
2023-08-08 17:00 - 2023-08-08 17:00 - 000000000 ____D C:\Users\przyb\AppData\LocalLow\Adobe
2023-08-08 16:47 - 2023-08-08 16:47 - 000000000 ____D C:\Users\przyb\AppData\Roaming\com.adobe.dunamis
2023-08-08 15:39 - 2023-08-08 15:39 - 000001076 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2023.lnk
2023-08-08 14:56 - 2023-08-08 15:01 - 000000000 ____D C:\Program Files\Common Files\Adobe
2023-08-08 14:56 - 2023-08-08 14:58 - 000000000 ____D C:\Program Files\Adobe
2023-08-08 14:56 - 2023-08-08 14:56 - 000000000 ____D C:\Program Files (x86)\Adobe
2023-08-08 14:55 - 2023-08-08 16:53 - 000000000 ____D C:\Users\przyb\AppData\Local\Adobe
2023-08-08 14:55 - 2023-08-08 14:57 - 000000000 ____D C:\ProgramData\Adobe
2023-08-08 11:36 - 2023-08-08 14:51 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-08-07 19:19 - 2023-08-07 19:19 - 000000000 ____D C:\Users\przyb\AppData\Local\com.flavourworks.erica
2023-08-07 19:18 - 2023-08-07 19:18 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Flavourworks
2023-08-07 19:18 - 2023-08-07 19:18 - 000000000 ____D C:\Users\przyb\AppData\Roaming\DOGE
2023-08-07 17:46 - 2023-08-07 17:46 - 000000000 ____D C:\Users\przyb\AppData\Local\Larian Studios
2023-08-05 20:21 - 2023-08-05 20:29 - 000000000 ____D C:\Users\przyb\AppData\Local\Origin
2023-08-05 20:21 - 2023-08-05 20:21 - 000000000 ____D C:\Users\przyb\AppData\Local\cache
2023-08-05 18:41 - 2023-08-05 18:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Krypton 555
2023-08-05 18:41 - 2023-08-05 18:41 - 000000000 ____D C:\Program Files (x86)\Krypton 555
2023-08-05 12:53 - 2023-08-05 12:53 - 000000000 ____D C:\Users\przyb\AppData\Local\Sports Interactive
2023-08-04 21:24 - 2023-08-04 21:25 - 000000000 ____D C:\Users\przyb\AppData\Local\NFS Underground 2
2023-08-04 21:22 - 2023-08-04 21:22 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2023-08-04 20:27 - 2023-08-04 20:27 - 000000000 ____D C:\Users\przyb\AppData\Local\ASF
2023-08-04 16:46 - 2023-08-04 16:47 - 000000000 ____D C:\Users\przyb\AppData\Local\EAConnect_microsoft
2023-08-04 15:15 - 2023-08-04 15:31 - 000000000 ____D C:\Users\przyb\AppData\LocalLow\Mozilla
2023-08-03 16:43 - 2023-08-03 16:43 - 000000000 ____D C:\Users\przyb\AppData\Local\OH2
2023-08-03 11:49 - 2023-08-03 11:50 - 000000000 ____D C:\Windows\system32\Tasks\Abelssoft
2023-08-03 11:05 - 2023-08-03 11:05 - 000000266 __RSH C:\ProgramData\ntuser.pol
2023-08-02 19:39 - 2023-08-13 13:26 - 000000000 ____D C:\ProgramData\RogueKiller
2023-08-01 16:15 - 2023-08-13 13:57 - 000000000 ____D C:\Users\przyb\Desktop\azjatki tapety
2023-08-01 16:09 - 2023-08-01 16:09 - 000000000 ____D C:\Users\przyb\AppData\Local\CEF
2023-07-31 19:26 - 2023-08-15 15:34 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wargaming.net
2023-07-31 19:26 - 2023-07-31 20:20 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Wargaming.net
2023-07-31 15:11 - 2023-07-31 15:12 - 000000000 ____D C:\Windows\system32\oodag
2023-07-31 15:11 - 2023-07-31 15:11 - 000000000 ____D C:\Users\przyb\AppData\Local\ToastNotificationManagerCompat
2023-07-31 15:11 - 2023-07-31 15:11 - 000000000 ____D C:\Users\przyb\AppData\Local\O&O_Software_GmbH
2023-07-31 15:11 - 2023-07-31 15:11 - 000000000 ____D C:\Users\przyb\AppData\Local\O&O
2023-07-31 15:11 - 2023-07-31 15:11 - 000000000 ____D C:\ProgramData\OO Software
2023-07-31 15:06 - 2023-07-31 15:06 - 000000000 ____D C:\Users\przyb\AppData\Roaming\FLT
2023-07-31 14:58 - 2023-07-31 14:59 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Jagged Alliance 3
2023-07-31 14:11 - 2023-07-31 14:11 - 000000000 ____D C:\ProgramData\GOG.com
2023-07-31 12:58 - 2023-07-31 12:58 - 000000000 ____D C:\Users\przyb\AppData\Local\TruckyOverlay
2023-07-31 12:35 - 2023-07-31 12:35 - 000000000 ____D C:\Users\przyb\AppData\Roaming\RapidCRC
2023-07-31 10:50 - 2023-07-31 10:50 - 000000000 ____D C:\Users\przyb\AppData\LocalLow\Unity
2023-07-31 10:50 - 2023-07-31 10:50 - 000000000 ____D C:\Users\przyb\AppData\LocalLow\Cleversan
2023-07-29 20:56 - 2023-07-29 20:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64
2023-07-29 20:56 - 2023-07-29 20:56 - 000000000 ____D C:\Program Files\HWiNFO64
2023-07-27 21:44 - 2023-08-11 22:57 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Caprine
2023-07-27 21:44 - 2023-07-27 21:44 - 000002331 _____ C:\Users\przyb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Caprine.lnk
2023-07-27 16:12 - 2023-07-27 16:12 - 000000000 ____D C:\Users\przyb\AppData\Local\fnaf9
2023-07-27 16:12 - 2023-07-27 16:12 - 000000000 ____D C:\Users\przyb\AppData\Local\CrashReportClient
2023-07-27 10:11 - 2023-07-27 10:11 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Insomniac Games
2023-07-27 10:11 - 2023-07-27 10:11 - 000000000 ____D C:\Users\przyb\.insomniac
2023-07-25 17:05 - 2023-07-25 17:05 - 000000000 ____D C:\Users\przyb\AppData\Local\SW3
2023-07-25 13:06 - 2023-08-15 15:19 - 000000000 ____D C:\Users\przyb\AppData\Roaming\vlc
2023-07-25 13:05 - 2023-07-25 13:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2023-07-25 13:05 - 2023-07-25 13:05 - 000000000 ____D C:\Program Files\VideoLAN
2023-07-24 18:15 - 2023-07-24 18:15 - 000000000 ____D C:\Users\przyb\AppData\LocalLow\Endnight
2023-07-23 21:31 - 2023-07-23 21:31 - 000000000 ____D C:\Users\przyb\AppData\LocalLow\SKS
2023-07-20 17:59 - 2023-07-20 18:01 - 000000000 ____D C:\ProgramData\Naughty Dog
2023-07-20 15:16 - 2023-07-20 15:16 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Crystal Dynamics
2023-07-20 13:40 - 2023-08-13 22:01 - 000000000 ____D C:\Users\przyb\.dbus-keyrings
2023-07-20 13:40 - 2023-07-20 13:40 - 000000000 ____D C:\Users\przyb\AppData\Local\fontconfig
2023-07-20 13:32 - 2022-12-06 12:53 - 000211208 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\nnsnhwfp.sys
2023-07-20 13:32 - 2022-11-06 12:24 - 000575720 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\nnsprv.sys
2023-07-20 13:32 - 2022-11-06 12:24 - 000407264 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\nnsprot.sys
2023-07-20 13:32 - 2022-11-06 12:24 - 000335064 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\nnsstrm.sys
2023-07-20 13:32 - 2022-11-06 12:24 - 000215264 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\nnshttp.sys
2023-07-20 13:32 - 2022-11-06 12:24 - 000164568 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\nnspicc.sys
2023-07-20 13:32 - 2022-11-06 12:24 - 000146664 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\nnsids.sys
2023-07-20 13:32 - 2022-11-06 12:24 - 000146184 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\nnsdns.sys
2023-07-20 13:32 - 2022-11-06 12:24 - 000137960 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\nnspop3.sys
2023-07-20 13:32 - 2022-11-06 12:24 - 000128744 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\nnshttps.sys
2023-07-20 13:32 - 2022-11-06 12:24 - 000125672 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\nnssmtp.sys
2023-07-20 13:32 - 2022-11-03 01:33 - 000218856 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSINKNC.sys
2023-07-20 13:32 - 2022-11-03 01:33 - 000198376 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSINAflt.sys
2023-07-20 13:32 - 2022-11-03 01:33 - 000176360 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSINFile.sys
2023-07-20 13:32 - 2022-11-03 01:33 - 000162536 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSINProt.sys
2023-07-20 13:32 - 2022-11-03 01:33 - 000150760 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSINProc.sys
2023-07-20 13:32 - 2022-11-03 01:33 - 000130280 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSINReg.sys
2023-07-20 13:31 - 2023-07-20 13:34 - 000002298 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Dome.lnk
2023-07-20 13:31 - 2023-07-20 13:32 - 000000000 ____D C:\Program Files (x86)\Panda Security
2023-07-20 13:31 - 2023-07-20 13:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Dome
2023-07-20 13:30 - 2023-07-20 13:32 - 000000000 ____D C:\ProgramData\Panda Security
2023-07-20 13:30 - 2023-07-20 13:31 - 000000000 ____D C:\ProgramData\Battle.net_components
2023-07-20 13:20 - 2023-07-20 17:46 - 000000000 ____D C:\Windows\system32\Tasks\FxSound
2023-07-19 18:10 - 2023-07-19 19:27 - 000000000 ____D C:\Users\przyb\AppData\LocalLow\Red Axe Games
2023-07-18 19:45 - 2023-07-31 12:38 - 000000000 ____D C:\Users\przyb\AppData\Local\Steam
2023-07-18 19:44 - 2023-08-14 20:18 - 000000000 ____D C:\Program Files (x86)\Steam
2023-07-18 19:44 - 2023-07-18 19:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2023-07-18 16:08 - 2023-08-08 15:04 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Goldberg SteamEmu Saves
2023-07-18 16:00 - 2023-08-11 22:24 - 000000000 ____D C:\ProgramData\Packer
2023-07-18 16:00 - 2023-07-18 16:00 - 000000000 ____D C:\ProgramData\Frostbite
2023-07-18 16:00 - 2023-07-18 16:00 - 000000000 ____D C:\ProgramData\Electronic Arts
2023-07-18 15:58 - 2023-07-30 13:40 - 000516552 _____ C:\ProgramData\catcache3.bin
2023-07-18 15:58 - 2023-07-18 15:58 - 000000000 ____D C:\Users\Default\AppData\Local\Electronic Arts
2023-07-18 15:58 - 2023-07-18 15:58 - 000000000 ____D C:\ProgramData\Origin
2023-07-17 19:21 - 2023-07-17 19:21 - 000000000 ____D C:\Users\przyb\AppData\Local\EALaunchHelper
2023-07-17 18:55 - 2023-07-17 18:55 - 000000000 ____D C:\Program Files\dotnet
2023-07-17 17:59 - 2023-07-17 17:59 - 000000686 _____ C:\Users\przyb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FIFA 23.lnk
2023-07-17 17:28 - 2023-08-15 15:23 - 000000000 ____D C:\Program Files\EA
2023-07-17 17:28 - 2023-07-17 17:28 - 000000000 ___HD C:\Program Files\Common Files\EAInstaller
2023-07-17 17:28 - 2023-07-17 17:28 - 000000000 ____D C:\Users\przyb\AppData\Roaming\EA
2023-07-17 17:28 - 2023-07-17 17:28 - 000000000 ____D C:\ProgramData\eaanticheat
2023-07-17 16:47 - 2023-07-17 16:47 - 000000000 ____D C:\Users\przyb\AppData\Local\EADesktop
2023-07-17 16:39 - 2023-07-19 18:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA
2023-07-17 16:39 - 2023-07-17 16:39 - 000000000 ____D C:\Users\przyb\AppData\Local\Electronic Arts
2023-07-17 16:38 - 2023-07-17 16:49 - 000000000 ____D C:\ProgramData\EA Desktop
2023-07-17 16:38 - 2023-07-17 16:38 - 000000000 ____D C:\Program Files\Electronic Arts
2023-07-17 13:49 - 2023-07-28 15:01 - 000000000 ____D C:\Users\przyb\AppData\Local\UnrealEngine
2023-07-17 13:47 - 2023-08-12 19:10 - 000000138 _____ C:\Users\przyb\Desktop\konto vod.txt
2023-07-17 13:42 - 2023-08-15 13:29 - 000000000 ____D C:\ProgramData\Package Cache
2023-07-16 22:44 - 2023-07-16 22:44 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2023-07-16 22:43 - 2023-07-16 22:43 - 000000000 ____D C:\Users\przyb\AppData\Local\INetHistory
2023-07-16 22:43 - 2023-07-16 22:43 - 000000000 ____D C:\ProgramData\Wargaming.net
2023-07-16 22:40 - 2023-08-13 10:54 - 000000000 ____D C:\XboxGames
2023-07-16 22:40 - 2023-07-16 22:40 - 000000028 ____H C:\.GamingRoot
2023-07-16 22:39 - 2023-07-16 22:39 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll
2023-07-16 22:39 - 2023-07-16 22:39 - 000000000 ____D C:\Program Files (x86)\Windows Kits
2023-07-16 22:39 - 2023-07-16 22:39 - 000000000 ____D C:\Program Files (x86)\Microsoft GameInput
2023-07-16 22:38 - 2023-07-20 13:31 - 000000561 _____ C:\Users\przyb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Call of Duty.lnk
2023-07-16 16:27 - 2023-07-16 16:27 - 000000000 ____D C:\Users\przyb\AppData\Roaming\SecureAge Technology
2023-07-16 16:27 - 2023-07-16 16:27 - 000000000 ____D C:\Users\przyb\ansel
2023-07-16 16:24 - 2023-07-16 16:24 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Eidos Montreal
2023-07-16 16:24 - 2023-07-16 16:24 - 000000000 ____D C:\Intel
2023-07-16 15:49 - 2023-07-16 15:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2023-07-16 15:49 - 2023-07-16 15:49 - 000000000 ____D C:\Program Files (x86)\7-Zip
2023-07-16 14:55 - 2023-08-08 20:59 - 000000000 ____D C:\Windows\SysWOW64\directx
2023-07-16 14:42 - 2023-07-16 14:42 - 000000000 ____D C:\Users\przyb\AppData\Local\DBG
2023-07-16 14:41 - 2023-08-15 11:16 - 000000000 ____D C:\ProgramData\NVIDIA
2023-07-16 14:41 - 2023-07-16 14:41 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2023-07-16 14:05 - 2023-08-13 14:08 - 000000000 ____D C:\Windows\Panther
2023-07-16 13:54 - 2023-08-15 11:47 - 000000000 ____D C:\Users\przyb\AppData\Local\Roblox
2023-07-16 13:54 - 2023-08-10 22:21 - 000000256 _____ C:\Users\przyb\AppData\LocalLow\rbxcsettings.rbx
2023-07-16 13:54 - 2023-08-10 22:21 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2023-07-16 13:51 - 2023-07-16 13:51 - 000000000 ____D C:\Users\przyb\AppData\Local\Publishers
2023-07-16 13:50 - 2023-07-16 13:50 - 000000000 ____D C:\ProgramData\Blizzard Entertainment
2023-07-16 13:49 - 2023-07-16 13:49 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-07-16 13:48 - 2023-08-14 21:16 - 000000000 ____D C:\Users\przyb\AppData\Local\Battle.net
2023-07-16 13:48 - 2023-07-16 13:50 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Battle.net
2023-07-16 13:47 - 2023-08-10 21:51 - 000000000 ____D C:\Program Files (x86)\Battle.net
2023-07-16 13:47 - 2023-08-03 09:24 - 000000000 ____D C:\Users\przyb\AppData\Local\Blizzard Entertainment
2023-07-16 13:47 - 2023-07-16 13:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2023-07-16 13:46 - 2023-07-16 13:46 - 000000000 ____D C:\ProgramData\Battle.net
2023-07-16 13:45 - 2023-08-15 17:18 - 000000000 ____D C:\Users\przyb\AppData\Roaming\qBittorrent
2023-07-16 13:45 - 2023-07-16 13:45 - 000000000 ____D C:\Users\przyb\AppData\Local\qBittorrent
2023-07-16 13:45 - 2023-07-16 13:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2023-07-16 13:45 - 2023-07-16 13:45 - 000000000 ____D C:\Program Files\VS Revo Group
2023-07-16 13:44 - 2023-07-16 13:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2023-07-16 13:44 - 2023-07-16 13:44 - 000000000 ____D C:\Program Files\qBittorrent
2023-07-16 13:41 - 2023-08-15 11:44 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-07-16 13:41 - 2023-08-15 11:43 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2023-07-16 13:41 - 2023-08-08 14:51 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-07-16 13:41 - 2023-08-08 12:07 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-07-16 13:41 - 2023-07-16 13:41 - 000002036 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox — tryb prywatny.lnk
2023-07-16 13:41 - 2023-07-16 13:41 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Mozilla
2023-07-16 13:41 - 2023-07-16 13:41 - 000000000 ____D C:\Users\przyb\AppData\Local\Mozilla
2023-07-16 13:40 - 2023-07-16 13:40 - 000000000 ____D C:\ProgramData\SecureAge Technology
2023-07-16 13:37 - 2023-08-09 13:57 - 000000000 ____D C:\Windows\system32\MRT
2023-07-16 13:37 - 2023-07-16 13:37 - 000000000 ___HD C:\OneDriveTemp
2023-07-16 13:36 - 2023-07-16 22:40 - 000000000 ____D C:\Users\przyb\AppData\Local\PlaceholderTileLogoFolder
2023-07-16 13:36 - 2023-07-16 13:46 - 000000000 ___RD C:\Users\przyb\OneDrive
2023-07-16 13:36 - 2023-07-16 13:36 - 000000000 ____D C:\Users\przyb\AppData\Local\VirtualStore
2023-07-16 13:36 - 2023-07-16 13:36 - 000000000 ____D C:\Users\przyb\AppData\Local\Comms
2023-07-16 13:35 - 2023-07-16 13:35 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Microsoft\Network
2023-07-16 13:34 - 2023-08-13 15:48 - 000000000 ____D C:\Users\przyb\AppData\Local\Packages
2023-07-16 13:34 - 2023-08-08 16:47 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Adobe
2023-07-16 13:34 - 2023-07-16 14:05 - 000000000 ____D C:\Users\przyb\AppData\Local\ConnectedDevicesPlatform
2023-07-16 13:34 - 2023-07-16 13:36 - 000000000 __RHD C:\Users\Public\AccountPictures
2023-07-16 13:34 - 2023-07-16 13:34 - 000000000 ___SD C:\Users\przyb\AppData\Roaming\Microsoft\Crypto
2023-07-16 13:34 - 2023-07-16 13:34 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Microsoft\Vault
2023-07-16 13:34 - 2023-07-16 13:34 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2023-07-16 13:33 - 2023-08-13 14:19 - 000000000 ____D C:\Users\przyb
2023-07-16 13:33 - 2023-07-16 13:54 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Microsoft\Spelling
2023-07-16 13:33 - 2023-07-16 13:35 - 000000000 ____D C:\Users\przyb\AppData\Roaming\Microsoft\Windows
2023-07-16 13:33 - 2023-07-16 13:33 - 000000020 ___SH C:\Users\przyb\ntuser.ini
2023-07-16 13:33 - 2023-07-16 13:33 - 000000000 _SHDL C:\Users\przyb\Ustawienia lokalne
2023-07-16 13:33 - 2023-07-16 13:33 - 000000000 _SHDL C:\Users\przyb\Szablony
2023-07-16 13:33 - 2023-07-16 13:33 - 000000000 _SHDL C:\Users\przyb\Moje dokumenty
2023-07-16 13:33 - 2023-07-16 13:33 - 000000000 _SHDL C:\Users\przyb\Menu Start
2023-07-16 13:33 - 2023-07-16 13:33 - 000000000 _SHDL C:\Users\przyb\Dane aplikacji
2023-07-16 13:33 - 2023-07-16 13:33 - 000000000 _SHDL C:\Users\przyb\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2023-07-16 13:33 - 2023-07-16 13:33 - 000000000 _SHDL C:\Users\przyb\AppData\Local\Tymczasowe pliki internetowe
2023-07-16 13:33 - 2023-07-16 13:33 - 000000000 _SHDL C:\Users\przyb\AppData\Local\Historia
2023-07-16 13:33 - 2023-07-16 13:33 - 000000000 _SHDL C:\Users\przyb\AppData\Local\Dane aplikacji
2023-07-16 13:33 - 2023-07-16 13:33 - 000000000 ___SD C:\Users\przyb\AppData\Roaming\Microsoft\SystemCertificates
2023-07-16 13:33 - 2023-07-16 13:33 - 000000000 ___SD C:\Users\przyb\AppData\Roaming\Microsoft\Protect
2023-07-16 13:33 - 2023-07-16 13:33 - 000000000 ___SD C:\Users\przyb\AppData\Roaming\Microsoft\Credentials
2023-07-16 13:12 - 2023-08-15 16:37 - 001797776 _____ C:\Windows\system32\PerfStringBackup.INI
2023-07-16 13:08 - 2023-08-13 15:48 - 000000000 ____D C:\ProgramData\Packages
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\Users\Default\Ustawienia lokalne
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\Users\Default\Szablony
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\Users\Default\Moje dokumenty
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\Users\Default\Menu Start
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\Users\Default\Dane aplikacji
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\Users\Default\AppData\Local\Tymczasowe pliki internetowe
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\Users\Default\AppData\Local\Historia
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\ProgramData\Szablony
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\ProgramData\Pulpit
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\ProgramData\Menu Start
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\ProgramData\Dokumenty
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\ProgramData\Dane aplikacji
2023-07-16 13:08 - 2023-07-16 13:08 - 000000000 _SHDL C:\Documents and Settings
2023-07-16 13:06 - 2023-08-12 08:37 - 000002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-07-16 13:06 - 2023-07-16 13:06 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2023-07-16 13:05 - 2023-08-15 11:16 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2023-07-16 13:05 - 2023-08-14 20:38 - 000000000 ____D C:\Windows\system32\SleepStudy
2023-07-16 13:05 - 2023-08-09 22:06 - 000000000 ____D C:\Windows\system32\Drivers\wd
2023-07-16 13:05 - 2023-07-16 13:05 - 000000000 ____D C:\Windows\system32\config\BFS
2023-07-16 13:05 - 2023-07-16 13:05 - 000000000 ____D C:\Windows\ServiceProfiles

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2023-08-15 17:19 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SystemTemp
2023-08-15 16:37 - 2022-05-07 07:22 - 000000000 ____D C:\Windows\INF
2023-08-15 16:30 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-08-14 23:03 - 2022-05-07 07:17 - 000524288 _____ C:\Windows\system32\config\BBI
2023-08-14 20:32 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2023-08-14 20:32 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\AppReadiness
2023-08-14 20:15 - 2022-05-07 07:17 - 000032768 _____ C:\Windows\system32\config\ELAM
2023-08-14 16:54 - 2022-05-07 07:24 - 000000000 ___HD C:\Windows\ELAMBKUP
2023-08-13 10:19 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\Registration
2023-08-09 19:52 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2023-08-09 19:36 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SystemResources
2023-08-09 19:36 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\bcastdvr
2023-08-09 13:54 - 2022-05-07 07:17 - 000000000 ____D C:\Windows\CbsTemp
2023-08-03 10:30 - 2022-05-07 07:24 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2023-07-31 12:47 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ___RD C:\Windows\PrintDialog
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\UUS
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\vi-VN
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\id-ID
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\gl-ES
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\eu-ES
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\et-EE
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\es-MX
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\Dism
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\ca-ES
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SystemApps
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\WinMetadata
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\vi-VN
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\Sgrm
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\oobe
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\migwiz
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\lv-LV
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\lt-LT
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\id-ID
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\HealthAttestationClient
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\gl-ES
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\eu-ES
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\et-EE
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\es-MX
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\Dism
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\ca-ES
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\appraiser
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\ShellExperiences
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\ShellComponents
2023-07-27 16:39 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\appcompat
2023-07-20 13:32 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2023-07-16 14:08 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Windows Defender
2023-07-16 14:05 - 2022-05-07 07:24 - 000028672 _____ C:\Windows\system32\config\BCD-Template
2023-07-16 14:03 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\WUModels
2023-07-16 14:03 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\setup
2023-07-16 14:03 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\setup
2023-07-16 14:03 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2023-07-16 14:03 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\DDFs
2023-07-16 14:03 - 2022-05-07 07:17 - 000000000 ____D C:\Windows\servicing
2023-07-16 13:37 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\SecurityHealth
2023-07-16 13:10 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\AppLocker
2023-07-16 13:08 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\WinBioDatabase
2023-07-16 13:08 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\spool
2023-07-16 13:08 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\ServiceState
2023-07-16 13:08 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Windows NT

==================== Pliki w katalogu głównym wybranych folderów ========

2023-08-13 10:22 - 2023-08-13 10:22 - 000000039 _____ () C:\Users\przyb\AppData\Roaming\epm_user.ini
2023-08-09 22:23 - 2023-08-09 22:23 - 000004478 _____ () C:\Users\przyb\AppData\Local\937504910

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

==================== Koniec  FRST.txt ========================