Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 20-06-2021
Uruchomiony przez Radar (administrator)  LEGIONRG (LENOVO 82AU) (20-06-2021 13:59:59)
Uruchomiony z D:\Programy\7. Antywirus\FRST
Załadowane profile: Radar & DefaultAppPool
Platform: Windows 10 Pro Wersja 21H1 19043.1055 (X64) Język: Polski (Polska)
Domyślna przeglądarka: Edge
Tryb startu: Normal

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Adguard Software Limited -> Adguard Software Ltd) C:\Program Files (x86)\Adguard\AdguardSvc.exe
(Code Sector -> Code Sector) C:\Program Files\TeraCopy\TeraCopyService.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_0b214be229a13e84\jhi_service.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_21306a77b30fd6e0\esif_uf.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_614656429f721e16\RstMwService.exe
(Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2fcf64020e032ea8\LenovoUtilityService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Microsoft Update Health Tools\uhssvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\NisSrv.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvlt.inf_amd64_6fdb2f2a4eb90886\Display.NvContainer\NVDisplay.Container.exe <2>
(OpenBoxLab -> OpenBoxLab Inc.) C:\Program Files\OpenBoxLab\RaiDrive\RaiDrive.Service.x64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(Tonec Inc. -> Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(VMware, Inc. -> ) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1098480 2020-06-23] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [NetWorx] => C:\Program Files\NetWorx\networx.exe [7710024 2016-09-20] (SOFTPERFECT PTY. LTD. -> SoftPerfect)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM\...\Policies\Explorer: [NoRecentDocsNetHood] 0
HKLM\...\Policies\Explorer: [NoInstrumentation] 1
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\...\Policies\Explorer: [HideSCAMeetNow] 1
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore: [DisableSR/DisableConfig]  <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-3062910227-2173904043-3200923844-1001\...\Run: [Adguard] => C:\Program Files (x86)\Adguard\Adguard.exe [5759392 2021-04-24] (Adguard Software Limited -> Adguard Software Ltd)
HKU\S-1-5-21-3062910227-2173904043-3200923844-1001\...\Policies\Explorer: [NoPreviewPane] 0
HKU\S-1-5-21-3062910227-2173904043-3200923844-1001\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-21-3062910227-2173904043-3200923844-1001\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-21-3062910227-2173904043-3200923844-1001\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-3062910227-2173904043-3200923844-1001\...\Policies\Explorer: [HideSCAMeetNow] 1
HKU\S-1-5-21-3062910227-2173904043-3200923844-1001\...\MountPoints2: E - "E:\setup.EXE" /AUTORUN
HKU\S-1-5-21-3062910227-2173904043-3200923844-1001\...\MountPoints2: {34411498-a200-11eb-9c92-bc542f5f99ce} - "G:\AutoRun.exe" 
HKLM\...\Windows x64\Print Processors\HP1020PrintProc: C:\Windows\System32\spool\prtprocs\x64\pphp1020.dll [65024 2012-09-18] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\HPLJ1020LM: C:\Windows\system32\zlhp1020.dll [192512 2012-09-18] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\PDF-XChange5-ABBYY-FR15: C:\Windows\system32\pxc50pmaf15.dll [57328 2018-12-04] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
HKLM\...\Print\Monitors\Wondershare PDFelement Monitor: C:\Windows\system32\WSPDFelementMonitor.dll [271360 2017-10-19] (Wondershare Software) [Brak podpisu cyfrowego]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\always-on-top.exe [2008-11-05] () [Brak podpisu cyfrowego]
GroupPolicy: Ograniczenia ? <==== UWAGA
Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Edge: Ograniczenia <==== UWAGA
HKU\S-1-5-21-3062910227-2173904043-3200923844-1001\SOFTWARE\Policies\Microsoft\Edge: Ograniczenia <==== UWAGA

==================== Zaplanowane zadania (filtrowane) ============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {04F41B8A-0E1E-4761-A2DF-7CCF8485AD4B} - System32\Tasks\PowerToys\Autorun for Radar => C:\Program Files\PowerToys\PowerToys.exe [1235312 2020-12-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {05FA4171-9723-427A-9532-5FB2C5140379} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [647656 2020-09-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {09C991D1-F1E5-4828-BB41-CC86C2BFA92C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5275568 2021-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {0ABF72D2-CDA6-422D-A76D-F045896E931B} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [147272 2021-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {1C5DF16E-6A1F-4D09-9CF9-220C34FF1B03} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3292984 2020-09-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {23C6F50C-A70C-44CA-8561-6150DD280116} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-09-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {47613C34-502A-42AA-BB6B-C7716A1401CB} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2043016 2019-10-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {4D701193-465C-4DA4-BDF0-4D75A19E8788} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-09-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5AE5CDB7-9031-4B21-A724-7AB2D39E0546} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-09-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5DFD4A84-E7F5-41FD-AAC1-AA29D069E3AD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {61D315EB-7919-4699-B24D-5A160FFC3FBA} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2646160 2019-10-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {62876451-C59B-4E11-A0DD-346A2F162F5B} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-09-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {652CF248-629A-42EF-83CA-D9619E157D6D} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2646160 2019-10-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {6967ACD6-AA85-42C5-8A1A-1C764E00C967} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-09-15] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {7A730BE7-8400-4CB1-9795-1433ADE9C00E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23124896 2021-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {964BD02A-5CBD-430A-AAF7-02ABD28B65E9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [28880512 2021-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {9A221C85-5433-41B4-A032-42DD8B931762} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5275568 2021-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {9F38B165-48AD-43F4-94DB-9D3B33909AC4} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-06-17] (Piriform Software Ltd -> Piriform)
Task: {A36FC7FA-1741-4471-BAFA-675B691120D0} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2177464 2019-10-16] (Microsoft Corporation -> Microsoft)
Task: {AA3D8409-4946-48F4-A8F7-037424B184DA} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [147272 2021-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {C50916C9-67E1-4688-897B-71BEAEC36505} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-09-15] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {D096B7F8-63EF-42DE-B463-201C791283E2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D150C534-BE92-4D0A-A157-E6A49C2458FC} - System32\Tasks\Microsoft_MKC_Logon_Task_ceip.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ceip.exe [32696 2019-10-16] (Microsoft Corporation -> Microsoft)
Task: {DBFAF864-E411-47AC-BA69-3321FD7FB0AA} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23124896 2021-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {E00242B4-F12B-4B41-B85C-EDDB69DB391C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E6E7BB46-48EF-45A5-83BC-25CD52C288D7} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2043016 2019-10-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {FCCD4261-D65A-447D-BA8B-B273F98E82C3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)


==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\..\Interfaces\{13bd371f-c122-4352-a4fd-237c1ca1435d}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{198afa51-d045-43b3-9aee-8a6a4bc72ee6}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{198afa51-d045-43b3-9aee-8a6a4bc72ee6}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{62e8822c-a34b-4b11-a0a0-a48503f3a3ef}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d854f737-283a-447b-a17a-df7d9997eadb}: [DhcpNameServer] 192.168.0.1

Edge: 
=======
Edge Extension: (Brak nazwy) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nie znaleziono]
Edge Extension: (Brak nazwy) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nie znaleziono]
Edge Extension: (Brak nazwy) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nie znaleziono]
Edge Extension: (Brak nazwy) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nie znaleziono]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Radar\AppData\Local\Microsoft\Edge\User Data\Default [2021-06-20]
Edge DownloadDir: Default -> D:\Pobrane
Edge StartupUrls: Default -> "hxxps://www.cytaty.info/cytaty.htm"
Edge Extension: (Giving Assistant Button) - C:\Users\Radar\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\abmkpkbghkncelngngaldkhfchgnmnbf [2021-04-19]
Edge Extension: (Asystent przeglądarki AdGuard) - C:\Users\Radar\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fbohpolgemkbfphodcfgnpjcmedcjhpn [2021-04-19]
Edge Extension: (Google Translate Tool) - C:\Users\Radar\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fekieommkbpliaejojcigbfdncknhncm [2020-12-17]
Edge Extension: (Redaktor Microsoft: sprawdzanie pisowni i gramatyki) - C:\Users\Radar\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hokifickgkhplphjiodbggjmoafhignh [2021-06-15]
Edge Extension: (MyJDownloader Browser Extension) - C:\Users\Radar\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ieapabanbplofifeaapjocpaogdhncdd [2021-04-19]
Edge Extension: (VPN Unblocker) - C:\Users\Radar\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ikgnfjjpiphdodkbidfilmlofihcppkh [2020-12-17]
Edge Extension: (Save to Pocket) - C:\Users\Radar\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jicacccodjjgmghnmekophahpmddeemd [2020-09-26]
Edge Extension: (IDM Integration Module) - C:\Users\Radar\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\llbjbkhnmlidjebalopleeepgdfgcpec [2021-04-19]
Edge Extension: (Print Friendly & PDF) - C:\Users\Radar\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nhiebejbpolmpkikgbijamagibifhjib [2020-09-28]
Edge Extension: (KeePassXC-Browser) - C:\Users\Radar\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pdffhmdngciaglkoonimfcmckehcpafo [2021-04-19]
Edge Profile: C:\Users\Radar\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2021-06-20]
Edge HKU\S-1-5-21-3062910227-2173904043-3200923844-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [llbjbkhnmlidjebalopleeepgdfgcpec] - C:\Program Files (x86)\Internet Download Manager\IDMEdgeExt.crx [2020-11-09]

FireFox:
========
FF HKU\S-1-5-21-3062910227-2173904043-3200923844-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Radar\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Radar\AppData\Roaming\IDM\idmmzcc5 [2021-06-14] [Przestarzałe] [Brak podpisu cyfrowego]
FF HKU\S-1-5-21-3062910227-2173904043-3200923844-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] [Przestarzałe]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-06-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-06-19] (Microsoft Corporation -> Microsoft Corporation)

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-11-09]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-11-09]

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 Adguard Service; C:\Program Files (x86)\Adguard\AdguardSvc.exe [176032 2021-04-24] (Adguard Software Limited -> Adguard Software Ltd)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11279752 2021-06-17] (Microsoft Corporation -> Microsoft Corporation)
S2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_925ded1d9428eaee\DAX3API.exe [2205144 2020-12-22] (Dolby Laboratories, Inc. -> Dolby Laboratories)
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [341392 2020-07-28] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 LenovoFnAndFunctionKeys; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_2fcf64020e032ea8\LenovoUtilityService.exe [531360 2021-02-23] (Lenovo -> Lenovo(beijing) Limited)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7391408 2021-06-20] (Malwarebytes Inc -> Malwarebytes)
R2 RaiDrive.Service; C:\Program Files\OpenBoxLab\RaiDrive\RaiDrive.Service.x64.exe [9227360 2021-05-20] (OpenBoxLab -> OpenBoxLab Inc.)
S2 rkrtservice; C:\Program Files\RogueKiller\RogueKillerSvc.exe [13921616 2021-06-15] (Adlice -> )
S2 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5393792 2021-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeraCopyService; C:\Program Files\TeraCopy\TeraCopyService.exe [110416 2017-05-05] (Code Sector -> Code Sector)
R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [15221296 2020-11-17] (VMware, Inc. -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\NisSrv.exe [2644776 2021-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MsMpEng.exe [136656 2021-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WindscribeService; C:\Program Files (x86)\Windscribe\WindscribeService.exe [493232 2019-01-19] (Windscribe Limited -> Windscribe Limited)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvlt.inf_amd64_6fdb2f2a4eb90886\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvlt.inf_amd64_6fdb2f2a4eb90886\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 adgnetworkwfpdrv; C:\WINDOWS\System32\drivers\adgnetworkwfpdrv.sys [94720 2021-02-20] (Microsoft Windows Hardware Compatibility Publisher -> Adguard Software Ltd)
R1 cbfs6; C:\WINDOWS\system32\drivers\cbfs6.sys [460992 2016-09-21] (EldoS Corporation -> /n software, Inc.)
S3 CSRBC; C:\WINDOWS\System32\Drivers\csrbc.sys [38400 2012-08-02] (Microsoft Windows Hardware Compatibility Publisher -> CSR plc.)
S3 csrusbfilter; C:\WINDOWS\System32\Drivers\csrusbfilter.sys [23752 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
R3 ITEHIDfilter; C:\WINDOWS\System32\drivers\ITEHIDfilter.sys [27624 2016-12-15] (ITE Tech. Inc. -> ITE Tech. Inc.)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-06-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-06-20] (Malwarebytes Inc -> Malwarebytes)
R1 networx; C:\WINDOWS\System32\drivers\networx.sys [72632 2016-09-20] (SOFTPERFECT PTY. LTD. -> NetFilterSDK.com)
S3 RkFlt; C:\Windows\System32\drivers\rkflt.sys [42056 2021-06-19] (Adlice -> )
R0 secnvme; C:\WINDOWS\System32\drivers\secnvme.sys [133944 2020-01-20] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [54896 2018-07-06] (Windscribe Limited -> The OpenVPN Project)
S3 VBoxUSB; C:\WINDOWS\System32\Drivers\VBoxUSB.sys [174536 2020-09-04] (Oracle Corporation -> Oracle Corporation)
R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [831616 2020-11-17] (IDRIX SARL -> IDRIX)
R2 VMnetBridge; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [68544 2020-11-17] (VMware, Inc. -> VMware, Inc.)
R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [18624 2016-09-21] (EldoS Corporation -> /n software, Inc.)
R0 vsock; C:\WINDOWS\System32\DRIVERS\vsock.sys [105912 2020-08-11] (VMware, Inc. -> VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-x64.sys [54592 2020-08-11] (VMware, Inc. -> VMware, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49568 2021-06-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [425184 2021-06-13] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [76000 2021-06-13] (Microsoft Windows -> Microsoft Corporation)
S1 amsdk; \??\C:\WINDOWS\system32\drivers\amsdk.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2021-06-20 13:59 - 2021-06-20 14:00 - 000000000 ____D C:\FRST
2021-06-20 13:48 - 2021-06-20 13:58 - 000000000 ____D C:\ProgramData\HitmanPro
2021-06-20 13:41 - 2021-06-20 13:41 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-06-20 13:41 - 2021-06-20 13:41 - 000002043 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-06-20 13:41 - 2021-06-20 13:41 - 000002031 _____ C:\ProgramData\Pulpit\Malwarebytes.lnk
2021-06-20 13:41 - 2021-06-20 13:40 - 000199128 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-06-20 13:41 - 2021-06-20 13:40 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2021-06-20 13:34 - 2021-06-20 13:41 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-06-20 13:34 - 2021-06-20 13:34 - 000255928 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\22A2FECD.sys
2021-06-20 13:33 - 2021-06-20 13:40 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2021-06-20 13:25 - 2021-06-20 13:29 - 000000000 ____D C:\ProgramData\RogueKiller
2021-06-20 13:25 - 2021-06-20 13:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2021-06-20 13:25 - 2021-06-20 13:25 - 000000000 ____D C:\Program Files\RogueKiller
2021-06-20 13:06 - 2021-06-20 13:06 - 000309104 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_3a48a596a_klark.sys
2021-06-20 13:06 - 2021-06-20 13:06 - 000224880 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_3a48a596a_mark.sys
2021-06-20 13:06 - 2021-06-20 13:06 - 000127792 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\3a48a596.sys
2021-06-20 13:06 - 2021-06-20 13:06 - 000000000 ____D C:\KVRT2020_Data
2021-06-20 13:03 - 2021-06-20 13:03 - 000000000 ____D C:\AdwCleaner
2021-06-20 12:23 - 2021-06-20 12:23 - 000001059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RaiDrive 2021.5.20.lnk
2021-06-20 12:23 - 2021-06-20 12:23 - 000000000 ____D C:\Program Files\OpenBoxLab
2021-06-20 12:20 - 2021-06-20 12:20 - 000000000 ____D C:\ProgramData\OpenBoxLab Inc
2021-06-20 11:56 - 2021-06-20 12:49 - 000008192 ___SH C:\DumpStack.log.tmp
2021-06-20 11:30 - 2021-06-20 11:30 - 000000000 ____D C:\WINDOWS\w
2021-06-20 11:30 - 2021-06-20 11:30 - 000000000 ____D C:\WINDOWS\c
2021-06-20 11:12 - 2021-06-20 11:12 - 000000000 ____D C:\ProgramData\SoftPerfect
2021-06-20 11:12 - 2021-06-20 11:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetWorx
2021-06-20 11:12 - 2021-06-20 11:12 - 000000000 ____D C:\Program Files\NetWorx
2021-06-20 11:12 - 2016-09-20 15:28 - 000072632 _____ (NetFilterSDK.com) C:\WINDOWS\system32\Drivers\networx.sys
2021-06-19 23:26 - 2021-06-19 23:29 - 001005905 _____ C:\WINDOWS\ZAM.krnl.trace
2021-06-19 23:20 - 2021-06-19 23:20 - 000042056 _____ C:\WINDOWS\system32\Drivers\rkflt.sys
2021-06-19 17:28 - 2021-06-19 17:28 - 000255928 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\474297DB.sys
2021-06-19 14:11 - 2021-06-19 14:11 - 000000000 ____D C:\Program Files\Malwarebytes
2021-06-18 23:21 - 2021-06-19 23:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2021-06-18 23:21 - 2021-06-18 23:21 - 000002461 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2021-06-18 23:21 - 2021-06-18 23:21 - 000002460 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2021-06-18 23:21 - 2021-06-18 23:21 - 000002423 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2021-06-18 23:21 - 2021-06-18 23:21 - 000002417 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2021-06-18 23:21 - 2021-06-18 23:21 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2021-06-18 23:19 - 2021-06-19 23:41 - 000000000 ____D C:\Program Files\Microsoft Office
2021-06-18 23:19 - 2021-06-18 23:19 - 000000000 ____D C:\Program Files\Microsoft Office 15
2021-06-18 17:09 - 2021-06-18 17:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePassXC
2021-06-18 12:49 - 2021-06-19 14:17 - 000000000 ____D C:\Users\Radar\AppData\Roaming\system32
2021-06-18 12:48 - 2021-06-18 12:48 - 000000000 ____D C:\ProgramData\Microsoft Toolkit
2021-06-17 10:24 - 2021-06-19 17:48 - 000000000 ____D C:\Program Files (x86)\Elcomsoft Password Recovery
2021-06-17 10:24 - 2021-06-18 12:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery
2021-06-17 10:24 - 2021-06-17 10:24 - 000000000 ____D C:\ProgramData\Elcomsoft Password Recovery
2021-06-17 10:24 - 2021-06-17 10:24 - 000000000 ____D C:\Program Files (x86)\Elcomsoft
2021-06-17 10:18 - 2021-06-17 10:18 - 000000097 _____ C:\WINDOWS\winDecrypt.INI
2021-06-16 14:18 - 2021-06-16 14:18 - 000000000 ____D C:\Users\Radar\AppData\Roaming\Skype
2021-06-15 15:45 - 2021-06-15 15:45 - 000000000 ____D C:\Users\Radar\.android
2021-06-15 15:43 - 2021-06-15 15:43 - 000000000 ____D C:\Program Files (x86)\ClockworkMod
2021-06-15 12:50 - 2021-06-16 11:02 - 000000000 ____D C:\Program Files (x86)\TimeAdjuster
2021-06-15 12:50 - 2021-06-15 12:50 - 000000000 ____D C:\Users\Radar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TimeAdjuster
2021-06-15 10:25 - 2021-06-15 10:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoulseekQt
2021-06-15 10:24 - 2021-06-15 10:25 - 000000000 ____D C:\Program Files (x86)\SoulseekQt
2021-06-14 00:59 - 2021-06-20 13:24 - 000000000 ____D C:\Users\Radar\AppData\Roaming\DMCache
2021-06-14 00:59 - 2021-06-20 13:14 - 000000000 ____D C:\Users\Radar\AppData\Roaming\IDM
2021-06-14 00:59 - 2021-06-19 14:17 - 000000000 ____D C:\Program Files (x86)\Internet Download Manager
2021-06-14 00:59 - 2021-06-16 13:59 - 000000000 ____D C:\Users\Radar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2021-06-14 00:59 - 2021-06-16 13:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2021-06-14 00:59 - 2021-06-14 00:59 - 000000000 ____D C:\ProgramData\IDM
2021-06-13 21:39 - 2021-06-13 21:39 - 000011453 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-06-13 21:05 - 2020-11-12 23:21 - 000455400 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2021-06-13 21:05 - 2020-11-12 23:21 - 000349944 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2021-06-13 21:05 - 2020-11-12 23:18 - 000674536 _____ C:\WINDOWS\system32\nvofapi64.dll
2021-06-13 21:05 - 2020-11-12 23:18 - 000543632 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2021-06-13 21:05 - 2020-11-12 23:17 - 001487760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2021-06-13 21:05 - 2020-11-12 23:17 - 001146768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2021-06-13 21:05 - 2020-11-12 23:17 - 001022880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2021-06-13 21:05 - 2020-11-12 23:17 - 000818080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2021-06-13 21:05 - 2020-11-12 23:17 - 000671120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2021-06-13 21:05 - 2020-11-12 23:17 - 000588176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2021-06-13 21:05 - 2020-11-12 23:17 - 000555256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2021-06-13 21:05 - 2020-11-12 23:17 - 000048432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2021-06-13 21:05 - 2020-11-12 23:16 - 002078624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2021-06-13 21:05 - 2020-11-12 23:16 - 001571232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2021-06-13 21:05 - 2020-11-12 23:16 - 000812792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2021-06-13 21:05 - 2020-11-12 23:16 - 000656632 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2021-06-13 21:05 - 2020-11-12 23:15 - 006654864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2021-06-13 21:05 - 2020-11-12 23:15 - 005885328 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2021-06-13 21:05 - 2020-11-12 23:15 - 003916008 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2021-06-13 21:05 - 2020-11-12 23:15 - 002377616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2021-06-13 21:05 - 2020-11-12 23:15 - 000279440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2021-06-13 21:05 - 2020-11-12 23:14 - 004709224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2021-06-13 21:05 - 2020-11-12 23:14 - 000849648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2021-06-13 21:05 - 2020-11-12 22:57 - 000078115 _____ C:\WINDOWS\system32\nvinfo.pb
2021-06-12 23:59 - 2021-06-12 23:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2021-06-12 23:59 - 2021-06-12 23:59 - 000000000 ____D C:\Program Files\qBittorrent
2021-06-11 16:25 - 2021-06-11 16:25 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-06-11 16:25 - 2021-06-11 16:25 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-06-11 16:25 - 2021-06-11 16:25 - 001864192 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2021-06-11 16:25 - 2021-06-11 16:25 - 001687040 _____ C:\WINDOWS\system32\libcrypto.dll
2021-06-11 16:25 - 2021-06-11 16:25 - 001314120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-06-11 16:25 - 2021-06-11 16:25 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2021-06-11 16:25 - 2021-06-11 16:25 - 000700928 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-06-11 16:25 - 2021-06-11 16:25 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2021-06-11 16:25 - 2021-06-11 16:25 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-06-11 16:25 - 2021-06-11 16:25 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2021-06-11 16:25 - 2021-06-11 16:25 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-06-11 16:25 - 2021-06-11 16:25 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-06-11 16:25 - 2021-06-11 16:25 - 000480256 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2021-06-11 16:25 - 2021-06-11 16:25 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2021-06-11 16:25 - 2021-06-11 16:25 - 000468440 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-06-11 16:25 - 2021-06-11 16:25 - 000451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-06-11 16:25 - 2021-06-11 16:25 - 000446976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2021-06-11 16:25 - 2021-06-11 16:25 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2021-06-11 16:25 - 2021-06-11 16:25 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2021-06-11 16:25 - 2021-06-11 16:25 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2021-06-11 16:25 - 2021-06-11 16:25 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2021-06-11 16:25 - 2021-06-11 16:25 - 000157184 _____ C:\WINDOWS\system32\uwfcsp.dll
2021-06-11 16:25 - 2021-06-11 16:25 - 000153600 _____ C:\WINDOWS\system32\uwfcfgmgmt.dll
2021-06-11 16:25 - 2021-06-11 16:25 - 000138056 _____ C:\WINDOWS\system32\HvsiManagementApi.dll
2021-06-11 16:25 - 2021-06-11 16:25 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2021-06-11 16:25 - 2021-06-11 16:25 - 000101704 _____ C:\WINDOWS\SysWOW64\HvsiManagementApi.dll
2021-06-11 16:25 - 2021-06-11 16:25 - 000095744 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-06-11 16:25 - 2021-06-11 16:25 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-06-11 16:25 - 2021-06-11 16:25 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-06-11 16:25 - 2021-06-11 16:25 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-06-11 16:25 - 2021-06-11 16:25 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-06-11 16:25 - 2021-06-11 16:25 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll
2021-06-11 16:25 - 2021-06-11 16:25 - 000053760 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 001823792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-06-11 16:24 - 2021-06-11 16:24 - 001393496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-06-11 16:24 - 2021-06-11 16:24 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-06-11 16:24 - 2021-06-11 16:24 - 000707016 _____ C:\WINDOWS\system32\TextShaping.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 000657464 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 000563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-06-11 16:24 - 2021-06-11 16:24 - 000544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2021-06-11 16:24 - 2021-06-11 16:24 - 000455168 _____ C:\WINDOWS\system32\ssdm.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-06-11 16:24 - 2021-06-11 16:24 - 000330752 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 000306688 _____ C:\WINDOWS\system32\HeatCore.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-06-11 16:24 - 2021-06-11 16:24 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2021-06-11 16:24 - 2021-06-11 16:24 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2021-06-11 16:24 - 2021-06-11 16:24 - 000235520 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-06-11 16:24 - 2021-06-11 16:24 - 000190976 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2021-06-11 16:24 - 2021-06-11 16:24 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-06-11 16:24 - 2021-06-11 16:24 - 000152064 _____ C:\WINDOWS\system32\EoAExperiences.exe
2021-06-11 16:24 - 2021-06-11 16:24 - 000097280 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-06-11 16:24 - 2021-06-11 16:24 - 000074240 _____ C:\WINDOWS\system32\rdsxvmaudio.dll
2021-06-11 16:24 - 2021-06-11 16:24 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-06-11 16:24 - 2021-06-11 16:24 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-06-11 16:18 - 2021-06-11 16:18 - 000146389 _____ C:\WINDOWS\system32\printmanagement.msc
2021-06-11 16:18 - 2021-06-11 16:18 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-05-22 21:56 - 2021-05-22 21:56 - 000000112 ___SH C:\bootTel.dat

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2021-06-20 14:00 - 2020-12-17 11:02 - 000000000 ____D C:\ProgramData\Adguard
2021-06-20 13:57 - 2020-10-05 01:22 - 000000000 ____D C:\Program Files (x86)\jv16 PowerTools
2021-06-20 13:54 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-06-20 13:41 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-06-20 13:26 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-06-20 13:04 - 2020-09-26 22:06 - 000000000 ____D C:\ProgramData\NVIDIA
2021-06-20 12:54 - 2021-04-17 01:03 - 002010112 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-06-20 12:54 - 2019-12-07 17:08 - 000861352 _____ C:\WINDOWS\system32\perfh015.dat
2021-06-20 12:54 - 2019-12-07 17:08 - 000183836 _____ C:\WINDOWS\system32\perfc015.dat
2021-06-20 12:54 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-06-20 12:51 - 2020-09-26 22:08 - 000000000 ____D C:\Program Files\CCleaner
2021-06-20 12:50 - 2021-04-18 19:56 - 000000000 ____D C:\WINDOWS\system32\Tasks\PowerToys
2021-06-20 12:50 - 2020-12-17 11:04 - 000000000 ____D C:\Program Files (x86)\Adguard
2021-06-20 12:49 - 2021-04-19 20:50 - 000000000 ____D C:\ProgramData\VMware
2021-06-20 12:49 - 2021-04-17 00:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-06-20 12:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-06-20 12:49 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-06-20 12:38 - 2021-04-17 00:59 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-06-20 12:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-06-20 12:35 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-06-20 11:36 - 2021-04-17 00:57 - 000000000 ____D C:\Users\Radar
2021-06-20 11:12 - 2020-09-26 23:26 - 000000000 ____D C:\Users\Radar\AppData\Roaming\qBittorrent
2021-06-20 11:12 - 2020-09-26 22:10 - 000000000 ____D C:\Users\Radar\AppData\Roaming\foobar2000
2021-06-20 11:09 - 2021-04-17 00:55 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-06-20 09:26 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-06-20 02:01 - 2020-12-18 02:32 - 000000000 ____D C:\Users\Radar\AppData\Roaming\ColorPicker
2021-06-19 23:31 - 2020-09-26 22:20 - 000000000 ____D C:\Users\Radar\AppData\Roaming\TeraCopy
2021-06-19 23:10 - 2020-09-27 09:36 - 000002464 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-06-18 23:21 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-06-18 17:09 - 2020-09-26 20:02 - 000000000 ____D C:\Program Files\KeePassXC
2021-06-18 12:23 - 2020-12-12 21:49 - 000000744 __RSH C:\ProgramData\ntuser.pol
2021-06-18 10:56 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-06-18 10:28 - 2021-04-17 00:55 - 005494728 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-06-17 12:45 - 2020-10-29 20:43 - 000000000 ____D C:\Users\Radar\AppData\Roaming\calibre
2021-06-17 10:23 - 2020-12-13 03:20 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2021-06-14 01:10 - 2020-09-26 22:34 - 000000000 ____D C:\Program Files (x86)\Lavalys
2021-06-14 01:04 - 2020-09-26 22:10 - 000001206 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
2021-06-14 01:04 - 2020-09-26 22:10 - 000000000 ____D C:\Program Files (x86)\foobar2000
2021-06-13 22:51 - 2020-09-26 22:14 - 000000000 ____D C:\Program Files\IrfanView
2021-06-13 21:39 - 2020-12-09 12:36 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-06-13 21:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-06-13 20:11 - 2020-09-27 09:34 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-06-13 20:01 - 2020-09-29 14:37 - 000018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2021-06-12 16:43 - 2020-12-18 00:40 - 000000000 ____D C:\Program Files\dotnet
2021-06-12 15:00 - 2020-10-29 20:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2021-06-12 15:00 - 2020-10-29 20:21 - 000000000 ____D C:\Program Files (x86)\Calibre2
2021-06-12 11:42 - 2021-04-17 00:59 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-06-12 11:42 - 2021-04-17 00:59 - 000003386 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-06-11 18:21 - 2020-09-26 20:15 - 000000000 ____D C:\Users\Radar\AppData\Roaming\KeePassXC
2021-06-11 17:01 - 2020-09-26 22:09 - 000000000 ____D C:\Users\Radar\AppData\Roaming\Telegram Desktop
2021-06-11 16:38 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-06-11 16:37 - 2020-12-17 11:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdGuard
2021-06-11 16:37 - 2020-09-27 23:10 - 000000000 ____D C:\ProgramData\Package Cache
2021-06-11 16:36 - 2020-12-09 12:36 - 000000000 ___SD C:\WINDOWS\system32\AppV
2021-06-11 16:36 - 2019-12-07 17:11 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2021-06-11 16:36 - 2019-12-07 17:11 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2021-06-11 16:36 - 2019-12-07 17:09 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Keywords
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Com
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\IME
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender
2021-06-11 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-06-11 16:36 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2021-06-11 16:27 - 2019-12-07 17:11 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2021-06-11 16:24 - 2021-04-17 00:57 - 002877440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2021-06-11 16:18 - 2020-09-26 21:52 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-06-11 16:14 - 2020-09-26 21:52 - 132447432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-06-11 16:14 - 2020-09-26 21:51 - 000799104 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2021-05-30 19:04 - 2021-04-19 20:58 - 000000000 ____D C:\Users\Radar\AppData\Roaming\VMware
2021-05-28 20:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF

==================== Pliki w katalogu głównym wybranych folderów ========

2020-12-19 22:48 - 2020-12-19 22:48 - 000000285 _____ () C:\ProgramData\fontcacheev1.dat
2020-12-17 19:15 - 2020-12-17 19:15 - 000000786 _____ () C:\Users\Radar\AppData\Roaming\qnapi.ini
2021-06-13 21:11 - 2021-06-13 21:11 - 000000001 _____ () C:\Users\Radar\AppData\Local\llftool.4.40.agreement
2021-06-19 00:30 - 2021-06-19 00:30 - 000000017 _____ () C:\Users\Radar\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

==================== Koniec  FRST.txt ========================