Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 21-11-2019 Uruchomiony przez KingTravelPc1 (administrator) KINGTRAVELPC01 (Dell Inc. OptiPlex 9010 AIO) (22-11-2019 10:16:23) Uruchomiony z C:\Users\KingTravelPc1\Desktop Załadowane profile: KingTravelPc1 (Dostępne profile: KingTravelPc1) Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Safe Mode (with Networking) Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [5986960 2012-08-14] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [879208 2012-03-09] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [Chicony_OSD] => C:\Program Files\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\LaunchOSDSrv.exe [53248 2012-06-04] () [Brak podpisu cyfrowego] HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard) HKLM\...\Run: [IMSS] => C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-12] (Intel Corporation - Software and Firmware Products -> Intel Corporation) HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [494432 2019-11-21] (Bitdefender SRL -> Bitdefender) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [645648 2019-10-05] (Oracle America, Inc. -> Oracle Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\78.0.3904.108\Installer\chrmstp.exe [2019-11-22] (Google LLC -> Google LLC) HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2012-07-17] (Microsoft Corporation -> Microsoft Corp.) ==================== Zaplanowane zadania (filtrowane) ============ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {0820D189-9F29-45EF-B3CD-1C87DBB76CDD} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1423464 2019-11-16] (Microsoft Corporation -> Microsoft Corporation) Task: {1970B2E8-D9C6-404F-8F2B-5A4ED28175B0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [4427584 2019-11-04] (Microsoft Corporation -> Microsoft Corporation) Task: {20B381B9-1525-49F5-BF68-9A29E822C691} - System32\Tasks\G2MUpdateTask-S-1-5-21-2782572504-2515528266-3654358506-1000 => C:\Users\KingTravelPc1\AppData\Local\GoToMeeting\15939\g2mupdate.exe [32256 2019-11-21] (LogMeIn, Inc. -> LogMeIn, Inc.) Task: {2ACDDA99-D6D8-4D74-BA6D-AC7CF23EB389} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-11-14] (Adobe Inc. -> Adobe) Task: {39C2D6F7-3468-4992-BFE7-360709DEFB6C} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1423464 2019-11-16] (Microsoft Corporation -> Microsoft Corporation) Task: {3C0EF481-24D4-421C-84A6-C8BA753632F6} - \Microsoft\Windows\Setup\EOSNotify -> Brak pliku <==== UWAGA Task: {53003CC3-B57D-4D04-9176-F139147D8843} - System32\Tasks\{13565372-07B7-4C74-B48B-EDC4A353E4FE} => C:\Program Files\Voyager.com\Voyager.BUSManager\BusLoader.exe [67664 2018-08-17] (Voyager.com Sp. z o.o. -> Voyager.com) Task: {686497B8-6DD7-4359-8A9C-94D88AEB1336} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\system32\Macromed\Flash\FlashUtil32_32_0_0_293_pepper.exe [1453112 2019-11-14] (Adobe Inc. -> Adobe) Task: {762140B1-F45A-429D-B578-C1366555747A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [4427584 2019-11-04] (Microsoft Corporation -> Microsoft Corporation) Task: {8178E7FC-3C62-461B-A72C-C8E531FB7117} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [20682312 2019-11-08] (Microsoft Corporation -> Microsoft Corporation) Task: {8E5937B2-F5DF-4724-BC69-54BC19EB4FF1} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1} C:\Program Files\Windows Live\SOXE\wlsoxe.dll [192512 2012-09-12] (Microsoft Corporation -> Microsoft Corporation) Task: {97F277F0-4B4E-43BC-8BE6-1DF5C88D414D} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1586480 2019-11-16] (Microsoft Corporation -> Microsoft Corporation) Task: {988842A9-CE42-4159-805B-A52937BEEF4F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [155432 2019-11-22] (Google Inc -> Google LLC) Task: {A0BD7B10-D6D2-4887-8C57-865F29E97AA2} - System32\Tasks\{1BCB93D4-CDD7-4D72-962E-7E5DA638CB44} => C:\Program Files\Voyager.com\Voyager.BUSManager\BusLoader.exe [67664 2018-08-17] (Voyager.com Sp. z o.o. -> Voyager.com) Task: {A29791E4-4E3E-4C31-9505-FD7799779FF7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1190424 2018-08-14] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Task: {A613CB96-F8C7-463D-A4AE-9303588459F5} - System32\Tasks\HPLJCustParticipation => C:\Program Files\HP\HPLJUT\HPLJUTSCH.exe [89840 2014-10-19] (Hewlett-Packard Company -> Hewlett Packard) Task: {AE5B7026-9C46-4C8E-9404-7FA6E7E3CB3D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [114520 2019-11-16] (Microsoft Corporation -> Microsoft Corporation) Task: {B3E0ACEB-3AD7-412B-88C5-558048E81ED6} - System32\Tasks\G2MUploadTask-S-1-5-21-2782572504-2515528266-3654358506-1000 => C:\Users\KingTravelPc1\AppData\Local\GoToMeeting\15939\g2mupload.exe [32256 2019-11-21] (LogMeIn, Inc. -> LogMeIn, Inc.) Task: {B8689839-D7F9-47F4-BF58-9D392DBE6659} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [114520 2019-11-16] (Microsoft Corporation -> Microsoft Corporation) Task: {C628D9CC-0D00-41CF-85CB-3F0698D9AEB9} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\system32\Macromed\Flash\FlashUtil32_32_0_0_293_Plugin.exe [1457720 2019-11-13] (Adobe Inc. -> Adobe) Task: {C9F8E8DC-DB80-4A1E-8B93-D5E1C9D7BC25} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [155432 2019-11-22] (Google Inc -> Google LLC) Task: {DA5B7411-36FA-41CB-AC34-FC78E85935F7} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [488760 2019-07-15] (Bitdefender SRL -> Bitdefender) Task: {DF52C4D7-5C23-4E9F-BE34-AAEB29554DF5} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [20682312 2019-11-08] (Microsoft Corporation -> Microsoft Corporation) Task: {E8F7C85C-634C-408E-86BE-DE78249C467B} - System32\Tasks\{B3CB2CAB-A9C0-4D6B-A242-9B848362BEE4} => C:\Windows\system32\pcalua.exe -a C:\Users\KingTravelPc1\Downloads\wlsetup-web\wlsetup-web.exe -d C:\Users\KingTravelPc1\Downloads\wlsetup-web (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-2782572504-2515528266-3654358506-1000.job => C:\Users\KingTravelPc1\AppData\Local\GoToMeeting\15939\g2mupdate.exe Task: C:\Windows\Tasks\G2MUploadTask-S-1-5-21-2782572504-2515528266-3654358506-1000.job => C:\Users\KingTravelPc1\AppData\Local\GoToMeeting\15939\g2mupload.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Winsock: Catalog5 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648 2012-07-17] (Microsoft Corporation -> Microsoft Corp.) Winsock: Catalog5 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648 2012-07-17] (Microsoft Corporation -> Microsoft Corp.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0 Tcpip\..\Interfaces\{30069076-74CE-4A9F-9822-397C9679E18A}: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip\..\Interfaces\{95753EB3-630F-475B-A472-23290FAF5A73}: [DhcpNameServer] 192.168.1.1 0.0.0.0 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-2782572504-2515528266-3654358506-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank BHO: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\bdtbie.dll [2019-11-21] (Bitdefender SRL -> Bitdefender) BHO: Portfel Bitdefender -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-11-21] (Bitdefender SRL -> Bitdefender) BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2019-09-13] (Microsoft Corporation -> Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_231\bin\ssv.dll [2019-11-22] (Oracle America, Inc. -> Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corporation -> Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2019-11-04] (Microsoft Corporation -> Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_231\bin\jp2ssv.dll [2019-11-22] (Oracle America, Inc. -> Oracle Corporation) Toolbar: HKLM - Portfel Bitdefender - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-11-21] (Bitdefender SRL -> Bitdefender) Toolbar: HKU\S-1-5-21-2782572504-2515528266-3654358506-1000 -> Portfel Bitdefender - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-11-21] (Bitdefender SRL -> Bitdefender) DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_231-windows-i586.cab DPF: {CAFEEFAC-0018-0000-00231-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_231-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_231-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-04] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-04] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-04] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-04] (Microsoft Corporation -> Microsoft Corporation) FireFox: ======== FF DefaultProfile: tba28c52.default-1571310138021 FF ProfilePath: C:\Users\KingTravelPc1\AppData\Roaming\Mozilla\Firefox\Profiles\tba28c52.default-1571310138021 [2019-10-22] FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi FF Extension: (Brak nazwy) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2019-08-27] [Brak podpisu cyfrowego] FF HKLM\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi FF Extension: (Brak nazwy) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi [2019-11-21] [Brak podpisu cyfrowego] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2019-03-06] [Przestarzałe] [Brak podpisu cyfrowego] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_32_0_0_293.dll [2019-11-13] (Adobe Inc. -> ) FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1231201.dll [2017-11-02] (Adobe Systems, Inc.) [Brak podpisu cyfrowego] FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-12] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-12] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin: @java.com/DTPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\dtplugin\npDeployJava1.dll [2019-11-22] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre1.8.0_231\bin\new_plugin\npjp2.dll [Brak pliku] FF Plugin: @java.com/JavaPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\plugin2\npjp2.dll [2019-11-22] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-09-13] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-09-13] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.35.342\npGoogleUpdate3.dll [2019-11-22] (Google Inc -> Google LLC) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.35.342\npGoogleUpdate3.dll [2019-11-22] (Google Inc -> Google LLC) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-20] (Adobe Systems, Incorporated -> Adobe Systems Inc.) FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\bd_js_config.js [2019-10-17] <==== UWAGA (Linkuje do pliku *.cfg) FF ExtraCheck: C:\Program Files\mozilla firefox\bd_config.cfg [2019-10-17] <==== UWAGA Chrome: ======= CHR Profile: C:\Users\KingTravelPc1\AppData\Local\Google\Chrome\User Data\Default [2019-11-22] CHR Extension: (Prezentacje) - C:\Users\KingTravelPc1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-11-22] CHR Extension: (Dokumenty) - C:\Users\KingTravelPc1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-11-22] CHR Extension: (Dysk Google) - C:\Users\KingTravelPc1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-11-22] CHR Extension: (Bitdefender Wallet) - C:\Users\KingTravelPc1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2019-11-22] CHR Extension: (Dokumenty Google offline) - C:\Users\KingTravelPc1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-11-22] CHR Extension: (Bitdefender Anti-tracker) - C:\Users\KingTravelPc1\AppData\Local\Google\Chrome\User Data\Default\Extensions\khndhdhbebhaddchcgnalcjlaekbbeof [2019-11-22] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\KingTravelPc1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-11-22] CHR Extension: (Chrome Media Router) - C:\Users\KingTravelPc1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-11-22] CHR HKLM\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] CHR HKLM\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S2 AMPPALR3; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [509440 2012-01-09] (Intel Corporation - Mobile Wireless Group -> Intel Corporation) S2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [723016 2019-11-21] (Bitdefender SRL -> Bitdefender) S2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [1929280 2018-03-22] (Bitdefender SRL -> Bitdefender) S2 BTHSSecurityMgr; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [104208 2012-01-17] (Intel Corporation-Mobile Wireless Group -> Intel(R) Corporation) S2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7422840 2019-11-08] (Microsoft Corporation -> Microsoft Corporation) S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [280696 2016-06-15] (Intel Corporation - pGFX -> Intel Corporation) S2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [108496 2019-09-17] (Bitdefender SRL -> Bitdefender) S2 HP LaserJet Service; C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [176128 2014-06-24] (HP) [Brak podpisu cyfrowego] S3 ICCS; C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [169752 2012-04-24] (Intel Corporation -> Intel Corporation) S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [274040 2016-06-15] (Intel Corporation - pGFX -> Intel Corporation) S2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [586240 2013-05-11] (Intel(R) Corporation) [Brak podpisu cyfrowego] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [637912 2013-05-11] (Intel® Trusted Connect Service -> Intel(R) Corporation) S2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-12] (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [5570712 2019-11-22] (Malwarebytes Inc -> Malwarebytes) S2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [241936 2012-03-29] (Intel Corporation-Mobile Wireless Group -> ) S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [45568 2011-04-13] (Hewlett-Packard) [Brak podpisu cyfrowego] S2 OSDSvc; C:\Program Files\Dell\Dell KM632 Wireless Keyboard Caps Lock Indicator\OSDSrv.exe [176128 2010-12-01] (Chicony) [Brak podpisu cyfrowego] S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [55808 2011-04-13] (Hewlett-Packard) [Brak podpisu cyfrowego] S2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1291888 2019-07-15] (Bitdefender SRL -> Bitdefender) S2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [125632 2019-11-21] (Bitdefender SRL -> Bitdefender) S2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [723016 2019-11-21] (Bitdefender SRL -> Bitdefender) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Windows -> Microsoft Corporation) S2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [1713904 2012-07-17] (Microsoft Corporation -> Microsoft Corp.) S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2324752 2012-03-29] (Intel Corporation-Mobile Wireless Group -> Intel® Corporation) ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S1 atc; C:\Windows\System32\DRIVERS\atc.sys [1319328 2019-11-21] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA) S2 BdDci; C:\Windows\System32\DRIVERS\bddci.sys [488216 2019-11-21] (Bitdefender SRL -> Bitdefender) S0 bdprivmon; C:\Windows\System32\DRIVERS\bdprivmon.sys [42344 2019-08-27] (Bitdefender SRL -> © Bitdefender SRL) S1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [91672 2018-04-27] (Bitdefender SRL -> BitDefender) R3 e1cexpress; C:\Windows\System32\DRIVERS\e1c6232.sys [368392 2013-02-20] (Intel Corporation -> Intel Corporation) S1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [24232 2009-02-17] (Elaborate Bytes AG -> Elaborate Bytes AG) S1 Gemma; C:\Windows\System32\DRIVERS\gemma.sys [458672 2019-11-21] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA) S0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [157184 2019-06-03] (Bitdefender SRL -> BitDefender LLC) S2 Ignis; C:\Windows\System32\DRIVERS\ignis.sys [161552 2019-08-27] (Bitdefender SRL -> Bitdefender) S3 IntcAzAudAddService; C:\Windows\System32\drivers\RTDVHDA.sys [2374608 2012-08-16] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.) R0 iusb3hcs; C:\Windows\System32\DRIVERS\iusb3hcs.sys [16880 2013-02-23] (Intel Corporation - Software and Firmware Products -> Intel Corporation) R3 iusb3hub; C:\Windows\System32\DRIVERS\iusb3hub.sys [352752 2013-02-23] (Intel Corporation - Software and Firmware Products -> Intel Corporation) R3 iusb3xhc; C:\Windows\System32\DRIVERS\iusb3xhc.sys [796656 2013-02-23] (Intel Corporation - Software and Firmware Products -> Intel Corporation) R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [183048 2019-11-22] (Malwarebytes Inc -> Malwarebytes) R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [243800 2019-11-22] (Malwarebytes Inc -> Malwarebytes) R3 MEI; C:\Windows\System32\DRIVERS\TeeDriver.sys [85464 2013-09-12] (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) S3 NETwNs32; C:\Windows\System32\DRIVERS\Netwsn00.sys [10339840 2012-03-12] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) S3 RSPCIESTOR; C:\Windows\System32\DRIVERS\RtsPStor.sys [254568 2011-10-24] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.) S0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [522280 2019-01-14] (Bitdefender SRL -> Bitdefender) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) =================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-11-22 10:16 - 2019-11-22 10:17 - 000025431 _____ C:\Users\KingTravelPc1\Desktop\FRST.txt 2019-11-22 10:15 - 2019-11-22 10:15 - 000243800 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys 2019-11-22 10:15 - 2019-11-22 10:15 - 000183048 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys 2019-11-22 10:15 - 2019-11-22 10:15 - 000100080 _____ C:\Windows\ntbtlog.txt 2019-11-22 10:13 - 2019-11-22 10:17 - 000000000 ____D C:\FRST 2019-11-22 10:13 - 2019-11-22 10:10 - 001990144 _____ (Farbar) C:\Users\KingTravelPc1\Desktop\Farba Recovery Scan Tool.exe 2019-11-22 10:02 - 2019-11-22 10:02 - 000004464 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task 2019-11-22 10:02 - 2019-11-22 10:02 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2019-11-22 10:02 - 2019-11-22 10:02 - 000002017 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk 2019-11-22 09:59 - 2019-11-22 09:59 - 000000000 _____ C:\Users\KingTravelPc1\Downloads\FRST (1).exe.a0sifwp.partial 2019-11-22 09:58 - 2019-11-22 09:58 - 000000000 _____ C:\Users\KingTravelPc1\Downloads\FRST.exe.zxr9b3w.partial 2019-11-22 09:57 - 2019-11-22 09:57 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-11-22 09:57 - 2019-11-22 09:57 - 000002211 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2019-11-22 09:56 - 2019-11-22 09:56 - 000003472 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA 2019-11-22 09:56 - 2019-11-22 09:56 - 000003344 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore 2019-11-22 09:56 - 2019-11-22 09:52 - 001397304 _____ (Google LLC) C:\Users\KingTravelPc1\Desktop\ChromeSetup.exe 2019-11-22 09:23 - 2019-11-22 09:23 - 000001948 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2019-11-22 09:23 - 2019-11-22 09:23 - 000000000 ____D C:\Users\KingTravelPc1\AppData\Local\mbamtray 2019-11-22 09:23 - 2019-11-22 09:23 - 000000000 ____D C:\Users\KingTravelPc1\AppData\Local\mbam 2019-11-22 09:23 - 2019-11-22 09:23 - 000000000 ____D C:\Users\KingTravelPc1\AppData\Local\cache 2019-11-22 09:23 - 2019-11-22 09:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2019-11-22 09:23 - 2019-11-22 09:22 - 000129056 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae.sys 2019-11-22 09:22 - 2019-11-22 09:22 - 000000000 ____D C:\ProgramData\Malwarebytes 2019-11-22 09:21 - 2019-11-22 09:21 - 000000000 ____D C:\Program Files\Malwarebytes 2019-11-22 08:43 - 2019-11-22 08:43 - 000000144 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2019-11-22 08:19 - 2019-11-05 22:27 - 000137144 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2019-11-22 08:19 - 2019-10-26 01:17 - 001465344 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2019-11-22 08:14 - 2019-11-22 08:14 - 000000000 ____D C:\Program Files\Common Files\Java 2019-11-20 14:19 - 2019-11-20 14:20 - 001530889 _____ C:\Users\KingTravelPc1\Downloads\Grecja 2+2.pdf 2019-11-20 14:17 - 2019-11-20 14:17 - 001203010 _____ C:\Users\KingTravelPc1\Downloads\Turcja 2+2.pdf 2019-11-20 10:41 - 2019-11-20 10:41 - 002147929 _____ C:\Users\KingTravelPc1\Downloads\Cypr 2+2.pdf 2019-11-19 10:16 - 2019-11-19 10:16 - 000002175 _____ C:\Users\Public\Desktop\Voyager Agent.lnk 2019-11-19 10:15 - 2019-11-19 10:15 - 000000000 ____D C:\ProgramData\Package Cache 2019-11-18 16:49 - 2019-11-18 16:49 - 001307434 _____ C:\Users\KingTravelPc1\Desktop\Umowa Pani Marina Inshakova.pdf 2019-11-15 12:23 - 2019-11-15 12:23 - 000072830 _____ C:\ProgramData\dm.update.1573817003.bdinstall.bin 2019-11-15 12:23 - 2019-11-15 12:23 - 000034267 _____ C:\ProgramData\dm.uninstall.1573817012.bdinstall.bin 2019-11-13 16:33 - 2019-11-05 22:29 - 004061624 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2019-11-13 16:33 - 2019-11-05 22:29 - 003967416 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2019-11-13 16:33 - 2019-11-05 22:29 - 000311008 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2019-11-13 16:33 - 2019-11-05 22:29 - 000191416 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll 2019-11-13 16:33 - 2019-11-05 22:29 - 000191416 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2019-11-13 16:33 - 2019-11-05 22:29 - 000164064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys 2019-11-13 16:33 - 2019-11-05 22:29 - 000137440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2019-11-13 16:33 - 2019-11-05 22:29 - 000106936 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2019-11-13 16:33 - 2019-11-05 22:29 - 000068832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2019-11-13 16:33 - 2019-11-05 22:28 - 000138168 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll 2019-11-13 16:33 - 2019-11-05 22:27 - 001316632 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 002368000 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 001072640 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000872448 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000812544 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000628224 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000573440 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000555520 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000502784 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000307200 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000294400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\upnphost.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000261632 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000171008 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000167936 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000071680 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2019-11-13 16:33 - 2019-11-05 22:25 - 000004608 _____ (Microsoft Corporation) C:\Windows\system32\msimg32.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 001806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 001005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000088576 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:24 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 22:12 - 001312256 _____ (Microsoft Corporation) C:\Windows\system32\msjet40.dll 2019-11-13 16:33 - 2019-11-05 22:03 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\udhisapi.dll 2019-11-13 16:33 - 2019-11-05 22:03 - 000023552 _____ (Microsoft Corporation) C:\Windows\system32\upnpcont.exe 2019-11-13 16:33 - 2019-11-05 21:58 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2019-11-13 16:33 - 2019-11-05 21:58 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2019-11-13 16:33 - 2019-11-05 21:58 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2019-11-13 16:33 - 2019-11-05 21:58 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2019-11-13 16:33 - 2019-11-05 21:58 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll 2019-11-13 16:33 - 2019-11-05 21:57 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2019-11-13 16:33 - 2019-11-05 21:57 - 000057856 _____ (Microsoft Corporation) C:\Windows\system32\AxInstUI.exe 2019-11-13 16:33 - 2019-11-05 21:57 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2019-11-13 16:33 - 2019-11-05 21:56 - 002407424 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2019-11-13 16:33 - 2019-11-05 21:55 - 000271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2019-11-13 16:33 - 2019-11-05 21:55 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2019-11-13 16:33 - 2019-11-05 21:55 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys 2019-11-13 16:33 - 2019-11-05 21:55 - 000034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2019-11-13 16:33 - 2019-11-05 21:52 - 000317440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2019-11-13 16:33 - 2019-11-05 21:52 - 000314880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2019-11-13 16:33 - 2019-11-05 21:52 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2019-11-13 16:33 - 2019-11-05 21:52 - 000126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2019-11-13 16:33 - 2019-11-05 21:52 - 000117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2019-11-13 16:33 - 2019-11-05 21:52 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2019-11-13 16:33 - 2019-11-05 21:51 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2019-11-13 16:33 - 2019-11-05 21:51 - 000055296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys 2019-11-13 16:33 - 2019-11-05 21:51 - 000053760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys 2019-11-13 16:33 - 2019-11-05 21:51 - 000053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\viac7.sys 2019-11-13 16:33 - 2019-11-05 21:51 - 000052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys 2019-11-13 16:33 - 2019-11-05 21:51 - 000052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys 2019-11-13 16:33 - 2019-11-05 21:51 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2019-11-13 16:33 - 2019-11-05 21:51 - 000035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\npfs.sys 2019-11-13 16:33 - 2019-11-05 21:51 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2019-11-13 16:33 - 2019-11-05 21:51 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2019-11-13 16:33 - 2019-11-05 21:51 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 21:51 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 21:51 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 21:51 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2019-11-13 16:33 - 2019-11-05 20:43 - 001251840 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2019-11-13 16:33 - 2019-11-05 20:43 - 000910336 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2019-11-13 16:33 - 2019-10-26 07:40 - 000341896 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2019-11-13 16:33 - 2019-10-24 04:23 - 020290048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2019-11-13 16:33 - 2019-10-24 04:19 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2019-11-13 16:33 - 2019-10-24 04:19 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2019-11-13 16:33 - 2019-10-24 04:08 - 000496640 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2019-11-13 16:33 - 2019-10-24 04:08 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2019-11-13 16:33 - 2019-10-24 04:07 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2019-11-13 16:33 - 2019-10-24 04:07 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2019-11-13 16:33 - 2019-10-24 04:06 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2019-11-13 16:33 - 2019-10-24 04:04 - 002304000 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2019-11-13 16:33 - 2019-10-24 04:01 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2019-11-13 16:33 - 2019-10-24 04:01 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2019-11-13 16:33 - 2019-10-24 03:59 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2019-11-13 16:33 - 2019-10-24 03:58 - 000662528 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2019-11-13 16:33 - 2019-10-24 03:58 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2019-11-13 16:33 - 2019-10-24 03:58 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2019-11-13 16:33 - 2019-10-24 03:57 - 000620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2019-11-13 16:33 - 2019-10-24 03:52 - 000668160 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2019-11-13 16:33 - 2019-10-24 03:49 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2019-11-13 16:33 - 2019-10-24 03:45 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2019-11-13 16:33 - 2019-10-24 03:45 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2019-11-13 16:33 - 2019-10-24 03:44 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2019-11-13 16:33 - 2019-10-24 03:42 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2019-11-13 16:33 - 2019-10-24 03:41 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2019-11-13 16:33 - 2019-10-24 03:40 - 000279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2019-11-13 16:33 - 2019-10-24 03:39 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2019-11-13 16:33 - 2019-10-24 03:35 - 004112384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2019-11-13 16:33 - 2019-10-24 03:33 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2019-11-13 16:33 - 2019-10-24 03:32 - 002058752 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2019-11-13 16:33 - 2019-10-24 03:32 - 000696320 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2019-11-13 16:33 - 2019-10-24 03:32 - 000692224 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2019-11-13 16:33 - 2019-10-24 03:31 - 001155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2019-11-13 16:33 - 2019-10-24 03:27 - 013838336 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2019-11-13 16:33 - 2019-10-24 03:13 - 004387840 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2019-11-13 16:33 - 2019-10-24 03:10 - 001331712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2019-11-13 16:33 - 2019-10-24 03:09 - 000710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2019-11-13 16:33 - 2019-09-17 03:29 - 000599040 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2019-11-13 16:33 - 2019-09-10 03:27 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2019-11-13 16:33 - 2019-09-10 01:10 - 002703360 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2019-11-13 16:33 - 2019-09-10 01:10 - 000618496 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2019-11-13 16:33 - 2019-09-10 01:10 - 000535040 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2019-11-13 16:33 - 2019-09-10 01:10 - 000379904 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll 2019-11-13 16:33 - 2019-09-10 01:10 - 000366080 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2019-11-13 16:33 - 2019-09-10 01:10 - 000257024 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2019-11-13 16:33 - 2019-09-10 01:10 - 000206848 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2019-11-13 16:32 - 2019-11-05 21:54 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2019-11-07 11:01 - 2019-11-21 10:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IRIS.plus 2019-10-23 12:28 - 2019-10-23 12:28 - 000143820 _____ C:\Users\KingTravelPc1\Desktop\Zasady rezerwacji grupowych.pdf 2019-10-23 12:22 - 2019-10-23 12:13 - 000234151 _____ C:\Users\KingTravelPc1\Desktop\Grecja grupa 3.pdf 2019-10-23 12:13 - 2019-10-23 12:22 - 000236655 _____ C:\Users\KingTravelPc1\Desktop\Grecja grupa 2.pdf 2019-10-23 11:54 - 2019-10-23 11:54 - 000411212 _____ C:\Users\KingTravelPc1\Desktop\Grecja grupa 1.pdf ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-11-22 10:12 - 2017-12-23 15:01 - 000000000 ____D C:\Users\KingTravelPc1\AppData\Local\Adobe 2019-11-22 10:01 - 2017-12-23 15:26 - 000000000 ____D C:\Program Files\Common Files\Adobe 2019-11-22 10:01 - 2017-12-23 15:01 - 000000000 ____D C:\Program Files\Adobe 2019-11-22 09:57 - 2017-12-23 15:07 - 000000000 ____D C:\Users\KingTravelPc1\AppData\Local\Google 2019-11-22 09:57 - 2017-12-23 15:07 - 000000000 ____D C:\Program Files\Google 2019-11-22 09:45 - 2018-05-07 09:16 - 000000682 _____ C:\Windows\Tasks\G2MUploadTask-S-1-5-21-2782572504-2515528266-3654358506-1000.job 2019-11-22 09:35 - 2018-05-07 09:16 - 000000586 _____ C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-2782572504-2515528266-3654358506-1000.job 2019-11-22 09:05 - 2009-07-14 05:34 - 000016144 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2019-11-22 09:05 - 2009-07-14 05:34 - 000016144 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2019-11-22 09:02 - 2011-04-12 06:08 - 000743446 _____ C:\Windows\system32\perfh015.dat 2019-11-22 09:02 - 2011-04-12 06:08 - 000156928 _____ C:\Windows\system32\perfc015.dat 2019-11-22 09:02 - 2010-11-20 22:01 - 001677874 _____ C:\Windows\system32\PerfStringBackup.INI 2019-11-22 09:02 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\inf 2019-11-22 08:59 - 2017-12-23 15:11 - 000003648 _____ C:\Windows\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 2019-11-22 08:57 - 2017-12-23 15:33 - 000000000 __SHD C:\Users\KingTravelPc1\IntelGraphicsProfiles 2019-11-22 08:57 - 2009-07-14 05:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2019-11-22 08:30 - 2018-12-09 17:03 - 000000000 ____D C:\Program Files\Java 2019-11-22 08:14 - 2018-12-10 10:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2019-11-22 08:13 - 2018-12-10 10:46 - 000112696 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2019-11-22 08:13 - 2018-12-09 17:03 - 000300600 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2019-11-21 17:53 - 2017-12-28 13:37 - 000000609 _____ C:\Users\KingTravelPc1\irisplus-user.properties 2019-11-21 17:51 - 2017-12-28 13:37 - 000000000 ____D C:\Users\KingTravelPc1\irisplus-resources 2019-11-21 11:23 - 2018-05-07 09:16 - 000003740 _____ C:\Windows\system32\Tasks\G2MUploadTask-S-1-5-21-2782572504-2515528266-3654358506-1000 2019-11-21 11:23 - 2018-05-07 09:16 - 000003644 _____ C:\Windows\system32\Tasks\G2MUpdateTask-S-1-5-21-2782572504-2515528266-3654358506-1000 2019-11-21 11:23 - 2018-05-07 09:16 - 000000000 ____D C:\Users\KingTravelPc1\AppData\Local\GoToMeeting 2019-11-21 10:42 - 2019-03-08 12:26 - 001319328 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\Windows\system32\Drivers\atc.sys 2019-11-21 10:42 - 2019-03-08 12:26 - 000488216 _____ (Bitdefender) C:\Windows\system32\Drivers\bddci.sys 2019-11-21 10:42 - 2019-03-08 12:26 - 000458672 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\Windows\system32\Drivers\gemma.sys 2019-11-21 10:31 - 2019-03-08 11:15 - 000000000 ____D C:\Users\KingTravelPc1 2019-11-21 10:31 - 2019-01-15 15:48 - 000000000 ____D C:\Program Files\irisplus 2019-11-21 10:31 - 2017-12-28 13:46 - 000000000 ____D C:\Users\KingTravelPc1\AppData\Local\JxBrowser 2019-11-20 17:56 - 2017-12-27 13:07 - 000000370 _____ C:\Windows\S4-king travel lomza 02 2019-11-20 09:26 - 2017-12-23 16:20 - 000000000 ____D C:\Users\KingTravelPc1\AppData\Roaming\euroTICKET on-line 2019-11-19 10:16 - 2017-12-23 15:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voyager.com 2019-11-19 10:16 - 2017-12-23 15:36 - 000000000 ____D C:\Program Files\Voyager.com 2019-11-19 10:16 - 2017-12-23 15:36 - 000000000 ____D C:\Program Files\Common Files\Voyager.com 2019-11-19 10:15 - 2017-12-23 15:18 - 000000000 ____D C:\Users\KingTravelPc1\AppData\Local\Downloaded Installations 2019-11-19 10:10 - 2018-02-16 14:23 - 000000000 ____D C:\ProgramData\VOYINSTALL 2019-11-18 08:20 - 2017-12-23 15:27 - 000000000 ____D C:\Windows\system32\Macromed 2019-11-16 11:16 - 2019-09-13 08:28 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2019-11-16 11:16 - 2017-12-23 15:21 - 000000000 ____D C:\Program Files\Microsoft Office 2019-11-16 11:16 - 2009-07-14 03:37 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2019-11-15 12:23 - 2019-03-08 12:26 - 000000000 ____D C:\Program Files\Bitdefender 2019-11-14 09:21 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\rescache 2019-11-14 08:39 - 2017-12-23 15:27 - 000842296 _____ (Adobe) C:\Windows\system32\FlashPlayerApp.exe 2019-11-14 08:39 - 2017-12-23 15:27 - 000175160 _____ (Adobe) C:\Windows\system32\FlashPlayerCPLApp.cpl 2019-11-14 08:39 - 2017-12-23 15:27 - 000004602 _____ C:\Windows\system32\Tasks\Adobe Flash Player PPAPI Notifier 2019-11-14 08:39 - 2017-12-23 15:27 - 000004424 _____ C:\Windows\system32\Tasks\Adobe Flash Player Updater 2019-11-14 08:28 - 2009-07-14 05:33 - 000443904 _____ C:\Windows\system32\FNTCACHE.DAT 2019-11-14 08:27 - 2019-03-08 15:39 - 000000000 ___SD C:\Windows\system32\CompatTel 2019-11-14 08:27 - 2019-03-08 15:39 - 000000000 ____D C:\Windows\system32\appraiser 2019-11-14 08:27 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\PolicyDefinitions 2019-11-13 16:46 - 2018-03-13 10:46 - 000004590 _____ C:\Windows\system32\Tasks\Adobe Flash Player NPAPI Notifier 2019-11-02 09:07 - 2019-07-29 13:27 - 000003202 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2782572504-2515528266-3654358506-1000 2019-11-02 09:07 - 2019-07-29 13:27 - 000002234 _____ C:\Users\KingTravelPc1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2019-11-02 09:07 - 2019-07-29 13:27 - 000000000 ___RD C:\Users\KingTravelPc1\OneDrive 2019-10-31 16:39 - 2017-12-23 14:33 - 000000000 ____D C:\Users\KingTravelPc1\Desktop\KingTravel 2019-10-23 11:59 - 2018-12-06 17:39 - 000000000 ____D C:\Users\KingTravelPc1\Desktop\zdjęcia ==================== Pliki w katalogu głównym wybranych folderów ======== 2019-03-08 10:50 - 2019-03-08 10:50 - 000000726 _____ () C:\Program Files\LMIR0977F001.tmp.bat 2019-03-08 10:50 - 2019-03-08 10:50 - 000000522 _____ () C:\Program Files\LMIR0977F001.tmp_r.bat ==================== SigCheckExt ========================= 2012-11-01 14:38 - 2012-11-01 14:38 - 000061064 _____ (Broadcom Corporation) C:\Windows\system32\BSelList.dll 2010-12-10 11:48 - 2010-12-10 11:48 - 005550080 _____ (Seagate Software, Inc.) C:\Windows\system32\craxdrt.dll 2010-12-10 11:48 - 2010-12-10 11:48 - 000618496 _____ (Seagate Software) C:\Windows\system32\crpaig80.dll 2017-12-23 14:58 - 2011-12-06 13:55 - 000053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\system32\CSVer.dll 2011-09-23 11:46 - 2011-09-23 11:46 - 000046080 _____ (Hewlett-Packard Company) C:\Windows\system32\hpbmiapi.dll 2011-09-23 11:46 - 2011-09-23 11:46 - 000047104 _____ (Hewlett-Packard Company) C:\Windows\system32\hpboid.dll 2011-09-23 11:46 - 2011-09-23 11:46 - 000012288 _____ (Hewlett-Packard Company) C:\Windows\system32\hpboidps.dll 2011-09-23 11:46 - 2011-09-23 11:46 - 000067584 _____ (Hewlett-Packard Company) C:\Windows\system32\hpbpro.dll 2011-09-23 11:46 - 2011-09-23 11:46 - 000012288 _____ (Hewlett-Packard Company) C:\Windows\system32\hpbprops.dll 2010-01-19 15:10 - 2010-01-19 15:10 - 000063488 _____ (Hewlett-Packard) C:\Windows\system32\HPBWSDR.DLL 2010-05-06 15:19 - 2010-05-06 15:19 - 000162816 _____ (hp) C:\Windows\system32\hplbddrv.dll 2009-09-16 18:37 - 2009-09-16 18:37 - 000118784 _____ (Hewlett Packard) C:\Windows\system32\HPTcpMib.dll 2009-09-16 18:38 - 2009-09-16 18:38 - 000200704 _____ (Hewlett Packard) C:\Windows\system32\HPTcpMon.dll 2009-09-16 18:40 - 2009-09-16 18:40 - 000245760 _____ (Microsoft Corporation) C:\Windows\system32\HPTcpMUI.dll 2011-04-13 16:07 - 2011-04-13 16:07 - 000054784 _____ (Hewlett-Packard) C:\Windows\system32\HPZidr12.dll 2011-04-13 16:07 - 2011-04-13 16:07 - 000045568 _____ (Hewlett-Packard) C:\Windows\system32\HPZinw12.dll 2011-04-13 16:07 - 2011-04-13 16:07 - 000055808 _____ (Hewlett-Packard) C:\Windows\system32\HPZipm12.dll 2011-04-13 16:07 - 2011-04-13 16:07 - 000039424 _____ (Hewlett-Packard) C:\Windows\system32\HPZipr12.dll 2011-04-13 16:07 - 2011-04-13 16:07 - 000034304 _____ (Hewlett-Packard) C:\Windows\system32\hpzipt12.dll 2011-04-13 16:07 - 2011-04-13 16:07 - 000021504 _____ (Hewlett-Packard) C:\Windows\system32\hpzisn12.dll 2009-09-16 11:44 - 2009-09-16 11:44 - 000406528 _____ (Hewlett-Packard) C:\Windows\system32\hpzjcd01.dll 2009-09-16 11:44 - 2009-09-16 11:44 - 000017408 _____ (Hewlett-Packard) C:\Windows\system32\hpzjfw01.dll 2009-09-16 11:44 - 2009-09-16 11:44 - 000139264 _____ (Hewlett Packard) C:\Windows\system32\hpzjrd01.dll 2010-12-10 11:48 - 2010-12-10 11:48 - 000018944 _____ ( ) C:\Windows\system32\IMPLODE.DLL 2013-05-11 17:14 - 2013-05-11 17:14 - 000001536 _____ C:\Windows\system32\IusEventLog.dll 2012-03-29 06:48 - 2012-03-29 06:48 - 001988096 _____ (Intel(R) Corporation) C:\Windows\system32\iwmssvc.dll 2000-05-11 13:06 - 2000-05-11 13:06 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\msbind.dll 2000-04-03 17:52 - 2000-04-03 17:52 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\msstkprp.dll 2015-12-17 09:54 - 2015-12-17 09:54 - 000290816 _____ (Microsoft Corporation) C:\Windows\system32\ntwdblib.dll 2010-11-20 22:29 - 2010-11-20 22:29 - 000000000 _____ C:\Windows\system32\PortableDeviceStatus.dll 2017-12-23 14:56 - 2017-12-23 14:56 - 000001536 _____ C:\Windows\system32\RtkMsgs.dll 2010-12-10 11:48 - 2010-12-10 11:48 - 000974848 _____ (Three /D/ Graphics, Inc.) C:\Windows\system32\sscsdk80.dll 2005-07-01 10:09 - 2005-07-01 10:09 - 000507904 _____ (ComponentOne LLC) C:\Windows\system32\tdbgpp8.dll 2004-12-02 13:58 - 2004-12-02 13:58 - 000548864 _____ (ComponentOne LLC) C:\Windows\system32\tibase8.dll 2004-12-02 13:59 - 2004-12-02 13:59 - 000200704 _____ (ComponentOne LLC) C:\Windows\system32\ticalcx8.dll 2004-12-02 13:59 - 2004-12-02 13:59 - 000221184 _____ (ComponentOne LLC) C:\Windows\system32\tidatex8.dll 2004-12-02 13:59 - 2004-12-02 13:59 - 000212992 _____ (ComponentOne LLC) C:\Windows\system32\tifincx8.dll 2004-12-02 13:58 - 2004-12-02 13:58 - 000258048 _____ (ComponentOne LLC) C:\Windows\system32\tiholyx8.dll 2004-12-02 13:58 - 2004-12-02 13:58 - 000131072 _____ (ComponentOne LLC) C:\Windows\system32\tishare8.dll 2004-12-02 13:59 - 2004-12-02 13:59 - 000229376 _____ (ComponentOne LLC) C:\Windows\system32\tizonex8.dll 2001-03-12 17:07 - 2001-03-12 17:07 - 000224256 _____ (Microsoft Corporation) C:\Windows\system32\tlbinf32.dll 2005-07-01 10:10 - 2005-07-01 10:10 - 000249856 _____ (ComponentOne LLC) C:\Windows\system32\todgub8.dll 2012-03-29 06:50 - 2012-03-29 06:50 - 002998784 _____ (Intel(R) Corporation) C:\Windows\system32\wlihvui.dll 2010-12-10 11:56 - 2010-12-10 11:56 - 000053248 _____ C:\Windows\system32\zlib.dll 2017-12-23 14:59 - 2013-02-23 02:38 - 000041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll 2019-11-22 10:13 - 2019-11-22 10:10 - 001990144 _____ (Farbar) C:\Users\KingTravelPc1\Desktop\Farba Recovery Scan Tool.exe ==================== FCheck ================================ (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) FCheck: C:\Windows\system32\PortableDeviceStatus.dll [2010-11-20] <==== UWAGA (zerobajtowy plik/folder) ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) LastRegBack: 2019-11-20 09:52 ==================== Koniec FRST.txt ========================