Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 13-09-2021
Uruchomiony przez Mirek (administrator)  PC5 (MSI MS-7924) (13-09-2021 13:02:46)
Uruchomiony z C:\!!
Załadowane profile: Mirek
Platform: Windows 10 Home Wersja 21H1 19043.1165 (X64) Język: Polski (Polska)
Domyślna przeglądarka: Chrome
Tryb startu: Normal

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

() [Brak podpisu cyfrowego] C:\Program Files (x86)\TC UP\tcmatch.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe <2>
(Adobe Systems Incorporated -> ) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe <2>
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0360470.inf_amd64_b06c374aee20d185\B360357\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\c0360470.inf_amd64_b06c374aee20d185\B360357\atiesrxx.exe
(Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Corel Corporation -> Corel Corporation) C:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelDRW.exe
(Corel Corporation -> Corel Corporation) C:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\FontService.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Ghisler Software GmbH -> Ghisler Software GmbH) C:\Program Files (x86)\TC UP\TOTALCMD.EXE
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <15>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.102\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.102\GoogleCrashHandler64.exe
(InsERT S.A. -> InsERT S.A.) C:\Program Files (x86)\InsERT\InsERT GT\Subiekt.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) [Brak podpisu cyfrowego] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL12.INSERTGT\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
(Nitro Software, Inc. -> ) C:\Program Files\Nitro\Pro 10\Nitro_UpdateService.exe
(Nitro Software, Inc. -> Nitro PDF Software) C:\Program Files\Nitro\Pro 10\NitroPDFDriverService10x64.exe
(Node.js Foundation -> Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(QNAP Systems, Inc. -> QNAP) C:\Program Files\QNAP\QVR Pro Client\QVRProAgent.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(RealVNC Ltd -> RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncagent.exe
(RealVNC Ltd -> RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncserver.exe
(RealVNC Ltd -> RealVNC Ltd) C:\Program Files\RealVNC\VNC Server\vncserverui.exe
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON\MyEpson Portal\mep.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIG5P.EXE
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIGRE.EXE
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIGSE.EXE
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATILWE.EXE
(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIPRE.EXE
(TC UP Team) [Brak podpisu cyfrowego] C:\Program Files (x86)\TC UP\TCUP.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmdS.exe [165928 2021-08-14] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235944 2017-08-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [8091424 2021-08-31] (Dropbox, Inc -> Dropbox, Inc.)
HKU\S-1-5-21-762153345-3964080848-1375169423-1001\...\Run: [Epson Stylus Pro 9890] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIGRE.EXE [224768 2010-01-12] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-762153345-3964080848-1375169423-1001\...\Run: [Epson Stylus Pro 7890] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIGSE.EXE [224768 2010-01-12] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-762153345-3964080848-1375169423-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIPRE.EXE [417776 2014-11-14] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-762153345-3964080848-1375169423-1001\...\Run: [EPLTarget\P0000000000000003] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATILWE.EXE [307296 2015-09-28] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-762153345-3964080848-1375169423-1001\...\Run: [5AD48504DF6F125703DE5CDEE50E635D0652F6B3._service_run] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=service /prefetch:8
HKU\S-1-5-21-762153345-3964080848-1375169423-1001\...\Run: [EPSON L800 Series] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIG5P.EXE [232448 2010-12-07] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-762153345-3964080848-1375169423-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Mirek\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
HKU\S-1-5-21-762153345-3964080848-1375169423-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Mirek\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
HKU\S-1-5-21-762153345-3964080848-1375169423-1001\...\RunOnce: [Uninstall 21.150.0725.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mirek\AppData\Local\Microsoft\OneDrive\21.150.0725.0001"
HKU\S-1-5-21-762153345-3964080848-1375169423-1001\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-762153345-3964080848-1375169423-1001\...\MountPoints2: {020edf88-2361-11eb-890e-d8cb8a9cf338} - "D:\HiSuiteDownLoader.exe" 
HKLM\...\Windows x64\Print Processors\Canon iX6800 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDC0.DLL [30208 2013-08-26] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon MG5600 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCA.DLL [30208 2014-03-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\KOAYTAAP: C:\Windows\System32\spool\prtprocs\x64\KOAYTAAP.DLL [50184 2016-02-10] (Microsoft Windows Hardware Compatibility Publisher -> KONICA MINOLTA, INC.)
HKLM\...\Windows x64\Print Processors\KOAYTJAP: C:\Windows\System32\spool\prtprocs\x64\KOAYTJAP.dll [92680 2016-02-11] (Microsoft Windows Hardware Compatibility Publisher -> Monotype Imaging Inc.)
HKLM\...\Windows x64\Print Processors\KOBS4A_P: C:\Windows\System32\spool\prtprocs\x64\KOBS4A_P.DLL [50680 2017-02-23] (Microsoft Windows Hardware Compatibility Publisher -> KONICA MINOLTA, INC.)
HKLM\...\Windows x64\Print Processors\KOBS4F_P: C:\Windows\System32\spool\prtprocs\x64\KOBS4F_P.DLL [499704 2017-02-23] (Microsoft Windows Hardware Compatibility Publisher -> KONICA MINOLTA, INC.)
HKLM\...\Windows x64\Print Processors\KOBZEA_P: C:\Windows\System32\spool\prtprocs\x64\KOBZEA_P.DLL [41472 2010-01-12] (Microsoft Windows Hardware Compatibility Publisher -> KONICA MINOLTA BUSINESS TECHNOLOGIES, INC.)
HKLM\...\Windows x64\Print Processors\R36V6SP: C:\Windows\System32\spool\prtprocs\x64\R36V6SP.dll [37376 2017-11-22] (RISO KAGAKU CORPORATION -> RISO KAGAKU CORPORATION)
HKLM\...\Windows x64\Print Processors\ricv09pp: C:\Windows\System32\spool\prtprocs\x64\ricv09pp.dll [2634240 2016-01-05] (Microsoft Windows Hardware Compatibility Publisher -> RICOH COMPANY, LTD)
HKLM\...\Print\Monitors\36C-6SeriesPCL Language Monitor: C:\WINDOWS\system32\KOAYTJAL.DLL [25608 2016-02-11] (Microsoft Windows Hardware Compatibility Publisher -> KONICA MINOLTA, INC.)
HKLM\...\Print\Monitors\36C-6SeriesPS Language Monitor: C:\WINDOWS\system32\KOAYTAAL.DLL [25608 2016-02-10] (Microsoft Windows Hardware Compatibility Publisher -> KONICA MINOLTA, INC.)
HKLM\...\Print\Monitors\bizhub 501/421/361PCL Language Monitor: C:\WINDOWS\system32\KOBZEJ_L.dll [15360 2009-10-01] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\bizhub 501/421/361PS(V) Language Monitor: C:\WINDOWS\system32\KOBZEA_L.dll [15360 2009-10-01] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\Canon BJ Language Monitor iX6800 series: C:\WINDOWS\system32\CNMLMC0.DLL [391168 2013-08-26] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5600 series: C:\WINDOWS\system32\CNMLMCA.DLL [406016 2014-03-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [360448 2013-09-11] (CANON INC.) [Brak podpisu cyfrowego]
HKLM\...\Print\Monitors\EPSON L1800 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBLWE.DLL [179712 2013-10-22] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EPSON L800 Series 64MonitorBP: C:\WINDOWS\system32\E_ILMG5P.DLL [118784 2008-11-12] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EPSON L805 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBPRE.DLL [180224 2014-03-05] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EPSON SC-P8000 Series 64MonitorBE: C:\WINDOWS\system32\E_32LM1LE.DLL [180224 2014-03-05] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EPSON SC-T7200 Series 64MonitorBE: C:\WINDOWS\system32\E_32LM1AE.DLL [180224 2014-03-04] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\Epson Stylus Pro 7890 64MonitorBE: C:\WINDOWS\system32\E_ILMGSE.DLL [108032 2008-08-08] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\Epson Stylus Pro 9890 64MonitorBE: C:\WINDOWS\system32\E_ILMGRE.DLL [108032 2008-08-08] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [558592 2012-11-12] (SEIKO EPSON CORPORATION) [Brak podpisu cyfrowego]
HKLM\...\Print\Monitors\MONVNC: C:\WINDOWS\system32\VNCpm.dll [37704 2016-03-23] (RealVNC Ltd -> RealVNC Ltd)
HKLM\...\Print\Monitors\Nitro PDF Port Monitor: C:\WINDOWS\system32\nitrolocalmon10.dll [31896 2016-03-03] (Nitro Software, Inc. -> Nitro PDF Software)
HKLM\...\Print\Monitors\R36V6SL: C:\WINDOWS\system32\R36V6SL.dll [23040 2017-03-02] (RISO KAGAKU CORPORATION -> RISO KAGAKU CORPORATION)
HKLM\...\Print\Monitors\rica66lm: C:\WINDOWS\system32\rica66lm.dll [28160 2013-12-26] (Microsoft Windows Hardware Compatibility Publisher -> RICOH CO.,Ltd.)
HKLM\...\Print\Monitors\ricv09lm: C:\WINDOWS\system32\ricv09lm.dll [28160 2013-12-26] (Microsoft Windows Hardware Compatibility Publisher -> RICOH CO.,Ltd.)
HKLM\...\Print\Monitors\Roland GS-24 Language Monitor: C:\WINDOWS\system32\RD1029LM.DLL [33280 2016-08-03] (Roland DG Corporation -> Roland DG Corporation)
HKLM\...\Print\Monitors\Versa File Port: C:\WINDOWS\system32\versamon.dll [31232 2007-03-12] (Roland DG Corporation) [Brak podpisu cyfrowego]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\93.0.4577.63\Installer\chrmstp.exe [2021-09-03] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Printer Watcher.lnk [2018-09-24]
ShortcutTarget: Printer Watcher.lnk -> C:\Program Files (x86)\EPSON\EPSON LFP Remote Panel 2\Printer Watcher\Printer Watcher.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORP.)

==================== Zaplanowane zadania (filtrowane) ============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {010A106B-CD39-40E6-9A8D-C1BF880C95C6} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [69304 2020-08-21] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {0E36F144-9D84-4085-8223-7C48E132A10D} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA
Task: {1558CDEF-8DE1-4CD2-922E-8DE6DE9641FD} - System32\Tasks\Harmonogram archiwizacji podmiotu 'IVA2' => C:\Program Files (x86)\InsERT\InsERT GT\Backup.exe [723288 2021-07-22] (InsERT S.A. -> InsERT S.A.)
Task: {17DCD0CE-58C6-48B0-A854-9314ADC44648} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [673720 2021-09-06] (Mozilla Corporation -> Mozilla Foundation)
Task: {1837236F-A298-460C-91AD-53617425EF5C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-05-08] (Google Inc -> Google Inc.)
Task: {20524BA2-7843-4B46-B4CE-69636A2C030E} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [129808 2021-08-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {311D89F9-7DAF-4DA6-915E-E4339382993E} - System32\Tasks\AdobeAAMUpdater-1.0-PC5-Mirek => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {350229A7-2C15-498C-AAB6-9A17DAC4FB92} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1562376 2021-08-16] (Adobe Inc. -> Adobe Inc.)
Task: {499AEF5C-EDAE-44EC-8CD8-08F8CB26CBDA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-05-08] (Google Inc -> Google Inc.)
Task: {5F722BFC-9B06-4B2C-B580-BBA1F1C88745} - System32\Tasks\Microsoft\Windows\rempl\shell => C:\Program Files\rempl\sedlauncher.exe
Task: {62350266-CD83-4BCD-B7EB-A1A3FE4A2F5E} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [129808 2021-08-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {A3F3560B-9694-4EF3-A208-820315E54EFC} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61624 2020-08-21] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {AE8A907D-D2D0-43C8-9619-00E9C8A20D11} - System32\Tasks\CorelUpdateHelperTaskCore => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [1627072 2017-09-26] (Corel Corporation -> Corel Corporation)
Task: {FFA33550-B5B8-400A-81C7-C82063318D20} - System32\Tasks\EPSON L805 Series Update {C003B56E-FBE4-4E80-BE52-649350B8648F} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSPRE.EXE [690536 2013-11-22] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\EPSON L805 Series Update {C003B56E-FBE4-4E80-BE52-649350B8648F}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSPRE.EXE:/EXE:{C003B56E-FBE4-4E80-BE52-649350B8648F} /F:UpdateIVA2\PC5$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\Harmonogram archiwizacji podmiotu 'IVA2'.job => C:\Program Files (x86)\InsERT\InsERT GT\Backup.exe

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{4d757405-c493-440b-921c-33d78e5ff284}: [DhcpNameServer] 8.8.8.8 8.8.4.4

Edge: 
=======
Edge Extension: (Brak nazwy) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nie znaleziono]
Edge Extension: (Brak nazwy) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nie znaleziono]
Edge Extension: (Brak nazwy) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nie znaleziono]
Edge Extension: (Brak nazwy) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nie znaleziono]
Edge Profile: C:\Users\Mirek\AppData\Local\Microsoft\Edge\User Data\Default [2021-09-13]

FireFox:
========
FF DefaultProfile: 9v3yq3zv.default
FF ProfilePath: C:\Users\Mirek\AppData\Roaming\Mozilla\Firefox\Profiles\9v3yq3zv.default [2021-09-10]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-12] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 10\npnitromozilla.dll [2016-03-03] (Nitro Software, Inc. -> Nitro PDF)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-07-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-12] (Adobe Systems Incorporated -> Adobe Systems)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2021-09-13]

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default [2021-09-13]
CHR Notifications: Default -> hxxps://www.insert.com.pl; hxxps://www.qnap.com; hxxps://www.rmf.fm
CHR Session Restore: Default -> [funkcja włączona]
CHR Extension: (Prezentacje) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Dokumenty) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Dysk Google) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-22]
CHR Extension: (YouTube) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-08]
CHR Extension: (QNAP Qfinder) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\edgabokphekomdademgbajjkgmiplbgl [2020-04-08]
CHR Extension: (Adobe Acrobat) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-09-08]
CHR Extension: (Arkusze) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Dokumenty Google offline) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-06-25]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Profile: C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2 [2019-12-16]
CHR HomePage: Profile 2 -> hxxp://www.google.pl/
CHR StartupUrls: Profile 2 -> "hxxps://www.google.pl/"
CHR NewTab: Profile 2 ->  Not-active:"chrome-extension://bhloflhklmhfpedakmangadcdofhnnoh/index.html"
CHR Session Restore: Profile 2 -> [funkcja włączona]
CHR Extension: (Tłumacz Google) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2017-11-10]
CHR Extension: (Prezentacje) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-10]
CHR Extension: (Google Drive) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aghbiahbpaijignceidepookljebhfak [2019-12-16]
CHR Extension: (Dokumenty) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-10]
CHR Extension: (Dysk Google) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-09-27]
CHR Extension: (WME Validator) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\baojhpeknpmkhplkcnpdcficcaaniaih [2019-12-16]
CHR Extension: (WhatsChrome) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bgkodfmeijboinjdegggmkbkjfiagaan [2017-09-27]
CHR Extension: (Earth View from Google Earth) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bhloflhklmhfpedakmangadcdofhnnoh [2019-09-13]
CHR Extension: (YouTube) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-27]
CHR Extension: (Traktflix - Netflix and Trakt.tv together) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bmoemkaigjgcgjjnpmdgkifndiidkeji [2017-11-10]
CHR Extension: (Send to Kindle for Google Chrome) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cgdjpilhipecahhcilnafpblkieebhea [2017-09-27]
CHR Extension: (uBlock Origin) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2019-12-16]
CHR Extension: (Search by Image (by Google)) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\dajedkncpodkggklbegccjpmnglmnflm [2017-09-27]
CHR Extension: (Tampermonkey) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2019-09-13]
CHR Extension: (Dropbox dla Gmaila) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\dpdmhfocilnekecfjgimjdeckachfbec [2019-12-16]
CHR Extension: (Session Buddy) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2018-09-24]
CHR Extension: (QNAP Qfinder) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\edgabokphekomdademgbajjkgmiplbgl [2017-09-27]
CHR Extension: (Adobe Acrobat) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-09-12]
CHR Extension: (Tab Wrangler) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\egnjhciaieeiiohknchakcodbpgjnchh [2019-09-12]
CHR Extension: (Web Activities) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\eiipeonhflhoiacfbniealbdjoeoglid [2019-09-12]
CHR Extension: (Pinky) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\eijmklfnehnnkbfcoabieogaomookbna [2019-12-16]
CHR Extension: (Kalendarz Google) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2017-09-27]
CHR Extension: (Wikiwand: Wikipedia Modernized) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\emffkefkbkpkgpdeeooapgaicgmcbolj [2019-12-16]
CHR Extension: (Cleanflight - Configurator) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\enacoimjcgeinfnnnpajinjgmkahmfgb [2018-10-22]
CHR Extension: (MyJDownloader Browser Extension) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fbcohnmimjicjdomonkcbcpbpnhggkip [2019-09-12]
CHR Extension: (Arkusze) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-10]
CHR Extension: (Toolbox for Google Play Store™) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fepaalfjfchbdianlgginbmpeeacahoo [2019-09-12]
CHR Extension: (INAV - Configurator) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fmaidjmgkdkpafmbnmigkpdnpdhopgel [2019-12-16]
CHR Extension: (Pulpit zdalny Chrome) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2019-09-12]
CHR Extension: (Dokumenty Google offline) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-24]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-12-16]
CHR Extension: (Google Kalendarz) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gmbgaklkmjakoegficnlkhebmhkjfich [2019-09-12]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2019-12-16]
CHR Extension: (AliPrice Asystent - Śledzenie cen AliExpress) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hihlaoogegdjakmdbpbilijdghoggkim [2018-10-29]
CHR Extension: (feedly) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hipbfijinpcgfogaopmgehiegacbhmob [2017-09-27]
CHR Extension: (SuperSorter) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hjebfgojnlefhdgmomncgjglmdckngij [2017-09-27]
CHR Extension: (Google Keep – notatki i listy) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2019-12-16]
CHR Extension: (Ubiquiti Device Discovery Tool) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hmpigflbjeapnknladcfphgkemopofig [2019-09-12]
CHR Extension: (goo.gl URL Shortener (Unofficial)) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\iblijlcdoidgdpfknkckljiocdbnlagk [2017-09-27]
CHR Extension: (WME Toolbox) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ihebciailciabdiknfomleeccodkdejn [2019-12-16]
CHR Extension: (Mate Translate - translator, słownik) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ihmgiclibbndffejedjimfjmfoabpcke [2019-12-16]
CHR Extension: (Dropbox) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2018-09-24]
CHR Extension: (MWOSD configurator) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\jdfbjgomfcfpgkdjfnmekbkhkbgfminf [2018-10-29]
CHR Extension: (CrxMouse Chrome™ Gestures) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\jlgkpaicikihijadgifklkbpdajbkhjo [2019-09-12]
CHR Extension: (Gmail Sender Icons) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\jniljaamodclkmphgkgkooplflhkadpg [2019-09-12]
CHR Extension: (Betaflight - Configurator) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\kdaghagfopacdngbohiknlhcocjccjao [2018-09-24]
CHR Extension: (Google Play) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2017-09-27]
CHR Extension: (Evernote Web) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lbfehkoinhhcknnbdgnnmjhiladcgbol [2019-09-12]
CHR Extension: (Refresh Monkey) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ljngnafhejmefmijjoedbclkadhacebd [2018-09-24]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2019-12-16]
CHR Extension: (Netflix Categories) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lnbopcabgddpanjmeabponnjngbmemml [2018-09-24]
CHR Extension: (Mapy Google) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2017-09-27]
CHR Extension: (Extensions Manager (aka Switcher)) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lpleipinonnoibneeejgjnoeekmbopbc [2017-09-27]
CHR Extension: (BLHeli - Configurator) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\mejfjggmbnocnfibbibmoogocnjbcjnk [2018-10-29]
CHR Extension: (Sprawdzanie poczty Google) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2017-09-27]
CHR Extension: (Pocket) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2019-09-12]
CHR Extension: (Google Hangouts) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2019-09-12]
CHR Extension: (GearBest Coupons) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nhhofjfofhkgeofpjkemonejjflnjnid [2018-10-22]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-12-16]
CHR Extension: (Better History) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\obciceimmggglbmelaidpjlmodcebijb [2017-09-27]
CHR Extension: (Multi-highlight) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pfgfgjlejbbpfmcfjhdmikihihddeeji [2018-10-22]
CHR Extension: (Gmail) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-09-12]
CHR Extension: (Chrome Media Router) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-16]
CHR Extension: (Rozszerzenie Sprawdzanie hasła) - C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pncabnpcffmalkkjpajodfhijclecjno [2019-09-12]
CHR Profile: C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\System Profile [2017-09-27]
CHR HKU\S-1-5-21-762153345-3964080848-1375169423-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-762153345-3964080848-1375169423-1006\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-08-16] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-02-27] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [129808 2021-08-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [129808 2021-08-12] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44328 2021-08-31] (Dropbox, Inc -> Dropbox, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-08-14] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-08-14] (ESET, spol. s r.o. -> ESET)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Brak podpisu cyfrowego]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Brak podpisu cyfrowego]
R2 MSSQL$INSERTGT; C:\Program Files\Microsoft SQL Server\MSSQL12.INSERTGT\MSSQL\Binn\sqlservr.exe [372312 2019-05-27] (Microsoft Corporation -> Microsoft Corporation)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 NitroDriverReadSpool10; C:\Program Files\Nitro\Pro 10\NitroPDFDriverService10x64.exe [327320 2016-03-03] (Nitro Software, Inc. -> Nitro PDF Software)
R2 NitroUpdateService; C:\Program Files\Nitro\Pro 10\Nitro_UpdateService.exe [417944 2016-03-03] (Nitro Software, Inc. -> )
R2 PSI_SVC_2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
R2 QvrProAgent; C:\Program Files\QNAP\QVR Pro Client\QVRProAgent.exe [216376 2019-05-27] (QNAP Systems, Inc. -> QNAP)
S4 SQLAgent$INSERTGT; C:\Program Files\Microsoft SQL Server\MSSQL12.INSERTGT\MSSQL\Binn\SQLAGENT.EXE [613168 2019-05-27] (Microsoft Corporation -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13271336 2021-09-02] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 vncserver; C:\Program Files\RealVNC\VNC Server\vncserver.exe [5663824 2016-06-06] (RealVNC Ltd -> RealVNC Ltd)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\NisSrv.exe [2467088 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MsMpEng.exe [128376 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [49448 2016-08-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [169424 2021-08-04] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [123472 2021-08-04] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15824 2021-03-08] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [194776 2021-08-04] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [43904 2021-08-04] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [70232 2021-08-04] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [107456 2021-08-04] (ESET, spol. s r.o. -> ESET)
S2 Hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [314368 2006-12-04] (Microsoft Windows Hardware Compatibility Publisher -> Aladdin Knowledge Systems Ltd.)
S2 LTUSB; C:\WINDOWS\System32\drivers\EZUSB.sys [22912 2010-11-04] (Chengdu Leetro Automation Co,.Ltd. -> Chengdu Leetro Automation Co,.Ltd.)
S2 LTUSB; C:\Windows\SysWOW64\drivers\EZUSB.sys [27507 2002-09-16] (cypress semiconductor) [Brak podpisu cyfrowego]
R1 RsFx0321; C:\WINDOWS\System32\DRIVERS\RsFx0321.sys [258720 2019-05-01] (Microsoft Corporation -> Microsoft Corporation)
R3 slusb; C:\WINDOWS\System32\Drivers\slusb.sys [15104 2009-02-03] (Microsoft Windows Hardware Compatibility Publisher -> Beijing Senselock Corp.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S2 sxuptp; C:\WINDOWS\System32\drivers\sxuptp.sys [297120 2010-07-20] (Graphtec Corporation -> silex technology, Inc.)
R1 VD_FileDisk; C:\Windows\System32\Drivers\VD_FileDisk.sys [30312 2011-01-26] (Ghisler Software GmbH -> CaptainFlint Software)
S3 VPPP; C:\WINDOWS\System32\drivers\VPPP.sys [41640 2017-11-17] (Draytek Corp. -> DrayTek, Corp.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48536 2020-11-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [429288 2020-11-06] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [71912 2020-11-06] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2021-09-13 13:00 - 2021-09-13 13:02 - 000000000 ____D C:\FRST
2021-09-13 12:41 - 2021-09-13 12:41 - 000259673 _____ C:\Users\Mirek\Desktop\rollup.pdf
2021-09-13 12:37 - 2021-08-24 14:15 - 000014317 _____ C:\Users\Mirek\Desktop\naklejka śmietnik.pdf
2021-09-13 10:33 - 2021-09-13 10:33 - 000517124 _____ C:\Users\Mirek\Desktop\lecifriko.pdf
2021-09-13 10:33 - 2021-09-13 10:33 - 000281651 _____ C:\Users\Mirek\Desktop\jestemzwyciezca.pdf
2021-09-13 10:18 - 2021-09-13 10:18 - 000479311 _____ C:\Users\Mirek\Desktop\Beznazwy-1.pdf
2021-09-13 09:46 - 2021-09-13 09:46 - 002515260 _____ C:\Users\Mirek\Downloads\RYBY.tif
2021-09-11 14:20 - 2021-09-11 14:20 - 017662209 _____ C:\Users\Mirek\Downloads\wetransfer_1-tif_2021-09-11_1203.zip
2021-09-10 11:01 - 2021-09-10 11:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-09-08 14:29 - 2021-09-08 14:29 - 000000279 _____ C:\Users\Mirek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kosz.lnk
2021-09-08 14:29 - 2021-09-08 14:29 - 000000279 _____ C:\Users\Mirek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kosz (2).lnk
2021-09-07 15:22 - 2021-09-06 17:06 - 122433968 ____N C:\Users\Mirek\Downloads\KUBEK_MAKSYMILIAN.tif
2021-09-07 15:22 - 2021-09-06 17:06 - 122272476 ____N C:\Users\Mirek\Downloads\KUBEK_ADAM.tif
2021-09-07 15:22 - 2021-09-06 17:06 - 122240228 ____N C:\Users\Mirek\Downloads\KUBEK_VITO.tif
2021-09-07 15:22 - 2021-09-06 17:06 - 037100016 ____N C:\Users\Mirek\Downloads\imiona.tif
2021-09-07 14:44 - 2021-09-07 14:44 - 404047233 _____ C:\Users\Mirek\Downloads\wetransfer_imiona-tif_2021-09-06_1505.zip
2021-09-06 08:30 - 2021-09-10 11:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2021-09-02 07:59 - 2021-09-02 07:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2021-09-01 15:08 - 2021-09-01 16:38 - 000000000 ____D C:\Users\Mirek\Desktop\Zaproszenia
2021-09-01 12:29 - 2021-09-01 12:29 - 000042333 _____ C:\Users\Mirek\Desktop\wyliczenie CAD2 musing.xlsx
2021-08-31 01:57 - 2021-08-31 01:57 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2021-08-31 01:57 - 2021-08-31 01:57 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2021-08-31 01:57 - 2021-08-31 01:57 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2021-08-31 01:57 - 2021-08-31 01:57 - 000044328 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2021-08-24 12:03 - 2021-08-24 13:08 - 000000000 ____D C:\Users\Mirek\Desktop\Epson 7200
2021-08-23 11:56 - 2021-08-23 14:30 - 000000000 ____D C:\Users\Mirek\Desktop\Pan Mirek

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2021-09-13 13:02 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-09-13 13:01 - 2017-03-01 13:36 - 000000000 ____D C:\!!
2021-09-13 12:59 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-09-13 12:48 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-09-13 12:41 - 2016-05-08 14:13 - 000000000 ____D C:\Program Files (x86)\Google
2021-09-13 12:14 - 2020-11-09 11:37 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-09-13 07:42 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-09-13 07:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-09-13 07:41 - 2020-11-09 11:45 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2021-09-13 07:41 - 2020-11-09 11:45 - 000004200 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{68811BB1-0463-485E-92CD-E461E1E3D1DA}
2021-09-13 07:41 - 2020-11-09 11:45 - 000003354 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-762153345-3964080848-1375169423-1001
2021-09-13 07:41 - 2020-11-09 11:39 - 000002456 _____ C:\Users\Mirek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-09-13 07:40 - 2016-06-09 12:39 - 000000000 ____D C:\Users\Mirek\AppData\Local\Adobe
2021-09-13 07:39 - 2020-06-03 13:34 - 000002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-09-13 07:37 - 2017-08-30 14:43 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2021-09-11 14:27 - 2019-07-24 10:40 - 000000812 _____ C:\Users\Mirek\Desktop\CutStudio.lnk
2021-09-11 14:27 - 2019-07-16 15:43 - 000001176 _____ C:\Users\Mirek\Desktop\Scanning Master Pro Color.lnk
2021-09-11 14:27 - 2017-09-13 09:43 - 000001109 _____ C:\Users\Mirek\Desktop\VNC Viewer.lnk
2021-09-11 14:27 - 2017-08-24 11:15 - 000001174 _____ C:\Users\Mirek\Desktop\Scanning Master 21+.lnk
2021-09-10 11:51 - 2018-05-15 19:09 - 000000000 ____D C:\Users\Mirek\AppData\Local\D3DSCache
2021-09-10 11:02 - 2019-01-30 17:08 - 000000000 ____D C:\ProgramData\Mozilla
2021-09-10 11:02 - 2017-03-02 16:06 - 000000000 ____D C:\Users\Mirek\AppData\LocalLow\Mozilla
2021-09-10 11:01 - 2016-05-30 12:36 - 000001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-09-10 11:01 - 2016-05-30 12:36 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-09-09 16:00 - 2017-08-30 10:12 - 000000000 ____D C:\LaserCut53
2021-09-09 10:20 - 2020-11-09 11:48 - 001913866 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-09-09 10:20 - 2019-12-07 17:08 - 000784340 _____ C:\WINDOWS\system32\perfh015.dat
2021-09-09 10:20 - 2019-12-07 17:08 - 000152236 _____ C:\WINDOWS\system32\perfc015.dat
2021-09-09 10:13 - 2020-11-09 11:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-09-09 10:13 - 2020-11-09 11:37 - 000008192 ___SH C:\DumpStack.log.tmp
2021-09-09 10:12 - 2019-12-07 11:03 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2021-09-09 10:12 - 2017-05-25 16:46 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2021-09-08 16:00 - 2019-12-07 17:10 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2021-09-03 11:21 - 2020-11-09 11:39 - 000000000 ____D C:\Users\Marcin
2021-09-03 07:55 - 2020-08-21 08:03 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-09-03 07:52 - 2016-05-08 14:13 - 000002307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-09-03 07:52 - 2016-05-08 14:13 - 000002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-09-02 07:59 - 2017-02-23 15:26 - 000000000 ____D C:\Program Files (x86)\Dropbox
2021-08-31 17:20 - 2017-02-23 15:26 - 000001160 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2021-08-31 17:20 - 2017-02-23 15:26 - 000001156 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2021-08-31 17:18 - 2016-06-09 12:26 - 000000000 ____D C:\Users\Mirek\AppData\Roaming\Nitro
2021-08-27 12:08 - 2018-05-15 21:09 - 000000000 ____D C:\Users\Mirek\AppData\Local\PlaceholderTileLogoFolder
2021-08-23 12:51 - 2016-06-09 13:24 - 000000034 _____ C:\Users\Mirek\AppData\Roaming\AdobeWLCMCache.dat
2021-08-20 13:02 - 2017-09-07 09:09 - 000000000 ____D C:\Users\Mirek\AppData\Local\NitroSpoolDir
2021-08-17 17:43 - 2017-11-10 08:54 - 000000000 ___RD C:\Users\Mirek\3D Objects
2021-08-17 01:22 - 2020-08-21 08:03 - 000740168 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll
2021-08-17 01:22 - 2020-08-21 08:03 - 000486728 _____ (Microsoft Corporation) C:\WINDOWS\system32\QualityUpdateAssistant.dll
2021-08-16 07:50 - 2020-11-09 11:50 - 000003416 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d6b67cc9063892
2021-08-16 07:50 - 2020-11-09 11:45 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

==================== Pliki w katalogu głównym wybranych folderów ========

2016-06-09 13:24 - 2021-08-23 12:51 - 000000034 _____ () C:\Users\Mirek\AppData\Roaming\AdobeWLCMCache.dat
2017-12-09 15:23 - 2017-12-09 15:44 - 000000600 _____ () C:\Users\Mirek\AppData\Local\PUTTY.RND

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

==================== Koniec  FRST.txt ========================