Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 30-08-2022
Uruchomiony przez Użytkownik (administrator)  WIESMAC (Hewlett-Packard HP Compaq nx7400 (EY508ES#AKD)) (29-09-2022 21:43:03)
Uruchomiony z C:\Users\Użytkownik\Desktop\picasso
Załadowane profile: Użytkownik
Platform: Microsoft Windows 10 Home Wersja 21H2 19044.2006 (X64) Język: Polski (Polska)
Domyślna przeglądarka: FF
Tryb startu: Normal

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe ->) (Hewlett-Packard Company ->  Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
(C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe ->) (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(explorer.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(explorer.exe ->) (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Hewlett-Packard Company ->  Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <14>
(Microsoft Windows Hardware Compatibility Publisher -> Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(services.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReaderUpdateService.exe
(services.exe ->) (Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
(services.exe ->) (Hewlett-Packard Company -> Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\NisSrv.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(svchost.exe ->) (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(svchost.exe ->) (Hewlett Packard -> Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22072.207.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [366960 2022-09-01] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [SoundMAXPnP] => C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1183744 2007-02-21] (Microsoft Windows Hardware Compatibility Publisher -> Analog Devices, Inc.)
HKLM-x32\...\Run: [QlbCtrl.exe] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [287800 2009-11-11] (Hewlett-Packard Company ->  Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706344 2021-09-27] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-510263495-1881460824-1485666426-1001\...\Run: [MicrosoftEdgeAutoLaunch_6198B3F3327E7EC93B52FD72B7759264] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3795376 2022-09-25] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\hpzppw71: C:\Windows\System32\spool\prtprocs\x64\hpzppw71.dll [239704 2017-12-18] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\LIDIL hpzllw71: C:\Windows\system32\hpzllw71.dll [62552 2017-12-18] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\105.0.5195.128\Installer\chrmstp.exe [2022-09-28] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2021-02-23]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)

==================== Zaplanowane zadania (filtrowane) ============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {1A88C87E-7A84-4C0F-9201-CE4E52D5499F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7A505F60-A4DC-41EE-BEEF-6BEC33F2C571} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8DD68C1B-EEBD-43D1-8BA8-D5F5D4449769} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2021-02-16] (Google LLC -> Google LLC)
Task: {C6E6075C-B55B-446D-BAD2-1ACE2765DDDB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2021-02-16] (Google LLC -> Google LLC)
Task: {D02EB6BF-D689-4F33-B473-DBB81FFF1FE0} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {D6EF8A82-5E30-4A11-83EE-22D8B90C6E1B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DA954146-4A70-4A88-B7FB-9274B5400A67} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MpCmdRun.exe [1335960 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DC66ADD9-B93D-4E2F-ACCA-CC7B0D13C915} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [617096 2022-02-25] (Apple Inc. -> Apple Inc.)
Task: {F1013BFA-F6A2-4BE6-8EC3-ADF2FF12A970} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)


==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.101.1 8.8.8.8 4.4.4.4
Tcpip\..\Interfaces\{376b8079-f871-4895-9c1c-ee531c214fe1}: [DhcpNameServer] 192.168.101.1 8.8.8.8 4.4.4.4
Tcpip\..\Interfaces\{7b2f8124-7fe2-48b9-904a-bd5dd679d693}: [DhcpNameServer] 192.168.101.1 8.8.8.8 4.4.4.4
Tcpip\..\Interfaces\{8f4f6560-0459-43b1-853c-16c239b4547c}: [DhcpNameServer] 192.168.100.252

Edge: 
=======
Edge Extension: (Brak nazwy) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nie znaleziono]
Edge Extension: (Brak nazwy) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nie znaleziono]
Edge Extension: (Brak nazwy) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nie znaleziono]
Edge Extension: (Brak nazwy) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nie znaleziono]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Użytkownik\AppData\Local\Microsoft\Edge\User Data\Default [2022-09-29]
Edge DownloadDir: Default -> C:\Users\Użytkownik\Pictures\photos.google.com
Edge Notifications: Default -> hxxps://autokult.pl; hxxps://business.facebook.com; hxxps://iuont.click; hxxps://message.alibaba.com; hxxps://onetalk.alibaba.com; hxxps://pl.aliexpress.com; hxxps://wam.warta.pl; hxxps://wiadomosci.wp.pl; hxxps://wideo.wp.pl; hxxps://wp.aliexpress.com; hxxps://www.alibaba.com; hxxps://www.aliexpress.com; hxxps://www.facebook.com; hxxps://www.fakt.pl; hxxps://www.poradnikzdrowie.pl
Edge Extension: (Adblock Plus - darmowy adblocker) - C:\Users\Użytkownik\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2022-08-30]

FireFox:
========
FF DefaultProfile: p5nigv67.default
FF ProfilePath: C:\Users\Użytkownik\AppData\Roaming\Mozilla\Firefox\Profiles\p5nigv67.default [2021-02-18]
FF ProfilePath: C:\Users\Użytkownik\AppData\Roaming\Mozilla\Firefox\Profiles\pmd2mzig.default-release [2022-09-29]
FF Notifications: Mozilla\Firefox\Profiles\pmd2mzig.default-release -> hxxps://www.alibaba.com; hxxps://message.alibaba.com
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.311.2 -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\dtplugin\npDeployJava1.dll [2022-01-10] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.311.2 -> C:\Program Files (x86)\Java\jre1.8.0_311\bin\plugin2\npjp2.dll [2022-01-10] (Oracle America, Inc. -> Oracle Corporation)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Użytkownik\AppData\Local\Google\Chrome\User Data\Default [2022-09-21]
CHR Notifications: Default -> hxxps://meblin.edrone.me; hxxps://www-pinsola-pl-02.salesmanagopush.com; hxxps://www.carrefour.pl; hxxps://www.castorama.pl; hxxps://www.homebook.pl
CHR Extension: (Dokumenty Google offline) - C:\Users\Użytkownik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-09-21]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Użytkownik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-18]

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [80384 2007-02-06] (Microsoft Windows Hardware Compatibility Publisher -> Andrea Electronics Corporation)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [103280 2022-09-01] (Apple Inc. -> Apple Inc.)
R2 FoxitReaderUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReaderUpdateService.exe [2357936 2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\NisSrv.exe [3125112 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe [133560 2022-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 ADIHdAudAddService; C:\Windows\system32\drivers\ADIHdAud.sys [402432 2008-04-24] (Microsoft Windows Hardware Compatibility Publisher -> Analog Devices, Inc.)
S3 AppleIPod; C:\Windows\System32\drivers\AppleIPod.sys [30096 2021-07-22] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R3 bcm44amd64; C:\Windows\System32\drivers\b44amd64.sys [87552 2019-12-07] (Microsoft Windows -> Broadcom Corporation)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 MpKsl15b71c9a; C:\Windows\system32\MpEngineStore\MpKslDrv.sys [134376 2022-01-30] (Microsoft Windows -> Microsoft Corporation)
R3 netwlv64; C:\Windows\System32\drivers\netwlv64.sys [7530496 2019-12-07] (Microsoft Windows -> Intel Corporation)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2020-04-15] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [49576 2022-09-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [453904 2022-09-07] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [94480 2022-09-07] (Microsoft Windows -> Microsoft Corporation)
S3 MpKsl60bc118a; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{0FCFCF63-1EBD-4C4F-A976-FD7C6F245E7F}\MpKslDrv.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2022-09-29 21:29 - 2022-09-29 21:43 - 000000000 ____D C:\FRST
2022-09-29 21:03 - 2022-09-29 21:43 - 000000000 ____D C:\Users\Użytkownik\Desktop\picasso
2022-09-29 20:48 - 2022-09-29 20:48 - 008791352 _____ (Malwarebytes) C:\Users\Użytkownik\Downloads\adwcleaner_8.4.0(1).exe
2022-09-29 20:46 - 2022-09-29 20:46 - 008791352 _____ (Malwarebytes) C:\Users\Użytkownik\Downloads\adwcleaner_8.4.0.exe
2022-09-29 20:45 - 2022-09-29 20:49 - 000000000 ____D C:\AdwCleaner
2022-09-25 08:05 - 2022-09-28 20:44 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-09-22 22:13 - 2022-09-22 22:47 - 000000000 ____D C:\Users\Użytkownik\Desktop\zip ua
2022-09-22 21:57 - 2022-09-22 22:44 - 000000334 _____ C:\Users\Użytkownik\Desktop\braki UA.txt
2022-09-19 19:37 - 2022-09-19 19:37 - 000413696 _____ C:\Windows\system32\AzureCheck.dll
2022-09-19 19:37 - 2022-09-19 19:37 - 000288768 _____ C:\Windows\system32\Windows.Management.InprocObjects.dll
2022-09-19 19:37 - 2022-09-19 19:37 - 000098816 _____ C:\Windows\system32\Drivers\cimfs.sys
2022-09-19 19:37 - 2022-09-19 19:37 - 000060928 _____ C:\Windows\system32\runexehelper.exe
2022-09-19 19:37 - 2022-09-19 19:37 - 000011813 _____ C:\Windows\system32\DrtmAuthTxt.wim
2022-09-19 18:31 - 2022-09-19 18:31 - 000000000 ___HD C:\$WinREAgent
2022-09-19 18:19 - 2022-09-19 18:19 - 000001816 _____ C:\Users\Public\Desktop\iTunes.lnk
2022-09-19 18:19 - 2022-09-19 18:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2022-09-19 18:18 - 2022-09-19 18:19 - 000000000 ____D C:\Program Files\iTunes
2022-09-19 18:13 - 2022-09-19 18:13 - 000000000 ____D C:\Windows\system32\Tasks\Apple
2022-09-19 18:12 - 2022-09-19 18:12 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
2022-09-09 19:21 - 2022-09-22 21:57 - 000000000 ____D C:\Users\Użytkownik\Desktop\audio UA
2022-09-09 19:17 - 2022-09-09 19:19 - 150626622 _____ C:\Users\Użytkownik\Downloads\MelexZamosc(1).zip

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2022-09-29 21:34 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2022-09-29 21:26 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-09-29 21:25 - 2021-02-16 14:12 - 000000000 ____D C:\Program Files (x86)\Google
2022-09-29 21:16 - 2021-02-16 13:59 - 001767984 _____ C:\Windows\system32\PerfStringBackup.INI
2022-09-29 21:16 - 2019-12-07 17:08 - 000785594 _____ C:\Windows\system32\perfh015.dat
2022-09-29 21:16 - 2019-12-07 17:08 - 000152454 _____ C:\Windows\system32\perfc015.dat
2022-09-29 21:10 - 2021-02-16 13:50 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2022-09-29 21:10 - 2021-02-16 13:49 - 000008192 ___SH C:\DumpStack.log.tmp
2022-09-29 21:10 - 2019-12-07 11:03 - 000786432 _____ C:\Windows\system32\config\BBI
2022-09-29 20:46 - 2022-06-12 21:49 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-09-29 20:45 - 2021-02-18 19:42 - 000000000 ____D C:\Users\Użytkownik\AppData\LocalLow\Mozilla
2022-09-29 19:24 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\NDF
2022-09-29 18:55 - 2021-03-03 00:39 - 000251514 _____ C:\Users\Użytkownik\Desktop\zestawienie melex zoo.xlsx
2022-09-29 17:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2022-09-28 21:19 - 2021-02-16 13:50 - 000000000 ____D C:\Windows\system32\SleepStudy
2022-09-28 21:05 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-09-28 20:49 - 2021-05-10 18:21 - 000000000 ____D C:\Users\Użytkownik\Desktop\Nowy folder (2)
2022-09-28 20:44 - 2021-02-16 14:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-09-28 19:57 - 2021-02-16 14:14 - 000002253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-09-28 19:57 - 2021-02-16 14:14 - 000002212 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-09-28 19:56 - 2021-02-18 19:52 - 000002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-09-28 19:56 - 2021-02-18 19:52 - 000002286 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-09-25 18:56 - 2022-06-12 21:49 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2022-09-25 18:56 - 2021-02-16 14:12 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-09-20 21:29 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2022-09-19 19:44 - 2021-02-16 13:49 - 000440168 _____ C:\Windows\system32\FNTCACHE.DAT
2022-09-19 19:43 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2022-09-19 19:43 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2022-09-19 19:43 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2022-09-19 19:43 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2022-09-19 19:43 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2022-09-19 19:43 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\setup
2022-09-19 19:43 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2022-09-19 19:43 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\DDFs
2022-09-19 19:43 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Provisioning
2022-09-19 19:43 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2022-09-19 19:37 - 2021-02-16 13:52 - 003011072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2022-09-19 18:13 - 2021-03-16 09:40 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2022-09-19 18:09 - 2021-02-16 14:21 - 000000000 ____D C:\Windows\system32\MRT
2022-09-19 17:59 - 2021-02-16 14:21 - 141646296 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2022-09-07 07:23 - 2021-02-16 13:58 - 000000000 ____D C:\Users\Użytkownik\AppData\Local\Packages
2022-09-07 07:13 - 2021-02-16 13:50 - 000000000 ____D C:\Windows\system32\Drivers\wd
2022-09-05 00:03 - 2021-02-16 13:57 - 000000000 ____D C:\Users\Użytkownik
2022-08-31 16:20 - 2021-02-16 14:13 - 000003570 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2022-08-31 16:20 - 2021-02-16 14:13 - 000003446 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore

==================== Pliki w katalogu głównym wybranych folderów ========

2021-02-19 21:40 - 2021-02-19 21:42 - 000021856 _____ () C:\Users\Użytkownik\AppData\Roaming\Wartości oddzielone przecinkami (DOS).ADR
2021-02-16 15:51 - 2021-02-16 15:51 - 000000000 _____ () C:\Users\Użytkownik\AppData\Local\AtStart.txt
2021-02-16 15:51 - 2021-02-16 15:51 - 000000000 _____ () C:\Users\Użytkownik\AppData\Local\DSwitch.txt
2021-02-16 15:51 - 2021-02-16 15:51 - 000000000 _____ () C:\Users\Użytkownik\AppData\Local\QSwitch.txt

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

==================== Koniec  FRST.txt ========================