Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 14-04-2020 Uruchomiony przez julia (administrator) DESKTOP-JHH8TUR (Micro-Star International Co., Ltd MS-7B86) (14-04-2020 19:38:38) Uruchomiony z J:\FRST f Załadowane profile: julia (Dostępne profile: julia) Platform: Windows 10 Home Wersja 1909 18363.720 (X64) Język: Polski (Polska) Domyślna przeglądarka: Chrome Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0346830.inf_amd64_f723e13ffb3b2652\B345901\atieclxx.exe (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0346830.inf_amd64_f723e13ffb3b2652\B345901\atiesrxx.exe (ALCPU -> ALCPU) J:\Program Files\Core Temp\Core Temp.exe (AMD) [Brak podpisu cyfrowego] C:\Program Files\AMD\Performance Profile Client\AUEPLauncher.exe (AMD) [Brak podpisu cyfrowego] C:\Program Files\AMD\Performance Profile Client\AUEPMaster.exe (AMD) [Brak podpisu cyfrowego] C:\Program Files\AMD\Performance Profile Client\AUEPUF.exe (Discord Inc. -> Discord Inc.) C:\Users\julia\AppData\Local\Discord\app-0.0.306\Discord.exe <6> (Electronic Arts, Inc. -> Electronic Arts) J:\Origin\OriginWebHelperService.exe (Gaijin Network LTD -> Gaijin Entertainment) C:\Users\julia\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe (GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe <2> (GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe (GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GOG Galaxy Notifications Renderer.exe (GOG Sp. z o.o. -> GOG.com) C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\julia\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\julia\AppData\Local\Microsoft\Teams\current\Teams.exe <7> (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\WirelessKB850NotificationService.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.8-0\MsMpEng.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.8-0\NisSrv.exe (Opera Software AS -> Opera Software) J:\Opera beta\68.0.3618.31\opera.exe <25> (Opera Software AS -> Opera Software) J:\Opera beta\68.0.3618.31\opera_crashreporter.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Python Software Foundation -> Python Software Foundation) C:\Program Files (x86)\GOG Galaxy\python\python.exe <2> (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2> (Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve -> Valve Corporation) J:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7> (Valve -> Valve Corporation) J:\Program Files (x86)\Steam\steam.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [817232 2019-01-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [644552 2019-07-04] (Oracle America, Inc. -> Oracle Corporation) HKU\S-1-5-21-3367995364-951210483-953806408-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-14] (Piriform Software Ltd -> Piriform Ltd) HKU\S-1-5-21-3367995364-951210483-953806408-1001\...\Run: [Steam] => J:\Program Files (x86)\Steam\steam.exe [3371296 2020-04-04] (Valve -> Valve Corporation) HKU\S-1-5-21-3367995364-951210483-953806408-1001\...\Run: [GalaxyClient] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [13277256 2020-02-29] (GOG Sp. z o.o. -> GOG.com) HKU\S-1-5-21-3367995364-951210483-953806408-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\julia\AppData\Local\Microsoft\Teams\Update.exe [2342544 2020-03-22] (Microsoft 3rd Party Application Component -> Microsoft Corporation) HKU\S-1-5-21-3367995364-951210483-953806408-1001\...\Run: [Discord] => C:\Users\julia\AppData\Local\Discord\app-0.0.306\Discord.exe [90950968 2020-02-24] (Discord Inc. -> Discord Inc.) HKU\S-1-5-21-3367995364-951210483-953806408-1001\...\Run: [Gaijin.Net Updater] => C:\Users\julia\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe [2361600 2019-11-28] (Gaijin Network LTD -> Gaijin Entertainment) HKU\S-1-5-21-3367995364-951210483-953806408-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [807936 2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.163\Installer\chrmstp.exe [2020-04-02] (Google LLC -> Google LLC) ==================== Zaplanowane zadania (filtrowane) ============ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {10309AD7-4B8D-400C-BE2C-2F272B461350} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe Task: {13F98CA9-F2A2-45FA-B6BA-C1C3442E58A9} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1660520 2020-02-27] (Avast Software s.r.o. -> Avast Software) Task: {2C12F265-C2D9-4274-B521-6967FB27FADA} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_344_pepper.exe [1453624 2020-04-05] (Adobe Inc. -> Adobe) Task: {35D28E50-2690-4BCC-89B4-ED5CE4BAA057} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MpCmdRun.exe [480272 2020-03-26] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {3BE41A74-340E-4075-9BF9-428AB5187025} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe Task: {4738F470-8A4F-4D69-ADC3-6626A97C7B61} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-03-26] (Google LLC -> Google LLC) Task: {63BF848B-7551-4ECF-870F-3EAF1EF4094B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MpCmdRun.exe [480272 2020-03-26] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {6FB0FB17-A46E-41C2-B92F-7DA31E72F524} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [65136 2019-09-28] (Microsoft Corporation -> Microsoft) Task: {7F8738E7-AAB1-4421-B640-9647B2D99B43} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-03-26] (Google LLC -> Google LLC) Task: {87BFED4B-AEB7-4696-B411-D61EEBFEFA87} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe Task: {8AD18206-BC19-4F91-9DA6-46ACE18BEC63} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61112 2019-08-16] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {8BCC1DBD-27C7-4471-8FC1-52D592DC9392} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd) Task: {8CC284B1-0DD3-4E22-8A4D-85E8508D04E8} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [468992 2019-01-10] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego] Task: {957FB8B7-BB9F-47BE-BA4C-D6B693CF431E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MpCmdRun.exe [480272 2020-03-26] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {A50046CF-693B-4599-A6B0-682A5E3E4B2B} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [68280 2019-08-16] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {A9F7450E-DD8B-4AE4-906F-DD0233D99A37} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [468992 2019-01-10] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego] Task: {BCDC7BE2-F57E-4E3A-9AEE-ACEC1C96DFAD} - System32\Tasks\Core Temp Autostart julia => J:\Program Files\Core Temp\Core Temp.exe [1011592 2019-08-30] (ALCPU -> ALCPU) Task: {C3261DC1-D40F-4305-A4C6-90A857D0D8BE} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd) Task: {C9CE6D4D-97CD-4870-9212-C690C5D01622} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MpCmdRun.exe [480272 2020-03-26] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {E19CA1A4-7A90-4F56-AE28-F05BFCE12E00} - System32\Tasks\StartCNBM => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61112 2019-08-16] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{d0880699-799d-4610-aef1-4d7c35e2cd7f}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_221\bin\ssv.dll [2019-09-13] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_221\bin\jp2ssv.dll [2019-09-13] (Oracle America, Inc. -> Oracle Corporation) Edge: ====== DownloadDir: C:\Users\julia\Downloads Edge HomeButtonPage: HKU\S-1-5-21-3367995364-951210483-953806408-1001 -> hxxps://www.google.pl/ FireFox: ======== FF Plugin: @java.com/DTPlugin,version=11.221.2 -> C:\Program Files\Java\jre1.8.0_221\bin\dtplugin\npDeployJava1.dll [2019-09-13] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.221.2 -> C:\Program Files\Java\jre1.8.0_221\bin\plugin2\npjp2.dll [2019-09-13] (Oracle America, Inc. -> Oracle Corporation) Chrome: ======= CHR Profile: C:\Users\julia\AppData\Local\Google\Chrome\User Data\Default [2020-04-14] CHR Extension: (Prezentacje) - C:\Users\julia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-03-26] CHR Extension: (Dokumenty) - C:\Users\julia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-03-26] CHR Extension: (Dysk Google) - C:\Users\julia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-03-26] CHR Extension: (YouTube) - C:\Users\julia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-03-26] CHR Extension: (Search Manager) - C:\Users\julia\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnlfgalbnliphjafcnhjnnnfijekbnod [2020-04-14] CHR Extension: (Search Manager) - C:\Users\julia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coikafgfajmocjfjomdmagifpeehhohh [2020-04-14] CHR Extension: (Arkusze) - C:\Users\julia\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-03-26] CHR Extension: (Dokumenty Google offline) - C:\Users\julia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-03-26] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\julia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-03-26] CHR Extension: (Gmail) - C:\Users\julia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-03-26] CHR Extension: (Chrome Media Router) - C:\Users\julia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-03] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\c0346830.inf_amd64_f723e13ffb3b2652\B345901\atiesrxx.exe [508008 2019-09-18] (Advanced Micro Devices, Inc. -> AMD) R2 AUEPLauncher; C:\Program Files\AMD\Performance Profile Client\AUEPLauncher.exe [43008 2019-01-09] (AMD) [Brak podpisu cyfrowego] S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [802432 2020-03-16] (EasyAntiCheat Oy -> EasyAntiCheat Ltd) S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1636936 2020-02-29] (GOG Sp. z o.o. -> GOG.com) S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6821960 2020-02-24] (GOG Sp. z o.o. -> GOG.com) S3 Origin Client Service; J:\Origin\OriginClientService.exe [2495280 2020-03-16] (Electronic Arts, Inc. -> Electronic Arts) R2 Origin Web Helper Service; J:\Origin\OriginWebHelperService.exe [3445552 2020-03-16] (Electronic Arts, Inc. -> Electronic Arts) R2 RtkAudioUniversalService; C:\WINDOWS\System32\RtkAudUService64.exe [817232 2019-01-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor) S3 VSStandardCollectorService150; J:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [147392 2019-04-30] (Microsoft Corporation -> Microsoft Corporation) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\NisSrv.exe [3294680 2020-03-26] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MsMpEng.exe [103168 2020-03-26] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WirelessKB850NotificationService; C:\WINDOWS\system32\WirelessKB850NotificationService.exe [176624 2018-05-14] (Microsoft Corporation -> Microsoft Corporation) ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 ALSysIO; C:\Users\julia\AppData\Local\Temp\ALSysIO64.sys [47240 2020-04-14] (ALCPU (Arthur Liberman) -> Arthur Liberman) <==== UWAGA R3 amdgpio2; C:\WINDOWS\System32\drivers\amdgpio2.sys [45832 2019-10-01] (Advanced Micro Devices INC. -> Advanced Micro Devices, Inc) R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0346830.inf_amd64_f723e13ffb3b2652\B345901\atikmdag.sys [55249512 2019-09-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0346830.inf_amd64_f723e13ffb3b2652\B345901\atikmpag.sys [595048 2019-09-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R0 amdpsp; C:\WINDOWS\System32\DRIVERS\amdpsp.sys [243048 2017-06-12] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. ) R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [107400 2018-10-03] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1122200 2019-01-18] (Realtek Semiconductor Corp. -> Realtek ) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45960 2020-03-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [391392 2020-03-26] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [59104 2020-03-26] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) =================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2020-04-14 19:19 - 2020-04-14 19:19 - 000000000 ___HD C:\OneDriveTemp 2020-04-14 19:16 - 2020-04-14 19:16 - 000131234 _____ C:\WINDOWS\ntbtlog.txt 2020-04-14 18:17 - 2020-04-14 18:17 - 000000281 _____ C:\Users\julia\Desktop\Beksiński.txt 2020-04-14 15:10 - 2020-04-14 19:38 - 000000000 ____D C:\FRST 2020-04-14 14:40 - 2020-04-14 19:17 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2020-04-14 14:07 - 2020-04-14 14:08 - 000000000 ____D C:\AdwCleaner 2020-04-14 14:05 - 2020-04-14 14:05 - 008196784 _____ (Malwarebytes) C:\Users\julia\Desktop\adwcleaner_8.0.4.exe 2020-04-14 13:51 - 2020-04-14 13:51 - 000000000 ____D C:\Users\julia\Desktop\Nowy folder 2020-04-14 13:49 - 2020-04-14 13:49 - 000008778 _____ C:\Users\julia\AppData\Local\recently-used.xbel 2020-04-12 14:07 - 2020-04-13 19:16 - 000000000 ____D C:\Users\julia\AppData\Roaming\.minecraft 2020-04-08 23:07 - 2020-04-08 23:07 - 000001099 _____ C:\Users\julia\Desktop\WarThunder.lnk 2020-04-08 23:06 - 2020-04-08 23:07 - 000000000 ____D C:\Users\julia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder 2020-04-03 11:55 - 2020-04-03 11:55 - 000066008 _____ C:\Users\julia\Downloads\Bez_nazwy.xcf 2020-04-03 11:16 - 2020-04-03 11:16 - 000078440 _____ C:\Users\julia\Downloads\Pzydziszg.xcf 2020-04-02 08:17 - 2020-04-02 08:17 - 000000000 ____D C:\Users\julia\AppData\LocalLow\DefaultCompany 2020-04-02 08:16 - 2020-04-02 08:17 - 000000000 ____D C:\Users\julia\AppData\Roaming\Unity 2020-04-02 08:16 - 2020-04-02 08:16 - 000000000 ____D C:\Users\julia\AppData\Local\Unity 2020-04-01 17:11 - 2020-04-01 17:11 - 000000000 ____D C:\Users\julia\Documents\League of Legends 2020-04-01 17:09 - 2020-04-01 17:10 - 000001681 _____ C:\Users\Public\Desktop\League of Legends.lnk 2020-04-01 17:09 - 2020-04-01 17:09 - 000000000 ____D C:\Users\julia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Riot Games 2020-04-01 17:09 - 2020-04-01 17:09 - 000000000 ____D C:\Riot Games 2020-04-01 17:09 - 2020-04-01 17:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games 2020-04-01 17:09 - 2008-07-12 08:18 - 003851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll 2020-04-01 17:09 - 2008-07-12 08:18 - 001493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll 2020-04-01 17:09 - 2008-07-12 08:18 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll 2020-04-01 17:08 - 2020-04-01 17:11 - 000000000 ____D C:\Users\julia\AppData\Local\Riot Games 2020-04-01 17:08 - 2020-04-01 17:09 - 000000000 ____D C:\ProgramData\Riot Games 2020-03-30 20:34 - 2020-03-30 23:58 - 000000000 ____D C:\Users\julia\Documents\Assassin's Creed Syndicate 2020-03-30 20:13 - 2020-03-30 20:13 - 000000302 _____ C:\Users\julia\Desktop\Assassins Creed Syndicate.url 2020-03-30 08:32 - 2020-03-30 08:32 - 000001292 _____ C:\Users\Public\Desktop\Unity 2019.3.7f1 (64-bit).lnk 2020-03-30 08:32 - 2020-03-30 08:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 2019.3.7f1 (64-bit) 2020-03-30 08:29 - 2020-03-30 08:29 - 000000000 ____D C:\Program Files\Unity 2020-03-28 22:21 - 2020-03-28 22:21 - 000000000 ____D C:\Users\julia\AppData\Local\Jackbox Games 2020-03-26 19:04 - 2020-03-26 19:04 - 000307579 _____ (Mojang) C:\Users\julia\Desktop\SKlauncher 3-beta.15.exe 2020-03-26 16:42 - 2020-04-02 22:54 - 000002307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2020-03-26 16:42 - 2020-04-02 22:54 - 000002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2020-03-26 16:42 - 2020-03-26 16:47 - 000003570 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2020-03-26 16:42 - 2020-03-26 16:47 - 000003446 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2020-03-25 13:02 - 2020-03-25 13:07 - 000000000 ____D C:\Users\julia\AppData\Local\ElevatedDiagnostics 2020-03-25 10:02 - 2020-03-25 10:02 - 000000233 _____ C:\Users\julia\Desktop\Child of Light.url 2020-03-25 10:00 - 2020-03-25 10:00 - 000000000 ____D C:\ProgramData\Ubisoft 2020-03-25 09:59 - 2020-04-04 12:12 - 000000000 ____D C:\Users\julia\AppData\Local\Ubisoft Game Launcher 2020-03-25 09:59 - 2020-03-25 09:59 - 000000941 _____ C:\Users\julia\Desktop\Uplay.lnk 2020-03-25 09:59 - 2020-03-25 09:59 - 000000000 ____D C:\Users\julia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2020-03-19 00:34 - 2020-03-19 20:23 - 000000000 ____D C:\Users\julia\AppData\Roaming\Tera_Awesomium 2020-03-18 23:02 - 2020-03-18 23:02 - 000000000 ____D C:\Users\julia\AppData\Local\En Masse Entertainment 2020-03-18 23:02 - 2020-03-18 23:02 - 000000000 ____D C:\ProgramData\boost_interprocess 2020-03-18 23:00 - 2020-03-19 20:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\En Masse Entertainment 2020-03-18 23:00 - 2020-03-18 23:02 - 000000000 ____D C:\WINDOWS\SysWOW64\directx 2020-03-18 15:20 - 2020-04-14 19:20 - 000000000 ____D C:\Users\julia\AppData\Roaming\discord 2020-03-18 15:20 - 2020-03-18 15:20 - 000002233 _____ C:\Users\julia\Desktop\Discord.lnk 2020-03-18 15:20 - 2020-03-18 15:20 - 000000000 ____D C:\Users\julia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc 2020-03-18 15:20 - 2020-03-18 15:20 - 000000000 ____D C:\Users\julia\AppData\Local\Discord 2020-03-17 19:16 - 2020-03-17 19:16 - 000000000 ____D C:\Users\julia\AppData\Roaming\EasyAntiCheat 2020-03-17 19:16 - 2020-03-17 19:16 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat 2020-03-16 17:46 - 2020-03-16 18:57 - 000000000 ____D C:\Users\julia\AppData\Roaming\CodeBlocks 2020-03-16 17:45 - 2020-03-16 17:46 - 000000000 ____D C:\Users\julia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks 2020-03-16 17:45 - 2020-03-16 17:45 - 000000847 _____ C:\Users\julia\Desktop\CodeBlocks.lnk 2020-03-16 17:45 - 2020-03-16 17:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks 2020-03-16 10:15 - 2020-03-16 10:15 - 000000222 _____ C:\Users\julia\Desktop\Paladins.url ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2020-04-14 19:23 - 2020-02-18 21:34 - 001768484 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2020-04-14 19:23 - 2019-03-19 14:23 - 000784514 _____ C:\WINDOWS\system32\perfh015.dat 2020-04-14 19:23 - 2019-03-19 14:23 - 000152312 _____ C:\WINDOWS\system32\perfc015.dat 2020-04-14 19:23 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF 2020-04-14 19:19 - 2020-02-18 21:39 - 000003112 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate 2020-04-14 19:19 - 2020-02-18 21:39 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2020-04-14 19:19 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2020-04-14 19:19 - 2019-03-19 06:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2020-04-14 19:19 - 2019-01-18 18:04 - 000000000 ___RD C:\Users\julia\OneDrive 2020-04-14 18:21 - 2019-02-19 00:10 - 000000000 ____D C:\Users\julia\AppData\LocalLow\Temp 2020-04-14 18:16 - 2020-02-18 21:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2020-04-14 14:39 - 2020-02-18 21:26 - 000491816 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2020-04-14 14:08 - 2020-02-18 21:31 - 000000000 ____D C:\Users\julia 2020-04-14 13:56 - 2019-02-18 20:06 - 000000000 ____D C:\Users\julia\AppData\Local\.IdentityService 2020-04-14 13:50 - 2019-01-26 22:03 - 000000000 ____D C:\Users\julia\AppData\Local\babl-0.1 2020-04-14 13:01 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps 2020-04-14 13:01 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness 2020-04-14 00:18 - 2019-01-18 18:02 - 000000000 ____D C:\Users\julia\AppData\Local\D3DSCache 2020-04-08 23:07 - 2019-07-20 17:49 - 000000000 ____D C:\ProgramData\Gaijin 2020-04-08 23:06 - 2020-01-31 13:14 - 000000000 ____D C:\Users\julia\Documents\My Games 2020-04-07 21:52 - 2019-01-19 19:40 - 000000000 ____D C:\Users\julia\AppData\Roaming\Origin 2020-04-07 21:52 - 2019-01-19 19:40 - 000000000 ____D C:\ProgramData\Origin 2020-04-07 17:45 - 2019-08-30 19:45 - 000000000 ____D C:\Users\julia\AppData\Roaming\Star Stable Online 2020-04-07 17:17 - 2019-01-20 14:18 - 000000000 ____D C:\Program Files (x86)\Origin Games 2020-04-07 17:15 - 2019-01-19 19:40 - 000000000 ____D C:\Users\julia\AppData\Local\Origin 2020-04-06 11:50 - 2019-08-30 19:45 - 000001128 _____ C:\Users\Public\Desktop\Star Stable Online.lnk 2020-04-05 17:07 - 2020-02-18 21:39 - 000004658 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player PPAPI Notifier 2020-04-05 17:07 - 2019-04-19 18:27 - 000000000 ____D C:\Users\julia\AppData\Local\Adobe 2020-04-05 17:07 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2020-04-05 17:07 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Macromed 2020-04-02 23:27 - 2020-03-11 14:58 - 000000000 ____D C:\Users\julia\AppData\Roaming\UnityHub 2020-04-02 12:28 - 2019-01-26 22:04 - 000000000 ____D C:\Users\julia\AppData\Local\gtk-2.0 2020-04-02 08:17 - 2019-07-08 19:13 - 000000000 ____D C:\Users\julia\AppData\LocalLow\Unity 2020-04-02 07:56 - 2019-01-19 14:13 - 000744808 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2020-03-30 08:33 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2020-03-26 16:42 - 2020-02-18 22:40 - 000000000 ____D C:\Users\julia\AppData\Local\Google 2020-03-26 16:42 - 2020-02-18 22:40 - 000000000 ____D C:\Program Files (x86)\Google 2020-03-26 09:01 - 2019-01-19 00:52 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2020-03-22 21:37 - 2020-01-22 07:50 - 000002364 _____ C:\Users\julia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk 2020-03-22 21:37 - 2019-11-12 19:09 - 000002356 _____ C:\Users\julia\Desktop\Microsoft Teams.lnk 2020-03-22 16:51 - 2019-01-18 18:04 - 000000000 ____D C:\Users\julia\AppData\Local\PlaceholderTileLogoFolder 2020-03-22 13:26 - 2019-01-19 14:39 - 000000000 ____D C:\Users\julia\AppData\Local\GHISLER 2020-03-18 15:20 - 2019-11-12 19:09 - 000000000 ____D C:\Users\julia\AppData\Local\SquirrelTemp 2020-03-17 00:20 - 2020-03-12 11:08 - 000000000 ____D C:\Users\julia\AppData\Roaming\foobar2000 2020-03-16 10:15 - 2019-07-05 20:34 - 000000000 ____D C:\Users\julia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam ==================== Pliki w katalogu głównym wybranych folderów ======== 2020-04-14 11:32 - 2020-04-14 14:17 - 022440403 _____ () C:\Program Files (x86)\Common Files\MoCreatures.jar 2019-11-17 14:08 - 2019-11-17 14:23 - 000003520 _____ () C:\Users\julia\AppData\Local\kdenliverc 2019-07-24 18:27 - 2019-12-08 21:44 - 000004129 _____ () C:\Users\julia\AppData\Local\PlariumPlay.log 2020-04-14 13:49 - 2020-04-14 13:49 - 000008778 _____ () C:\Users\julia\AppData\Local\recently-used.xbel 2019-11-17 14:08 - 2019-11-17 14:08 - 000000535 _____ () C:\Users\julia\AppData\Local\user-places.xbel 2019-11-17 14:08 - 2019-11-17 14:08 - 000000000 _____ () C:\Users\julia\AppData\Local\user-places.xbel.tbcache ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) ==================== Koniec FRST.txt ========================