Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 02-11-2020
Uruchomiony przez pucureczek (administrator)  _PUCURECZEK (03-11-2020 20:48:16)
Uruchomiony z C:\Users\pucureczek\Downloads
Załadowane profile: pucureczek
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska)
Domyślna przeglądarka: Chrome
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Ultra\DiscSoftBusServiceUltra.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Ultra\DTShellHlp.exe
(BitTorrent Inc -> BitTorrent, Inc.) C:\Users\pucureczek\Desktop\uTorrent-2.2.1.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\egui.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Geek Software GmbH -> Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe <2>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.32\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.32\GoogleCrashHandler64.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <11>
(Kadu Team) [Brak podpisu cyfrowego] C:\Program Files (x86)\Kadu\kadu.exe
(Lespeed Technology Ltd. -> WiseCleaner.com) C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe
(Lespeed Technology Ltd. -> WiseCleaner.com) C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\calc.exe
(Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12>
(NVIDIA Corporation -> ) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
(NVIDIA Corporation -> ) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Softland SRL -> Microsoft) C:\Program Files\Softland\novaPDF 9\Server\novapdfs.exe
(Telegram FZ-LLC -> Telegram FZ-LLC) C:\Users\pucureczek\AppData\Roaming\Telegram Desktop\Telegram.exe
(Tonec Inc. -> Internet Download Manager, Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMIntegrator64.exe
(Tonec Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(TrueCrypt Foundation -> TrueCrypt Foundation) C:\Program Files\TrueCrypt\TrueCrypt.exe
(VIA Technologies Inc. -> VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(VIA Technologies Inc. -> VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(VMware, Inc. -> ) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
(ZaaLabs, Ltd. -> ) C:\Users\pucureczek\AppData\Local\Programs\PretzelDesktop\helper\PretzelSaltHelper.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmdS.exe [180736 2019-12-11] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5299320 2000-01-01] (VIA Technologies Inc. -> VIA)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [6788032 2018-04-20] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
HKLM-x32\...\Run: [Bonus.SSR.FR12] => C:\Program Files (x86)\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [1527960 2016-10-18] (ABBYY Production LLC -> ABBYY Production LLC.)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [318112 2017-11-15] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [125872 2019-03-25] (VMware, Inc. -> VMware, Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [483976 2020-08-13] (Geek Software GmbH -> Geek Software GmbH)
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\Run: [uTorrent] => C:\Users\pucureczek\Desktop\uTorrent-2.2.1.exe [399224 2020-01-28] (BitTorrent Inc -> BitTorrent, Inc.)
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [4042808 2019-04-04] (Tonec Inc.) [Brak podpisu cyfrowego]
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\Run: [Kadu] => C:\Program Files (x86)\Kadu\kadu.exe [2285019 2017-01-24] (Kadu Team) [Brak podpisu cyfrowego]
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [23153344 2019-07-11] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\Run: [TrueCrypt] => C:\Program Files\TrueCrypt\TrueCrypt.exe [1516496 2018-04-10] (TrueCrypt Foundation -> TrueCrypt Foundation)
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33092496 2020-10-28] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\Run: [DAEMON Tools Ultra Automount] => C:\Program Files\DAEMON Tools Ultra\DTAgent.exe [484808 2020-05-23] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\Run: [PretzelSaltHelper] => C:\Users\pucureczek\AppData\Local\Programs\PretzelDesktop\helper\PretzelSaltHelper.exe [6936688 2018-07-20] (ZaaLabs, Ltd. -> )
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\Run: [Opera Browser Assistant] => C:\Users\pucureczek\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [3152920 2020-10-29] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\Run: [GoogleChromeAutoLaunch_9931A7782258C431137C1BC375390577] => "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\MountPoints2: {47a8762c-3e5c-11e8-b3db-485b3994f893} - M:\autorun.exe
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\MountPoints2: {87cb49b0-5863-11e9-b8a5-485b3994f893} - setup.exe
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\MountPoints2: {c88dac0a-9cec-11ea-bc5d-485b3994f893} - N:\_AUTORUN\AUTORUN.EXE
HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\MountPoints2: {c88dac2b-9cec-11ea-bc5d-485b3994f893} - M:\_AUTORUN\AUTORUN.EXE
HKLM\...\Print\Monitors\doPDF 7 Monitor: C:\Windows\system32\dopdfmn7.dll [25480 2012-10-03] (Softland S.R.L. -> Softland)
HKLM\...\Print\Monitors\EPSON SX410 Series 64MonitorBE: C:\Windows\system32\E_ILMFCE.DLL [108032 2008-08-08] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\MPE3 Port: C:\Windows\system32\mpelocalmon.dll [26112 2018-05-14] (Copyright (c) Code Industry Ltd) [Brak podpisu cyfrowego]
HKLM\...\Print\Monitors\novaPDF 9 Port Monitor: C:\Windows\system32\novamn9.dll [18944 2018-05-16] (Softland) [Brak podpisu cyfrowego]
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\Windows\system32\pxcpmL.dll [2152704 2020-08-12] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\86.0.4240.183\Installer\chrmstp.exe [2020-11-03] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\86.1.16.68\Installer\chrmstp.exe [2020-10-28] (Brave Software, Inc. -> Brave Software, Inc.)
Startup: C:\Users\pucureczek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Telegram.lnk [2020-08-17]
ShortcutTarget: Telegram.lnk -> C:\Users\pucureczek\AppData\Roaming\Telegram Desktop\Telegram.exe (Telegram FZ-LLC -> Telegram FZ-LLC)
GroupPolicy: Ograniczenia ? <==== UWAGA

==================== Zaplanowane zadania (filtrowane) ============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {0A3A5D45-7444-4C72-94B2-23A06E2299C8} - System32\Tasks\Opera scheduled Autoupdate 1552431083 => C:\Users\pucureczek\AppData\Local\Programs\Opera\launcher.exe [1721368 2020-10-29] (Opera Software AS -> Opera Software)
Task: {0BACCEC5-9EA2-411E-BB7C-A41A224C625F} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-08-08] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {101F0EE8-987B-4E0F-A7E5-DFC7BB820625} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-10-13] (Adobe Inc. -> Adobe)
Task: {17402466-9932-4AB9-BFA2-7F58C2133EA6} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [913720 2019-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {19317A6F-7753-4170-B13C-E7AB76E85BB6} - System32\Tasks\Opera GX scheduled Autoupdate 1564524405 => C:\Users\pucureczek\AppData\Local\Programs\Opera GX\launcher.exe [1654808 2020-10-30] (Opera Software AS -> Opera Software)
Task: {1C29D44B-0BA5-4ACF-824B-8D6482C26FF8} - System32\Tasks\e-pity2019_styczen => C:\Program Files (x86)\e-file\e-pity\Assets\signxml.exe [2255640 2020-02-12] (e-file sp. z o.o. -> e-file sp. z o.o. sp. k.)
Task: {266516B1-A75B-4B72-BE24-5405F226E6DF} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [654456 2019-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2C268C74-DA9B-43DC-8081-4A76B42F48E7} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1133368 2019-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {35A2C6F5-F702-4FE5-A32B-5C8A6F0BE8D4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1341008 2020-09-06] (Adobe Inc. -> Adobe Inc.)
Task: {370D2C32-7298-49F9-B089-B1A06C50B60A} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1133368 2019-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3F82B16B-7DC1-4F7B-801C-271EFE11BB9D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2020-11-03] (Google LLC -> Google LLC)
Task: {4F67389F-E377-477B-BFEF-688F8B2776C9} - System32\Tasks\doPDF 9 Telemetry => C:\Program Files\Softland\novaPDF 9\Driver\GoogleAnalytics.exe [51640 2018-05-16] (Softland SRL -> )
Task: {57EA4EEB-32F7-4BCB-90C3-B9F824BD184E} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {5F278DF9-35DD-4C9B-BC41-F5E5CE370413} - System32\Tasks\Safer-Networking\Spybot Anti-Beacon\Refresh Anti-Beacon immunization => C:\Program Files (x86)\Spybot Anti-Beacon\SDAntiBeacon.exe [3100488 2016-11-11] (Safer-Networking Ltd. -> Safer-Networking Ltd.) [Brak podpisu cyfrowego]
Task: {62F93263-ECD6-497C-8848-C0E06E115110} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [6944304 2018-04-20] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {7DBC7C06-82E1-4F60-9B8A-7961F34F0BCC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2020-11-03] (Google LLC -> Google LLC)
Task: {85166C2E-1C45-4E6D-B96F-3F9169C0129A} - System32\Tasks\e-pity2019a_kwiecien => C:\Program Files (x86)\e-file\e-pity\Assets\signxml.exe [2255640 2020-02-12] (e-file sp. z o.o. -> e-file sp. z o.o. sp. k.)
Task: {87C08013-9EE3-49F6-B4B9-3B37F068175E} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-08-08] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {89C8B650-8F61-497B-95A6-AF1825A34781} - System32\Tasks\doPDF 9 Update => C:\Program Files\Softland\novaPDF 9\Driver\UpdateApplication.exe [107960 2018-05-16] (Softland SRL -> )
Task: {A199E690-D9A4-4926-8C48-0CF1CBDA4D06} - System32\Tasks\{F5681CF6-4FA5-4F7D-AD33-D11121C1EAD5} => C:\Windows\system32\pcalua.exe -a C:\Users\pucureczek\Downloads\Programs\nox_setup_v6.3.0.6_full_intl.exe -d C:\Users\pucureczek\Downloads\Programs
Task: {A1F083E7-F0E7-4AAD-8509-4620FB8E32B8} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe [752136 2020-10-16] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
Task: {A82E7659-90D5-47CE-84E9-5A933BAB73E8} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [7192192 2018-04-20] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {A966DEE7-9973-4EA6-B675-E48949BC209F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [7651984 2018-04-20] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {B88E31DB-C76A-4470-B734-436CA3078B3E} - System32\Tasks\Wise Care 365 => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe [4659880 2018-12-24] (Lespeed Technology Ltd. -> WiseCleaner.com)
Task: {BBA2C5DD-102D-43BF-8D6D-8ABD7958AA84} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-11-07] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {BC12ED28-1F1D-43C1-8CA2-F90552D01890} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-11-07] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {C969CA60-BFAA-494E-9B26-6FAC24AAA29F} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1133368 2019-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D174048D-68F8-4A96-880C-5811620C2C81} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-812881985-3705834760-3341933067-1000 => C:\Users\pucureczek\AppData\Local\MEGAsync\MEGAupdater.exe [760696 2018-01-15] (Mega Limited -> Mega Limited)
Task: {E36C02EF-E0AB-40C5-BFF9-2A96AEBD7E3E} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3301928 2019-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E3EFEFC9-45DF-4190-8FC7-67840222043C} - System32\Tasks\Opera scheduled assistant Autoupdate 1582730438 => C:\Users\pucureczek\AppData\Local\Programs\Opera\launcher.exe [1721368 2020-10-29] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\pucureczek\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {E85AD00D-5C99-44DE-A77F-1B429D9AB5EB} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1133368 2019-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E9F88632-CC3C-4158-92B3-49A3170C539F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [913720 2019-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {EE1E9167-1C10-4B64-8061-CDACDB586359} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_445_pepper.exe [1497656 2020-10-13] (Adobe Inc. -> Adobe)
Task: {F05AFE12-A5D7-4CBE-A3D4-2FA2D8BC3E9A} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe [4007080 2018-08-29] (Lespeed Technology Ltd. -> wisecleaner.com)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

Task: C:\Windows\Tasks\Wise Care 365.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe
Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{94282D5A-0A3C-4BAE-A54D-5A8C2385A756}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{94282D5A-0A3C-4BAE-A54D-5A8C2385A756}: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF DefaultProfile: r4fll8vg.default-1539615144223
FF ProfilePath: C:\Users\pucureczek\AppData\Roaming\Mozilla\Firefox\Profiles\r4fll8vg.default-1539615144223 [2020-11-03]
FF HKLM\...\Firefox\Extensions: [soda_pdf_desktop_11_conv_v.4@sodapdf.com] - C:\Program Files\Soda PDF Desktop 11\creator\plugins\FirefoxAddin\soda_pdf_desktop_11_conv_v.4@sodapdf.com.xpi
FF Extension: (Soda PDF Desktop 11 Creator) - C:\Program Files\Soda PDF Desktop 11\creator\plugins\FirefoxAddin\soda_pdf_desktop_11_conv_v.4@sodapdf.com.xpi [2019-03-13]
FF HKLM-x32\...\Firefox\Extensions: [soda_pdf_desktop_11_conv_v.4@sodapdf.com] - C:\Program Files\Soda PDF Desktop 11\creator\plugins\FirefoxAddin\soda_pdf_desktop_11_conv_v.4@sodapdf.com.xpi
FF HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi
FF Extension: (IDM Integration Module) - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi [2019-03-19] [UpdateUrl:hxxps://data.internetdownloadmanager.com/idmmzcc3/update.json]
FF HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\pucureczek\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\pucureczek\AppData\Roaming\IDM\idmmzcc5 [2018-06-01] [Przestarzałe] [Brak podpisu cyfrowego]
FF HKU\S-1-5-21-812881985-3705834760-3341933067-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] [Przestarzałe]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-08-12] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-08-12] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-08-12] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=3.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @java.com/DTPlugin,version=11.221.2 -> C:\Program Files (x86)\Java\jre1.8.0_221\bin\dtplugin\npDeployJava1.dll [2019-07-21] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.221.2 -> C:\Program Files (x86)\Java\jre1.8.0_221\bin\plugin2\npjp2.dll [2019-07-21] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2019-08-08] (Brave Software, Inc. -> BraveSoftware Inc.)
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2019-08-08] (Brave Software, Inc. -> BraveSoftware Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2020-08-12] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2020-08-12] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2020-08-12] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-10-22] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-812881985-3705834760-3341933067-1000: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-08-12] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-812881985-3705834760-3341933067-1000: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-08-12] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-812881985-3705834760-3341933067-1000: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-08-12] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-812881985-3705834760-3341933067-1000: @updates.epicbrowser.com/Epic Privacy Browser Installer;version=3 -> C:\Users\pucureczek\AppData\Local\Epic Privacy Browser\Installer\1.3.27.13\npEpicUpdate3.dll [2019-07-29] (Google Inc (TEST) -> Epic Privacy Browser) [Brak podpisu cyfrowego]
FF Plugin HKU\S-1-5-21-812881985-3705834760-3341933067-1000: @updates.epicbrowser.com/Epic Privacy Browser Installer;version=9 -> C:\Users\pucureczek\AppData\Local\Epic Privacy Browser\Installer\1.3.27.13\npEpicUpdate3.dll [2019-07-29] (Google Inc (TEST) -> Epic Privacy Browser) [Brak podpisu cyfrowego]
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2020-11-03]

Chrome: 
=======
CHR Profile: C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default [2020-11-03]
CHR DownloadDir: C:\Users\pucureczek\Desktop
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Extension: (Prezentacje) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-04-10]
CHR Extension: (Dokumenty) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-04-10]
CHR Extension: (Dysk Google) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-22]
CHR Extension: (YouTube) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-04-10]
CHR Extension: (uBlock Origin) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-10-22]
CHR Extension: (Adobe Acrobat) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-09-17]
CHR Extension: (Daxab Ultimate) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\enakmcmeealkdoeindgoeogldodhdeda [2020-04-21]
CHR Extension: (Arkusze) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-04-10]
CHR Extension: (Dokumenty Google offline) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-10-22]
CHR Extension: (IG Story Downloader) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgoahjfijnieehhbmegbfgfblldcaeca [2018-06-05]
CHR Extension: (Unseen for Facebook) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jiomcgpfgkeefipihnplhadgdoollmap [2019-09-23]
CHR Extension: (Web Paint) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkgheolbeikjgakcjenlepbcmcanpna [2020-11-03]
CHR Extension: (Yellow highlighter pen for web) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\lnmengjdnfjbochkdkcjbbpildacancp [2020-10-06]
CHR Extension: (Zrób pełny, całkowity zrzut ekranu strony internetowej - FireShot) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbpblocgmgfnpjjppndjkmgjaogfceg [2020-10-27]
CHR Extension: (IDM Integration Module) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2020-10-17]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]
CHR Extension: (e-pity - dodatek) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofoeigeaodhbjogdigckajfhjbonaofg [2020-02-17]
CHR Extension: (Gmail) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\pucureczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-10-10]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2019-03-21]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2019-03-21]
CHR HKLM-x32\...\Chrome\Extension: [ofoeigeaodhbjogdigckajfhjbonaofg]

Opera: 
=======
OPR Extension: (Rich Hints Agent) - C:\Users\pucureczek\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2020-11-03]

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169544 2020-09-06] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-10-13] (Adobe Inc. -> Adobe)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8577760 2019-06-15] (BattlEye Innovations e.K. -> )
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-08-08] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-08-08] (Brave Software, Inc. -> BraveSoftware Inc.)
R3 Disc Soft Ultra Bus Service; C:\Program Files\DAEMON Tools Ultra\DiscSoftBusServiceUltra.exe [7102920 2020-05-23] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2433232 2019-12-11] (ESET, spol. s r.o. -> ESET)
R2 EPSON_EB_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [163840 2007-12-17] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [126464 2007-01-11] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [496232 2010-01-21] (NVIDIA Corporation -> )
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1673288 2020-06-16] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6821960 2020-05-20] (GOG Sp. z o.o. -> GOG.com)
S4 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2018-11-08] () [Brak podpisu cyfrowego]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6347056 2018-09-19] (Malwarebytes Corporation -> Malwarebytes)
R2 NovaPdf9Server; C:\Program Files\Softland\novaPDF 9\Server\novapdfs.exe [52664 2018-05-16] (Softland SRL -> Microsoft)
R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [209000 2010-01-21] (NVIDIA Corporation -> )
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2522424 2020-10-26] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3476288 2020-10-26] (Electronic Arts, Inc. -> Electronic Arts)
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [483976 2020-08-13] (Geek Software GmbH -> Geek Software GmbH)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [474256 2020-01-11] (Rockstar Games, Inc. -> Rockstar Games)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3892256 2018-04-20] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [3943664 2018-04-20] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [233712 2018-02-06] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
S4 Soda PDF Desktop 11; C:\Program Files\Soda PDF Desktop 11\ws.exe [2463560 2019-03-13] (LULU Software -> LULU Software)
S4 Soda PDF Desktop 11 Creator; C:\Program Files\Soda PDF Desktop 11\creator\common\creator-ws.exe [720200 2019-03-13] (LULU Software -> LULU Software)
S4 Soda PDF Desktop 11 Update Service; C:\Program Files\Soda PDF Desktop 11\updater-ws.exe [1778504 2019-03-13] (LULU Software -> LULU Software)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S4 TechSmith Uploader Service; C:\Program Files (x86)\Common Files\TechSmith Shared\Uploader\UploaderService.exe [3661096 2015-09-14] (TechSmith Corporation -> TechSmith Corporation)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2000-01-01] (VIA Technologies Inc. -> VIA Technologies, Inc.)
R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [15446960 2019-03-25] (VMware, Inc. -> )
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Windows -> Microsoft Corporation)
R2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [658600 2018-07-20] (Lespeed Technology Ltd. -> WiseCleaner.com)

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv_bgp.sys [315976 2020-01-14] (Bluestack Systems, Inc -> Bluestack System Inc.)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [42256 2020-05-23] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [59360 2020-05-23] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtultrascsibus; C:\Windows\System32\DRIVERS\dtultrascsibus.sys [42256 2020-05-23] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtultrausbbus; C:\Windows\System32\DRIVERS\dtultrausbbus.sys [59344 2020-05-23] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [149144 2019-07-25] (ESET, spol. s r.o. -> ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [189232 2019-07-25] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [113336 2019-07-25] (ESET, spol. s r.o. -> ESET)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [152688 2018-09-11] (Malwarebytes Corporation -> Malwarebytes)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [200232 2020-11-03] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [118584 2020-11-03] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [58400 2020-11-03] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [260384 2020-11-03] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [100664 2020-11-03] (Malwarebytes Corporation -> Malwarebytes)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [165504 2017-01-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 tapnordvpn; C:\Windows\System32\DRIVERS\tapnordvpn.sys [35592 2018-07-24] (TEFINCOM S.A. -> The OpenVPN Project)
R1 VBoxUSBMon; C:\Windows\System32\DRIVERS\VBoxUSBMon.sys [127432 2019-08-10] (Duodian Online Technology Co. Ltd. -> BigNox Corporation)
R2 vmparport; C:\Windows\System32\DRIVERS\vmparport.sys [49216 2019-03-25] (VMware, Inc. -> VMware, Inc.)
R0 vsock; C:\Windows\System32\DRIVERS\vsock.sys [93576 2018-06-21] (VMware, Inc. -> VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-x64.sys [52576 2018-02-27] (VMware, Inc. -> VMware, Inc.)
S3 WiseRegNotify; C:\Windows\WiseRegNotify.sys [51272 2019-08-14] (Beijing Lang Xingda Network Technology Co., Ltd -> WiseCleaner.com)
S3 WiseUnlock; C:\Windows\WiseUnlock64.sys [33864 2019-08-14] (Beijing Lang Xingda Network Technology Co., Ltd -> WiseCleaner.com)
S3 SWDUMon; system32\DRIVERS\SWDUMon.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) ===================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2020-11-03 20:47 - 2020-11-03 20:51 - 000040300 _____ C:\Users\pucureczek\Downloads\FRST.txt
2020-11-03 20:46 - 2020-11-03 20:50 - 000000000 ____D C:\FRST
2020-11-03 20:46 - 2020-11-03 20:46 - 002298368 _____ (Farbar) C:\Users\pucureczek\Downloads\FRST64.exe
2020-11-03 19:57 - 2020-11-03 19:57 - 000388608 _____ (Trend Micro Inc.) C:\Users\pucureczek\Downloads\HijackThis.exe
2020-11-03 19:51 - 2020-11-03 19:51 - 000002208 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-11-03 19:51 - 2020-11-03 19:51 - 000002167 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-11-03 19:51 - 2020-11-03 19:51 - 000002167 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2020-11-03 19:50 - 2020-11-03 19:50 - 001317080 _____ (Google LLC) C:\Users\pucureczek\Downloads\ChromeSetup.exe
2020-11-03 19:50 - 2020-11-03 19:50 - 000003482 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-11-03 19:50 - 2020-11-03 19:50 - 000003354 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-11-03 19:50 - 2020-11-03 19:50 - 000000000 ____D C:\Program Files\Google
2020-11-03 19:46 - 2020-11-03 19:46 - 000008599 _____ C:\Users\pucureczek\Desktop\Hasła w Chrome.csv
2020-11-03 19:45 - 2020-11-03 19:45 - 003905925 _____ C:\Users\pucureczek\Desktop\bookmarks_03.11.2020.html
2020-11-03 17:12 - 2020-11-03 17:12 - 000058400 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2020-11-03 17:11 - 2020-11-03 19:16 - 000100664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2020-11-03 17:11 - 2020-11-03 17:11 - 000118584 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2020-11-03 17:10 - 2020-11-03 17:10 - 000260384 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2020-11-03 16:33 - 2020-11-03 17:05 - 000169934 _____ C:\Windows\ntbtlog.txt
2020-11-03 00:58 - 2020-11-03 00:58 - 000200232 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2020-11-03 00:58 - 2020-11-03 00:58 - 000001827 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-11-03 00:58 - 2020-11-03 00:58 - 000001827 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2020-11-03 00:58 - 2020-11-03 00:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2020-11-03 00:58 - 2018-09-11 13:18 - 000152688 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2020-11-03 00:57 - 2018-09-19 23:21 - 000000000 ____D C:\Users\pucureczek\Desktop\Malwarebytes Anti-Malware Premium 3.6.1.2711 MULTI-PL
2020-11-03 00:56 - 2020-11-03 00:57 - 080464242 _____ C:\Users\pucureczek\Desktop\Malwarebytes Anti-Malware Premium 3.6.1.2711 MULTI-PL.rar
2020-11-02 23:34 - 2020-11-02 23:35 - 008447152 _____ (Malwarebytes) C:\Users\pucureczek\Downloads\adwcleaner_8.0.8.exe
2020-11-02 23:33 - 2020-11-02 23:33 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-11-02 20:17 - 2020-11-02 20:17 - 000000000 ____D C:\Users\pucureczek\AppData\Local\Tempzxpsignd6070d653eb9074a
2020-11-02 20:17 - 2020-11-02 20:17 - 000000000 ____D C:\Users\pucureczek\AppData\Local\Tempzxpsigna9a617e5d5b37978
2020-11-02 20:17 - 2020-11-02 20:17 - 000000000 ____D C:\Users\pucureczek\AppData\Local\Tempzxpsign6b01d4398721442f
2020-11-02 20:17 - 2020-11-02 20:17 - 000000000 ____D C:\Users\pucureczek\AppData\Local\Tempzxpsign1cebb703177f99a6
2020-11-01 00:42 - 2020-11-01 00:46 - 000000000 ____D C:\Users\pucureczek\Desktop\Lipiec 2019
2020-10-29 15:45 - 2020-10-29 15:45 - 000004360 _____ C:\Windows\system32\Tasks\Opera scheduled assistant Autoupdate 1582730438
2020-10-27 23:17 - 2020-10-27 23:17 - 000000000 ____D C:\Users\pucureczek\Desktop\FireShot
2020-10-26 22:45 - 2020-10-26 22:45 - 000061165 _____ C:\Users\pucureczek\Desktop\dla-Talarcia-2.xlsx
2020-10-25 16:38 - 2020-10-25 16:39 - 000000143 _____ C:\Users\pucureczek\Desktop\ten co krzesłem zamach zrobił na komorowskiego haha.txt
2020-10-25 15:53 - 2020-10-25 15:53 - 000142841 _____ C:\Users\pucureczek\Desktop\trade.xlsx
2020-10-24 13:23 - 2020-10-24 13:23 - 000000000 __SHD C:\found.000
2020-10-23 22:19 - 2020-10-23 22:19 - 000606224 _____ C:\Users\pucureczek\Desktop\Połamany Sport.pdf
2020-10-21 15:26 - 2020-11-02 16:14 - 000004158 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1552431083
2020-10-20 22:15 - 2020-10-20 22:15 - 000179635 _____ C:\Users\pucureczek\Desktop\Koszyk _ notino.pl.pdf
2020-10-18 22:04 - 2020-10-18 22:04 - 000042335 _____ C:\Users\pucureczek\Desktop\Algorytm.xlsx
2020-10-18 18:11 - 2020-10-18 18:11 - 000009264 _____ C:\Users\pucureczek\Desktop\Zeszyt1.xlsx
2020-10-14 23:39 - 2020-10-14 23:39 - 005340981 _____ C:\Users\pucureczek\Desktop\Projekt-2020-2024.xlsm
2020-10-14 16:23 - 2019-12-08 03:12 - 000000000 ____D C:\Users\pucureczek\Desktop\BeatTheBookie-master
2020-10-12 22:50 - 2020-10-12 22:50 - 000000000 ____D C:\Users\pucureczek\AppData\Local\Tempzxpsign3b7f07b8e5d8fbac
2020-10-12 22:49 - 2020-10-12 22:49 - 000000000 ____D C:\Users\pucureczek\AppData\Local\Tempzxpsigne14a0b0c7dc77dbd
2020-10-12 22:49 - 2020-10-12 22:49 - 000000000 ____D C:\Users\pucureczek\AppData\Local\Tempzxpsign9f8d20ceb92130fe
2020-10-09 17:06 - 2020-10-09 17:06 - 000054325 _____ C:\Users\pucureczek\Desktop\Test.xlsx
2020-10-08 15:39 - 2020-10-08 15:39 - 044919974 _____ C:\Users\pucureczek\Desktop\Untitled_ Oct 8 2020 2_00 PM.webm
2020-10-07 15:21 - 2020-11-02 16:14 - 000004164 _____ C:\Windows\system32\Tasks\Opera GX scheduled Autoupdate 1564524405
2020-10-05 20:09 - 2020-10-05 20:10 - 315180199 _____ C:\Users\pucureczek\Desktop\10000000_352030806235610_7837594155012053740_n.mp4
2020-10-04 22:59 - 2020-10-04 22:59 - 000031093 _____ C:\Users\pucureczek\Desktop\Statystyki-kursów1.xlsx.xlsm
2020-10-04 17:47 - 2020-10-04 22:34 - 000020903 _____ C:\Users\pucureczek\Desktop\meczyki.pl vs primatips.ods
2020-10-04 17:22 - 2020-10-04 17:22 - 000205462 _____ C:\Users\pucureczek\Desktop\money!!.txt

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2020-11-03 20:54 - 2018-04-10 19:44 - 000000000 ____D C:\Users\pucureczek\AppData\Roaming\Kadu
2020-11-03 20:53 - 2018-05-31 21:19 - 000000000 ____D C:\Users\pucureczek\AppData\Roaming\uTorrent
2020-11-03 19:50 - 2018-04-10 15:14 - 000000000 ____D C:\Program Files (x86)\Google
2020-11-03 18:47 - 2019-02-26 16:41 - 000000000 ____D C:\ProgramData\Mozilla
2020-11-03 18:35 - 2018-04-10 19:07 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-11-03 18:35 - 2018-04-10 15:25 - 000000000 ____D C:\Users\pucureczek\AppData\LocalLow\Mozilla
2020-11-03 17:21 - 2009-07-14 05:45 - 000031280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-11-03 17:21 - 2009-07-14 05:45 - 000031280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-11-03 17:10 - 2019-07-29 20:05 - 000000000 ____D C:\Users\pucureczek\AppData\Roaming\Telegram Desktop
2020-11-03 17:09 - 2019-04-06 23:10 - 000000000 ____D C:\Users\pucureczek\AppData\Roaming\Wise Care 365
2020-11-03 17:08 - 2018-04-11 18:41 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2020-11-03 17:06 - 2019-04-06 23:31 - 000000410 _____ C:\Windows\Tasks\Wise Care 365.job
2020-11-03 17:06 - 2018-04-10 15:52 - 000000000 ____D C:\ProgramData\NVIDIA
2020-11-03 17:06 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-11-03 16:29 - 2018-06-01 14:12 - 000000000 ____D C:\Users\pucureczek\AppData\Roaming\DMCache
2020-11-03 16:22 - 2018-08-26 22:28 - 000002059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-11-03 16:17 - 2019-10-03 21:06 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2020-11-03 16:17 - 2019-10-03 21:06 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2020-11-03 00:01 - 2019-04-06 23:32 - 000000438 _____ C:\Windows\Tasks\Wise Turbo Checker.job
2020-11-02 23:28 - 2018-04-10 22:38 - 000000000 ____D C:\Users\pucureczek\AppData\Roaming\vlc
2020-11-01 01:10 - 2018-11-13 19:24 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-10-31 20:06 - 2018-05-20 22:10 - 000000000 ____D C:\Program Files (x86)\Origin
2020-10-31 15:52 - 2019-03-02 20:37 - 000000000 ____D C:\Users\pucureczek\Desktop\Goddess Alexandra Snow - torrent
2020-10-29 23:06 - 2010-11-21 04:27 - 000795000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2020-10-29 20:57 - 2011-02-04 18:38 - 000746304 _____ C:\Windows\system32\perfh015.dat
2020-10-29 20:57 - 2011-02-04 18:38 - 000158312 _____ C:\Windows\system32\perfc015.dat
2020-10-29 20:57 - 2009-07-14 06:13 - 001686728 _____ C:\Windows\system32\PerfStringBackup.INI
2020-10-29 20:57 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2020-10-28 16:02 - 2019-08-08 19:42 - 000002347 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2020-10-18 13:28 - 2019-03-19 20:33 - 000000000 ____D C:\Users\pucureczek\Desktop\Grafika zdjęcia
2020-10-17 01:57 - 2019-11-02 01:44 - 000003880 _____ C:\Windows\system32\Tasks\BlueStacksHelper
2020-10-13 15:21 - 2018-11-13 19:24 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-10-13 15:21 - 2018-11-13 19:24 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-10-13 15:21 - 2018-11-13 19:24 - 000004590 _____ C:\Windows\system32\Tasks\Adobe Flash Player PPAPI Notifier
2020-10-13 15:21 - 2018-11-13 19:24 - 000004424 _____ C:\Windows\system32\Tasks\Adobe Flash Player Updater
2020-10-13 15:21 - 2018-11-13 19:24 - 000000000 ____D C:\Windows\system32\Macromed
2020-10-12 23:34 - 2018-04-15 22:19 - 000000000 ____D C:\Users\pucureczek\Desktop\Filmy
2020-10-04 22:58 - 2020-09-13 19:44 - 000000000 ____D C:\Users\pucureczek\Desktop\Buk nowe

==================== Pliki w katalogu głównym wybranych folderów ========

2019-11-01 23:44 - 2019-11-01 23:48 - 000002492 _____ () C:\Users\pucureczek\AppData\Roaming\droid4xinstaller.log
2019-06-02 23:08 - 2019-06-02 23:09 - 000003584 _____ () C:\Users\pucureczek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2018-09-28 15:32 - 2018-09-28 15:32 - 000000000 _____ () C:\Users\pucureczek\AppData\Local\oobelibMkey.log

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)


LastRegBack: 2020-10-24 04:22
==================== Koniec  FRST.txt ========================