Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 13-09-2020
Uruchomiony przez Rostov (administrator)  ROSTOV (Dell Inc. Inspiron N5050) (14-09-2020 20:29:53)
Uruchomiony z C:\Users\Rostov\Desktop\FRST
Załadowane profile: Rostov
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Domyślna przeglądarka: Chrome
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

() [Brak podpisu cyfrowego] C:\Program Files (x86)\PopTrayU\PopTrayU.exe
() [Brak podpisu cyfrowego] C:\Program Files\AutoHotkey\AutoHotkey.exe
(Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe
(Atheros Communications Inc. -> Atheros Communications) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Atheros Communications Inc. -> Atheros) [Brak podpisu cyfrowego] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe
(CHENGDU YIWO Tech Development Co., Ltd. -> ) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
(CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
(Dell Inc -> Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Evernote Corporation -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(GZ Systems Limited -> ) C:\Program Files (x86)\Atom\AtomService\Atom.SDK.WindowsService.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation -> Intel Corporation) C:\WINDOWS\System32\hkcmd.exe
(Intel Corporation -> Intel Corporation) C:\WINDOWS\System32\igfxpers.exe
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\vds.exe
(Microsoft Windows Hardware Compatibility Publisher -> Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Noriyuki Miyazaki -> Crystal Dew World) C:\Users\Rostov\D\reinstal\CrystalDiskInfo\DiskInfo64.exe
(SOFTPERFECT PTY. LTD. -> SoftPerfect) C:\Program Files\NetWorx\networx.exe
(Sonic Solutions -> ) C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
(Symantec Corporation -> Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(Symantec Corporation -> Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [608112 2011-03-29] (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-05-27] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [3668336 2011-03-24] (Dell Inc -> Dell Inc.)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [627360 2011-05-20] (Atheros Communications Inc. -> Atheros Communications) [Brak podpisu cyfrowego]
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe [379552 2011-05-20] (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego]
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [NetWorx] => C:\Program Files\NetWorx\networx.exe [7710024 2016-09-20] (SOFTPERFECT PTY. LTD. -> SoftPerfect)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation -> Intel Corporation)
HKLM-x32\...\Run: [RoxWatchTray] => c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions -> Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] => c:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] (Sonic Solutions -> )
HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [1117528 2010-08-26] (Symantec Corporation -> Dell, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-11-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKU\S-1-5-21-764258043-3443933537-1065429426-1000\...\Policies\system: [DisableLockWorkstation] 0
HKLM\...\Print\Monitors\HP 8911 Status Monitor: C:\windows\system32\hpinksts8911LM.dll [332176 2012-09-12] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\windows\system32\cmd.exe /D /C start C:\windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\85.0.4183.102\Installer\chrmstp.exe [2020-09-10] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\windows\system32\cmd.exe /D /C start C:\windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Startup: C:\Users\Rostov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DiskInfo64.lnk [2020-03-29]
ShortcutTarget: DiskInfo64.lnk -> C:\Users\Rostov\D\reinstal\CrystalDiskInfo\DiskInfo64.exe (Noriyuki Miyazaki -> Crystal Dew World)
Startup: C:\Users\Rostov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2020-03-20]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corporation -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Rostov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hotkeys.lnk [2020-05-06]
ShortcutTarget: hotkeys.lnk -> C:\Users\Rostov\D\reinstal\Klawiatura\AutoHotkey\hotkeys.ahk () [Brak podpisu cyfrowego]
Startup: C:\Users\Rostov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PopTrayU.lnk [2020-03-20]
ShortcutTarget: PopTrayU.lnk -> C:\Program Files (x86)\PopTrayU\PopTrayU.exe () [Brak podpisu cyfrowego]
Startup: C:\Users\Rostov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Powiadomienia monitorowania tuszu - HP Deskjet 1050 J410 series.lnk [2020-09-14]
ShortcutAndArgument: Powiadomienia monitorowania tuszu - HP Deskjet 1050 J410 series.lnk -> C:\windows\system32\RunDll32.exe => "C:\Program Files\HP\HP Deskjet 1050 J410 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN11Q3J58T05HW;CONNECTION=USB;MONITOR=1;

==================== Zaplanowane zadania (filtrowane) ============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {0DC0F503-D9CC-4C35-9C02-919D6B33BF26} - System32\Tasks\Games\UpdateCheck_S-1-5-21-764258043-3443933537-1065429426-1000 => {CA22F5B1-E06F-4A2B-94FC-21E87FE53781} C:\Windows\System32\gameux.dll [2746368 2012-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {1F2AC86A-FE1C-4DE9-A27F-7822731B1C31} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-03-18] (Google LLC -> Google LLC)
Task: {3D3B69EB-B11C-48B3-9436-4FD77CAEB2CB} - System32\Tasks\HPCustParticipation HP Deskjet 1050 J410 series => C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPCustPartic.exe [4119656 2012-10-02] (Hewlett Packard -> Hewlett-Packard Co.)
Task: {45AE3C49-E3B4-44A2-9CAD-546369490172} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Dell Support Center\uaclauncher.exe [1242440 2011-03-22] (Dell Inc -> PC-Doctor, Inc.)
Task: {4DFCF7E6-7E51-4FFB-973A-10124AD76A96} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-03-18] (Google LLC -> Google LLC)
Task: {4EFEE721-A28F-4556-99CE-95109C2B943A} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-08-05] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {5366BEB2-0E24-4E0C-B349-1A6B81064674} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4475136 2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
Task: {549922C1-F882-495B-94C1-CB1012DB18D3} - System32\Tasks\PCDEventLauncher => c:\Program Files\Dell Support Center\sessionchecker.exe [362312 2011-03-22] (Dell Inc -> PC-Doctor, Inc.)
Task: {58F000B2-D0ED-4207-975E-8125E5860365} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-09-09] (Adobe Inc. -> Adobe)
Task: {75F7B530-1B1C-492C-BDEC-E0FE4D8FF1B1} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {9C6644F6-B3F4-4943-ABD1-347858ABF834} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_433_pepper.exe [1497656 2020-09-09] (Adobe Inc. -> Adobe)
Task: {C8BC369F-024A-4C42-A410-C24046D32482} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [24770744 2020-08-05] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {D5DB3827-705B-486A-945D-37A9C6BED3E6} - System32\Tasks\SystemToolsDailyTest => c:\Program Files\Dell Support Center\pcdrcui.exe [1206088 2011-03-22] (Dell Inc -> PC-Doctor, Inc.)
Task: {E109865F-A73A-415C-99A6-DB62D069E83A} - System32\Tasks\Opera scheduled assistant Autoupdate 1584483210 => C:\Users\Rostov\AppData\Local\Programs\Opera\launcher.exe [1529880 2020-09-08] (Opera Software AS -> Opera Software)
Task: {F6FE2BCA-150A-4FC4-83FD-0FAFF5213A14} - System32\Tasks\Opera scheduled Autoupdate 1584483206 => C:\Users\Rostov\AppData\Local\Programs\Opera\launcher.exe [1529880 2020-09-08] (Opera Software AS -> Opera Software)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

Task: C:\windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\Dell Support Center\uaclauncher.exeo-backgroundmon scripts\defaultscan.xml
Task: C:\windows\Tasks\SystemToolsDailyTest.job => c:\Program Files\Dell Support Center\pcdrcui.exe
Task: C:\windows\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{A568E9A6-601E-4C5F-A7E4-A0E340146302}: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll [2011-12-16] (Sun Microsystems, Inc.) [Brak podpisu cyfrowego]
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll [2011-12-16] (Sun Microsystems, Inc.) [Brak podpisu cyfrowego]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-764258043-3443933537-1065429426-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Default [2020-09-14]
CHR Extension: (Prezentacje) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-05-16]
CHR Extension: (Dokumenty) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-05-16]
CHR Extension: (Dysk Google) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-05-16]
CHR Extension: (YouTube) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-05-16]
CHR Extension: (Arkusze) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-05-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-16]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-05-16]
CHR Extension: (Gmail) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-05-16]
CHR Extension: (Chrome Media Router) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-16]
CHR Profile: C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1 [2020-09-14]
CHR DownloadDir: C:\Users\Rostov\Desktop
CHR Notifications: Profile 1 -> hxxps://chaturbate.com; hxxps://do.centrum24.pl; hxxps://messages.google.com
CHR HomePage: Profile 1 -> hxxps://wyborcza.pl/
CHR StartupUrls: Profile 1 -> "hxxps://wyborcza.pl/"
CHR Extension: (Tłumacz Google) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2020-03-30]
CHR Extension: (Prezentacje) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-03-29]
CHR Extension: (Dokumenty) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2020-03-29]
CHR Extension: (Dysk Google) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-03-29]
CHR Extension: (ColorZilla) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2020-08-06]
CHR Extension: (Auto Copy) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bijpdibkloghppkbmhcklkogpjaenfkg [2020-05-26]
CHR Extension: (YouTube) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-03-29]
CHR Extension: (uBlock Origin) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-08-23]
CHR Extension: (Easy WebRTC Block) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cmjcmogcdofcljpojplgmfpheblcaehh [2020-09-07]
CHR Extension: (No Playlist Autoplay For YouTube) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dkokllldoffaconpbmbaofjbadhjggil [2020-08-05]
CHR Extension: (Go Back With Backspace) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eekailopagacbcdloonjhbiecobagjci [2020-04-09]
CHR Extension: (Arkusze) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-03-29]
CHR Extension: (GetThetPic!) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fkdmnfbeaepmildaolaoicjbfkghpcco [2020-03-30]
CHR Extension: (Seen Blocker) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gchmppebfedehcmemdmhojamlnanmafn [2020-03-30]
CHR Extension: (Dokumenty Google offline) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-08-12]
CHR Extension: (Web Scrobbler) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hhinaapppaileiechjoiifaancjggfjm [2020-09-07]
CHR Extension: (Switch To New Tab) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lfpdoeknpnclenhlmblmenpafkbcgdbg [2020-03-30]
CHR Extension: (Chrome Notes) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lnfempckkegmaeleniojhjplemmebgfi [2020-05-13]
CHR Extension: (MeddleMonkey) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\moihledlmchhofenpacbhphnbnpakgmo [2020-07-07]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-03-29]
CHR Extension: (Gmail) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-03-29]
CHR Extension: (Chrome Media Router) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-09-04]
CHR Profile: C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 2 [2020-09-14]
CHR StartupUrls: Profile 2 -> "hxxp://google.pl/"
CHR Extension: (Prezentacje) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-03-29]
CHR Extension: (Dokumenty) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2020-03-29]
CHR Extension: (Dysk Google) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-03-29]
CHR Extension: (YouTube) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-03-29]
CHR Extension: (uBlock Origin) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-08-27]
CHR Extension: (Arkusze) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-03-29]
CHR Extension: (Dokumenty Google offline) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-08-16]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-03-29]
CHR Extension: (Gmail) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-03-29]
CHR Extension: (Chrome Media Router) - C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-07-26]
CHR Profile: C:\Users\Rostov\AppData\Local\Google\Chrome\User Data\System Profile [2020-09-14]

Opera: 
=======
OPR DownloadDir: C:\Users\Rostov\Desktop
OPR StartupUrls:  "view-source:hxxps://html.spec.whatwg.org/multipage/syntax.html" 
OPR Extension: (Google Translate) - C:\Users\Rostov\AppData\Roaming\Opera Software\Opera Stable\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2020-03-20]
OPR Extension: (Brak nazwy) - C:\Users\Rostov\AppData\Roaming\Opera Software\Opera Stable\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-06-28]
OPR Extension: (No Playlist Autoplay For YouTube) - C:\Users\Rostov\AppData\Roaming\Opera Software\Opera Stable\Extensions\dkokllldoffaconpbmbaofjbadhjggil [2020-03-27]
OPR Extension: (GetThetPic!) - C:\Users\Rostov\AppData\Roaming\Opera Software\Opera Stable\Extensions\fkdmnfbeaepmildaolaoicjbfkghpcco [2020-03-20]
OPR Extension: (Seen Blocker) - C:\Users\Rostov\AppData\Roaming\Opera Software\Opera Stable\Extensions\gchmppebfedehcmemdmhojamlnanmafn [2020-03-21]
OPR Extension: (Web Scrobbler) - C:\Users\Rostov\AppData\Roaming\Opera Software\Opera Stable\Extensions\hhinaapppaileiechjoiifaancjggfjm [2020-06-28]
OPR Extension: (Install Chrome Extensions) - C:\Users\Rostov\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2020-03-19]
OPR Extension: (MeddleMonkey) - C:\Users\Rostov\AppData\Roaming\Opera Software\Opera Stable\Extensions\moihledlmchhofenpacbhphnbnpakgmo [2020-03-20]
StartMenuInternet: (HKLM) OperaStable - C:\Users\Rostov\AppData\Local\Programs\Opera\Launcher.exe

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AdobeFlashPlayerUpdateSvc; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-09-09] (Adobe Inc. -> Adobe)
R2 AESTFilters; C:\Program Files\IDT\WDM\AESTSr64.exe [89600 2009-03-03] (Microsoft Windows Hardware Compatibility Publisher -> Andrea Electronics Corporation)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-05-20] (Atheros Communications Inc. -> Atheros) [Brak podpisu cyfrowego]
R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [80032 2011-05-20] (Atheros Communications Inc. -> Atheros Commnucations) [Brak podpisu cyfrowego]
R2 AtomService; C:\Program Files (x86)\Atom\AtomService\Atom.SDK.WindowsService.exe [151008 2020-07-29] (GZ Systems Limited -> )
R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [40104 2019-11-15] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
R2 NOBU; C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe [2823000 2010-08-26] (Symantec Corporation -> Dell, Inc.)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [301568 2011-05-27] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2286976 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 athr; C:\windows\System32\DRIVERS\athrx.sys [2727424 2011-04-22] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
R1 avpndriver; C:\windows\System32\drivers\avpndriver.sys [77064 2020-01-11] (GZ Systems Limited -> Windows (R) Win 7 DDK provider)
R0 EUBKMON; C:\windows\System32\drivers\EUBKMON.sys [54144 2019-11-15] (CHENGDU YIWO Tech Development Co., Ltd. -> )
R0 MpFilter; C:\windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)
S3 Neo_VPN; C:\windows\System32\DRIVERS\Neo_0071.sys [38088 2020-06-21] (SoftEther Corporation -> SoftEther Corporation)
R1 networx; C:\windows\System32\drivers\networx.sys [72632 2016-09-20] (SOFTPERFECT PTY. LTD. -> NetFilterSDK.com)
R3 NisDrv; C:\windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)
S3 nlwt; C:\windows\System32\DRIVERS\nlwt.sys [29888 2020-06-10] (TEFINCOM S.A. -> WireGuard LLC)
S3 qcusbnet; C:\windows\System32\DRIVERS\qcusbnet.sys [428600 2017-03-15] (Microsoft Windows Hardware Compatibility Publisher -> QUALCOMM Incorporated)
R3 STHDA; C:\windows\System32\DRIVERS\stwrt64.sys [528384 2011-05-27] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
R3 tap0901; C:\windows\System32\DRIVERS\tap0901.sys [39384 2020-05-30] (GZ Systems Limited -> The OpenVPN Project)
S3 tapnordvpn; C:\windows\System32\DRIVERS\tapnordvpn.sys [35592 2020-06-09] (TEFINCOM S.A. -> The OpenVPN Project)
R3 VBAudioVACMME; C:\windows\System32\DRIVERS\vbaudio_cable64_win7.sys [41192 2014-09-02] (Vincent Burel -> Windows (R) Win 7 DDK provider)
U3 aswbdisk; Brak ImagePath

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) ===================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2020-09-14 20:28 - 2020-09-14 20:28 - 000000000 ___RD C:\Users\Rostov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2020-09-14 20:26 - 2020-09-14 20:26 - 000000908 _____ C:\Users\Rostov\Desktop\Workaround.vbs
2020-09-13 22:09 - 2020-09-14 20:29 - 000000000 ____D C:\Users\Rostov\Desktop\FRST
2020-09-13 16:23 - 2019-04-07 21:48 - 104485960 _____ C:\Users\Rostov\Desktop\test.abc
2020-09-13 14:50 - 2020-09-13 19:11 - 000013940 _____ C:\Users\Rostov\Desktop\wcftplog.txt
2020-09-12 20:36 - 2020-09-12 20:33 - 000096336 _____ C:\Users\Rostov\Desktop\net-log.txt
2020-09-12 20:13 - 2020-09-12 20:13 - 000215040 _____ C:\Users\Rostov\Desktop\net-log.exe
2020-09-11 22:51 - 2020-09-11 22:51 - 000000000 ____D C:\Users\Rostov\AppData\Local\Ivacy
2020-09-11 22:50 - 2020-09-11 22:50 - 000000000 ____D C:\ProgramData\Atom
2020-09-11 22:50 - 2020-09-11 22:50 - 000000000 ____D C:\Program Files (x86)\Atom
2020-09-11 22:49 - 2020-09-11 22:53 - 000000000 ____D C:\Program Files (x86)\Ivacy
2020-09-11 22:49 - 2020-09-11 22:51 - 000000000 ____D C:\ProgramData\Ivacy
2020-09-11 22:49 - 2020-09-11 22:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ivacy
2020-09-11 22:49 - 2020-09-11 22:49 - 000000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2020-09-11 18:51 - 2020-09-11 19:03 - 000000000 ____D C:\Users\Rostov\AppData\Roaming\FileZilla
2020-09-11 18:48 - 2020-09-11 18:48 - 000000000 ____D C:\Users\Rostov\AppData\Roaming\FileZilla Server
2020-09-11 15:10 - 2020-09-11 15:10 - 000000000 ____D C:\Users\Rostov\AppData\Local\WMTools Downloaded Files
2020-09-11 15:07 - 2020-09-11 15:07 - 000003584 _____ C:\Users\Rostov\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2020-09-11 15:06 - 2020-09-11 15:06 - 000002507 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Movie Maker 2.6.lnk
2020-09-11 14:21 - 2020-09-11 18:52 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2020-09-10 13:22 - 2020-09-11 21:28 - 003905885 _____ C:\Users\Rostov\Desktop\Naoki Higashida - Dlaczego podskakuje.pdf
2020-09-05 22:31 - 2020-09-05 22:31 - 000000134 _____ C:\Users\Rostov\Desktop\PP.txt
2020-09-04 13:44 - 2020-01-11 00:43 - 000077064 _____ (Windows (R) Win 7 DDK provider) C:\windows\system32\Drivers\avpndriver.sys
2020-09-04 13:42 - 2020-05-30 21:13 - 000039384 _____ (The OpenVPN Project) C:\windows\system32\Drivers\tap0901.sys
2020-09-03 22:48 - 2020-09-04 00:01 - 000000000 ____D C:\Users\Rostov\AppData\Local\NordVPN
2020-08-31 19:56 - 2020-08-31 20:00 - 000000000 ____D C:\ProgramData\SPC

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2020-09-14 20:30 - 2020-03-17 14:47 - 000000000 ____D C:\FRST
2020-09-14 20:28 - 2009-07-14 07:08 - 000000006 ____H C:\windows\Tasks\SA.DAT
2020-09-14 19:10 - 2011-12-16 16:58 - 000740672 _____ C:\windows\system32\perfh015.dat
2020-09-14 19:10 - 2011-12-16 16:58 - 000156214 _____ C:\windows\system32\perfc015.dat
2020-09-14 19:10 - 2009-07-14 07:13 - 001670518 _____ C:\windows\system32\PerfStringBackup.INI
2020-09-14 19:10 - 2009-07-14 05:20 - 000000000 ____D C:\windows\inf
2020-09-14 16:49 - 2020-03-20 14:32 - 000000000 ____D C:\Users\Rostov\AppData\Local\Spotify
2020-09-14 16:47 - 2020-03-20 14:31 - 000000000 ____D C:\Users\Rostov\AppData\Roaming\Spotify
2020-09-14 14:48 - 2009-07-14 06:45 - 000032112 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-09-14 14:48 - 2009-07-14 06:45 - 000032112 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-09-14 14:10 - 2020-07-19 23:55 - 000000008 __RSH C:\ProgramData\ntuser.pol
2020-09-14 13:49 - 2009-07-14 05:20 - 000000000 ___HD C:\windows\system32\GroupPolicy
2020-09-14 13:49 - 2009-07-14 05:20 - 000000000 ____D C:\windows\SysWOW64\GroupPolicy
2020-09-14 12:32 - 2020-03-20 21:40 - 000000000 ____D C:\Users\Rostov\AppData\LocalLow\Mozilla
2020-09-14 12:25 - 2011-12-16 15:33 - 000000000 ____D C:\ProgramData\Sonic
2020-09-13 22:54 - 2020-03-20 15:28 - 000000000 ____D C:\Users\Rostov\AppData\Roaming\vlc
2020-09-13 21:38 - 2009-07-14 07:08 - 000032604 _____ C:\windows\Tasks\SCHEDLGU.TXT
2020-09-13 14:22 - 2020-03-29 15:24 - 000000000 ____D C:\Users\Rostov\AppData\Local\ElevatedDiagnostics
2020-09-13 14:22 - 2009-07-14 05:20 - 000000000 ____D C:\windows\system32\NDF
2020-09-13 13:09 - 2011-12-16 15:14 - 000000000 ____D C:\windows\SysWOW64\Macromed
2020-09-12 20:42 - 2020-05-06 15:10 - 000000000 ____D C:\Users\Rostov\AppData\Roaming\Code
2020-09-12 20:40 - 2020-05-06 15:10 - 000000000 ____D C:\Users\Rostov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2020-09-11 22:50 - 2020-05-18 15:31 - 000000000 ____D C:\ProgramData\Package Cache
2020-09-11 22:49 - 2011-12-16 15:47 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2020-09-11 22:42 - 2020-07-22 19:07 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-09-11 19:11 - 2015-09-15 15:11 - 000000000 ____D C:\Users\Rostov\E
2020-09-11 18:59 - 2020-03-17 14:50 - 000000000 ____D C:\Users\Rostov\AppData\Local\FileZilla
2020-09-11 15:06 - 2020-03-17 14:48 - 000000000 ____D C:\Program Files (x86)\Movie Maker 2.6
2020-09-10 13:59 - 2020-04-05 15:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2020-09-10 13:09 - 2020-03-17 14:50 - 000000000 ____D C:\Users\Rostov\Biblioteka calibre
2020-09-10 13:08 - 2020-03-17 11:54 - 000000000 ____D C:\Users\Rostov
2020-09-10 12:50 - 2020-03-18 18:14 - 000002232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-09-10 12:44 - 2020-03-18 00:13 - 000003916 _____ C:\windows\system32\Tasks\Opera scheduled Autoupdate 1584483206
2020-09-09 23:56 - 2020-03-20 14:54 - 000000000 ____D C:\Users\Rostov\AppData\Roaming\AIMP
2020-09-09 19:06 - 2020-03-20 15:54 - 000842296 _____ (Adobe) C:\windows\SysWOW64\FlashPlayerApp.exe
2020-09-09 19:06 - 2020-03-20 15:54 - 000004530 _____ C:\windows\system32\Tasks\Adobe Flash Player PPAPI Notifier
2020-09-09 19:06 - 2020-03-20 15:54 - 000004382 _____ C:\windows\system32\Tasks\Adobe Flash Player Updater
2020-09-09 19:06 - 2011-12-16 15:14 - 000175160 _____ (Adobe) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-09-09 19:06 - 2011-12-16 15:14 - 000000000 ____D C:\windows\system32\Macromed
2020-09-09 19:00 - 2020-03-17 23:12 - 000000000 ____D C:\windows\system32\MRT
2020-09-09 18:53 - 2020-03-17 23:12 - 129170736 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2020-09-09 18:48 - 2020-03-18 00:13 - 000004110 _____ C:\windows\system32\Tasks\Opera scheduled assistant Autoupdate 1584483210
2020-09-01 19:10 - 2020-03-20 14:54 - 000000000 ____D C:\Program Files (x86)\AIMP
2020-08-29 19:52 - 2020-03-17 16:21 - 000000000 ____D C:\Users\Rostov\AppData\Local\CrashDumps
2020-08-29 19:48 - 2020-03-26 20:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2020-08-29 19:48 - 2020-03-17 14:49 - 000000000 ____D C:\Program Files\Calibre2
2020-08-26 20:52 - 2015-09-15 15:05 - 000000000 ___RD C:\Users\Rostov\D
2020-08-26 20:06 - 2020-03-17 15:27 - 000000000 ____D C:\Users\Rostov\Pulpit
2020-08-15 14:29 - 2020-03-18 22:37 - 000639174 ____H C:\Users\Rostov\sync.ffs_db
2020-08-15 13:11 - 2020-03-17 14:49 - 000000000 ____D C:\Program Files\FreeFileSync
2020-08-15 13:10 - 2020-04-05 14:35 - 000003870 _____ C:\windows\system32\Tasks\CCleaner Update

==================== Pliki w katalogu głównym wybranych folderów ========

2020-09-11 15:07 - 2020-09-11 15:07 - 000003584 _____ () C:\Users\Rostov\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2020-04-05 20:13 - 2020-05-04 00:13 - 000007639 _____ () C:\Users\Rostov\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)


LastRegBack: 2020-09-08 12:28
==================== Koniec  FRST.txt ========================