Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 01.04.2024 01 Uruchomiony przez Tomek (administrator) LAPTOP-720E1LVK (LENOVO 81D2) (01-04-2024 19:25:38) Uruchomiony z D:\Nowy folder\FRST64.exe Załadowane profile: Tomek & Asia & Tymek & USB Platforma: Microsoft Windows 10 Home Wersja 22H2 19045.4170 (X64) Język: Polski (Polska) Domyślna przeglądarka: "C:\Users\Tomek\AppData\Local\Programs\Opera\opera.exe" -noautoupdate -- "%1" Tryb startu: Normal ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe <2> (C:\Users\Tomek\AppData\Local\Programs\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Tomek\AppData\Local\Programs\Opera\108.0.5067.40\opera_crashreporter.exe (C:\Users\Tomek\AppData\Roaming\uTorrent\updates\3.6.0_47016\utorrentie.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.65\msedgewebview2.exe <7> (C:\Users\Tomek\AppData\Roaming\uTorrent\uTorrent.exe ->) (BitTorrent Inc -> BitTorrent Inc.) C:\Users\Tomek\AppData\Roaming\uTorrent\helper\helper.exe (C:\Users\Tomek\AppData\Roaming\uTorrent\uTorrent.exe ->) (BitTorrent Inc -> BitTorrent Inc.) C:\Users\Tomek\AppData\Roaming\uTorrent\updates\3.6.0_47016\utorrentie.exe <2> (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe (DriverStore\FileRepository\u0359870.inf_amd64_fd45b4f03d50fa4e\B359830\atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0359870.inf_amd64_fd45b4f03d50fa4e\B359830\atieclxx.exe (explorer.exe ->) (BitTorrent Inc -> BitTorrent Limited) C:\Users\Tomek\AppData\Roaming\uTorrent\uTorrent.exe (explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Tomek\AppData\Local\Programs\Opera\opera.exe <63> (services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0359870.inf_amd64_fd45b4f03d50fa4e\B359830\atiesrxx.exe (services.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe (services.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe <2> (services.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe (services.exe ->) (Dolby Laboratories, Inc. -> ) C:\Windows\System32\dolbyaposvc\DAX3API.exe <2> (services.exe ->) (McAfee, LLC -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\servicehost.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2> (services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe (svchost.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe <2> (svchost.exe ->) (Comodo Security Solutions, Inc. -> COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe <2> (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [865568 2019-03-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated) HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13189928 2021-11-10] (Comodo Security Solutions, Inc. -> COMODO) HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [5237416 2021-02-25] (Adobe Inc. -> Adobe Systems Inc.) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [748624 2023-10-04] (Oracle America, Inc. -> Oracle Corporation) HKLM-x32\...\Run: [IseUI] => C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe [4187856 2019-01-29] (Comodo Security Solutions, Inc. -> COMODO) HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Ograniczenia <==== UWAGA HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Ograniczenia <==== UWAGA HKU\S-1-5-21-1802392719-117103019-839818755-1001\...\Run: [uTorrent] => C:\Users\Tomek\AppData\Roaming\uTorrent\uTorrent.exe [2071560 2024-03-16] (BitTorrent Inc -> BitTorrent Limited) HKU\S-1-5-21-1802392719-117103019-839818755-1001\...\Run: [Microsoft Edge Update] => C:\Users\Tomek\AppData\Local\Microsoft\EdgeUpdate\1.3.185.27\MicrosoftEdgeUpdateCore.exe [267848 2024-03-27] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-1802392719-117103019-839818755-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4374376 2023-07-28] (Valve Corp. -> Valve Corporation) HKU\S-1-5-21-1802392719-117103019-839818755-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [37426152 2024-03-27] (Epic Games Inc. -> Epic Games, Inc.) HKU\S-1-5-21-1802392719-117103019-839818755-1001\...\Run: [Opera Stable] => C:\Users\Tomek\AppData\Local\Programs\Opera\opera.exe [1580448 2024-03-26] (Opera Norway AS -> Opera Software) HKU\S-1-5-21-1802392719-117103019-839818755-1001\...\Run: [MicrosoftEdgeAutoLaunch_C63379C82922661C44C02AEF678422DE] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4063800 2024-03-27] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-1802392719-117103019-839818755-1001\...\Run: [ut] => C:\Users\Tomek\AppData\Roaming\uTorrent\uTorrent.exe [2071560 2024-03-16] (BitTorrent Inc -> BitTorrent Limited) HKU\S-1-5-21-1802392719-117103019-839818755-1001\...\Run: [Opera Browser Assistant] => C:\Users\Tomek\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [3996064 2024-03-04] (Opera Norway AS -> Opera Software) HKU\S-1-5-21-1802392719-117103019-839818755-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1 HKU\S-1-5-21-1802392719-117103019-839818755-1002\...\Run: [MicrosoftEdgeAutoLaunch_BDFF2E6A7AEF4FB0AA6DE29A9536B3FF] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4063800 2024-03-27] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-1802392719-117103019-839818755-1003\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [37426152 2024-03-27] (Epic Games Inc. -> Epic Games, Inc.) HKU\S-1-5-21-1802392719-117103019-839818755-1003\...\Run: [MicrosoftEdgeAutoLaunch_459FAB93B7ABA4017908CE9DEA57B5FF] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4063800 2024-03-27] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-1802392719-117103019-839818755-1003\...\RunOnce: [Application Restart #2] => C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --flag-switches-begin --flag-switches-end --enable-audio-service-sandbox --restore-last-session -- microsoft-edge:?launchContext1=Microsof (dane wartości zawierają 306 znaków więcej). [4063800 2024-03-27] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-1802392719-117103019-839818755-1006\...\Run: [MicrosoftEdgeAutoLaunch_E62388616612869B57D3D9C1162AD0EF] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4063800 2024-03-27] (Microsoft Corporation -> Microsoft Corporation) HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [65496 2021-02-25] (Adobe Inc. -> Adobe Systems Inc) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\123.0.6312.86\Installer\chrmstp.exe [2024-03-30] (Google LLC -> Google LLC) ==================== Zaplanowane zadania (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {80595AC1-7BD8-4225-AA65-9AE493449CBF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1547208 2024-01-31] (Adobe Inc. -> Adobe Inc.) Task: {F991F058-22DD-4F9C-A059-F9DECB834488} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {A303D19D-AA95-41A5-81EA-23C7D9E347ED} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13189928 2021-11-10] (Comodo Security Solutions, Inc. -> COMODO) Task: {5318FAE1-3A7A-4304-B5E4-95A9A03678AA} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5759640 2022-04-07] (Comodo Security Solutions, Inc -> COMODO) Task: {9DEBC676-6350-4545-B2B1-7AD1F8A251D4} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5759640 2022-04-07] (Comodo Security Solutions, Inc -> COMODO) Task: {BFEE1F11-7AE2-4711-A629-E01660D3AA44} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5759640 2022-04-07] (Comodo Security Solutions, Inc -> COMODO) Task: {8ABBFFA0-1985-4F47-9E8D-F98E7BF68689} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5759640 2022-04-07] (Comodo Security Solutions, Inc -> COMODO) Task: {F1F2FDA8-DA37-404A-880B-CDF9B5E2AAD8} - System32\Tasks\COMODO\COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [13189928 2021-11-10] (Comodo Security Solutions, Inc. -> COMODO) Task: {D9B3175F-78C1-410C-A25E-9F7EE45E22C2} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [5759640 2022-04-07] (Comodo Security Solutions, Inc -> COMODO) Task: {7726DF09-D47E-4A16-96E6-4B5A9CC20021} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-06-08] (Google Inc -> Google LLC) Task: {96EF068B-3F65-4FE2-BD63-719E91B2F0D1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-06-08] (Google Inc -> Google LLC) Task: {5F64255A-3219-4514-935A-A9522AE5B1C8} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2113024 2024-03-11] () [Brak podpisu cyfrowego] Task: {E09E2229-6A2E-4233-9BF8-646E9A400FAA} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [74952 2022-11-20] (Lenovo -> Lenovo Group Ltd.) Task: {4750D524-F24D-483D-B08F-CF59A17F9936} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => C:\WINDOWS\system32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> START ImControllerService Task: {7C4F0D4C-F46B-4FEC-A573-3246C9B56721} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => C:\WINDOWS\System32\reg.exe [77312 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32 Task: {8C4D533B-E1C8-4C9A-BDB5-E99AC5580C52} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\1634df2b-f8e9-4986-9218-1f689f9882e2 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.) Task: {3BA327BF-F18C-4B3A-B66D-0004623BE248} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\3edb6e2f-bc00-42fd-8e56-17a4107cbd57 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.) Task: {990B9489-FD52-449E-AFC1-9FD8A4A11504} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\6836ca74-92bb-4fb2-a634-e1fb09adf5de => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.) Task: {04828162-541A-47F3-A69E-5AFAE729D281} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\77493d22-ae17-4893-9829-7d5bdddc3307 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.) Task: {101E6A03-8A8A-42C3-B8F1-0830C4C8FCE0} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\7eddca85-1f2b-4308-a3ab-fddbc823de62 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.) Task: {B6B0D9A4-506E-480B-BE06-CD9F2C25F03F} - System32\Tasks\LenovoUtility Startup => C:\Windows\explorer.exe [5610344 2024-03-13] (Microsoft Windows -> Microsoft Corporation) Task: {2530606A-97CE-43EF-884F-40EBAB0087C8} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1802392719-117103019-839818755-1001Core => C:\Users\Tomek\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205744 2022-06-27] (Microsoft Corporation -> Microsoft Corporation) Task: {1A750B1C-1124-4135-A49A-F86C9A9A83D0} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1802392719-117103019-839818755-1001UA => C:\Users\Tomek\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205744 2022-06-27] (Microsoft Corporation -> Microsoft Corporation) Task: {227D92AD-D2AF-40E2-87C4-0386471884D5} - System32\Tasks\Opera scheduled assistant Autoupdate 1587894617 => C:\Users\Tomek\AppData\Local\Programs\Opera\launcher.exe [1580448 2024-03-26] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Tomek\AppData\Local\Programs\Opera\assistant" $(Arg0) Task: {6223635F-729C-4582-9AAB-04AE26F2235A} - System32\Tasks\Opera scheduled assistant Autoupdate 1678560349 => C:\Users\Tomek\AppData\Local\Programs\Opera\launcher.exe [1580448 2024-03-26] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Tomek\AppData\Local\Programs\Opera\assistant" $(Arg0) Task: {5DF3EEEE-5D3F-4F70-A93D-8B7DCBB052AB} - System32\Tasks\Opera scheduled assistant Autoupdate 1682187135 => C:\Users\Tomek\AppData\Local\Programs\Opera\launcher.exe [1580448 2024-03-26] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Tomek\AppData\Local\Programs\Opera\assistant" $(Arg0) Task: {6265EB8F-32AF-444E-AB37-165A0B9DE0B0} - System32\Tasks\Opera scheduled assistant Autoupdate 1708104339 => C:\Users\Tomek\AppData\Local\Programs\Opera\launcher.exe [1580448 2024-03-26] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Tomek\AppData\Local\Programs\Opera\assistant" $(Arg0) Task: {916615E2-171C-480D-98BE-FED5EB76F0E6} - System32\Tasks\Opera scheduled Autoupdate 1587894605 => C:\Users\Tomek\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5709728 2024-03-21] (Opera Norway AS -> Opera Software) Task: {9DEDA945-8E5D-4EB6-B44B-0222504BF751} - System32\Tasks\RtkAudUService64_BG => C:\Windows\system32\RtkAudUService64.exe [865568 2019-03-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0 Tcpip\..\Interfaces\{9d6b8134-c09b-491e-96d2-2a8fd445a6b4}: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{9d6b8134-c09b-491e-96d2-2a8fd445a6b4}: [DhcpNameServer] 192.168.1.1 0.0.0.0 Tcpip\..\Interfaces\{9d6b8134-c09b-491e-96d2-2a8fd445a6b4}\6416C6F677E696B6: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{9d6b8134-c09b-491e-96d2-2a8fd445a6b4}\B44323F583031363: [DhcpNameServer] 192.168.232.45 Tcpip\..\Interfaces\{fb23eed8-3788-4a06-9549-7637033ac2f8}: [NameServer] 156.154.70.25,156.154.71.25 Tcpip\..\Interfaces\{fb23eed8-3788-4a06-9549-7637033ac2f8}: [DhcpNameServer] 192.168.0.1 Edge: ======= Edge DefaultProfile: Default Edge Profile: C:\Users\Tomek\AppData\Local\Microsoft\Edge\User Data\Default [2024-03-31] Edge Session Restore: Default -> [funkcja włączona] Edge Extension: (Dokumenty Google offline) - C:\Users\Tomek\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-31] Edge Extension: (Edge relevant text changes) - C:\Users\Tomek\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-26] FireFox: ======== FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2019-09-27] FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-24] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Plugin-x32: @java.com/DTPlugin,version=11.391.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.391.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-02-25] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2024-03-27] (Adobe Inc. -> Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default [2024-04-01] CHR Notifications: Default -> hxxps://www.komputerswiat.pl; hxxps://www.youtube.com CHR Session Restore: Default -> [funkcja włączona] CHR Extension: (Adobe Acrobat: edycja plików PDF, konwertowanie, narzędzia podpisywania) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-03-26] CHR Extension: (MyJDownloader Browser Extension) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbcohnmimjicjdomonkcbcpbpnhggkip [2021-07-03] CHR Extension: (Dokumenty Google offline) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-26] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-31] CHR Profile: C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Guest Profile [2024-03-26] CHR Profile: C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Profile 1 [2024-03-26] CHR Extension: (Prezentacje) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2022-01-06] CHR Extension: (Dokumenty) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2022-01-06] CHR Extension: (Dysk Google) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2022-01-06] CHR Extension: (YouTube) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2022-01-06] CHR Extension: (Adobe Acrobat) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2022-01-06] CHR Extension: (Arkusze) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2022-01-06] CHR Extension: (McAfee® WebAdvisor) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2022-01-06] CHR Extension: (Dokumenty Google offline) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-01-06] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-01-06] CHR Extension: (Gmail) - C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2022-01-06] CHR Profile: C:\Users\Tomek\AppData\Local\Google\Chrome\User Data\System Profile [2024-03-26] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] CHR HKU\S-1-5-21-1802392719-117103019-839818755-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKU\S-1-5-21-1802392719-117103019-839818755-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] Opera: ======= OPR DefaultProfile: Default ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-01-31] (Adobe Inc. -> Adobe Inc.) S4 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-11-10] (Comodo Security Solutions, Inc. -> COMODO) R2 CmdAgentProt; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [11334144 2021-11-10] (Comodo Security Solutions, Inc. -> COMODO) R3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2675504 2021-11-10] (Comodo Security Solutions, Inc. -> COMODO) R2 DolbyDAXAPI; C:\WINDOWS\system32\dolbyaposvc\DAX3API.exe [398344 2018-06-08] (Dolby Laboratories, Inc. -> ) S4 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [584680 2023-03-10] (EasyAntiCheat Oy -> Epic Games, Inc.) S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2022-07-11] (Epic Games Inc. -> Epic Games, Inc.) R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [305520 2018-05-30] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) S4 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.) R2 isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [1044176 2019-01-29] (Comodo Security Solutions, Inc. -> COMODO) R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [905472 2019-09-27] (McAfee, LLC -> McAfee, Inc.) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\NisSrv.exe [3191272 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MsMpEng.exe [133688 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation) S2 LDrvSvc; C:\Program Files (x86)\OSTotoSoft\DriverTalent\LDrvSvc.dll [X] ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> ) S0 cmdboot; C:\WINDOWS\System32\DRIVERS\cmdboot.sys [16368 2022-02-15] (Microsoft Windows Early Launch Anti-malware Publisher -> COMODO) R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [38880 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [844000 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [47104 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) S3 ddmdrv; C:\WINDOWS\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> ) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [130256 2021-01-22] (Comodo Security Solutions, Inc. -> COMODO) R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [63256 2018-08-30] (Comodo Security Solutions, Inc. -> COMODO) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [20928 2024-03-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [603416 2024-03-13] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105752 2024-03-13] (Microsoft Windows -> Microsoft Corporation) S3 cpuz145; \??\C:\WINDOWS\temp\cpuz145\cpuz145_x64.sys [X] <==== UWAGA U3 SARPSvc; Brak ImagePath ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2024-04-01 19:23 - 2024-04-01 19:23 - 000003394 _____ C:\WINDOWS\system32\Drivers\fvstore.dat 2024-03-31 11:23 - 2024-03-31 11:23 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2024-03-31 10:54 - 2024-03-31 10:54 - 000002143 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader.lnk 2024-03-31 10:54 - 2024-03-31 10:54 - 000002131 _____ C:\Users\Public\Desktop\Acrobat Reader.lnk 2024-03-31 10:36 - 2024-04-01 19:26 - 000781184 _____ C:\WINDOWS\system32\Drivers\sfi.dat 2024-03-31 10:36 - 2024-03-31 10:36 - 000002161 _____ C:\Users\Public\Desktop\COMODO Internet Security Pro.lnk 2024-03-31 10:36 - 2024-03-31 10:36 - 000000000 ____D C:\WINDOWS\system32\Tasks\COMODO 2024-03-31 10:36 - 2024-03-31 10:36 - 000000000 ____D C:\Program Files\COMODO 2024-03-31 10:35 - 2024-03-31 10:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO 2024-03-31 10:35 - 2024-03-31 10:35 - 000000000 ____D C:\ProgramData\Shared Space 2024-03-31 10:35 - 2024-03-31 10:35 - 000000000 ____D C:\ProgramData\Comodo Downloader 2024-03-31 10:35 - 2024-03-31 10:35 - 000000000 ____D C:\ProgramData\Comodo 2024-03-31 10:35 - 2024-03-31 10:35 - 000000000 ____D C:\Program Files (x86)\COMODO 2024-03-31 10:35 - 2019-01-29 10:42 - 000254440 _____ (COMODO) C:\WINDOWS\system32\iseguard64.dll 2024-03-31 10:35 - 2019-01-29 10:42 - 000205024 _____ (COMODO) C:\WINDOWS\SysWOW64\iseguard32.dll 2024-03-31 10:35 - 2018-08-30 00:55 - 000063256 _____ (COMODO) C:\WINDOWS\system32\Drivers\isedrv.sys 2024-03-31 10:28 - 2024-03-31 10:30 - 137266600 _____ (COMODO) C:\Users\Tomek\Downloads\comodoispro_installer.exe 2024-03-31 10:27 - 2024-03-31 10:27 - 014769744 _____ C:\Users\Tomek\Downloads\bitdefender_avfree.exe 2024-03-31 08:27 - 2024-03-31 08:27 - 000000000 ____D C:\Users\USB\AppData\Local\PlaceholderTileLogoFolder 2024-03-31 08:27 - 2024-03-31 08:27 - 000000000 ____D C:\Users\USB\AppData\Local\CrashDumps 2024-03-31 08:26 - 2024-03-31 08:26 - 000000000 ____D C:\Users\USB\AppData\Local\Lenovo 2024-03-31 08:24 - 2024-03-31 08:24 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1802392719-117103019-839818755-1006 2024-03-31 08:24 - 2024-03-31 08:24 - 000003372 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1802392719-117103019-839818755-1006 2024-03-31 08:24 - 2024-03-31 08:24 - 000002408 _____ C:\Users\USB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2024-03-31 08:23 - 2024-03-31 08:23 - 000000000 ___RD C:\Users\USB\OneDrive 2024-03-31 08:23 - 2024-03-31 08:23 - 000000000 ____D C:\Users\USB\AppData\Roaming\SecureAge Technology 2024-03-31 08:22 - 2024-03-31 08:22 - 000000000 ____D C:\Users\USB\AppData\Local\Publishers 2024-03-31 08:22 - 2024-03-31 08:22 - 000000000 ____D C:\Users\USB\AppData\Local\Comms 2024-03-31 08:21 - 2024-03-31 08:45 - 000000000 ____D C:\Users\USB\AppData\Local\D3DSCache 2024-03-31 08:21 - 2024-03-31 08:32 - 000000000 ____D C:\Users\USB\AppData\Local\Packages 2024-03-31 08:21 - 2024-03-31 08:26 - 000000000 ____D C:\Users\USB\AppData\Roaming\IObit 2024-03-31 08:21 - 2024-03-31 08:23 - 000000000 ____D C:\Users\USB 2024-03-31 08:21 - 2024-03-31 08:22 - 000000000 ____D C:\Users\USB\AppData\Roaming\Microsoft\Windows 2024-03-31 08:21 - 2024-03-31 08:21 - 000002345 _____ C:\Users\USB\Desktop\Google Chrome.lnk 2024-03-31 08:21 - 2024-03-31 08:21 - 000000020 ___SH C:\Users\USB\ntuser.ini 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 _SHDL C:\Users\USB\Ustawienia lokalne 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 _SHDL C:\Users\USB\Szablony 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 _SHDL C:\Users\USB\Moje dokumenty 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 _SHDL C:\Users\USB\Menu Start 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 _SHDL C:\Users\USB\Documents\Moje wideo 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 _SHDL C:\Users\USB\Documents\Moje obrazy 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 _SHDL C:\Users\USB\Documents\Moja muzyka 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 _SHDL C:\Users\USB\Dane aplikacji 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 _SHDL C:\Users\USB\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 _SHDL C:\Users\USB\AppData\Local\Tymczasowe pliki internetowe 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 _SHDL C:\Users\USB\AppData\Local\Historia 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 _SHDL C:\Users\USB\AppData\Local\Dane aplikacji 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 ___SD C:\Users\USB\AppData\Roaming\Microsoft\SystemCertificates 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 ___SD C:\Users\USB\AppData\Roaming\Microsoft\Protect 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 ___SD C:\Users\USB\AppData\Roaming\Microsoft\Crypto 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 ___SD C:\Users\USB\AppData\Roaming\Microsoft\Credentials 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 ___RD C:\Users\USB\3D Objects 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 ____D C:\Users\USB\AppData\Roaming\Microsoft\Vault 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 ____D C:\Users\USB\AppData\Roaming\Adobe 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 ____D C:\Users\USB\AppData\LocalLow\AMD 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 ____D C:\Users\USB\AppData\Local\VirtualStore 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 ____D C:\Users\USB\AppData\Local\Google 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 ____D C:\Users\USB\AppData\Local\ConnectedDevicesPlatform 2024-03-31 08:21 - 2024-03-31 08:21 - 000000000 ____D C:\Users\USB\AppData\Local\AMD 2024-03-31 08:21 - 2020-10-11 00:10 - 000000000 ____D C:\Users\USB\AppData\Roaming\Microsoft\Network 2024-03-31 08:21 - 2018-12-03 15:00 - 000000000 ____D C:\Users\USB\AppData\Local\Host App Service 2024-03-30 19:30 - 2024-03-30 19:30 - 000000000 ____D C:\WINDOWS\system32\SONiX 2024-03-30 19:28 - 2024-03-30 19:28 - 006355824 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys 2024-03-30 19:10 - 2024-03-30 19:10 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1802392719-117103019-839818755-1001 2024-03-30 19:10 - 2024-03-30 19:10 - 000002430 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2024-03-27 21:07 - 2024-03-27 21:07 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1802392719-117103019-839818755-1003 2024-03-27 21:07 - 2024-03-27 21:07 - 000002430 _____ C:\Users\Tymek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2024-03-26 19:30 - 2024-03-26 19:30 - 000000000 ____D C:\ProgramData\Norton 2024-03-26 19:29 - 2024-03-26 19:29 - 000004312 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1587894605 2024-03-26 19:29 - 2024-03-26 19:29 - 000001393 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Przeglądarka Opera.lnk 2024-03-15 22:00 - 2024-03-15 22:00 - 000004464 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1678560349 2024-03-15 22:00 - 2024-03-15 22:00 - 000001393 _____ C:\Users\Tomek\Desktop\Przeglądarka Opera.lnk 2024-03-13 20:50 - 2024-03-13 20:50 - 000019530 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json 2024-03-13 20:49 - 2024-03-13 20:49 - 000019530 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json 2024-03-13 20:17 - 2024-03-13 20:17 - 000000000 ___HD C:\$WinREAgent ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2024-04-01 19:32 - 2019-06-16 13:55 - 000000000 ____D C:\Users\Tomek\AppData\Local\BitTorrentHelper 2024-04-01 19:32 - 2019-06-08 21:31 - 000000000 ____D C:\Users\Tomek\AppData\Roaming\uTorrent 2024-04-01 19:26 - 2024-01-28 22:15 - 000000000 ____D C:\FRST 2024-04-01 19:05 - 2020-10-10 23:45 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2024-04-01 18:51 - 2021-12-17 04:30 - 000000000 ____D C:\WINDOWS\SystemTemp 2024-04-01 18:51 - 2019-06-08 22:45 - 000000000 ____D C:\Program Files (x86)\Google 2024-04-01 18:34 - 2019-07-21 21:13 - 000000000 ____D C:\Users\Tomek\AppData\Local\JDownloader 2.0 2024-04-01 16:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2024-04-01 16:18 - 2019-10-18 21:37 - 000000000 ____D C:\Users\Tomek\AppData\Local\D3DSCache 2024-04-01 16:17 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2024-04-01 13:51 - 2021-04-03 15:00 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData 2024-03-31 13:07 - 2020-10-11 00:10 - 001678234 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2024-03-31 13:07 - 2019-12-07 17:08 - 000748784 _____ C:\WINDOWS\system32\perfh015.dat 2024-03-31 13:07 - 2019-12-07 17:08 - 000144494 _____ C:\WINDOWS\system32\perfc015.dat 2024-03-31 13:07 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF 2024-03-31 13:03 - 2023-07-05 00:01 - 000008192 ___SH C:\DumpStack.log.tmp 2024-03-31 13:03 - 2020-10-11 00:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2024-03-31 13:03 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState 2024-03-31 13:02 - 2019-12-07 11:03 - 002359296 _____ C:\WINDOWS\system32\config\BBI 2024-03-31 11:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF 2024-03-31 10:36 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2024-03-31 10:09 - 2019-07-22 17:54 - 000000000 ____D C:\Program Files (x86)\IObit 2024-03-31 10:01 - 2021-04-03 15:01 - 000002612 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0 2024-03-31 09:55 - 2019-07-22 17:54 - 000000000 ____D C:\Users\Tomek\AppData\Roaming\IObit 2024-03-31 09:55 - 2019-07-22 17:54 - 000000000 ____D C:\ProgramData\IObit 2024-03-31 09:34 - 2019-07-22 17:55 - 000000000 ____D C:\ProgramData\ProductData 2024-03-31 08:29 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog 2024-03-31 08:21 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2024-03-31 08:21 - 2018-04-17 21:03 - 000000000 __RHD C:\Users\Public\AccountPictures 2024-03-31 08:08 - 2023-09-10 14:26 - 000000000 ____D C:\ProgramData\ProductData3 2024-03-31 07:55 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2024-03-30 19:29 - 2018-12-03 14:56 - 000000000 ____D C:\WINDOWS\system32\dolbyaposvc 2024-03-30 19:14 - 2020-06-08 09:15 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2024-03-30 19:14 - 2020-06-08 09:15 - 000002295 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk 2024-03-30 19:14 - 2019-05-29 16:59 - 000000000 ____D C:\Users\Tomek\AppData\Local\Packages 2024-03-30 19:13 - 2019-06-08 22:46 - 000002314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2024-03-30 19:10 - 2021-12-13 21:03 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1802392719-117103019-839818755-1001 2024-03-28 22:20 - 2023-07-15 21:14 - 000002554 _____ C:\WINDOWS\SysWOW64\pubfreeware.ini 2024-03-27 21:07 - 2022-01-19 11:02 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1802392719-117103019-839818755-1003 2024-03-27 21:03 - 2022-06-27 20:16 - 000003822 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1802392719-117103019-839818755-1001UA 2024-03-27 21:03 - 2022-06-27 20:16 - 000003758 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1802392719-117103019-839818755-1001Core 2024-03-27 21:03 - 2019-07-22 16:49 - 000000000 ____D C:\Users\Tymek\AppData\Local\D3DSCache 2024-03-26 21:03 - 2019-08-09 20:42 - 000000000 ____D C:\Users\Tomek\AppData\Roaming\MPC-HC 2024-03-26 19:56 - 2022-12-28 19:34 - 000000000 ____D C:\Program Files (x86)\Steam 2024-03-26 19:56 - 2019-06-09 12:32 - 000000000 ____D C:\Users\Tomek\AppData\Local\CrashDumps 2024-03-26 19:53 - 2019-10-16 20:42 - 000000000 ____D C:\Users\Tomek\AppData\Local\Spotify 2024-03-26 19:52 - 2019-10-16 20:41 - 000000000 ____D C:\Users\Tomek\AppData\Roaming\Spotify 2024-03-26 19:26 - 2020-10-11 00:45 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2024-03-26 19:26 - 2020-10-11 00:45 - 000003442 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2024-03-17 17:17 - 2022-10-01 21:04 - 000000000 ____D C:\Users\Tomek\AppData\Roaming\com.adobe.dunamis 2024-03-16 21:15 - 2023-12-01 21:08 - 000000903 _____ C:\Users\Tomek\Desktop\µTorrent.lnk 2024-03-16 21:15 - 2019-06-08 21:32 - 000000883 _____ C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2024-03-14 21:20 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2024-03-13 21:32 - 2020-10-10 23:45 - 000633560 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2024-03-13 21:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2024-03-13 21:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources 2024-03-13 21:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe 2024-03-13 21:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism 2024-03-13 21:30 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences 2024-03-13 21:30 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2024-03-13 21:30 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing 2024-03-13 20:49 - 2020-10-10 23:51 - 003017216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2024-03-13 20:16 - 2019-05-30 20:40 - 000000000 ____D C:\WINDOWS\system32\MRT 2024-03-13 20:10 - 2019-05-30 20:40 - 190470136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2024-03-13 19:24 - 2018-04-17 21:02 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2024-03-09 10:34 - 2022-11-11 23:48 - 000000000 ____D C:\Program Files\RUXIM ==================== Pliki w katalogu głównym wybranych folderów ======== 2021-03-18 19:07 - 2021-03-18 19:07 - 000003584 _____ () C:\Users\Tomek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2023-12-11 21:35 - 2023-12-11 21:35 - 000000001 _____ () C:\Users\Tomek\AppData\Local\llftool.4.40.agreement 2021-04-03 14:57 - 2021-04-03 14:57 - 000000410 _____ () C:\Users\Tomek\AppData\Local\oobelibMkey.log 2022-01-15 22:02 - 2022-01-15 22:02 - 000007606 _____ () C:\Users\Tomek\AppData\Local\Resmon.ResmonCfg ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) ==================== Koniec FRST.txt ========================