Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 26-02-2020 Uruchomiony przez User (UWAGA: Użytkownik nie jest administratorem) LAPEK (ASUSTeK COMPUTER INC. X550CL) (27-02-2020 18:58:54) Uruchomiony z C:\Users\User\Desktop Załadowane profile: UpdatusUser & User (Dostępne profile: UpdatusUser & Weronika & User) Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVG Technologies CZ, s.r.o. -> ) C:\Program Files (x86)\AVG Web TuneUp\vprot.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (IVT CORPORATION -> IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe (McAfee, LLC -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\browserhost.exe (McAfee, LLC -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\uihost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Piriform Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Qualcomm Atheros -> Atheros Communications) [Brak podpisu cyfrowego] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe Brak dostępu do procesu -> AdminService.exe Brak dostępu do procesu -> armsvc.exe Brak dostępu do procesu -> AsLdrSrv.exe Brak dostępu do procesu -> aswidsagent.exe Brak dostępu do procesu -> Ath_CoexAgent.exe Brak dostępu do procesu -> ATKOSD.exe Brak dostępu do procesu -> AvastSvc.exe Brak dostępu do procesu -> BlueSoleilCS.exe Brak dostępu do procesu -> BsHelpCS.exe Brak dostępu do procesu -> csrss.exe Brak dostępu do procesu -> csrss.exe Brak dostępu do procesu -> daemonu.exe Brak dostępu do procesu -> GFNEXSrv.exe Brak dostępu do procesu -> GoogleCrashHandler.exe Brak dostępu do procesu -> GoogleCrashHandler64.exe Brak dostępu do procesu -> HControl.exe Brak dostępu do procesu -> HeciServer.exe Brak dostępu do procesu -> Jhi_service.exe Brak dostępu do procesu -> LMS.exe Brak dostępu do procesu -> lsass.exe Brak dostępu do procesu -> lsm.exe Brak dostępu do procesu -> mDNSResponder.exe Brak dostępu do procesu -> nvvsvc.exe Brak dostępu do procesu -> nvvsvc.exe Brak dostępu do procesu -> nvxdsync.exe Brak dostępu do procesu -> OfficeClickToRun.exe Brak dostępu do procesu -> RIconMan.exe Brak dostępu do procesu -> SearchIndexer.exe Brak dostępu do procesu -> servicehost.exe Brak dostępu do procesu -> services.exe Brak dostępu do procesu -> smss.exe Brak dostępu do procesu -> spoolsv.exe Brak dostępu do procesu -> sppsvc.exe Brak dostępu do procesu -> svchost.exe Brak dostępu do procesu -> svchost.exe Brak dostępu do procesu -> svchost.exe Brak dostępu do procesu -> svchost.exe Brak dostępu do procesu -> svchost.exe Brak dostępu do procesu -> svchost.exe Brak dostępu do procesu -> svchost.exe Brak dostępu do procesu -> svchost.exe Brak dostępu do procesu -> svchost.exe Brak dostępu do procesu -> svchost.exe Brak dostępu do procesu -> svchost.exe Brak dostępu do procesu -> svchost.exe Brak dostępu do procesu -> svchost.exe Brak dostępu do procesu -> UNS.exe Brak dostępu do procesu -> unsecapp.exe Brak dostępu do procesu -> WDC.exe Brak dostępu do procesu -> wininit.exe Brak dostępu do procesu -> winlogon.exe Brak dostępu do procesu -> WmiPrvSE.exe Brak dostępu do procesu -> wmpnetwk.exe Brak dostępu do procesu -> WtuSystemSupport.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13632216 2013-07-09] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [268680 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [406328 2013-05-21] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [205624 2013-05-30] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUSTeK Computer Inc. -> ASUS) HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [387832 2013-05-14] (IVT CORPORATION -> IVT Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation -> Intel Corporation) HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2180680 2016-11-14] (AVG Technologies CZ, s.r.o. -> ) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle America, Inc. -> Oracle Corporation) HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe HKLM-x32\...\Run: [AvgUi] => "C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe" /lps=fmw HKLM\...\RunOnce: [*WerKernelReporting] => C:\Windows\SYSTEM32\WerFault.exe [415232 2009-07-14] (Microsoft Windows -> Microsoft Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-03-27] (Qualcomm Atheros -> Atheros Communications) [Brak podpisu cyfrowego] HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA HKU\S-1-5-21-1940709926-2010511596-994217772-1003\...\Run: [EEDSpeedLauncher] => C:\Windows\system32\eed_ec.dll [3141120 2014-12-22] () [Brak podpisu cyfrowego] HKU\S-1-5-21-1940709926-2010511596-994217772-1003\...\Run: [ChomikBox] => C:\Program Files (x86)\ChomikBox\chomikbox.exe HKU\S-1-5-21-1940709926-2010511596-994217772-1003\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [18630056 2018-09-10] (Piriform Ltd -> Piriform Ltd) HKU\S-1-5-21-1940709926-2010511596-994217772-1003\...\MountPoints2: {11135a58-e82d-11e9-b612-54271e70d536} - F:\HiSuiteDownLoader.exe HKU\S-1-5-21-1940709926-2010511596-994217772-1003\...\MountPoints2: {2d98bb33-fff1-11e9-8fd3-54271e70d536} - F:\HiSuiteDownLoader.exe HKU\S-1-5-21-1940709926-2010511596-994217772-1003\...\MountPoints2: {2d98bb37-fff1-11e9-8fd3-54271e70d536} - F:\HiSuiteDownLoader.exe HKU\S-1-5-21-1940709926-2010511596-994217772-1003\...\MountPoints2: {cf5b1d5a-b230-11e9-8f6a-54271e70d536} - F:\HiSuiteDownLoader.exe HKU\S-1-5-21-1940709926-2010511596-994217772-1003\...\MountPoints2: {fc7831fe-d474-11e9-9ee9-54271e70d536} - F:\HiSuiteDownLoader.exe HKU\S-1-5-18\...\Run: [EEDSpeedLauncher] => C:\Windows\system32\eed_ec.dll [3141120 2014-12-22] () [Brak podpisu cyfrowego] HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-23] (Google LLC -> Google LLC) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2019-05-03] (Adobe Inc. -> Adobe Systems, Inc.) HKLM\Software\...\Authentication\Credential Providers: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\Windows\system32\AthCredentialProvider.dll [2013-03-27] (Qualcomm Atheros -> Qualcomm Atheros Commnucations) [Brak podpisu cyfrowego] HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\Windows\system32\AthCredentialProvider.dll [2013-03-27] (Qualcomm Atheros -> Qualcomm Atheros Commnucations) [Brak podpisu cyfrowego] AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA CORPORATION -> NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA CORPORATION -> NVIDIA Corporation) FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA ==================== Zaplanowane zadania (filtrowane) ============ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\0215tb_RML.job => C:\Program Files (x86)\AVG Web TuneUp\AVG-Secure-Search-Update_0215tb.exe Task: C:\Windows\Tasks\8fd53764-18e4-45e6-850f-6c1866de0a58.job => Task: C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-1.job => Task: C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-11.job => Task: C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-2.job => Task: C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-4.job => Task: C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-5.job => Task: C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-5_user.job => Task: C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-6.job => Task: C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-7.job => Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => Task: C:\Windows\Tasks\AutoKMS.job => Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1940709926-2010511596-994217772-1002Core.job => Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1940709926-2010511596-994217772-1002UA.job => Task: C:\Windows\Tasks\fbdbf6ea-9d9d-4461-98e0-a928bd299d9d.job => Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => Task: C:\Windows\Tasks\MATLAB R2015b Startup Accelerator.job => Task: C:\Windows\Tasks\Price Fountain.job => ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) AutoConfigURL: [S-1-5-21-1940709926-2010511596-994217772-1003] => hxxp://bur.ur.edu.pl/bur.pac Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc. -> Apple Inc.) Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-30] (Apple Inc. -> Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{FCF7B3ED-85C7-4EC3-B0E9-72BDE758CCBD}: [DhcpNameServer] 192.168.1.1 ManualProxies: 0hxxp://bur.ur.edu.pl/bur.pac Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <==== UWAGA HKU\S-1-5-21-1940709926-2010511596-994217772-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp URLSearchHook: [S-1-5-21-1940709926-2010511596-994217772-1001] UWAGA => Brak domyślnego URLSearchHook SearchScopes: HKU\S-1-5-21-1940709926-2010511596-994217772-1003 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={BF8654A8-9D5A-485C-88E3-762C3B539B52}&mid=397f46c12b64443a8366856e58943cc5-faf9c335f42452afb565b6b89dde6500b9aa62bc&lang=pl&ds=AVG&coid=avgtbavg&cmpid=0916tb&pr=fr&d=2015-03-25 16:15:21&v=4.3.5.160&pid=wtu&sg=&sap=dsp&q={searchTerms} BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-03-27] (Qualcomm Atheros -> Qualcomm Atheros Commnucations) [Brak podpisu cyfrowego] BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2020-02-22] (McAfee, LLC -> McAfee, Inc.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2020-02-04] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-01-27] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-06-28] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.6.255\AVG Web TuneUp.dll [2016-11-14] (AVG Technologies CZ, s.r.o. -> AVG) BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2020-02-22] (McAfee, LLC -> McAfee, Inc.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2020-02-04] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-28] (Oracle America, Inc. -> Oracle Corporation) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll Brak pliku Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-02-04] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-02-04] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-02-04] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-02-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-02-04] (Microsoft Corporation -> Microsoft Corporation) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll Brak pliku Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-07-18] (Skype Software Sarl -> Skype Technologies) FireFox: ======== FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2020-02-22] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-04] (Adobe Systems Incorporated -> ) FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-01-27] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-22] (VideoLAN) [Brak podpisu cyfrowego] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-04] (Adobe Systems Incorporated -> ) FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.6\\npsitesafety.dll [Brak pliku] FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google Inc -> Google, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-28] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-28] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2020-01-27] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [Brak pliku] FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [Brak pliku] FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-02-04] (Adobe Inc. -> Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2020-02-27] CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp CHR StartupUrls: Default -> "hxxps://www.bialyfartuch.pl/materialy-akademii-bialego-fartucha/plan/" CHR DefaultSearchURL: Default -> hxxps://pl.search.yahoo.com/search?fr=mcafee_uninternational&type=E210PL91075G0&p={searchTerms} CHR DefaultSearchKeyword: Default -> mcafee CHR Extension: (Slides) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-15] CHR Extension: (Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14] CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22] CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27] CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2020-02-19] CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26] CHR Extension: (MySearch) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcebahaopmklkfaaacddffiomjjldmkk [2020-02-22] CHR Extension: (Sheets) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-14] CHR Extension: (McAfee® WebAdvisor) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2020-02-12] CHR Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-10] CHR Extension: (Avast Online Security) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-02-27] CHR Extension: (Website Blocker (Beta)) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hclgegipaehbigmbhdpfapmjadbaldib [2019-02-24] CHR Extension: (Kill News Feed) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjobfcedfgohjkaieocljfcppjbkglfd [2017-01-23] CHR Extension: (Forest: stay focused, be present) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjacjjdnoddnpbbcjilcajfhhbdhkpgk [2020-01-22] CHR Extension: (Facebook Runner) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmhcemnjmajcmijidnbceceahgfpdalg [2015-03-24] CHR Extension: (Chrome Web Store Payments) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-03] CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-03-26] CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-17] CHR HKLM\...\Chrome\Extension: [aaaaahlfahldnilidgnlikdckbfehhca] CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] CHR HKLM\...\Chrome\Extension: [fcebahaopmklkfaaacddffiomjjldmkk] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] CHR HKLM-x32\...\Chrome\Extension: [aaaaahlfahldnilidgnlikdckbfehhca] CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] CHR HKLM-x32\...\Chrome\Extension: [fcebahaopmklkfaaacddffiomjjldmkk] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6259592 2019-12-19] (AVAST Software s.r.o. -> AVAST Software) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227968 2013-03-27] (Qualcomm Atheros -> Qualcomm Atheros Commnucations) [Brak podpisu cyfrowego] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [996880 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1630456 2013-06-07] (IVT CORPORATION -> IVT Corporation) R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [145656 2013-05-14] (IVT CORPORATION -> IVT Corporation) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11096648 2020-02-12] (Microsoft Corporation -> Microsoft Corporation) R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2466448 2012-09-13] (Realtek Semiconductor Corp -> Realsil Microelectronics Inc.) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation -> Intel Corporation) R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Windows -> Microsoft Corporation) R2 lmhosts; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Windows -> Microsoft Corporation) R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [920656 2020-02-22] (McAfee, LLC -> McAfee, Inc.) R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Windows -> Microsoft Corporation) R2 NlaSvc; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Windows -> Microsoft Corporation) R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Windows -> Microsoft Corporation) R2 nsi; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Windows -> Microsoft Corporation) S2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2017-10-17] (Popcorn Time) [Brak podpisu cyfrowego] S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation) R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [980552 2016-11-14] (AVG Technologies CZ, s.r.o. -> ) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-03-27] (Atheros) [Brak podpisu cyfrowego] S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [X] ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37616 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [204824 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [274456 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [209552 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [65120 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [276952 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42736 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [171520 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110320 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [83792 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [848432 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [460448 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [236024 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [316528 2019-10-04] (AVAST Software s.r.o. -> AVAST Software) S3 ATHDFU; C:\Windows\System32\Drivers\AthDfu.sys [55448 2013-03-27] (Atheros Communications Inc. -> Windows (R) Win 7 DDK provider) R3 athr; C:\Windows\System32\DRIVERS\athrx.sys [4017664 2013-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros Communications, Inc.) S3 ATP; C:\Windows\system32\drivers\AsusTP.sys [65784 2013-06-28] (ASUSTeK Computer Inc. -> ASUS Corporation) U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [33968 2012-12-19] (Ralink Technology Corporation -> IVT Corporation) R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (Ralink Technology Corporation -> IVT Corporation) R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [54064 2013-04-26] (Mediatek Inc. -> Ralink Corporation) S3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [49584 2013-03-25] (Mediatek Inc. -> Ralink Corporation) R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28216 2012-09-14] (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation) S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [39704 2013-03-27] (Atheros Communications Inc. -> Atheros) S3 m76usb; C:\Windows\System32\DRIVERS\m76usb.sys [494384 2013-06-07] (Mediatek Inc. -> Ralink Technology Corp.) S3 netr28x; C:\Windows\System32\DRIVERS\netr28x.sys [2431792 2013-04-12] (Mediatek Inc. -> Ralink Technology, Corp.) S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64.sys [23200 2015-04-29] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies) U1 aswbdisk; Brak ImagePath U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [33968 2012-12-19] (Ralink Technology Corporation -> IVT Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) =================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2092-12-12 08:52 - 2017-06-16 08:26 - 000000000 ____D C:\ProgramData\MFAData 2092-12-11 07:54 - 2020-02-23 12:40 - 000000000 ____D C:\Users\User\AppData\Local\CrashDumps 2020-02-27 18:58 - 2020-02-27 19:01 - 000032634 _____ C:\Users\User\Desktop\FRST.txt 2020-02-27 18:57 - 2020-02-27 18:59 - 000000000 ____D C:\FRST 2020-02-27 18:55 - 2020-02-27 18:55 - 002279424 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe 2020-02-26 23:42 - 2020-02-26 23:47 - 000000783 _____ C:\Users\User\Desktop\pytania do promotorki.txt 2020-02-26 21:33 - 2020-02-26 21:33 - 000159743 _____ C:\Users\User\Desktop\HARMONOGRAM III ROK.pdf 2020-02-26 21:26 - 2020-02-26 21:25 - 000418879 _____ C:\Users\User\Desktop\3 rok.pdf 2020-02-19 17:34 - 2020-02-19 17:34 - 003663261 _____ C:\Users\User\Desktop\kalendarz-2020-planer-kolorowy.pdf 2020-02-13 09:15 - 2020-02-13 09:15 - 000002381 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk 2020-02-13 09:15 - 2020-02-13 09:15 - 000002380 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk 2020-02-13 09:15 - 2020-02-13 09:15 - 000002344 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk 2020-02-13 09:15 - 2020-02-13 09:15 - 000002343 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk 2020-02-13 09:15 - 2020-02-13 09:15 - 000002337 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk 2020-02-13 09:15 - 2020-02-13 09:15 - 000002331 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk 2020-02-13 09:15 - 2020-02-13 09:15 - 000002323 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2020-02-13 09:15 - 2020-02-13 09:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools 2020-02-06 16:14 - 2020-02-06 16:14 - 000000000 ____D C:\Users\User\Documents\Custom Office Templates 2020-02-05 09:35 - 2020-02-21 21:07 - 000000000 ____D C:\Users\User\Desktop\Excel ang 2020-02-04 22:30 - 2020-02-04 22:31 - 008150240 _____ (Microsoft Corporation) C:\Users\User\Desktop\setuplanguagepack.x64.en-us_.exe 2020-02-04 22:00 - 2020-02-24 11:16 - 000000000 ____D C:\Users\User\Desktop\EXCEL 2020-01-28 14:19 - 2020-01-28 14:19 - 000000000 ____D C:\Users\User\Documents\Niestandardowe szablony pakietu Office ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2020-02-27 18:59 - 2009-07-14 05:45 - 000029312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2020-02-27 18:59 - 2009-07-14 05:45 - 000029312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2020-02-27 18:11 - 2018-09-04 06:45 - 000000000 ____D C:\Users\User\AppData\Local\AVAST Software 2020-02-27 18:08 - 2013-06-07 09:40 - 000000852 _____ C:\Windows\SysWOW64\bscs.ini 2020-02-27 18:08 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2020-02-27 12:53 - 2020-01-27 10:38 - 000002202 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2020-02-27 12:53 - 2020-01-27 10:38 - 000000000 ___RD C:\Users\User\OneDrive 2020-02-27 11:16 - 2017-10-03 18:59 - 000000000 ___RD C:\Users\User\Desktop\STUDIA 2020-02-25 08:43 - 2020-01-27 10:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2020-02-25 08:39 - 2015-03-12 18:46 - 000000000 ____D C:\Program Files\Microsoft Office 2020-02-24 21:32 - 2011-04-12 14:21 - 000740348 _____ C:\Windows\system32\perfh015.dat 2020-02-24 21:32 - 2011-04-12 14:21 - 000155890 _____ C:\Windows\system32\perfc015.dat 2020-02-24 21:32 - 2009-07-14 06:13 - 001669190 _____ C:\Windows\system32\PerfStringBackup.INI 2020-02-24 21:32 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf 2020-02-24 09:57 - 2019-12-31 09:46 - 000000387 _____ C:\Users\User\Desktop\KSIĄŻKI do przeczytania.txt 2020-02-23 19:55 - 2017-12-09 16:37 - 000000000 ____D C:\Users\User\Desktop\RAMKA FAMILY 2020-02-20 15:51 - 2018-05-30 23:46 - 000000000 ____D C:\Users\User\Desktop\CV, HR, rozwój, styl życia 2020-02-19 17:42 - 2015-08-21 14:06 - 000000000 ___HD C:\Users\User\Desktop\.picasaoriginals 2020-02-18 08:23 - 2020-01-27 22:07 - 000000000 ____D C:\Users\User\Desktop\KRK trip 2020-02-13 19:32 - 2017-09-07 13:51 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2020-02-13 09:19 - 2009-07-14 04:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared 2020-02-08 08:00 - 2014-10-12 07:46 - 000000000 ____D C:\Users\User\AppData\Roaming\Atheros 2020-02-07 18:52 - 2014-10-12 07:47 - 000000000 ____D C:\Users\User\Documents\Bluetooth Folder 2020-02-01 11:24 - 2018-02-03 11:21 - 000000000 ____D C:\Program Files (x86)\BlueStacks 2020-01-28 12:11 - 2014-11-11 19:13 - 000000000 ____D C:\ProgramData\BlueStacks ==================== Pliki w katalogu głównym wybranych folderów ======== 2016-09-25 06:57 - 2016-09-25 06:57 - 001244848 _____ ( ) C:\Users\User\FormatFactory-13295-dp.exe 2016-12-02 20:28 - 2016-12-02 20:28 - 001582088 _____ ( ) C:\Users\User\Windows-Movie-Maker-11546-dp.exe 2020-01-17 08:45 - 2020-01-17 08:45 - 000004096 ____H () C:\Users\User\AppData\Local\keyfile3.drm ==================== FLock ============================== 2020-02-25 08:45 C:\Config.Msi 2017-11-22 13:52 C:\MSOCache 2009-07-14 04:20 C:\PerfLogs 2014-10-11 15:07 C:\Recovery 2020-02-05 13:11 C:\Windows\system32\config 2009-07-14 06:09 C:\Windows\system32\FxsTmp 2009-07-14 04:20 C:\Windows\system32\ias 2009-07-14 04:20 C:\Windows\system32\Msdtc 2009-07-14 04:20 C:\Windows\system32\NetworkList 2020-02-27 12:53 C:\Windows\system32\Tasks 2015-05-09 05:54 C:\Windows\system32\wdi 2018-06-18 20:40 C:\Windows\system32\wfp 2016-12-30 17:53 C:\Windows\LiveKernelReports 2019-04-26 18:51 C:\Windows\MEMORY.DMP 2019-04-26 18:51 C:\Windows\Minidump 2009-07-14 03:34 C:\Windows\ModemLogs 2020-01-19 20:47 C:\Windows\Prefetch 2009-07-14 04:20 C:\Windows\SysWOW64\config 2009-07-14 06:32 C:\Windows\SysWOW64\FxsTmp 2009-07-14 04:20 C:\Windows\SysWOW64\Msdtc 2009-07-14 04:20 C:\Windows\SysWOW64\NetworkList 2009-07-14 04:20 C:\Windows\SysWOW64\Tasks 2019-02-01 16:57 C:\Windows\Tasks\8fd53764-18e4-45e6-850f-6c1866de0a58.job 2014-11-11 20:01 C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-1.job 2014-11-11 20:02 C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-11.job 2014-11-11 20:02 C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-2.job 2014-11-11 20:02 C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-4.job 2014-11-11 20:02 C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-5.job 2014-11-11 20:02 C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-5_user.job 2014-11-11 21:49 C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-6.job 2014-11-11 20:02 C:\Windows\Tasks\a2498bb5-6571-4ce4-ba58-53ee974bfc40-7.job 2019-02-01 16:57 C:\Windows\Tasks\Adobe Flash Player Updater.job 2019-02-01 16:57 C:\Windows\Tasks\AutoKMS.job 2019-02-01 16:57 C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1940709926-2010511596-994217772-1002Core.job 2019-02-01 16:57 C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1940709926-2010511596-994217772-1002UA.job 2014-11-11 21:49 C:\Windows\Tasks\fbdbf6ea-9d9d-4461-98e0-a928bd299d9d.job 2019-02-01 16:57 C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job 2019-02-01 16:57 C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job 2019-02-01 16:57 C:\Windows\Tasks\MATLAB R2015b Startup Accelerator.job 2019-02-01 16:57 C:\Windows\Tasks\Price Fountain.job 2015-04-18 06:21 C:\Users\TEMP 2017-03-08 22:14 C:\Users\TEMP.Lapek 2017-05-01 20:58 C:\Users\TEMP.Lapek.000 2020-01-26 12:00 C:\Users\UpdatusUser 2018-06-18 20:40 C:\Users\Weronika ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) UWAGA: ==> Nie można uzyskać dostępu do BCD. Użytkownik nie jest administratorem -> Nie mo�na otworzy� magazynu danych konfiguracji rozruchu. Odmowa dost�pu. ==================== Koniec FRST.txt ========================