Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 25.03.2024
Uruchomiony przez John Klamka (administrator)  TERMINATOR (Micro-Star International Co., Ltd. MS-7D43) (28-03-2024 13:14:22)
Uruchomiony z C:\Users\John Klamka.DESKTOP-QUTKQAA\Downloads\FRST64.exe
Załadowane profile: John Klamka
Platforma: Microsoft Windows 10 Pro Wersja 22H2 19045.4170 (X64) Język: Polski (Polska)
Domyślna przeglądarka: FF
Tryb startu: Normal

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.233.1042.0_x64__zpdnekdrzrea0\Spotify.exe <6>
(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7>
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe
(C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\Kingsoft\WPS Office\12.2.0.13489\office6\wpscloudsvr.exe ->) (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\Kingsoft\WPS Office\12.2.0.13489\office6\wpscenter.exe
(C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\utorrent\updates\3.6.0_47016\utorrentie.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.92\msedgewebview2.exe <7>
(C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\utorrent\uTorrent.exe ->) (BitTorrent Inc -> BitTorrent Inc.) C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\utorrent\helper\helper.exe
(C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\utorrent\uTorrent.exe ->) (BitTorrent Inc -> BitTorrent Inc.) C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\utorrent\updates\3.6.0_47016\utorrentie.exe <2>
(DriverStore\FileRepository\u0400566.inf_amd64_5e4d397bddb6fe15\B400392\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0400566.inf_amd64_5e4d397bddb6fe15\B400392\atieclxx.exe
(explorer.exe ->) (BitTorrent Inc -> BitTorrent Limited) C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\utorrent\uTorrent.exe
(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <24>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0400566.inf_amd64_5e4d397bddb6fe15\B400392\atiesrxx.exe
(services.exe ->) (Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_fa7d111a720fa1f7\WMIRegistrationService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e8f1ca5219e9493c\RtkAudUService64.exe <2>
(Slack Technologies, LLC -> Slack Technologies Inc.) C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\slack\app-4.37.98\slack.exe <6>
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2411.4.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2401.0.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.124.2141.0_x64__8wekyb3d8bbwe\GameBar.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.124.2141.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\Kingsoft\WPS Office\12.2.0.13489\office6\wpscloudsvr.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e8f1ca5219e9493c\RtkAudUService64.exe [1629552 2022-12-07] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [SteelSeriesGG] => C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe [13134160 2023-05-02] (SteelSeries ApS -> SteelSeries ApS)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [1131488 2023-12-30] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-2450867494-827764327-548314126-1001\...\Run: [MicrosoftEdgeAutoLaunch_1D39B44D181AB7889893D3DE7798FE7B] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4060712 2024-03-14] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2450867494-827764327-548314126-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4384104 2024-03-06] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-2450867494-827764327-548314126-1001\...\Run: [GalaxyClient] => [X]
HKU\S-1-5-21-2450867494-827764327-548314126-1001\...\Run: [GogGalaxy] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [13993440 2023-11-11] (GOG  sp. z o.o -> GOG.com)
HKU\S-1-5-21-2450867494-827764327-548314126-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe [46056704 2024-03-08] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-2450867494-827764327-548314126-1001\...\Run: [AMDNoiseSuppression] => C:\Windows\system32\AMD\ANR\AMDNoiseSuppression.exe [145800 2023-06-14] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-2450867494-827764327-548314126-1001\...\Run: [com.squirrel.slack.slack] => C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\slack\slack.exe [310576 2024-03-26] (Slack Technologies, LLC -> Slack Technologies Inc.)

==================== Zaplanowane zadania (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {8D7AAC92-557B-47B9-9CFA-502601EAA3E0} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2024-02-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {098DAA97-5E09-44FA-BC9B-693649CD474C} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2024-02-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {5CEAFC59-3A74-4BB7-A3D8-0C47FC4FF379} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2113024 2024-02-15] () [Brak podpisu cyfrowego]
Task: {90FFAF4F-6720-43BB-B253-6CC211AD22AC} - System32\Tasks\Launch Adobe CCXProcess => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [194056 2024-03-26] (Adobe Inc. -> Adobe Inc.)
Task: {FB7814C1-48B0-4593-B98F-D3700641D478} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {85B6BF9E-8CF7-46DD-98A8-0983FF96FEDD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9CBC170B-5F36-46F3-855E-499FF946522E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AE9EDF94-7D57-447C-B5B8-13B7AD83923F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MpCmdRun.exe [1650024 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {798ED7E5-DDA8-4457-8C20-CDD8DE26488F} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2024-02-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {DD939080-45E0-432C-BCF8-E1B24641D0D2} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [671136 2024-03-22] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (dane wartości zawierają 6 znaków więcej).
Task: {AD9938A5-BD54-4751-BBFF-6C0E33BA27B1} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2450867494-827764327-548314126-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [671136 2024-03-22] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (dane wartości zawierają 6 znaków więcej).
Task: {A0C206E5-60C6-4E8B-8B6B-F1A27C37AFBE} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34720 2024-03-22] (Mozilla Corporation -> Mozilla Foundation)
Task: {2AFF2040-6DCC-44B9-99A8-849810A9E351} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60344 2024-02-15] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {0DD57584-A9B9-47D7-B033-35B471F5D438} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [324024 2024-02-15] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {589D2B15-70A0-4066-B796-6EEDDE6637E2} - System32\Tasks\WpsExternal_John Klamka_20240229173733 => C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\Kingsoft\WPS Office\12.2.0.13489\office6\wpscloudsvr.exe [965520 2024-02-29] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd) -> /wpscloudlaunch /run_plugin /plugin_name=ktaskschdtool /plugin_entry=ktaskschdtool.dll /task=wpsexternal /launchtask /ver=1.0 /start_from=task_external
Task: {90A94C72-E1A5-4F9A-AC61-D1E89CDB2E6D} - System32\Tasks\WpsUpdateTask_John Klamka => C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\Kingsoft\WPS Office\12.2.0.13489\office6\wpsupdate.exe [1495952 2024-02-29] (Zhuhai Kingsoft Office Software Co., Ltd. -> Zhuhai Kingsoft Office Software Co.,Ltd)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)


==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 178.235.153.32 178.235.153.33
Tcpip\..\Interfaces\{b671a4b7-270a-45e1-88df-61cf3cb6fd91}: [DhcpNameServer] 178.235.153.32 178.235.153.33

Edge: 
=======
Edge Profile: C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\Microsoft\Edge\User Data\Default [2024-03-28]
Edge Extension: (Dokumenty Google offline) - C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-28]
Edge Extension: (Edge relevant text changes) - C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-26]

FireFox:
========
FF DefaultProfile: 8c1n1sz7.default
FF ProfilePath: C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\Mozilla\Firefox\Profiles\8c1n1sz7.default [2023-02-27]
FF ProfilePath: C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\Mozilla\Firefox\Profiles\n2u3ob4j.default-release [2024-03-28]
FF Notifications: Mozilla\Firefox\Profiles\n2u3ob4j.default-release -> hxxps://tinder.com; hxxps://www.pyszne.pl
FF Extension: (Hide YouTube™ Fullscreen Controls) - C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\Mozilla\Firefox\Profiles\n2u3ob4j.default-release\Extensions\@hideyoutubecontrolls.xpi [2023-03-07]
FF Extension: (uBlock Origin) - C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\Mozilla\Firefox\Profiles\n2u3ob4j.default-release\Extensions\uBlock0@raymondhill.net.xpi [2024-02-22]
FF Extension: (Video DownloadHelper) - C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\Mozilla\Firefox\Profiles\n2u3ob4j.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2024-03-22]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2023-12-30] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2023-12-30] (Adobe Inc. -> Adobe Systems)

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [944096 2023-12-30] (Adobe Inc. -> Adobe Inc.)
S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [2562696 2024-03-21] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
S3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [10456168 2023-03-30] (Electronic Arts, Inc. -> Electronic Arts)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1135648 2023-03-16] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-08-02] (Epic Games Inc. -> Epic Games, Inc.)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [2350048 2023-11-11] (GOG  sp. z o.o -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7173088 2023-09-30] (GOG  sp. z o.o -> GOG.com)
R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [10994432 2024-03-08] (Logitech Inc -> Logitech, Inc.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [13142392 2024-03-11] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.)
S3 Rockstar Service; D:\Gry\GTA_Launcher\RockstarService.exe [1244144 2023-07-02] (Rockstar Games, Inc. -> Rockstar Games)
S2 secureboot; C:\ProgramData\WindowsPowerShell\Modules\SecureBoot\secureboot.exe [699259556 2023-11-16] () [Brak podpisu cyfrowego] <==== UWAGA
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [522184 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 SteelSeriesUpdateService; C:\Program Files\SteelSeries\GG\SteelSeriesUpdateService.exe [35152 2023-05-02] (SteelSeries ApS -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\NisSrv.exe [3191272 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MsMpEng.exe [133688 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 amdfendrmgr; C:\Windows\System32\drivers\amdfendrmgr.sys [36800 2023-09-28] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDSAFD; C:\Windows\System32\DriverStore\FileRepository\amdsafd.inf_amd64_54807f69fe156f14\amdsafd.sys [113088 2023-04-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 amduw23g; C:\Windows\System32\DriverStore\FileRepository\u0400566.inf_amd64_5e4d397bddb6fe15\B400392\amdkmdag.sys [100094904 2024-02-23] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\Windows\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 atvi-randgrid; C:\ProgramData\Battle.net_components\randgridauks\randgrid.sys [3223448 2024-03-06] (Activision Publishing Inc -> Activision Blizzard, Inc.)
R3 iaLPSS2_GPIO2_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_e11257f05c0c2f89\iaLPSS2_GPIO2_ADL.sys [139928 2021-07-29] (Intel Corporation -> Intel Corporation)
R3 IntelGNA; C:\Windows\System32\DriverStore\FileRepository\gna.inf_amd64_04d4eecc5838a558\gna.sys [88760 2022-06-21] (Intel Corporation -> Intel Corporation)
R3 logi_joy_bus_enum; C:\Windows\system32\drivers\logi_joy_bus_enum.sys [44880 2023-04-29] (Logitech Inc -> Logitech)
R3 logi_joy_vir_hid; C:\Windows\system32\drivers\logi_joy_vir_hid.sys [32080 2023-04-29] (Logitech Inc -> Logitech)
R3 logi_joy_xlcore; C:\Windows\system32\drivers\logi_joy_xlcore.sys [73040 2023-04-29] (Logitech Inc -> Logitech)
R3 MpKsl41f6fb69; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D1CD6997-101E-4BC9-AF69-E6EC7A6FC4B8}\MpKslDrv.sys [300312 2024-03-28] (Microsoft Windows -> Microsoft Corporation)
R3 ssdevfactory; C:\Windows\System32\drivers\ssdevfactory.sys [43472 2023-03-27] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
S3 sshid; C:\Windows\System32\drivers\sshid.sys [44456 2023-03-13] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
R3 SteelSeries_Sonar_VAD; C:\Windows\System32\DriverStore\FileRepository\steelseries-sonar-vad.inf_amd64_da15ab44a6216a8e\SteelSeries-Sonar-VAD.sys [95440 2023-03-17] (SteelSeries ApS -> Windows (R) Win 7 DDK provider)
R0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [20928 2024-03-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [603416 2024-03-13] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105752 2024-03-13] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2024-03-28 13:14 - 2024-03-28 13:15 - 000022103 _____ C:\Users\John Klamka.DESKTOP-QUTKQAA\Downloads\FRST.txt
2024-03-28 13:13 - 2024-03-28 13:14 - 000000000 ____D C:\FRST
2024-03-28 11:21 - 2024-03-28 11:21 - 002391552 _____ (Farbar) C:\Users\John Klamka.DESKTOP-QUTKQAA\Downloads\FRST64.exe
2024-03-25 09:54 - 2024-03-25 11:29 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\Desktop\Blota Marzec
2024-03-22 23:48 - 2024-03-24 08:44 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-03-22 11:26 - 2024-03-23 09:28 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2024-03-20 11:45 - 2024-03-20 11:45 - 000044894 _____ C:\Users\John Klamka.DESKTOP-QUTKQAA\Downloads\zalacznik-1-odstapienie-od-umowy.pdf
2024-03-19 10:35 - 2024-03-19 10:35 - 000197817 _____ C:\Users\John Klamka.DESKTOP-QUTKQAA\Documents\MicrosoftTeams.pdf
2024-03-19 09:32 - 2024-03-19 09:32 - 000106630 _____ C:\Users\John Klamka.DESKTOP-QUTKQAA\Downloads\Potwierdzenie zlecenia platniczego.pdf
2024-03-18 10:39 - 2024-03-18 10:39 - 000001250 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects 2024.lnk
2024-03-14 00:31 - 2024-03-14 07:33 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\Notepad
2024-03-13 23:20 - 2024-03-13 23:20 - 000019530 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-03-13 23:20 - 2024-03-13 23:20 - 000019530 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json
2024-03-13 23:15 - 2024-03-13 23:15 - 000000000 ___HD C:\$WinREAgent
2024-03-11 20:15 - 2024-03-11 20:15 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\Arrowhead
2024-03-11 20:15 - 2024-03-11 20:15 - 000000000 ____D C:\Program Files\Common Files\INCA Shared
2024-03-11 20:15 - 2024-03-11 17:59 - 013142392 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\GameMon.des
2024-03-11 09:01 - 2024-03-28 13:01 - 000003120 _____ C:\Windows\system32\Tasks\AMDInstallLauncher
2024-03-11 09:00 - 2024-03-28 13:01 - 000003112 _____ C:\Windows\system32\Tasks\AMDLinkUpdate
2024-03-11 09:00 - 2024-03-11 09:00 - 000003484 _____ C:\Windows\system32\Tasks\ModifyLinkUpdate
2024-03-11 09:00 - 2024-03-11 09:00 - 000003072 _____ C:\Windows\system32\Tasks\StartDVR
2024-03-11 09:00 - 2024-03-11 09:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Software꞉ Adrenalin Edition
2024-03-11 09:00 - 2024-03-11 09:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Bug Report Tool
2024-03-11 08:53 - 2024-02-23 09:10 - 002090936 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2024-03-11 08:53 - 2024-02-23 09:10 - 002090936 _____ C:\Windows\system32\vulkaninfo.exe
2024-03-11 08:53 - 2024-02-23 09:10 - 001649080 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-03-11 08:53 - 2024-02-23 09:10 - 001649080 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2024-03-11 08:53 - 2024-02-23 09:10 - 001456072 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2024-03-11 08:53 - 2024-02-23 09:10 - 001456072 _____ C:\Windows\system32\vulkan-1.dll
2024-03-11 08:53 - 2024-02-23 09:10 - 001297408 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2024-03-11 08:53 - 2024-02-23 09:10 - 001297408 _____ C:\Windows\SysWOW64\vulkan-1.dll
2024-03-11 08:53 - 2024-02-23 09:10 - 000721336 _____ C:\Windows\system32\hiprt0200064.dll
2024-03-11 08:53 - 2024-02-23 09:09 - 002119712 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2024-03-11 08:53 - 2024-02-23 09:09 - 001630752 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2024-03-11 08:53 - 2024-02-23 09:09 - 001630752 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2024-03-11 08:53 - 2024-02-23 09:09 - 000989216 _____ (AMD) C:\Windows\system32\atieclxx.exe
2024-03-11 08:53 - 2024-02-23 09:09 - 000598456 _____ C:\Windows\system32\GameManager64.dll
2024-03-11 08:53 - 2024-02-23 09:09 - 000527392 _____ C:\Windows\system32\atieah64.exe
2024-03-11 08:53 - 2024-02-23 09:09 - 000494112 _____ C:\Windows\system32\EEURestart.exe
2024-03-11 08:53 - 2024-02-23 09:09 - 000463392 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2024-03-11 08:53 - 2024-02-23 09:09 - 000453048 _____ C:\Windows\SysWOW64\GameManager32.dll
2024-03-11 08:53 - 2024-02-23 09:09 - 000396320 _____ C:\Windows\SysWOW64\atieah32.exe
2024-03-11 08:53 - 2024-02-23 09:09 - 000257056 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2024-03-11 08:53 - 2024-02-23 09:09 - 000219168 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2024-03-11 08:53 - 2024-02-23 09:09 - 000186400 _____ (AMD) C:\Windows\system32\atimuixx.dll
2024-03-11 08:53 - 2024-02-23 09:09 - 000174624 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2024-03-11 08:53 - 2024-02-23 09:09 - 000138784 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2024-03-11 08:53 - 2024-02-23 09:09 - 000064952 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ati2erec.dll
2024-03-11 08:53 - 2024-02-23 09:08 - 011516448 _____ C:\Windows\system32\amdsmi.exe
2024-03-11 08:53 - 2024-02-23 09:08 - 002245552 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdsasrv64.dll
2024-03-11 08:53 - 2024-02-23 09:08 - 001328560 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdsacli64.dll
2024-03-11 08:53 - 2024-02-23 09:08 - 001244704 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2024-03-11 08:53 - 2024-02-23 09:08 - 001049632 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdsacli32.dll
2024-03-11 08:53 - 2024-02-23 09:08 - 001045432 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2024-03-11 08:53 - 2024-02-23 09:08 - 000128952 _____ C:\Windows\system32\amdxc64.dll
2024-03-11 08:53 - 2024-02-23 09:08 - 000104992 _____ C:\Windows\SysWOW64\amdxc32.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 105432608 _____ C:\Windows\system32\amd_comgr_2.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 105422880 _____ C:\Windows\system32\amd_comgr.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 088626208 _____ C:\Windows\SysWOW64\amd_comgr32.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 018713528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdhip64_6.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 007549472 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdadlx64.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 007329312 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdadlx32.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 001701144 _____ (AMD) C:\Windows\system32\amf-mft-mjpeg-decoder64.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 001378448 _____ (AMD) C:\Windows\SysWOW64\amf-mft-mjpeg-decoder32.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000791584 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Rapidfire64.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000668704 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\Rapidfire.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000560056 _____ C:\Windows\system32\amdgfxinfo64.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000557552 _____ C:\Windows\system32\amdmiracast.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000533536 _____ C:\Windows\system32\dgtrayicon.exe
2024-03-11 08:53 - 2024-02-23 09:07 - 000515104 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000461344 _____ C:\Windows\system32\amdlogum.exe
2024-03-11 08:53 - 2024-02-23 09:07 - 000423968 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000380960 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000365168 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdfendr.stz
2024-03-11 08:53 - 2024-02-23 09:07 - 000350752 _____ C:\Windows\system32\clinfo.exe
2024-03-11 08:53 - 2024-02-23 09:07 - 000166944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000156080 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000156072 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000148784 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000135712 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000127432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000127432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000122200 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000046704 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdfendrmgr.stz
2024-03-11 08:53 - 2024-02-23 09:07 - 000041504 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\RapidFireServer64.dll
2024-03-11 08:53 - 2024-02-23 09:07 - 000038432 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\RapidFireServer.dll
2024-03-11 08:53 - 2024-02-23 09:06 - 021752248 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdhip64.dll
2024-03-11 08:53 - 2024-02-23 09:06 - 000166336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2024-03-11 08:53 - 2024-02-23 09:06 - 000141272 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2024-03-11 08:53 - 2024-02-23 08:08 - 105663344 _____ C:\Windows\system32\amdxc64.so
2024-03-10 11:21 - 2024-03-10 11:21 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\AstroDuel2_EOS
2024-03-10 11:14 - 2024-03-10 11:14 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\NVIDIA Corporation
2024-03-10 11:13 - 2024-03-10 11:21 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\Epic Games
2024-03-10 11:13 - 2024-03-10 11:14 - 000000000 ____D C:\ProgramData\Epic
2024-03-10 11:13 - 2024-03-10 11:13 - 185073664 _____ C:\Users\John Klamka.DESKTOP-QUTKQAA\Downloads\EpicInstaller-15.17.1.msi
2024-03-10 11:13 - 2024-03-10 11:13 - 000001290 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2024-03-10 11:13 - 2024-03-10 11:13 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\UnrealEngineLauncher
2024-03-10 11:13 - 2024-03-10 11:13 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\EpicGamesLauncher
2024-03-10 11:13 - 2024-03-10 11:13 - 000000000 ____D C:\Program Files (x86)\Epic Games
2024-03-10 09:24 - 2024-03-10 09:24 - 000249464 _____ C:\Users\John Klamka.DESKTOP-QUTKQAA\Downloads\Nowosad_Poniatowski_Radca-Prawny_34-1-2023.pdf
2024-03-08 12:23 - 2024-03-08 12:23 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CapCut
2024-03-08 09:23 - 2024-03-08 09:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
2024-03-08 09:23 - 2024-03-08 09:23 - 000000000 ____D C:\Program Files\LGHUB
2024-03-07 17:21 - 2024-03-07 17:21 - 000000898 _____ C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\Microsoft\Windows\Start Menu\µtorrent.lnk
2024-03-07 16:59 - 2024-03-07 16:59 - 008390520 _____ (ESET) C:\Users\John Klamka.DESKTOP-QUTKQAA\Downloads\esetonlinescanner.exe
2024-03-07 16:59 - 2024-03-07 16:59 - 000001400 _____ C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2024-03-07 16:59 - 2024-03-07 16:59 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\ESET
2024-03-07 16:47 - 2024-03-07 16:47 - 000000000 ____D C:\KPRM
2024-03-07 08:25 - 2024-03-07 08:25 - 000001142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder 2024.lnk
2024-03-07 08:24 - 2024-03-07 08:24 - 000001130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro 2024.lnk
2024-03-07 08:23 - 2024-03-07 08:23 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2024.lnk
2024-03-06 23:09 - 2024-03-06 23:10 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\Downloads\fonty
2024-03-03 17:21 - 2024-03-03 17:21 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\LocalLow\GalacticWorkshop
2024-02-29 17:37 - 2024-02-29 17:37 - 000004146 _____ C:\Windows\system32\Tasks\WpsExternal_John Klamka_20240229173733
2024-02-29 17:37 - 2024-02-29 17:37 - 000003716 _____ C:\Windows\system32\Tasks\WpsUpdateTask_John Klamka
2024-02-29 11:25 - 2024-03-28 10:08 - 000003586 _____ C:\Windows\system32\Tasks\Launch Adobe CCXProcess
2024-02-28 23:26 - 2024-02-28 23:26 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\Microsoft\HTML Help

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2024-03-28 13:15 - 2023-03-10 19:32 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\BitTorrentHelper
2024-03-28 13:14 - 2023-03-10 19:40 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\utorrent
2024-03-28 13:01 - 2023-03-09 21:48 - 000000000 ____D C:\Program Files (x86)\Steam
2024-03-28 13:01 - 2023-02-27 20:03 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-03-28 13:01 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-03-28 09:52 - 2023-02-27 22:05 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\discord
2024-03-28 09:32 - 2023-02-27 21:09 - 001768508 _____ C:\Windows\system32\PerfStringBackup.INI
2024-03-28 09:32 - 2019-12-07 16:09 - 000784464 _____ C:\Windows\system32\perfh015.dat
2024-03-28 09:32 - 2019-12-07 16:09 - 000152360 _____ C:\Windows\system32\perfc015.dat
2024-03-28 09:32 - 2019-12-07 10:13 - 000000000 ____D C:\Windows\INF
2024-03-28 09:28 - 2023-02-27 20:11 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-03-28 09:27 - 2023-02-28 10:48 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\Slack
2024-03-28 09:27 - 2023-02-27 22:04 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\Discord
2024-03-28 09:26 - 2023-04-29 19:40 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\LGHUB
2024-03-28 09:26 - 2023-02-27 20:03 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-03-28 09:26 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-03-28 09:26 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\AppReadiness
2024-03-28 09:25 - 2023-02-27 20:03 - 000008192 ___SH C:\DumpStack.log.tmp
2024-03-28 00:01 - 2019-12-07 10:03 - 000524288 _____ C:\Windows\system32\config\BBI
2024-03-27 22:58 - 2023-02-27 21:08 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\D3DSCache
2024-03-27 22:07 - 2023-03-23 09:46 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\foobar2000
2024-03-27 21:11 - 2023-02-27 21:31 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\AMD_Common
2024-03-27 18:23 - 2023-02-27 20:03 - 000003566 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-03-27 18:23 - 2023-02-27 20:03 - 000003442 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-03-27 00:07 - 2023-02-27 21:07 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA
2024-03-26 20:37 - 2023-09-07 08:47 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\Battle.net
2024-03-26 20:37 - 2023-09-07 08:47 - 000000000 ____D C:\Program Files (x86)\Battle.net
2024-03-26 18:56 - 2023-02-28 10:48 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Slack Technologies Inc
2024-03-26 18:56 - 2023-02-28 10:48 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\slack
2024-03-26 18:36 - 2023-02-28 14:02 - 000000000 ____D C:\Program Files\Common Files\Adobe
2024-03-26 18:35 - 2023-02-28 14:04 - 000000000 ___RD C:\Users\John Klamka.DESKTOP-QUTKQAA\Creative Cloud Files
2024-03-26 18:35 - 2023-02-28 14:02 - 000000000 ____D C:\Program Files\Adobe
2024-03-25 23:06 - 2023-02-28 19:42 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\RealVNC
2024-03-24 08:44 - 2023-02-27 20:11 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-03-23 09:29 - 2023-02-27 21:12 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-03-22 22:51 - 2023-03-10 19:33 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\CrashDumps
2024-03-22 17:42 - 2023-02-28 19:43 - 000001055 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2024-03-21 18:06 - 2023-03-11 10:18 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2024-03-19 10:02 - 2023-10-03 20:28 - 000000000 ____D C:\Program Files\RUXIM
2024-03-18 10:41 - 2024-01-03 17:50 - 000000000 ____D C:\Program Files\Maxon Cinema 4D 2024
2024-03-18 10:39 - 2023-02-28 14:05 - 000000000 ____D C:\Users\Public\Documents\Adobe
2024-03-16 12:43 - 2023-02-27 20:03 - 000002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-03-14 00:33 - 2023-02-27 21:08 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\Packages
2024-03-14 00:32 - 2023-02-27 20:03 - 000269872 _____ C:\Windows\system32\FNTCACHE.DAT
2024-03-14 00:31 - 2019-12-07 16:12 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2024-03-14 00:31 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-03-14 00:31 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2024-03-14 00:31 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SystemResources
2024-03-14 00:31 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\oobe
2024-03-14 00:31 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\Dism
2024-03-14 00:31 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ShellExperiences
2024-03-14 00:31 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2024-03-14 00:31 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\bcastdvr
2024-03-14 00:31 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\servicing
2024-03-13 23:22 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\CbsTemp
2024-03-13 23:20 - 2023-02-27 20:04 - 003017216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2024-03-13 23:15 - 2023-02-28 10:39 - 000000000 ____D C:\Windows\system32\MRT
2024-03-13 23:13 - 2023-02-28 10:39 - 190470136 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2024-03-13 10:15 - 2023-02-27 20:03 - 000000000 ____D C:\Windows\system32\Drivers\wd
2024-03-12 19:29 - 2023-08-25 17:08 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\G HUB
2024-03-11 23:20 - 2023-08-14 21:55 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\EurekaLog
2024-03-11 17:34 - 2023-02-27 20:55 - 000000000 ____D C:\AMD
2024-03-11 17:34 - 2023-02-27 20:08 - 000000000 ____D C:\Program Files\AMD
2024-03-11 09:02 - 2023-02-27 21:08 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\AMD
2024-03-11 09:00 - 2023-10-28 12:43 - 000003152 _____ C:\Windows\system32\Tasks\StartCN
2024-03-10 11:14 - 2023-02-27 20:16 - 000000000 ____D C:\ProgramData\Package Cache
2024-03-08 12:23 - 2024-02-13 23:28 - 000001379 _____ C:\Users\John Klamka.DESKTOP-QUTKQAA\Desktop\CapCut.lnk
2024-03-07 08:22 - 2023-02-28 14:02 - 000000000 ____D C:\ProgramData\Adobe
2024-03-06 11:54 - 2024-02-15 22:38 - 000000000 ____D C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\vlc

==================== Pliki w katalogu głównym wybranych folderów ========

2023-08-14 21:57 - 2023-08-14 21:57 - 000000805 _____ () C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Roaming\qnapi.ini
2023-12-15 14:16 - 2023-12-15 14:16 - 000000218 _____ () C:\Users\John Klamka.DESKTOP-QUTKQAA\AppData\Local\recently-used.xbel

==================== FCheck ================================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

FCheck: C:\Windows\System32\config\systemprofile\AppData\Roaming\Google\Libs\WR64.sys [2024-03-28] <==== UWAGA

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

==================== Koniec  FRST.txt ========================