Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 06.04.2024 Uruchomiony przez 30pingu (administrator) PINGU (Gigabyte Technology Co., Ltd. B450 AORUS PRO) (09-04-2024 17:31:58) Uruchomiony z C:\Users\miete\Desktop\FRST64.exe Załadowane profile: 30pingu Platforma: Microsoft Windows 11 Home Wersja 23H2 22631.3374 (X64) Język: Polski (Polska) Domyślna przeglądarka: Opera Tryb startu: Normal ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\avp.exe ->) (Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\avpui.exe (C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7> (C:\Program Files\WindowsApps\microsoftwindows.client.webexperience_424.1301.450.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.81\msedgewebview2.exe <6> (Discord Inc. -> Discord Inc.) C:\Users\miete\AppData\Local\Discord\app-1.0.9039\Discord.exe <6> (explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7> (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (services.exe ->) (Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\avp.exe (services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Windows\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_d70af0bfe61df9f0\logi_lamparray_service.exe (services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\WirelessKB850NotificationService.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MsMpEng.exe (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_268e85175aa9e991\Display.NvContainer\NVDisplay.Container.exe <2> (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RTUWPSrvcMain.exe (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2> (services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe (svchost.exe ->) (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> ) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.234.783.0_x64__zpdnekdrzrea0\XboxGameBarSpotify.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.gamingapp_2403.1001.2.0_x64__8wekyb3d8bbwe\XboxGameBarWidgets.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.gamingapp_2403.1001.2.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoftwindows.client.webexperience_424.1301.450.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LocationNotificationWindows.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [856288 2019-10-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [750680 2023-12-19] (Oracle America, Inc. -> Oracle Corporation) HKU\S-1-5-21-3294184972-935576208-774461254-1001\...\Run: [MicrosoftEdgeAutoLaunch_A3C3FB257536D14D62F8CAF9141C9971] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4063784 2024-04-04] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-3294184972-935576208-774461254-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4384104 2024-03-06] (Valve Corp. -> Valve Corporation) HKU\S-1-5-21-3294184972-935576208-774461254-1001\...\Run: [Opera GX Stable] => C:\Users\miete\AppData\Local\Programs\Opera GX\launcher.exe [2304416 2024-04-02] (Opera Norway AS -> Opera Software) HKU\S-1-5-21-3294184972-935576208-774461254-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\miete\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software) HKU\S-1-5-21-3294184972-935576208-774461254-1001\...\Run: [ProtonVPN] => C:\Program Files\Proton\VPN\ProtonVPN.Launcher.exe [12287472 2024-03-27] (Proton AG -> ProtonVPN) HKU\S-1-5-21-3294184972-935576208-774461254-1001\...\Run: [Proton Drive] => C:\Program Files\Proton\Drive\ProtonDrive.exe [211248040 2024-03-26] (Proton AG -> Proton AG) HKU\S-1-5-21-3294184972-935576208-774461254-1001\...\Run: [Discord] => C:\Users\miete\AppData\Local\Discord\Update.exe [1512608 2021-09-21] (Discord Inc. -> GitHub) Startup: C:\Users\miete\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\cleantemp.bat [2024-04-07] () [Brak podpisu cyfrowego] Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AutoCleanUp.bat [2022-10-04] () [Brak podpisu cyfrowego] ==================== Zaplanowane zadania (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Brak pliku) Task: {EA2DE5E9-1F47-4A3B-AF03-835045A0BF8F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-04-07] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {20E5EFC0-696A-4D27-B16B-15FB2627DB33} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-04-07] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {ED2555EE-B9ED-4D8C-9EFC-FCF2161E9A07} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-04-07] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {3AB8AE13-D954-47B4-8EB6-BA14BE3F2D1C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-04-07] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {4FA5178E-FF91-4972-93A8-3BA5E3AD0C86} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1712483304 => C:\Users\miete\AppData\Local\Programs\Opera GX\launcher.exe [2304416 2024-04-02] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\miete\AppData\Local\Programs\Opera GX\assistant" $(Arg0) Task: {A503A717-5A99-4001-87C4-EC555CC8297B} - System32\Tasks\Opera GX scheduled Autoupdate 1712483162 => C:\Users\miete\AppData\Local\Programs\Opera GX\launcher.exe [2304416 2024-04-02] (Opera Norway AS -> Opera Software) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.100.1 Tcpip\..\Interfaces\{1bb9d454-fcf4-4495-97fc-f940f09bd8dd}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{1bb9d454-fcf4-4495-97fc-f940f09bd8dd}: [DhcpNameServer] 192.168.100.1 Edge: ======= Edge Profile: C:\Users\miete\AppData\Local\Microsoft\Edge\User Data\Default [2024-04-09] Edge Extension: (Kaspersky Protection) - C:\Users\miete\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2024-04-07] Edge Extension: (Dokumenty Google offline) - C:\Users\miete\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-07] Edge Extension: (Edge relevant text changes) - C:\Users\miete\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-04-07] Edge HKU\S-1-5-21-3294184972-935576208-774461254-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] FireFox: ======== FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\FFExt\light_plugin_firefox\addon.xpi => nie znaleziono FF HKLM-x32\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\FFExt\light_plugin_firefox\addon.xpi => nie znaleziono FF Plugin-x32: @java.com/DTPlugin,version=11.401.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-12-19] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.401.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-12-19] (Oracle America, Inc. -> Oracle Corporation) Chrome: ======= CHR HKLM\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm CHR HKLM-x32\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm Opera: ======= StartMenuInternet: (HKU\S-1-5-21-3294184972-935576208-774461254-1001) Opera GXStable - "C:\Users\miete\AppData\Local\Programs\Opera GX\Launcher.exe" ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AVP21.3; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\avp.exe [184768 2022-08-17] (Kaspersky Lab JSC -> AO Kaspersky Lab) S3 klvssbridge64_21.3; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\x64\vssbridge64.exe [479280 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab) S3 kpm_service_24.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 24.0\kpm_service.exe [525224 2024-01-16] (AO Kaspersky Lab -> AO Kaspersky Lab) R2 logi_lamparray_service; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_d70af0bfe61df9f0\logi_lamparray_service.exe [9887832 2024-03-08] (Logitech Inc -> Logitech, Inc.) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8884840 2024-04-09] (Malwarebytes Inc. -> Malwarebytes) S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [3073888 2024-04-09] (Malwarebytes Inc. -> Malwarebytes) R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_268e85175aa9e991\Display.NvContainer\NVDisplay.Container.exe [1275424 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation) S3 ProtonVPN Service; C:\Program Files\Proton\VPN\v3.2.11\ProtonVPNService.exe [474824 2024-03-27] (Proton AG -> ProtonVPN) S3 ProtonVPN WireGuard; C:\Program Files\Proton\VPN\v3.2.11\ProtonVPN.WireGuardService.exe [474312 2024-03-27] (Proton AG -> ProtonVPN) R2 RTUsbSwSrvc; C:\WINDOWS\RTUWPSrvcMain.exe [933376 2024-02-10] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\NisSrv.exe [3191272 2024-04-07] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MsMpEng.exe [133688 2024-04-07] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WirelessKB850NotificationService; C:\WINDOWS\System32\WirelessKB850NotificationService.exe [176624 2018-05-14] (Microsoft Corporation -> Microsoft Corporation) ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 AmdTools64; C:\WINDOWS\System32\drivers\AmdTools64.sys [63392 2020-06-16] (Microsoft Windows Hardware Compatibility Publisher -> ) R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [237288 2022-08-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2024-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R1 klbackupdisk; C:\WINDOWS\system32\DRIVERS\klbackupdisk.sys [105280 2022-08-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [206600 2022-08-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [119568 2022-08-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [41656 2021-02-19] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab) R1 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [533040 2024-04-07] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klgse; C:\WINDOWS\System32\DRIVERS\klgse.sys [824528 2024-01-18] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klhk; C:\WINDOWS\system32\DRIVERS\klhk.sys [1999568 2024-01-18] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R3 klids; C:\ProgramData\Kaspersky Lab\AVP21.3\Bases\klids.sys [245144 2024-04-07] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1051184 2024-04-07] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [90896 2022-08-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [104728 2022-08-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [107328 2022-08-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [78088 2022-08-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [88328 2022-08-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [384656 2024-04-07] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [354640 2024-04-07] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [183120 2024-04-07] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [262712 2024-04-07] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [150280 2022-08-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [325400 2022-08-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [294680 2022-08-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab) S3 logi_generic_hid_filter; C:\WINDOWS\system32\drivers\logi_generic_hid_filter.sys [62288 2023-06-17] (Logitech Inc -> Logitech) S3 logi_joy_bus_enum; C:\WINDOWS\system32\drivers\logi_joy_bus_enum.sys [44880 2023-06-17] (Logitech Inc -> Logitech) S3 logi_joy_hid_filter; C:\WINDOWS\system32\drivers\logi_joy_hid_filter.sys [63824 2023-06-17] (Logitech Inc -> Logitech) S3 logi_joy_hid_lo; C:\WINDOWS\system32\drivers\logi_joy_hid_lo.sys [51536 2023-06-17] (Logitech Inc -> Logitech) S3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [32080 2022-09-23] (Logitech Inc -> Logitech) S3 logi_joy_xlcore; C:\WINDOWS\system32\drivers\logi_joy_xlcore.sys [73040 2023-06-17] (Logitech Inc -> Logitech) R3 logi_lamparray; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_d70af0bfe61df9f0\logi_lamparray.sys [89176 2024-03-08] (Logitech Inc -> Logitech, Inc.) R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223296 2024-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2024-04-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt11.sys [234312 2024-04-09] (Malwarebytes Inc. -> Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [78400 2024-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2024-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [188784 2024-04-09] (Malwarebytes Inc. -> Malwarebytes) S3 ProtonVPNCallout; C:\Program Files\Proton\VPN\v3.2.11\Resources\ProtonVPN.CalloutDriver.sys [34176 2023-11-20] (Microsoft Windows Hardware Compatibility Publisher -> Proton Technologies AG) R3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [12128768 2024-02-10] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation) R0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20928 2024-04-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [603416 2024-04-07] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105752 2024-04-07] (Microsoft Windows -> Microsoft Corporation) S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2023-12-25] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC) S3 tapnordvpn; \SystemRoot\System32\drivers\tapnordvpn.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2024-04-09 17:31 - 2024-04-09 17:32 - 000020316 _____ C:\Users\miete\Desktop\FRST.txt 2024-04-09 17:30 - 2024-04-09 17:30 - 000001693 _____ C:\Users\miete\Desktop\Malwarebytes Raport ze skanowania 2024-04-09 152839.txt 2024-04-09 17:23 - 2024-04-09 17:23 - 000234312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt11.sys 2024-04-09 17:23 - 2024-04-09 17:23 - 000188784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2024-04-09 17:23 - 2024-04-09 17:23 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk 2024-04-09 17:23 - 2024-04-09 17:23 - 000002081 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2024-04-09 17:23 - 2024-04-09 17:23 - 000000000 ____D C:\Users\miete\AppData\Local\Malwarebytes 2024-04-09 17:23 - 2024-04-09 17:23 - 000000000 ____D C:\ProgramData\Malwarebytes 2024-04-09 17:23 - 2024-04-09 17:23 - 000000000 ____D C:\Program Files\Malwarebytes 2024-04-09 17:21 - 2024-04-09 17:22 - 308805952 _____ (Malwarebytes) C:\Users\miete\Desktop\MBSetup-076981.076981-5.1.2.109.exe 2024-04-09 15:20 - 2024-04-09 15:20 - 010339840 _____ (Vencord) C:\Users\miete\Desktop\VencordInstaller.exe 2024-04-09 15:18 - 2024-04-09 17:22 - 000000000 ____D C:\Users\miete\AppData\Local\Discord 2024-04-09 15:17 - 2024-04-09 15:17 - 000798244 _____ C:\WINDOWS\system32\perfh015.dat 2024-04-09 15:17 - 2024-04-09 15:17 - 000158294 _____ C:\WINDOWS\system32\perfc015.dat 2024-04-08 22:46 - 2024-04-08 22:49 - 000000598 _____ C:\Users\miete\Downloads\LastActivityView.cfg 2024-04-08 22:18 - 2024-04-08 22:18 - 000000135 _____ C:\Users\miete\Documents\123.bat 2024-04-08 22:18 - 2024-04-08 22:18 - 000000131 _____ C:\Users\miete\Documents\321.bat 2024-04-08 21:10 - 2024-04-08 21:10 - 002373676 _____ C:\Users\miete\Downloads\7rs8gxtp.jar 2024-04-08 15:12 - 2024-04-08 17:59 - 000000000 ____D C:\Users\miete\AppData\Roaming\obs-studio 2024-04-08 15:12 - 2024-04-08 15:12 - 000001052 _____ C:\Users\Public\Desktop\OBS Studio.lnk 2024-04-08 15:12 - 2024-04-08 15:12 - 000000000 ____D C:\ProgramData\obs-studio-hook 2024-04-08 15:12 - 2024-04-08 15:12 - 000000000 ____D C:\ProgramData\obs-studio 2024-04-08 15:11 - 2024-04-08 15:12 - 000000000 ____D C:\Program Files\obs-studio 2024-04-08 15:10 - 2024-04-08 15:11 - 133300408 _____ (OBS Project) C:\Users\miete\Desktop\OBS-Studio-30.1.2-Full-Installer-x64.exe 2024-04-08 13:52 - 2024-04-08 13:52 - 000000000 ___HD C:\Users\miete\Documents\$Temp 2024-04-08 13:47 - 2024-04-08 13:47 - 000000000 ___RD C:\Users\miete\Proton Drive 2024-04-08 13:42 - 2024-04-08 13:42 - 000001158 _____ C:\Users\Public\Desktop\Proton Drive.lnk 2024-04-08 13:42 - 2024-04-08 13:42 - 000000000 ____D C:\Users\miete\AppData\Local\Proton 2024-04-08 13:42 - 2024-04-08 13:42 - 000000000 ____D C:\Program Files (x86)\Proton 2024-04-08 13:41 - 2024-04-08 14:02 - 000000000 ____D C:\Users\miete\AppData\Local\ProtonVPN 2024-04-08 13:41 - 2024-04-08 13:42 - 000001050 _____ C:\Users\Public\Desktop\Proton VPN.lnk 2024-04-08 13:41 - 2024-04-08 13:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Proton 2024-04-08 13:41 - 2024-04-08 13:42 - 000000000 ____D C:\Program Files\Proton 2024-04-08 08:20 - 2024-04-08 08:20 - 000001076 _____ C:\Users\Public\Desktop\liquidlauncher.lnk 2024-04-08 08:20 - 2024-04-08 08:20 - 000000000 ____D C:\Users\miete\AppData\Roaming\CCBlueX 2024-04-08 08:20 - 2024-04-08 08:20 - 000000000 ____D C:\Users\miete\AppData\Local\net.ccbluex.liquidlauncher 2024-04-08 08:20 - 2024-04-08 08:20 - 000000000 ____D C:\Program Files\liquidlauncher 2024-04-08 08:19 - 2024-04-08 08:19 - 007749632 _____ C:\Users\miete\Desktop\liquidlauncher_0.2.5_x64_en-US.msi 2024-04-07 21:52 - 2024-04-07 21:52 - 000000000 ____D C:\Users\miete\AppData\Local\Backup 2024-04-07 21:18 - 2024-04-07 21:18 - 000000000 ____D C:\Users\miete\AppData\Roaming\Microsoft\MMC 2024-04-07 20:41 - 2024-04-07 20:41 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools 2024-04-07 20:40 - 2024-04-07 20:41 - 000000000 ____D C:\WINDOWS\system32\MRT 2024-04-07 19:58 - 2024-04-07 19:58 - 000000000 ____D C:\Users\miete\AppData\Local\ToastNotificationManagerCompat 2024-04-07 19:57 - 2024-03-19 13:12 - 000041024 _____ (TEFINCOM S.A.) C:\WINDOWS\Nord.Setup.dll 2024-04-07 19:37 - 2024-04-07 19:37 - 000000000 ____D C:\Users\miete\AppData\Roaming\.feather 2024-04-07 19:36 - 2024-04-08 20:17 - 000000000 ____D C:\Users\miete\AppData\Roaming\Feather Launcher 2024-04-07 19:36 - 2024-04-07 19:36 - 000001986 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Feather Launcher.lnk 2024-04-07 19:36 - 2024-04-07 19:36 - 000001974 _____ C:\Users\Public\Desktop\Feather Launcher.lnk 2024-04-07 19:36 - 2024-04-07 19:36 - 000000000 ____D C:\Users\miete\AppData\Local\feather-launcher-updater 2024-04-07 19:36 - 2024-04-07 19:36 - 000000000 ____D C:\Program Files\Feather Launcher 2024-04-07 16:52 - 2024-04-09 15:28 - 000000000 ____D C:\WINDOWS\Panther 2024-04-07 13:54 - 2024-04-07 13:54 - 002373676 _____ C:\Users\miete\Desktop\marlowoptimizer.jar 2024-04-07 13:28 - 2024-04-07 20:04 - 000000000 ____D C:\ProgramData\Package Cache 2024-04-07 13:28 - 2024-04-07 13:28 - 000001374 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Password Manager.lnk 2024-04-07 13:28 - 2024-04-07 13:28 - 000001370 _____ C:\Users\Public\Desktop\Kaspersky Password Manager.lnk 2024-04-07 13:28 - 2024-04-07 13:28 - 000000000 ____D C:\Users\miete\AppData\Local\Kaspersky Lab 2024-04-07 13:28 - 2024-04-07 13:28 - 000000000 ____D C:\Users\Default\AppData\Local\Kaspersky Lab 2024-04-07 13:28 - 2024-04-07 13:28 - 000000000 ____D C:\Program Files (x86)\dotnet 2024-04-07 13:27 - 2024-04-07 19:39 - 000000000 ____D C:\ProgramData\Kaspersky Lab 2024-04-07 13:27 - 2024-04-07 19:39 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab 2024-04-07 13:27 - 2024-04-07 13:27 - 000002280 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus.lnk 2024-04-07 13:27 - 2024-04-07 13:27 - 000002148 _____ C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk 2024-04-07 13:27 - 2024-04-07 13:27 - 000000000 ____D C:\Program Files\Common Files\AV 2024-04-07 13:27 - 2021-02-19 21:09 - 000110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll 2024-04-07 13:26 - 2024-04-07 13:26 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files 2024-04-07 13:24 - 2024-04-07 13:26 - 000000000 ____D C:\Users\miete\AppData\Roaming\Vencord 2024-04-07 12:51 - 2024-04-07 12:51 - 000000000 ____D C:\Users\miete\AppData\Roaming\Godot 2024-04-07 12:45 - 2024-04-07 12:45 - 000000223 _____ C:\Users\miete\Desktop\Buckshot Roulette.url 2024-04-07 12:27 - 2024-04-07 12:27 - 000000000 ____D C:\Users\miete\AppData\Local\NVIDIA 2024-04-07 12:21 - 2024-04-07 12:22 - 000000000 ____D C:\WINDOWS\ServiceProfiles 2024-04-07 12:21 - 2024-04-07 12:21 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs 2024-04-07 12:21 - 2024-04-07 12:21 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView 2024-04-07 12:21 - 2024-04-07 12:21 - 000000000 ____D C:\WINDOWS\InboxApps 2024-04-07 12:18 - 2024-04-07 12:18 - 000060462 _____ C:\WINDOWS\SysWOW64\ctac.json 2024-04-07 12:18 - 2024-04-07 12:18 - 000024320 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json 2024-04-07 12:17 - 2024-04-07 12:17 - 000060462 _____ C:\WINDOWS\system32\ctac.json 2024-04-07 12:17 - 2024-04-07 12:17 - 000024320 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json 2024-04-07 12:16 - 2024-04-07 12:16 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2024-04-07 12:16 - 2024-04-07 12:16 - 000000000 ____D C:\Program Files\Reference Assemblies 2024-04-07 12:16 - 2024-04-07 12:16 - 000000000 ____D C:\Program Files\MSBuild 2024-04-07 12:16 - 2024-04-07 12:16 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies 2024-04-07 12:16 - 2024-04-07 12:16 - 000000000 ____D C:\Program Files (x86)\MSBuild 2024-04-07 12:15 - 2024-04-07 12:15 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp 2024-04-07 12:15 - 2024-04-07 12:15 - 000000000 ____D C:\WINDOWS\addins 2024-04-07 12:15 - 2024-04-07 12:15 - 000000000 ____D C:\Program Files\KeyboardNotification 2024-04-07 12:15 - 2024-04-07 11:28 - 000000000 ____D C:\WINDOWS\system32\FxsTmp 2024-04-07 12:14 - 2024-04-07 12:14 - 000008192 _____ C:\WINDOWS\system32\config\userdiff 2024-04-07 12:06 - 2024-04-07 12:06 - 000000000 ____D C:\ProgramData\Oracle 2024-04-07 12:05 - 2024-04-07 12:05 - 002348136 _____ (Oracle Corporation) C:\Users\miete\Desktop\JavaSetup8u401.exe 2024-04-07 12:05 - 2024-04-07 12:05 - 000000000 ____D C:\Users\miete\AppData\Roaming\Sun 2024-04-07 12:05 - 2024-04-07 12:05 - 000000000 ____D C:\Program Files (x86)\Java 2024-04-07 12:05 - 2023-12-19 13:01 - 000170624 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2024-04-07 11:59 - 2024-04-07 12:02 - 000000000 ___HD C:\$SysReset 2024-04-07 11:51 - 2024-04-09 17:13 - 000000000 ____D C:\Users\miete\AppData\Roaming\.minecraft 2024-04-07 11:48 - 2024-04-07 11:54 - 000000000 ____D C:\Users\miete\AppData\Local\MinecraftInstaller 2024-04-07 11:48 - 2024-04-07 11:48 - 000004430 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled assistant Autoupdate 1712483304 2024-04-07 11:48 - 2024-04-07 11:48 - 000000000 ____D C:\Users\miete\AppData\Local\Comms 2024-04-07 11:47 - 2024-04-07 11:47 - 000000000 ____D C:\Users\miete\AppData\Local\Opera Software 2024-04-07 11:46 - 2024-04-07 11:48 - 000004212 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1712483162 2024-04-07 11:46 - 2024-04-07 11:48 - 000001434 _____ C:\Users\miete\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Przeglądarka Opera GX.lnk 2024-04-07 11:45 - 2024-04-07 11:45 - 000000219 _____ C:\Users\miete\Desktop\Counter-Strike 2.url 2024-04-07 11:45 - 2024-04-07 11:45 - 000000000 ____D C:\Users\miete\AppData\Roaming\Opera Software 2024-04-07 11:43 - 2024-04-07 11:43 - 000000000 ____D C:\Users\miete\AppData\Roaming\NVIDIA 2024-04-07 11:43 - 2024-04-07 11:43 - 000000000 ____D C:\Users\miete\AppData\Local\VirtualStore 2024-04-07 11:42 - 2024-04-09 17:26 - 000000000 ____D C:\Program Files (x86)\Steam 2024-04-07 11:42 - 2024-04-07 11:44 - 000000000 ____D C:\Users\miete\AppData\Local\Steam 2024-04-07 11:42 - 2024-04-07 11:42 - 000001032 _____ C:\Users\Public\Desktop\Steam.lnk 2024-04-07 11:42 - 2024-04-07 11:42 - 000000000 ____D C:\Users\miete\AppData\Local\CEF 2024-04-07 11:41 - 2024-04-09 16:22 - 000000000 ____D C:\Users\miete\AppData\Roaming\discord 2024-04-07 11:41 - 2024-04-09 15:19 - 000002227 _____ C:\Users\miete\Desktop\Discord.lnk 2024-04-07 11:41 - 2024-04-09 15:18 - 000000000 ____D C:\Users\miete\AppData\Local\SquirrelTemp 2024-04-07 11:41 - 2024-04-07 11:41 - 002378560 _____ C:\Users\miete\Downloads\SteamSetup.exe 2024-04-07 11:39 - 2024-04-07 11:39 - 000000000 ____D C:\Users\miete\AppData\Local\OneDrive 2024-04-07 11:38 - 2024-04-09 17:26 - 000000000 ____D C:\Users\miete\AppData\Local\D3DSCache 2024-04-07 11:38 - 2024-04-07 13:36 - 000000000 ____D C:\Users\miete\AppData\Local\PlaceholderTileLogoFolder 2024-04-07 11:38 - 2024-04-07 11:38 - 000000000 ____D C:\ProgramData\Microsoft OneDrive 2024-04-07 11:36 - 2024-04-09 15:19 - 000000000 ____D C:\Users\miete\AppData\Local\Packages 2024-04-07 11:36 - 2024-04-07 18:14 - 000000000 ____D C:\Users\miete\AppData\Local\ConnectedDevicesPlatform 2024-04-07 11:36 - 2024-04-07 13:24 - 000000000 ____D C:\ProgramData\Packages 2024-04-07 11:36 - 2024-04-07 11:36 - 000000020 ___SH C:\Users\miete\ntuser.ini 2024-04-07 11:36 - 2024-04-07 11:36 - 000000000 ____D C:\Users\miete\AppData\Roaming\Microsoft\Network 2024-04-07 11:36 - 2024-04-07 11:36 - 000000000 ____D C:\Users\miete\AppData\Roaming\Adobe 2024-04-07 11:36 - 2024-04-07 11:36 - 000000000 ____D C:\Users\miete\AppData\Local\Publishers 2024-04-07 11:28 - 2024-04-09 15:17 - 001797776 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2024-04-07 11:27 - 2024-04-07 11:27 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2024-04-07 11:27 - 2024-04-07 11:27 - 000003472 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1da88cd48d1b369 2024-04-07 11:26 - 2024-04-09 15:10 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2024-04-07 11:26 - 2024-04-07 13:38 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2024-04-07 11:26 - 2024-04-07 11:26 - 000000000 _SHDL C:\Users\Default\AppData\Local\Tymczasowe pliki internetowe 2024-04-07 11:26 - 2024-04-07 11:26 - 000000000 _SHDL C:\Users\Default\AppData\Local\Historia 2024-04-07 11:26 - 2024-04-07 11:26 - 000000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji 2024-04-07 11:26 - 2024-04-07 11:26 - 000000000 _SHDL C:\ProgramData\Szablony 2024-04-07 11:26 - 2024-04-07 11:26 - 000000000 _SHDL C:\ProgramData\Pulpit 2024-04-07 11:26 - 2024-04-07 11:26 - 000000000 _SHDL C:\ProgramData\Menu Start 2024-04-07 11:26 - 2024-04-07 11:26 - 000000000 _SHDL C:\ProgramData\Dokumenty 2024-04-07 11:26 - 2024-04-07 11:26 - 000000000 _SHDL C:\ProgramData\Dane aplikacji 2024-04-07 11:25 - 2024-04-08 22:53 - 000000000 ____D C:\WINDOWS\RTUWPSrvcMain 2024-04-07 11:25 - 2024-04-08 13:47 - 000000000 ____D C:\Users\miete 2024-04-07 11:25 - 2024-04-07 11:39 - 000000000 ____D C:\Users\miete\AppData\Roaming\Microsoft\Spelling 2024-04-07 11:25 - 2024-04-07 11:36 - 000000000 ____D C:\Users\miete\AppData\Roaming\Microsoft\Windows 2024-04-07 11:25 - 2024-04-07 11:25 - 000000000 _SHDL C:\Users\miete\Ustawienia lokalne 2024-04-07 11:25 - 2024-04-07 11:25 - 000000000 _SHDL C:\Users\miete\Szablony 2024-04-07 11:25 - 2024-04-07 11:25 - 000000000 _SHDL C:\Users\miete\Moje dokumenty 2024-04-07 11:25 - 2024-04-07 11:25 - 000000000 _SHDL C:\Users\miete\Menu Start 2024-04-07 11:25 - 2024-04-07 11:25 - 000000000 _SHDL C:\Users\miete\Documents\Moje wideo 2024-04-07 11:25 - 2024-04-07 11:25 - 000000000 _SHDL C:\Users\miete\Documents\Moje obrazy 2024-04-07 11:25 - 2024-04-07 11:25 - 000000000 _SHDL C:\Users\miete\Documents\Moja muzyka 2024-04-07 11:25 - 2024-04-07 11:25 - 000000000 _SHDL C:\Users\miete\Dane aplikacji 2024-04-07 11:25 - 2024-04-07 11:25 - 000000000 _SHDL C:\Users\miete\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2024-04-07 11:25 - 2024-04-07 11:25 - 000000000 _SHDL C:\Users\miete\AppData\Local\Tymczasowe pliki internetowe 2024-04-07 11:25 - 2024-04-07 11:25 - 000000000 _SHDL C:\Users\miete\AppData\Local\Historia 2024-04-07 11:25 - 2024-04-07 11:25 - 000000000 _SHDL C:\Users\miete\AppData\Local\Dane aplikacji 2024-04-07 11:25 - 2024-04-07 11:25 - 000000000 ____D C:\Users\miete\AppData\Roaming\Microsoft\SystemCertificates 2024-04-07 11:25 - 2024-04-07 11:25 - 000000000 ____D C:\Users\miete\AppData\Roaming\Microsoft\Crypto 2024-04-07 11:23 - 2024-04-09 16:09 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2024-04-07 11:23 - 2024-04-09 15:10 - 000012288 ___SH C:\DumpStack.log.tmp 2024-04-07 11:23 - 2024-04-09 15:10 - 000000000 ____D C:\ProgramData\NVIDIA 2024-04-07 11:23 - 2024-04-07 13:28 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2024-04-07 11:23 - 2024-04-07 11:28 - 000002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2024-04-07 11:23 - 2024-04-07 11:23 - 000296160 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2024-04-07 11:23 - 2024-04-07 11:23 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation 2024-04-07 11:23 - 2024-04-07 11:23 - 000000000 ____D C:\WINDOWS\system32\config\BFS 2024-04-06 19:53 - 2024-04-09 17:32 - 000000000 ____D C:\FRST 2024-04-06 19:53 - 2024-04-09 17:31 - 000000000 ____D C:\Users\miete\Desktop\FRST-OlderVersion 2024-04-06 13:34 - 2024-04-09 17:31 - 002394112 _____ (Farbar) C:\Users\miete\Desktop\FRST64.exe 2024-04-06 13:33 - 2024-04-06 13:33 - 014209528 _____ C:\Users\miete\Desktop\mb-support-1.9.10.1005.exe 2024-04-06 13:30 - 2024-04-06 13:30 - 008790880 _____ (Malwarebytes) C:\Users\miete\Desktop\adwcleaner.exe 2024-04-06 09:35 - 2024-04-06 09:35 - 000447546 _____ (Fabric Team) C:\Users\miete\Desktop\fabric-installer-1.0.0.exe 2024-04-06 08:57 - 2024-04-06 08:57 - 000000000 ____D C:\Users\miete\Desktop\cf liquid 2024-04-05 22:18 - 2024-04-05 22:18 - 007777656 _____ (ESET) C:\Users\miete\Desktop\sysinspector_nt64.exe 2024-04-05 19:19 - 2024-04-05 20:02 - 000000000 ____D C:\baritone 2024-04-05 19:19 - 2024-04-05 19:19 - 000000000 ____D C:\shaderpacks 2024-04-05 19:19 - 2024-04-05 19:19 - 000000000 ____D C:\resourcepacks 2024-04-05 17:40 - 2024-04-05 17:40 - 000000000 ____D C:\Users\miete\Desktop\lequid 2024-04-05 14:55 - 2023-02-25 14:58 - 000000000 ____D C:\Users\miete\Downloads\SuperPaczek 2024-04-04 23:05 - 2024-04-08 08:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\liquidlauncher 2024-04-04 16:17 - 2024-04-03 03:54 - 000121880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys 2024-04-04 16:16 - 2024-04-03 15:53 - 002031464 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe 2024-04-04 16:16 - 2024-04-03 15:53 - 002031464 _____ C:\WINDOWS\system32\vulkaninfo.exe 2024-04-04 16:16 - 2024-04-03 15:53 - 001578752 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2024-04-04 16:16 - 2024-04-03 15:53 - 001578752 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2024-04-04 16:16 - 2024-04-03 15:53 - 001487904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2024-04-04 16:16 - 2024-04-03 15:53 - 001445224 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll 2024-04-04 16:16 - 2024-04-03 15:53 - 001445224 _____ C:\WINDOWS\system32\vulkan-1.dll 2024-04-04 16:16 - 2024-04-03 15:53 - 001295104 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll 2024-04-04 16:16 - 2024-04-03 15:53 - 001295104 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2024-04-04 16:16 - 2024-04-03 15:53 - 001226864 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2024-04-04 16:16 - 2024-04-03 15:50 - 001543712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2024-04-04 16:16 - 2024-04-03 15:50 - 001199624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2024-04-04 16:16 - 2024-04-03 15:50 - 001046040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll 2024-04-04 16:16 - 2024-04-03 15:50 - 000841736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe 2024-04-04 16:16 - 2024-04-03 15:50 - 000670240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll 2024-04-04 16:16 - 2024-04-03 15:50 - 000505352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll 2024-04-04 16:16 - 2024-04-03 15:49 - 012929568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2024-04-04 16:16 - 2024-04-03 15:49 - 002174496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2024-04-04 16:16 - 2024-04-03 15:49 - 001626120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2024-04-04 16:16 - 2024-04-03 15:49 - 001024544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2024-04-04 16:16 - 2024-04-03 15:49 - 000787464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2024-04-04 16:16 - 2024-04-03 15:49 - 000459272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe 2024-04-04 16:16 - 2024-04-03 15:48 - 016034848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2024-04-04 16:16 - 2024-04-03 15:48 - 006780960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2024-04-04 16:16 - 2024-04-03 15:48 - 005913200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2024-04-04 16:16 - 2024-04-03 15:48 - 005773344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll 2024-04-04 16:16 - 2024-04-03 15:48 - 003721224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2024-04-04 16:16 - 2024-04-03 15:48 - 000853008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe 2024-04-04 16:16 - 2024-04-03 15:47 - 006948672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2024-04-04 16:16 - 2024-04-03 15:47 - 006034736 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2024-04-04 16:16 - 2024-04-03 03:54 - 000119466 _____ C:\WINDOWS\system32\nvinfo.pb 2024-03-30 23:23 - 2024-04-03 20:15 - 000000000 ____D C:\Users\miete\Documents\LATWITY 2024-03-30 08:49 - 2024-03-30 08:49 - 000000000 ____D C:\Users\miete\AppData\LocalLow\Unknown Worlds 2024-03-28 21:57 - 2024-04-06 08:48 - 000000000 ____D C:\Riot Games 2024-03-28 21:57 - 2024-04-06 08:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games 2024-03-28 21:57 - 2024-03-28 21:57 - 000000000 ____D C:\Users\miete\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Riot Games 2024-03-28 09:11 - 2024-04-05 16:03 - 000000000 ____D C:\Users\miete\Documents\mody L 2024-03-27 21:52 - 2024-03-28 21:43 - 475844317 _____ C:\Users\miete\Documents\ciwdupe.json 2024-03-23 09:48 - 2024-03-23 10:06 - 000000000 ____D C:\Users\miete\Documents\Need For Speed(TM) Unbound 2024-03-14 21:45 - 2024-03-14 21:45 - 000000000 ____D C:\Users\miete\curseforge 2024-03-10 20:09 - 2024-04-08 15:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2024-04-09 17:23 - 2022-05-07 07:24 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2024-04-09 17:23 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemTemp 2024-04-09 17:23 - 2022-05-07 07:22 - 000000000 ____D C:\WINDOWS\INF 2024-04-09 16:45 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2024-04-09 15:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\AppReadiness 2024-04-09 15:27 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps 2024-04-09 15:18 - 2024-02-10 01:06 - 000000000 ____D C:\Users\miete\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc 2024-04-08 22:53 - 2022-05-07 07:17 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2024-04-08 22:43 - 2023-03-28 12:20 - 000133448 _____ (NirSoft) C:\Users\miete\Downloads\LastActivityView.exe 2024-04-08 21:46 - 2022-05-07 07:17 - 000000000 ____D C:\WINDOWS\CbsTemp 2024-04-07 21:51 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\appcompat 2024-04-07 21:07 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\NDF 2024-04-07 16:26 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth 2024-04-07 13:37 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Windows Defender 2024-04-07 13:27 - 2022-05-07 07:17 - 000008192 _____ C:\WINDOWS\system32\config\ELAM 2024-04-07 13:24 - 2024-02-14 18:03 - 000000000 ____D C:\XboxGames 2024-04-07 12:22 - 2022-05-07 07:28 - 000000000 ____D C:\WINDOWS\Setup 2024-04-07 12:22 - 2022-05-07 07:24 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template 2024-04-07 12:22 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase 2024-04-07 12:21 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\SysWOW64\pl 2024-04-07 12:21 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\system32\pl 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\system32\UNP 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\WUModels 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\UUS 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\setup 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemResources 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemApps 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\vi-VN 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\Sgrm 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\setup 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\migwiz 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\lv-LV 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\lt-LT 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\id-ID 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\gl-ES 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\eu-ES 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\et-EE 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\es-MX 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\Dism 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\DDFs 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\ca-ES 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\appraiser 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ShellExperiences 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ShellComponents 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\Provisioning 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\DiagTrack 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\BrowserCore 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\bcastdvr 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate 2024-04-07 12:21 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\System 2024-04-07 12:20 - 2022-05-07 12:40 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll 2024-04-07 12:20 - 2022-05-07 12:40 - 000023775 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2024-04-07 12:20 - 2022-05-07 07:25 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll 2024-04-07 12:20 - 2022-05-07 07:24 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll 2024-04-07 12:16 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI 2024-04-07 12:16 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\MUI 2024-04-07 12:15 - 2022-05-07 12:40 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2024-04-07 12:15 - 2022-05-07 12:40 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2024-04-07 12:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm 2024-04-07 12:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN 2024-04-07 12:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr 2024-04-07 12:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2024-04-07 12:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\system32\winrm 2024-04-07 12:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\system32\WCN 2024-04-07 12:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\system32\slmgr 2024-04-07 12:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2024-04-07 12:15 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2024-04-07 12:15 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\system32\F12 2024-04-07 12:15 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2024-04-07 12:15 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files (x86)\Windows Defender 2024-04-07 12:05 - 2024-02-10 15:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2024-04-07 11:52 - 2022-05-07 07:24 - 000000000 ___RD C:\WINDOWS\PrintDialog 2024-04-07 11:52 - 2022-05-07 07:17 - 000000000 ____D C:\WINDOWS\servicing 2024-04-07 11:42 - 2024-02-10 01:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2024-04-07 11:39 - 2024-02-10 00:40 - 000000000 ___RD C:\Users\miete\OneDrive 2024-04-07 11:36 - 2024-02-10 00:39 - 000000000 __RHD C:\Users\Public\AccountPictures 2024-04-07 11:36 - 2022-05-07 07:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2024-04-07 11:28 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\spool 2024-04-07 11:28 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\oobe 2024-04-07 11:27 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\AppLocker 2024-04-07 11:26 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Windows NT 2024-04-07 11:25 - 2024-02-10 01:13 - 000000000 ____D C:\Users\miete\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2024-04-07 11:23 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ServiceState 2024-04-02 13:27 - 2024-02-18 11:39 - 000000000 ____D C:\Users\miete\Documents\Medal 2024-04-02 13:27 - 2024-02-18 11:39 - 000000000 ____D C:\Medal ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) ==================== Koniec FRST.txt ========================