Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 22-06-2019 Uruchomiony przez Tomasz (administrator) TYMEK (MSI MS-7918) (23-06-2019 13:07:06) Uruchomiony z C:\Users\Tomasz\Downloads Załadowane profile: Tomasz (Dostępne profile: Tomasz & Administrator) Platform: Windows 8.1 Pro (Update) (X64) Język: Polski (Polska) Domyślna przeglądarka: Chrome Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) () [Brak podpisu cyfrowego] C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Brother Industries, Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Browny02\BrYNSvc.exe (Brother Industries, Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe (Brother Industries, Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe (Creative Technology Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Ivaylo Beltchev -> IvoSoft) [Brak podpisu cyfrowego] C:\Program Files\Classic Shell\ClassicStartMenu.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO.,LTD.) C:\Program Files (x86)\MSI\Fast Boot\FastBoot.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe (NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (Qualcomm Atheros) [Brak podpisu cyfrowego] C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Sony Imaging Products & Solutions Inc. -> Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe (Sony Imaging Products & Solutions Inc. -> Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7637208 2015-01-17] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [MBCfg64] => C:\Windows\system32\MBCfg64.dll [41088 2014-02-21] (Creative Technology Ltd -> Creative Technology Ltd.) HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (Ivaylo Beltchev -> IvoSoft) [Brak podpisu cyfrowego] HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated -> Adobe Systems Incorporated) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1903224 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation) HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe" HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2849872 2019-05-04] (Adobe Inc. -> Adobe Systems, Incorporated) HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [797648 2014-11-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> ) HKLM-x32\...\Run: [Fast Boot] => C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe [764472 2012-09-19] (MICRO-STAR INTERNATIONAL CO., LTD. -> ) HKLM-x32\...\Run: [Sound Blaster Cinema 2] => C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe [1442304 2014-05-29] (Creative Technology Ltd) [Brak podpisu cyfrowego] HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) [Brak podpisu cyfrowego] HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated) HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2013-05-14] (Brother Industries, Ltd.) [Brak podpisu cyfrowego] HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4522496 2012-12-27] (Brother Industries, Ltd.) [Brak podpisu cyfrowego] HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [868328 2018-12-21] (Sony Imaging Products & Solutions Inc. -> Sony Corporation) HKU\S-1-5-21-1854063861-834038236-3450837710-1001\...\Run: [DS3 Tool] => C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe [112400 2011-09-22] (Shenzhen Saikeware Technology Co., Ltd. -> www.motioninjoy.com) HKU\S-1-5-21-1854063861-834038236-3450837710-1001\...\MountPoints2: {569c9781-9e60-11e4-8257-448a5bd1adb7} - "G:\LaunchU3.exe" -a HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\75.0.3770.100\Installer\chrmstp.exe [2019-06-23] (Google LLC -> Google LLC) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2019-05-03] (Adobe Inc. -> Adobe Systems, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2015-01-17] ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{FC2CA280-7EF3-41C9-AD8D-E4CEC4726E5D}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Rivet Networks LLC -> Flexera Software LLC) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {01169A72-89D1-435E-A65A-CC20760F0FB2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2015-02-20] (Google Inc -> Google Inc.) Task: {089B4CFB-2036-45C4-9F1C-D50263C6F130} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [5496600 2015-01-20] (Piriform Ltd -> Piriform Ltd) Task: {1253C724-E09A-4BEF-973D-31BD889B630A} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [946296 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation) Task: {144D7B3A-0B36-4BFF-B0A7-FBA9FA40B937} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616320 2018-01-08] (Apple Inc. -> Apple Inc.) Task: {1E803638-BA51-40E1-A614-71C1D23F3B80} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1704568 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation) Task: {2AD69660-AA20-483A-AECB-E3738B5F41EA} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [649336 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation) Task: {309AF3FB-AE6E-46DD-A4F8-62C1C91D6C93} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436856 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation) Task: {33BD27EA-A9A1-486A-9B71-471774D0E5C0} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1} Task: {381DC6CA-8BBF-4DAD-A0FA-F67F57852F8C} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [732280 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation) Task: {436776DA-6A08-4D07-BEDF-55B654E1130A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Task: {496F325F-E5D0-4BE8-B584-F7E53B730BBA} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1626328 2014-01-23] (Microsoft Corporation -> Microsoft Corporation) Task: {4FD2F4C1-BAF6-46F4-8D8C-A7CE69451C1A} - System32\Tasks\AdobeGCInvoker-1.0-Tymek-Tomasz => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2849872 2019-05-04] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {556E330D-28BB-4222-B14B-D91FAF1C5F6D} - System32\Tasks\AdobeAAMUpdater-1.0-Tymek-Tomasz => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated -> Adobe Systems Incorporated) Task: {76DE9DE4-CFB6-436A-A4DC-F71AABF8338B} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [732280 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation) Task: {7A38B664-8CDE-46DC-A22B-A8FB10A3DAB6} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation) Task: {830BF1BF-6914-4F2B-BE70-E9E7E25EEB5B} - System32\Tasks\{D0341BA8-FB9E-4C20-9CE2-F87ADD8EC26C} => C:\Windows\system32\pcalua.exe -a "C:\Users\Tomasz\Desktop\AimersoftVideoConverter LEGALNY\Setup.exe" -d "C:\Users\Tomasz\Desktop\AimersoftVideoConverter LEGALNY" Task: {8EEE5A42-781D-48CA-A53A-4928AEF2053E} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [649336 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation) Task: {A3365F70-E4AE-4BEB-80E4-5CE1D0E3B314} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation) Task: {C6DF921B-0086-4EB8-83D3-1736B03457CF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2015-02-20] (Google Inc -> Google Inc.) Task: {E3D94130-5EC0-4EA2-BAE0-83C7F4F7F5EA} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation) Task: {F31C0C99-89C1-4BBB-9096-B526C707B1AA} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Tymek-Tomasz Tymek => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [470712 2015-01-21] (Microsoft Corporation -> Microsoft Corporation) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{6AE88442-CD1F-4627-957A-9F8E6D58FFF3}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{77D64778-D833-4A99-AB45-76A5969DDC91}: [DhcpNameServer] 172.20.10.1 Internet Explorer: ================== HKU\S-1-5-21-1854063861-834038236-3450837710-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-01-21] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation -> Microsoft Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-10-15] (Microsoft Corporation -> Microsoft Corporation) Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll Brak pliku FireFox: ======== FF ProfilePath: C:\Users\Tomasz\AppData\Roaming\Mozilla\Firefox\Profiles\kca76ew1.default-1482360270345 [2017-01-20] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-12] (Adobe Systems Incorporated -> Adobe Systems) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-09-03] (Intel(R) Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-09-03] (Intel(R) Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [Brak pliku] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Brak pliku] FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Brak podpisu cyfrowego] FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Brak podpisu cyfrowego] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-05-03] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-12] (Adobe Systems Incorporated -> Adobe Systems) Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\Tomasz\AppData\Local\Google\Chrome\User Data\Default [2019-06-23] CHR Extension: (Prezentacje) - C:\Users\Tomasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12] CHR Extension: (Dokumenty) - C:\Users\Tomasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12] CHR Extension: (Dysk Google) - C:\Users\Tomasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21] CHR Extension: (YouTube) - C:\Users\Tomasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-29] CHR Extension: (Adblock Plus - darmowy adblocker) - C:\Users\Tomasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-04-20] CHR Extension: (Google Search) - C:\Users\Tomasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Arkusze) - C:\Users\Tomasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12] CHR Extension: (Dokumenty Google offline) - C:\Users\Tomasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-17] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Tomasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03] CHR Extension: (Gmail) - C:\Users\Tomasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-15] CHR Extension: (Chrome Media Router) - C:\Users\Tomasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-06-23] CHR Profile: C:\Users\Tomasz\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-01-20] CHR Profile: C:\Users\Tomasz\AppData\Local\Google\Chrome\User Data\System Profile [2019-06-05] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated) R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3117648 2019-05-04] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2888272 2019-05-04] (Adobe Inc. -> Adobe Systems, Incorporated) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2019-04-29] (Apple Inc. -> Apple Inc.) R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2012-10-26] (Brother Industries, Ltd.) [Brak podpisu cyfrowego] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel® Trusted Connect Service -> Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-09-03] (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) S3 MSIBIOSData_CC; C:\Program Files (x86)\MSI\Command Center\BIOSData\MSIBIOSDataService.exe [2099712 2014-10-21] (MSI) [Brak podpisu cyfrowego] S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [4026880 2014-09-26] (MSI) [Brak podpisu cyfrowego] S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2117632 2014-11-05] () [Brak podpisu cyfrowego] S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4157440 2014-09-26] () [Brak podpisu cyfrowego] R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [1993216 2014-09-26] () [Brak podpisu cyfrowego] S3 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2242048 2014-10-21] () [Brak podpisu cyfrowego] S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2063360 2014-07-28] () [Brak podpisu cyfrowego] S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [575488 2014-10-29] () [Brak podpisu cyfrowego] R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [103992 2012-10-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [493544 2018-12-21] (Sony Imaging Products & Solutions Inc. -> Sony Corporation) R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [386560 2014-12-10] (Qualcomm Atheros) [Brak podpisu cyfrowego] R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation) R2 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000 R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin" ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Broadcom Corporation -> Windows (R) Win 7 DDK provider) R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [98992 2014-11-18] (Qualcomm Atheros, Inc. -> Qualcomm Atheros, Inc.) S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) R3 Ke2200; C:\Windows\system32\DRIVERS\e22w8x64.sys [130224 2014-03-27] (Qualcomm Atheros, Inc. -> Qualcomm Atheros, Inc.) S3 L1E; C:\Windows\system32\DRIVERS\L1E62x64.sys [59904 2013-06-18] (Microsoft Windows -> Atheros Communications, Inc.) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [126976 2014-09-03] (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) S3 MotioninJoyXFilter; C:\Windows\System32\drivers\MijXfilt.sys [117520 2011-09-22] (Shenzhen Saikeware Technology Co., Ltd. -> MotioninJoy) S3 Netaapl; C:\Windows\system32\DRIVERS\netaapl64.sys [23040 2014-08-16] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.) R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [13368 2012-10-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 NTIOLib_MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\NTIOLib_X64.sys [13368 2012-11-20] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 NTIOLib_MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\NTIOLib_X64.sys [13368 2012-11-19] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 NTIOLib_MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\NTIOLib_X64.sys [13368 2012-11-20] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 NTIOLib_MSIFrequency_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\CPU_Frequency\NTIOLib_X64.sys [13368 2012-11-20] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 NTIOLib_MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\NTIOLib_X64.sys [13368 2012-11-19] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 NTIOLib_MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\NTIOLib_X64.sys [13368 2012-11-19] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation) R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [54896 2017-11-09] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [48248 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57976 2017-05-03] (NVIDIA Corporation -> NVIDIA Corporation) S3 RTL8023x64; C:\Windows\system32\DRIVERS\Rtnic64.sys [51712 2013-06-18] (Microsoft Windows -> Realtek Semiconductor Corporation ) S3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [4664080 2016-08-03] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation ) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2015-01-17] (Disc Soft Ltd -> Duplex Secure Ltd.) S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] (Empty Loop -> ) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.) S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation) S3 MSICDSetup; \??\E:\CDriver64.sys [X] S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-06-23 13:07 - 2019-06-23 13:07 - 000030951 _____ C:\Users\Tomasz\Downloads\FRST.txt 2019-06-23 13:04 - 2019-06-23 13:05 - 002418688 _____ (Farbar) C:\Users\Tomasz\Downloads\FRST64.exe 2019-06-19 12:41 - 2019-06-19 12:41 - 000002625 _____ C:\Users\Public\Desktop\BlackSys.lnk 2019-06-19 12:41 - 2019-06-19 12:41 - 000000000 ____D C:\Users\Tomasz\AppData\Roaming\BlackSys 2019-06-19 12:41 - 2019-06-19 12:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CH-100B Player 2019-06-19 12:41 - 2019-06-19 12:41 - 000000000 ____D C:\Program Files (x86)\BlackSys 2019-06-19 12:39 - 2019-06-19 12:39 - 000000000 ____D C:\Users\Tomasz\Downloads\BlackSys.0.1.4(EN) 2019-06-19 12:38 - 2019-06-19 12:39 - 002226835 _____ C:\Users\Tomasz\Downloads\BlackSys.0.1.4(EN).zip 2019-06-16 14:01 - 2019-06-16 14:01 - 000000000 ____D C:\Users\Tomasz\AppData\Local\TeamViewer 2019-06-16 14:00 - 2019-06-16 23:42 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2019-06-12 13:43 - 2019-06-12 13:43 - 000045961 _____ C:\Users\Tomasz\Downloads\Wyciag_dla_ROR_w_walucie__31.05.2019 (1).pdf 2019-06-12 13:22 - 2019-06-12 13:22 - 000045961 _____ C:\Users\Tomasz\Downloads\Wyciag_dla_ROR_w_walucie__31.05.2019.pdf 2019-06-12 12:45 - 2019-06-12 12:45 - 000061391 _____ C:\Users\Tomasz\Downloads\2019_05_20_00001076_ORIG.pdf 2019-06-12 11:48 - 2019-06-12 11:48 - 000043177 _____ C:\Users\Tomasz\Downloads\385495831640-6.pdf 2019-06-12 11:47 - 2019-06-12 11:47 - 000044078 _____ C:\Users\Tomasz\Downloads\2159675136026460_20190430 (1).pdf 2019-06-12 11:47 - 2019-06-12 11:47 - 000043891 _____ C:\Users\Tomasz\Downloads\2159675136026460_20190531.pdf 2019-06-12 11:46 - 2019-06-12 11:46 - 000058947 _____ C:\Users\Tomasz\Downloads\4901312825.pdf 2019-06-12 11:46 - 2019-06-12 11:46 - 000058843 _____ C:\Users\Tomasz\Downloads\4901312824.pdf 2019-06-12 11:40 - 2019-06-12 11:40 - 000020062 _____ C:\Users\Tomasz\Downloads\2019-04-01--2019-04-30_podsumowanie_faktury (1).pdf 2019-06-12 11:40 - 2019-06-12 11:40 - 000019861 _____ C:\Users\Tomasz\Downloads\2019-05-01--2019-05-31_podsumowanie_faktury.pdf 2019-06-12 10:23 - 2019-05-31 18:55 - 001265152 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2019-06-12 10:23 - 2019-05-31 18:54 - 000504832 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll 2019-06-12 10:23 - 2019-05-31 18:53 - 000394240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll 2019-06-12 10:23 - 2019-05-25 04:36 - 022373096 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2019-06-12 10:23 - 2019-05-25 04:30 - 000500464 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2019-06-12 10:23 - 2019-05-25 04:30 - 000394568 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2019-06-12 10:23 - 2019-05-25 04:30 - 000272184 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2019-06-12 10:23 - 2019-05-25 03:59 - 019790160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2019-06-12 10:23 - 2019-05-25 03:56 - 000370872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2019-06-12 10:23 - 2019-05-25 03:56 - 000344984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2019-06-12 10:23 - 2019-05-25 03:42 - 025733632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2019-06-12 10:23 - 2019-05-25 03:22 - 002903552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2019-06-12 10:23 - 2019-05-25 03:20 - 000579584 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2019-06-12 10:23 - 2019-05-25 03:10 - 000790528 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2019-06-12 10:23 - 2019-05-25 03:09 - 005776384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2019-06-12 10:23 - 2019-05-25 03:07 - 020275712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2019-06-12 10:23 - 2019-05-25 02:52 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2019-06-12 10:23 - 2019-05-25 02:50 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2019-06-12 10:23 - 2019-05-25 02:50 - 000145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2019-06-12 10:23 - 2019-05-25 02:45 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2019-06-12 10:23 - 2019-05-25 02:45 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2019-06-12 10:23 - 2019-05-25 02:42 - 002297344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2019-06-12 10:23 - 2019-05-25 02:40 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2019-06-12 10:23 - 2019-05-25 02:38 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2019-06-12 10:23 - 2019-05-25 02:38 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2019-06-12 10:23 - 2019-05-25 02:38 - 000381440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2019-06-12 10:23 - 2019-05-25 02:37 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2019-06-12 10:23 - 2019-05-25 02:36 - 002136064 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2019-06-12 10:23 - 2019-05-25 02:34 - 015311872 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2019-06-12 10:23 - 2019-05-25 02:31 - 000963072 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2019-06-12 10:23 - 2019-05-25 02:30 - 004858880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2019-06-12 10:23 - 2019-05-25 02:23 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2019-06-12 10:23 - 2019-05-25 02:23 - 000128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2019-06-12 10:23 - 2019-05-25 02:23 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2019-06-12 10:23 - 2019-05-25 02:22 - 004492800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2019-06-12 10:23 - 2019-05-25 02:20 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2019-06-12 10:23 - 2019-05-25 02:19 - 000551152 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys 2019-06-12 10:23 - 2019-05-25 02:17 - 013706240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2019-06-12 10:23 - 2019-05-25 02:17 - 001557504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2019-06-12 10:23 - 2019-05-25 02:17 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2019-06-12 10:23 - 2019-05-25 02:17 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll 2019-06-12 10:23 - 2019-05-25 02:16 - 000911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2019-06-12 10:23 - 2019-05-25 02:16 - 000333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2019-06-12 10:23 - 2019-05-25 02:15 - 002060288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2019-06-12 10:23 - 2019-05-25 02:15 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2019-06-12 10:23 - 2019-05-25 02:05 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2019-06-12 10:23 - 2019-05-25 02:02 - 004386304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2019-06-12 10:23 - 2019-05-25 01:59 - 001323008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2019-06-12 10:23 - 2019-05-25 01:56 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2019-06-12 10:23 - 2019-05-22 20:20 - 000120312 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll 2019-06-12 10:23 - 2019-05-22 19:50 - 000098320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll 2019-06-12 10:23 - 2019-05-21 03:42 - 001368592 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2019-06-12 10:23 - 2019-05-21 03:34 - 007362808 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2019-06-12 10:23 - 2019-05-21 02:57 - 001993728 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2019-06-12 10:23 - 2019-05-21 02:50 - 001383424 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2019-06-12 10:23 - 2019-05-21 02:49 - 001756160 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll 2019-06-12 10:23 - 2019-05-21 02:47 - 001560064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2019-06-12 10:23 - 2019-05-21 02:46 - 001085952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2019-06-12 10:23 - 2019-05-21 02:45 - 001494016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll 2019-06-12 10:23 - 2019-05-17 06:47 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll 2019-06-12 10:23 - 2019-05-17 06:07 - 000046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll 2019-06-12 10:23 - 2019-05-16 20:23 - 000444144 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2019-06-12 10:23 - 2019-05-16 20:22 - 000334280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2019-06-12 10:23 - 2019-05-14 22:23 - 000377800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys 2019-06-12 10:23 - 2019-05-14 16:01 - 004168704 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2019-06-12 10:23 - 2019-05-11 18:21 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2019-06-12 10:23 - 2019-05-11 18:00 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2019-06-12 10:23 - 2019-05-11 17:50 - 001441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2019-06-12 10:23 - 2019-05-11 17:46 - 000840704 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll 2019-06-12 10:23 - 2019-05-11 17:34 - 000697344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll 2019-06-12 10:23 - 2019-05-10 15:20 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll 2019-06-12 10:23 - 2019-05-10 15:20 - 000353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll 2019-06-12 10:23 - 2019-05-10 15:20 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll 2019-06-12 10:23 - 2019-05-10 15:20 - 000241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll 2019-06-12 10:23 - 2019-05-09 09:41 - 003325440 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2019-06-12 10:23 - 2019-05-09 08:40 - 002779648 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2019-06-12 10:23 - 2019-05-09 08:30 - 003619328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2019-06-12 10:23 - 2019-05-09 07:47 - 002464256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2019-06-12 10:23 - 2019-04-25 00:38 - 002452208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2019-06-12 10:23 - 2019-04-12 15:20 - 000994384 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2019-06-12 10:23 - 2019-04-12 15:20 - 000914584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2019-06-12 10:23 - 2019-04-12 15:20 - 000064248 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2019-06-11 17:20 - 2019-06-11 17:20 - 000085841 _____ C:\Users\Tomasz\Downloads\Lista_transakcji_nr_0051048654_110619.pdf 2019-06-11 17:19 - 2019-06-11 17:19 - 000098665 _____ C:\Users\Tomasz\Downloads\Wyciag_dla_KONTO_Direct__31.05.2019.pdf 2019-06-07 17:24 - 2019-06-07 17:24 - 000259238 _____ C:\Users\Tomasz\Downloads\bilet_81478061.pdf 2019-06-04 21:01 - 2019-06-13 13:24 - 000000000 ____D C:\Users\Tomasz\Desktop\5008 2019-05-31 00:33 - 2019-05-31 00:33 - 000150979 _____ C:\Users\Tomasz\Downloads\zgoda na przetwarzanie danych (2).pdf 2019-05-31 00:13 - 2019-05-31 00:13 - 000209636 _____ C:\Users\Tomasz\Downloads\zał nr 1 oświadczenie o nie wnoszeniu roszczeń.pdf 2019-05-31 00:13 - 2019-05-31 00:13 - 000150979 _____ C:\Users\Tomasz\Downloads\zgoda na przetwarzanie danych.pdf 2019-05-31 00:13 - 2019-05-31 00:13 - 000150979 _____ C:\Users\Tomasz\Downloads\zgoda na przetwarzanie danych (1).pdf 2019-05-30 23:01 - 2019-05-30 23:01 - 008009381 _____ C:\Users\Tomasz\Downloads\Sskan19052514320.pdf 2019-05-30 12:50 - 2019-05-30 12:50 - 003785336 _____ C:\Users\Tomasz\Desktop\Skarga na rejestrację egzaminu Katalski Tomasz.pdf 2019-05-27 14:11 - 2019-05-27 14:11 - 000000291 _____ C:\Users\Tomasz\Downloads\PZASREQ_v1_ZEFIR2_20190326_1025_57_111.xml 2019-05-24 12:17 - 2019-05-24 12:17 - 001157324 _____ C:\Users\Tomasz\Desktop\dowód Tomasz Katalski.pdf 2019-05-24 12:15 - 2019-05-24 12:15 - 000564916 _____ C:\Users\Tomasz\Desktop\dowód Justyna Katalska.pdf ==================== Jeden miesiąc (zmodyfikowane) ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-06-23 13:07 - 2016-07-23 18:43 - 000000000 ____D C:\FRST 2019-06-23 13:01 - 2019-03-07 11:18 - 000005080 _____ C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Tymek-Tomasz Tymek 2019-06-23 13:00 - 2015-01-17 17:42 - 000003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1854063861-834038236-3450837710-1001 2019-06-23 13:00 - 2014-09-24 17:08 - 001817498 _____ C:\Windows\system32\PerfStringBackup.INI 2019-06-23 13:00 - 2014-09-24 16:35 - 000799780 _____ C:\Windows\system32\perfh015.dat 2019-06-23 13:00 - 2014-09-24 16:35 - 000160522 _____ C:\Windows\system32\perfc015.dat 2019-06-23 13:00 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf 2019-06-23 12:59 - 2015-01-17 18:28 - 000000000 ____D C:\Users\Tomasz\AppData\Roaming\ClassicShell 2019-06-23 12:55 - 2015-01-17 17:47 - 000000000 ____D C:\ProgramData\NVIDIA 2019-06-23 12:55 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2019-06-23 12:41 - 2015-01-17 17:32 - 000000000 ____D C:\Users\Tomasz 2019-06-23 12:33 - 2013-08-22 16:44 - 005083256 _____ C:\Windows\system32\FNTCACHE.DAT 2019-06-23 12:33 - 2013-08-22 15:25 - 000262144 ___SH C:\Windows\system32\config\BBI 2019-06-23 11:44 - 2015-02-20 21:57 - 000002250 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-06-23 11:44 - 2015-02-20 21:57 - 000002209 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2019-06-23 11:36 - 2015-02-09 22:00 - 000000000 ____D C:\Users\Tomasz\AppData\Local\Adobe 2019-06-21 12:23 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness 2019-06-19 10:18 - 2015-07-28 13:22 - 000015694 _____ C:\Windows\BRRBCOM.INI 2019-06-18 17:51 - 2015-07-28 14:28 - 000000000 ____D C:\Users\Tomasz\Desktop\SKAN 2019-06-17 23:43 - 2016-01-12 00:37 - 000000000 ____D C:\Users\Tomasz\Desktop\Zgłoszenie kursu 2019-06-17 21:16 - 2015-10-19 10:10 - 000010147 _____ C:\Users\Tomasz\Desktop\harmonogram zajęć teoretycznych.xlsx 2019-06-16 14:01 - 2015-01-18 17:30 - 000000000 ____D C:\Users\Tomasz\AppData\Roaming\TeamViewer 2019-06-14 20:24 - 2015-11-08 19:13 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2019-06-13 12:58 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache 2019-06-12 15:44 - 2013-08-22 17:36 - 000000000 ___RD C:\Windows\ToastData 2019-06-12 15:43 - 2015-01-21 15:41 - 000000000 ____D C:\Windows\system32\MRT 2019-06-12 15:43 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp 2019-06-12 15:41 - 2015-01-21 15:41 - 135349160 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2019-06-12 10:38 - 2015-02-20 23:07 - 000000000 ____D C:\Users\Tomasz\AppData\Roaming\vlc 2019-06-04 21:15 - 2016-06-14 00:10 - 000002032 _____ C:\Users\Public\Desktop\PlayMemories Home.lnk 2019-06-04 21:15 - 2016-06-14 00:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home 2019-06-04 21:01 - 2019-05-08 15:54 - 000000000 ____D C:\Users\Tomasz\Desktop\Qashqai 2019-06-04 13:09 - 2019-05-08 16:57 - 000000000 ____D C:\Users\Tomasz\Desktop\ILOŚĆ GODZIN umowy zlecenia 2019-05-31 00:52 - 2015-01-17 17:32 - 000000000 ____D C:\Users\Tomasz\AppData\Local\Packages 2019-05-30 21:55 - 2014-09-24 18:34 - 000835688 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe 2019-05-30 21:55 - 2014-09-24 18:34 - 000179816 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2019-05-30 14:02 - 2018-08-14 00:52 - 000000000 ____D C:\Users\Tomasz\Desktop\umowa Marcin 2019-05-24 00:09 - 2018-11-08 10:15 - 000000000 ____D C:\Users\Tomasz\Desktop\FAKTURY WYSTAWIONE NAUKA JAZDY 2019-05-24 00:07 - 2018-10-31 10:28 - 000017141 _____ C:\Users\Tomasz\Desktop\Faktura Nauka Jazdy.xlsx ==================== Pliki w katalogu głównym wybranych folderów ================ 2015-02-09 22:14 - 2015-02-09 22:14 - 183677480 _____ () C:\Users\Tomasz\AppData\Local\ACCCx2_9_0_465.zip.aamdownload 2015-02-09 22:14 - 2015-02-09 22:14 - 000002195 _____ () C:\Users\Tomasz\AppData\Local\ACCCx2_9_0_465.zip.aamdownload.aamd 2015-08-26 19:11 - 2016-10-28 23:22 - 000001496 _____ () C:\Users\Tomasz\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs 2015-01-17 19:02 - 2015-01-17 19:06 - 000000000 _____ () C:\Users\Tomasz\AppData\Local\Driver_LOM_8161Present.flag 2018-09-29 19:54 - 2018-09-29 19:54 - 000000000 _____ () C:\Users\Tomasz\AppData\Local\oobelibMkey.log 2017-10-14 21:32 - 2017-10-14 21:32 - 000007605 _____ () C:\Users\Tomasz\AppData\Local\Resmon.ResmonCfg ==================== FLock ================ 2015-01-17 17:31 C:\Windows\CSC ==================== SigCheck =============================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) LastRegBack: 2019-06-19 09:12 ==================== Koniec FRST.txt ============================