Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 17-04-2021 Uruchomiony przez Madzia (administrator) MADZIK (23-04-2021 20:53:57) Uruchomiony z C:\Users\Madzia\Downloads Załadowane profile: Madzia Platform: Windows 10 Pro Wersja 20H2 19042.630 (X64) Język: Polski (Polska) Domyślna przeglądarka: FF Tryb startu: Normal ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0364033.inf_amd64_f36ad498a78de343\B363860\atiesrxx.exe (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe (Intel(R) Intel Network Drivers -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Safe Kids 1.0.5\safekids.exe (Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Safe Kids 1.0.5\safekidsui.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12101.1001.14.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vdsldr.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\MSI\MSIRegister\MSIRegisterService.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <11> (O&O Software GmbH -> O&O Software GmbH) C:\Program Files\OO Software\DiskImage\oodiag.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmdS.exe [175504 2020-10-29] (ESET, spol. s r.o. -> ESET) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.) HKLM\...\Run: [OODITRAY.EXE] => C:\Program Files\OO Software\DiskImage\ooditray.exe [8478560 2021-02-10] (O&O Software GmbH -> O&O Software GmbH) HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [26310800 2020-05-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) HKLM-x32\...\Run: [MSIRegister] => C:\MSI\MSIRegister\MSIRegister.exe [1266872 2019-03-08] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) HKU\S-1-5-21-3189969117-2522396855-332772548-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32440376 2021-01-06] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3189969117-2522396855-332772548-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32440376 2021-01-06] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3189969117-2522396855-332772548-1002\...\Run: [Polar FlowSync] => C:\Program Files (x86)\Polar\Polar FlowSync\flowsync.exe [1397248 2018-09-17] (Polar Electro Oy) [Brak podpisu cyfrowego] HKLM\...\Windows x64\Print Processors\HP1100PrintProc: C:\Windows\System32\spool\prtprocs\x64\HP1100PP.DLL [74240 2012-08-31] (Microsoft Windows Hardware Compatibility Publisher -> ) HKLM\...\Print\Monitors\HP1100LM: C:\WINDOWS\system32\HP1100LM.DLL [288768 2012-08-31] (Microsoft Windows Hardware Compatibility Publisher -> ) ==================== Zaplanowane zadania (filtrowane) ============ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {0F2875A7-B4F6-46CF-8C21-02F7F2DF9AC2} - System32\Tasks\Driver Booster SkipUAC (Madzia) => C:\Program Files (x86)\IObit\Driver Booster\7.2.0\DriverBooster.exe Task: {114D7E93-3D70-49CC-8A36-4C648865AE6D} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\7.2.0\Scheduler.exe [149776 2019-11-14] (IObit Information Technology -> IObit) Task: {173D63CA-BF64-4B03-AB30-6A95ABF17ACE} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.) Task: {24B6D535-CE67-4A58-9FBE-AA380374E995} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114056 2021-04-16] (Microsoft Corporation -> Microsoft Corporation) Task: {2B022832-0669-45F1-9F5E-1EDE20E70D88} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [696304 2021-04-20] (Mozilla Corporation -> Mozilla Foundation) Task: {2C043AFF-78BE-4B8D-8E4C-5F1A36A3F011} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4002744 2021-04-16] (Microsoft Corporation -> Microsoft Corporation) Task: {333591E9-3B8F-4DA0-9BD6-649428178EF2} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23248792 2021-04-07] (Microsoft Corporation -> Microsoft Corporation) Task: {3627EC63-F3D7-46C5-BE49-17E30FD6A8DF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4002744 2021-04-16] (Microsoft Corporation -> Microsoft Corporation) Task: {5071EAD5-2DD1-4B50-B24B-F02839ADD042} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [68160 2021-02-05] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {8A852A58-891A-432A-B4AF-090861229E1A} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK Task: {9E16B57D-7B7E-4B6D-87EF-39212F2F4CA8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [26913848 2021-01-06] (Piriform Software Ltd -> Piriform Software Ltd) Task: {9E4C8888-27AA-4D62-97D6-549FE0EB9A54} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1709320 2021-02-05] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {A25793DC-3773-4250-A685-87343F3C8D3C} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60480 2021-02-05] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {A384A256-1465-4686-9BFE-0A0678F2C4E5} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2021-01-06] (Piriform Software Ltd -> Piriform Software Ltd) Task: {AF88C05F-F3A9-4434-B40E-75875CED861E} - System32\Tasks\OO DiskImage {4f565e23-561e-4e30-8b79-f0200a4c0e93} => C:\Program Files\OO Software\DiskImage\oodiag.exe [10396512 2021-02-10] (O&O Software GmbH -> O&O Software GmbH) Task: {B3DCBB83-592C-49C8-9D06-5D14E0FCC651} - System32\Tasks\Office 2019 Statique Activation Planificateur => C:\Program [Argument = Files\Microsoft Office 15\ActO19\ActO19.cmd -renewalonly] Task: {B51C4760-E120-49AB-B523-7851DFC94D8D} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1709320 2021-02-05] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {E86C8998-E4A5-41DF-A24A-2CC7A5A2FABD} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23248792 2021-04-07] (Microsoft Corporation -> Microsoft Corporation) Task: {ECFCD8D5-8DAA-4CF5-B104-4E552641D53B} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114056 2021-04-16] (Microsoft Corporation -> Microsoft Corporation) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{d289fed1-ad47-44b5-8753-777294b0575c}: [DhcpNameServer] 192.168.1.1 Edge: ======= Edge DefaultProfile: Default Edge Profile: C:\Users\Madzia\AppData\Local\Microsoft\Edge\User Data\Default [2021-04-23] Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee] FireFox: ======== FF DefaultProfile: 5p31vaps.default FF ProfilePath: C:\Users\Madzia\AppData\Roaming\Mozilla\Firefox\Profiles\5p31vaps.default [2019-06-23] FF ProfilePath: C:\Users\Madzia\AppData\Roaming\Mozilla\Firefox\Profiles\y873b690.default-release-1610988462725 [2021-04-23] FF Extension: (Picture-In-Picture) - C:\Program Files\Mozilla Firefox\browser\features\pictureinpicture@mozilla.org.xpi [2021-04-20] [Brak podpisu cyfrowego] FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-03-07] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-03-07] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-04-21] (Adobe Inc. -> Adobe Systems Inc.) FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2021-04-23] FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2020-05-24] <==== UWAGA (Linkuje do pliku *.cfg) FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2020-05-24] <==== UWAGA Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8788392 2021-04-07] (Microsoft Corporation -> Microsoft Corporation) R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2595360 2020-10-29] (ESET, spol. s r.o. -> ESET) R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2595360 2020-10-29] (ESET, spol. s r.o. -> ESET) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-01-18] (Malwarebytes Inc -> Malwarebytes) R2 MSIREGISTER_MR; C:\MSI\MSIRegister\MSIRegisterService.exe [2020024 2019-01-03] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2333328 2020-05-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) R2 OO DiskImage; C:\Program Files\OO Software\DiskImage\oodiag.exe [10396512 2021-02-10] (O&O Software GmbH -> O&O Software GmbH) R2 SafeKids1.0.5; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Safe Kids 1.0.5\safekids.exe [607520 2021-02-04] (Kaspersky Lab JSC -> AO Kaspersky Lab) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5101992 2020-11-17] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\NisSrv.exe [2169568 2020-08-07] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\MsMpEng.exe [128376 2020-08-07] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [62056 2020-07-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Brak podpisu cyfrowego] S3 CH341SER_A64; C:\WINDOWS\System32\Drivers\CH341S64.SYS [69024 2019-05-29] (Microsoft Windows Hardware Compatibility Publisher -> www.winchiphead.com) R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [160992 2020-10-27] (ESET, spol. s r.o. -> ESET) R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [109360 2020-10-27] (ESET, spol. s r.o. -> ESET) S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15824 2021-03-16] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET) R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [190464 2020-10-27] (ESET, spol. s r.o. -> ESET) R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [43720 2020-10-27] (ESET, spol. s r.o. -> ESET) R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [70048 2020-10-27] (ESET, spol. s r.o. -> ESET) R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [107784 2020-10-27] (ESET, spol. s r.o. -> ESET) S3 epmntdrv; C:\WINDOWS\system32\epmntdrv.sys [36280 2020-02-23] (CHENGDU YIWO Tech Development Co., Ltd. -> ) R0 EPMVolFl; C:\WINDOWS\System32\drivers\EPMVolFl.sys [30136 2020-02-23] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Codename Longhorn DDK provider) R0 EUDCPEPM; C:\WINDOWS\System32\drivers\EUDCPEPM.sys [85424 2020-02-23] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) R1 EUEDKEPM; C:\WINDOWS\system32\drivers\EUEDKEPM.sys [33712 2020-02-23] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2019-12-27] (Martin Malik - REALiX -> REALiX(tm)) R1 klfltks; C:\WINDOWS\system32\DRIVERS\klfltks.sys [528696 2021-02-04] (Kaspersky Lab JSC -> AO Kaspersky Lab) R1 klifks; C:\WINDOWS\System32\DRIVERS\klifks.sys [986936 2021-02-04] (Kaspersky Lab JSC -> AO Kaspersky Lab) R1 klwtpks; C:\WINDOWS\system32\DRIVERS\klwtpks.sys [251192 2021-02-04] (Kaspersky Lab JSC -> AO Kaspersky Lab) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220752 2021-04-23] (Malwarebytes Inc -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-01-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-04-22] (Malwarebytes Inc -> Malwarebytes) S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [78216 2020-08-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [430320 2020-08-07] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [98520 2020-08-07] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2021-04-23 20:53 - 2021-04-23 20:54 - 000017158 _____ C:\Users\Madzia\Downloads\FRST.txt 2021-04-23 20:39 - 2021-04-23 20:54 - 000000000 ____D C:\FRST 2021-04-23 20:39 - 2021-04-23 20:39 - 002298368 _____ (Farbar) C:\Users\Madzia\Downloads\FRST64.exe 2021-04-23 20:01 - 2021-04-23 20:01 - 000220752 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2021-04-22 20:19 - 2021-04-22 20:20 - 000000000 ____D C:\Users\Madzia\AppData\LocalLow\Adobe 2021-04-22 20:19 - 2021-04-22 20:19 - 005002891 _____ C:\Users\Madzia\Downloads\Rozporzadzenie_Ministrow_Infrastruktury_oraz_Spraw_Wewnetrznych_I_Administracji_z_dnia_31_lipca_2002_r__w_sprawie_znakow_i_sygnalow_drogowych.pdf 2021-04-22 19:29 - 2021-04-22 19:29 - 000000000 _____ C:\Users\Madzia\fsutil 2021-04-22 19:05 - 2021-04-22 19:05 - 000000656 _____ C:\Users\Madzia\Downloads\wu10(1).diagcab 2021-04-22 18:58 - 2021-04-22 18:58 - 000000000 ____D C:\Users\Madzia\Documents\Niestandardowe szablony pakietu Office 2021-04-22 10:31 - 2021-04-22 10:31 - 001890402 _____ C:\Users\Madzik\Desktop\karta_odpowiedzi_2021.pdf 2021-04-22 09:11 - 2021-04-22 09:11 - 000000000 ____D C:\Users\Madzik\AppData\LocalLow\Adobe 2021-04-22 09:10 - 2021-04-23 09:46 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2021-04-22 09:10 - 2021-04-23 09:46 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2021-04-22 09:10 - 2021-04-22 09:10 - 000002124 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk 2021-04-20 11:31 - 2021-04-20 11:31 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla 2021-04-20 08:08 - 2021-04-22 19:01 - 000000000 ____D C:\Program Files\Mozilla Firefox ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2021-04-23 20:17 - 2019-06-04 22:26 - 000000000 ____D C:\ProgramData\Mozilla 2021-04-23 20:16 - 2019-06-04 22:28 - 000000000 ____D C:\Users\Madzia\AppData\LocalLow\Mozilla 2021-04-23 20:10 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2021-04-23 20:06 - 2020-11-17 22:35 - 001678234 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2021-04-23 20:06 - 2019-12-07 17:09 - 000747542 _____ C:\WINDOWS\system32\perfh015.dat 2021-04-23 20:06 - 2019-12-07 17:09 - 000144288 _____ C:\WINDOWS\system32\perfc015.dat 2021-04-23 20:06 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF 2021-04-23 20:04 - 2021-01-18 19:41 - 000000000 ____D C:\Users\Madzia\AppData\Local\D3DSCache 2021-04-23 20:03 - 2019-06-05 19:15 - 000000000 ____D C:\Program Files\CCleaner 2021-04-23 20:01 - 2020-11-17 22:34 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2021-04-23 20:01 - 2020-11-17 22:28 - 000008192 ___SH C:\DumpStack.log.tmp 2021-04-23 20:01 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2021-04-23 20:01 - 2019-09-10 16:33 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin 2021-04-23 19:10 - 2019-06-04 22:19 - 000000000 ____D C:\Users\Madzia\AppData\Local\Packages 2021-04-23 18:34 - 2019-06-05 19:09 - 000000000 ____D C:\Users\Madzik\AppData\Local\Packages 2021-04-23 13:10 - 2019-06-05 19:14 - 000000000 ____D C:\Users\Madzik\AppData\LocalLow\Mozilla 2021-04-23 09:44 - 2020-02-20 20:17 - 000000000 ____D C:\Users\Madzik\AppData\Local\Adobe 2021-04-23 08:11 - 2021-02-15 21:05 - 000000000 ____D C:\Users\Madzik\AppData\Local\D3DSCache 2021-04-22 20:19 - 2020-02-20 20:18 - 000000000 ____D C:\Users\Madzia\AppData\Local\Adobe 2021-04-22 20:19 - 2019-06-04 22:19 - 000000000 ____D C:\Users\Madzia\AppData\Roaming\Adobe 2021-04-22 19:29 - 2020-11-17 22:29 - 000000000 ____D C:\Users\Madzia 2021-04-22 19:15 - 2021-01-18 08:39 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2021-04-22 19:10 - 2020-11-17 22:34 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3189969117-2522396855-332772548-1001 2021-04-22 19:10 - 2020-11-17 22:29 - 000002410 _____ C:\Users\Madzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2021-04-22 19:10 - 2019-06-04 22:21 - 000000000 ___RD C:\Users\Madzia\OneDrive 2021-04-22 19:02 - 2020-05-28 15:52 - 001482776 _____ C:\WINDOWS\ntbtlog.txt 2021-04-22 19:01 - 2021-02-15 21:53 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2021-04-22 19:01 - 2019-06-04 22:26 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2021-04-22 18:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2021-04-22 18:48 - 2021-02-15 20:02 - 000000000 ____D C:\AMD 2021-04-22 18:48 - 2021-01-18 19:19 - 000000000 ____D C:\Users\Madzia\AppData\Local\AMD_Common 2021-04-22 18:45 - 2019-06-05 21:45 - 000000000 ____D C:\WINDOWS\system32\MRT 2021-04-22 18:43 - 2019-06-05 21:45 - 131963968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2021-04-22 17:15 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2021-04-22 09:12 - 2020-02-20 20:18 - 000000000 ____D C:\ProgramData\Adobe 2021-04-22 09:11 - 2019-06-05 19:09 - 000000000 ____D C:\Users\Madzik\AppData\Roaming\Adobe 2021-04-22 09:10 - 2020-02-20 20:18 - 000000000 ____D C:\Program Files (x86)\Adobe 2021-04-22 08:51 - 2020-11-17 22:28 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2021-04-21 09:33 - 2020-06-05 20:45 - 000002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2021-04-21 09:33 - 2020-06-05 20:45 - 000002286 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk 2021-04-20 11:31 - 2019-06-04 22:26 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2021-04-16 07:59 - 2019-06-05 21:31 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2021-04-13 09:00 - 2021-02-02 08:49 - 000000000 ____D C:\Users\Madzik\AppData\Local\AMD_Common 2021-04-12 08:47 - 2019-08-24 19:27 - 000199128 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2021-04-12 07:44 - 2020-11-17 22:34 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3189969117-2522396855-332772548-1002 2021-04-12 07:44 - 2020-11-17 22:29 - 000002410 _____ C:\Users\Madzik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2021-04-12 07:44 - 2019-06-05 19:11 - 000000000 ___RD C:\Users\Madzik\OneDrive 2021-04-07 12:12 - 2020-11-17 22:29 - 000000000 ____D C:\Users\Madzik 2021-03-30 19:34 - 2021-02-15 21:14 - 000000731 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asystent aktualizacji do systemu Windows 10.lnk 2021-03-30 19:34 - 2021-02-15 21:14 - 000000719 _____ C:\Users\Madzia\Desktop\Asystent aktualizacji do systemu Windows 10.lnk 2021-03-30 19:34 - 2021-02-15 21:14 - 000000000 ____D C:\Windows10Upgrade ==================== Pliki w katalogu głównym wybranych folderów ======== 2020-06-27 18:28 - 2020-06-27 18:28 - 000000001 _____ () C:\Users\Madzia\AppData\Local\RawCopy.1.10.agreement 2020-06-27 18:29 - 2020-06-27 18:29 - 000000001 _____ () C:\Users\Madzia\AppData\Local\RawCopy.sourcedisk.index ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) ==================== Koniec FRST.txt ========================