System Win10 Przeskanowany Eset Online - brak błędów. System się restartuje do niebieskiego ekranu, zawiesza.
Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 14-02-2022 01
Uruchomiony przez Karolina (administrator) KAROLINA1 (Gigabyte Technology Co., Ltd. P35-DS3L) (16-02-2022 21:26:55)
Uruchomiony z C:\Users\Karolina\Desktop
Załadowane profile: Karolina
Platform: Microsoft Windows 10 Pro Wersja 20H2 19042.1526 (X64) Język: Polski (Polska)
Domyślna przeglądarka: FF
Tryb startu: Normal
==================== Procesy (filtrowane) =================
(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
(atiesrxx.exe - & gt; ) (Microsoft Windows Hardware Compatibility Publisher - & gt; AMD) C:\Windows\System32\atieclxx.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe - & gt; ) (Microsoft Windows Publisher - & gt; Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCopyAccelerator.exe
(EFD Software) [Brak podpisu cyfrowego] D:\HD Tune\HDTune.exe
(Mozilla Corporation - & gt; Mozilla Corporation) C:\Users\Karolina\AppData\Local\Mozilla Firefox\firefox.exe & lt; 10 & gt;
(services.exe - & gt; ) () [Brak podpisu cyfrowego] C:\Program Files (x86)\Wondershare\Wondershare Dr.Fone\Addins\Recovery\ElevationService.exe
(services.exe - & gt; ) (GoPro Media, Inc. - & gt; ) C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe
(services.exe - & gt; ) (Microsoft Windows Hardware Compatibility Publisher - & gt; AMD) C:\Windows\System32\atiesrxx.exe
(services.exe - & gt; ) (Microsoft Windows Publisher - & gt; Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe
(services.exe - & gt; ) (Microsoft Windows Publisher - & gt; Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\NisSrv.exe
(services.exe - & gt; ) (Wondershare Technology Co.,Ltd - & gt; ) C:\Program Files (x86)\Wondershare\Wondershare Dr.Fone\Addins\Backup\WirelessBackupService.exe
(services.exe - & gt; ) (Wondershare Technology Co.,Ltd - & gt; Wondershare) C:\ProgramData\Wondershare\Service\InstallAssistService.exe
(svchost.exe - & gt; ) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2111.12605.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe - & gt; ) (Microsoft Windows - & gt; Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe - & gt; ) (Microsoft Windows - & gt; Microsoft Corporation) C:\Windows\System32\dllhost.exe & lt; 2 & gt;
(svchost.exe - & gt; ) (Microsoft Windows - & gt; Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Rejestr (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
HKLM-x32\...\Run: [Backup] = & gt; C:\Program Files (x86)\Wondershare\Wondershare Dr.Fone\Addins\Backup\DrFoneBackup.exe /hide (Brak pliku)
HKLM-x32\...\Run: [DFX] = & gt; C:\Program Files (x86)\DFX\DFX.exe [1270064 2022-02-06] (Power Technology - & gt; ) [Brak podpisu cyfrowego]
HKU\S-1-5-21-450220235-2002056300-1681484763-1000\...\Run: [TomTom MySports Connect.exe] = & gt; C:\Program Files (x86)\TomTom\MySportsConnect\TomTom MySports Connect.exe --hideSplashScreen (Brak pliku)
HKLM\...\Windows x64\Print Processors\hpzppw71: C:\Windows\System32\spool\prtprocs\x64\hpzppw71.dll [230400 2009-07-14] (Microsoft Windows - & gt; Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\LIDIL hpzllw71: C:\WINDOWS\system32\hpzllw71.dll [53248 2009-07-14] (Microsoft Windows - & gt; Hewlett-Packard Corporation)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [ & gt; {26923b43-4d38-484f-9b9e-de460746276c}] - & gt; C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] - & gt;
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia & lt; ==== UWAGA
==================== Zaplanowane zadania (filtrowane) ============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
Task: {07569D21-3CF4-483E-928C-B67523167F18} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB = & gt; C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {13A70E9A-FB2F-4AAE-9AF6-CA55A8E2C0BE} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch = & gt; C:\WINDOWS\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (Brak pliku)
Task: {1BEE6C19-EB55-4688-A1F4-98D95AE3DDBD} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit = & gt; C:\WINDOWS\ehome\ehPrivJob.exe /DRMInit (Brak pliku)
Task: {1DD5A77D-F92D-44AF-8815-7C0D930E7B1C} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake = & gt; {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {1FE29CC3-6B20-4A34-97FF-3E6F4DEE7DD0} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask = & gt; C:\WINDOWS\ehome\mcupdate.exe -SqlLiteRecoveryTask (Brak pliku)
Task: {23E97DDA-83D8-416C-8B07-E5A858D4B5C1} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders = & gt; {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {29A30E78-8039-41AC-AF16-09B6895C8225} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-450220235-2002056300-1681484763-500 = & gt; C:\Users\Karolina\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Brak pliku)
Task: {374D66A0-F3EF-48D7-A1CC-EA1A4A0D37BF} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 = & gt; C:\WINDOWS\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (Brak pliku)
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration = & gt; {343D770D-7788-47c2-B62A-B7C4CED925CB}
Task: {4960E304-B3F4-4292-A579-2356BE5D254C} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart = & gt; {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {49BDC631-90A5-49CE-8E93-1D2555B8D40D} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask = & gt; C:\WINDOWS\ehome\mcupdate.exe -MediaCenterRecoveryTask (Brak pliku)
Task: {5186EB8E-2218-4EA8-90C6-D465D67B2414} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup = & gt; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-09] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
Task: {51EB0A48-F4BA-4010-9E16-FCFB9875CDB6} - System32\Tasks\klcp_update = & gt; D:\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1907712 2021-03-27] () [Brak podpisu cyfrowego]
Task: {56E74D3C-145B-4E86-9395-1B1E9A26E053} - System32\Tasks\EOSv3 Scheduler onLogOn = & gt; C:\Users\Karolina\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [18007968 2022-01-19] (ESET, spol. s r.o. - & gt; ESET)
Task: {588A8878-A4D0-45DE-A255-F07CA0195473} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 = & gt; C:\WINDOWS\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (Brak pliku)
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls = & gt; {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5E9F2A56-5558-4D6E-B9B6-08FC31ACBBF5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 = & gt; D:\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation - & gt; Microsoft Corporation)
Task: {6B21D740-21DA-4816-84E7-226217570761} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent = & gt; {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {6C3D3EBC-F3DF-494D-9953-38E72D9F0606} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager = & gt; {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {8072BA08-C274-4954-A116-7436EFA7B164} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask = & gt; C:\WINDOWS\ehome\mcupdate.exe -PvrRecoveryTask (Brak pliku)
Task: {84D89B8A-265D-4892-A200-4F7FE3B8D467} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification = & gt; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-09] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
Task: {93898C6D-8BEB-4D5C-BF65-F2029A2B0B1D} - System32\Tasks\Mozilla\Firefox Default Browser Agent 2081BBE6A6A65AE4 = & gt; C:\Users\Karolina\AppData\Local\Mozilla Firefox\default-browser-agent.exe do-task " 2081BBE6A6A65AE4 "
Task: {9F685F9B-8BEB-41B5-8DD4-C3E0948460A1} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart = & gt; C:\WINDOWS\ehome\ehrec.exe /RestartRecording (Brak pliku)
Task: {A3ED6B0C-ACC6-49BC-87AD-27AD14449ECA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance = & gt; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-09] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
Task: {A70D5AAD-D9EB-4306-8656-2A9E1AF7B8B8} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks = & gt; C:\WINDOWS\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (Brak pliku)
Task: {AA2A38F2-B852-4806-9C85-F9A5B696D385} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady = & gt; C:\WINDOWS\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (Brak pliku)
Task: {B096CADC-CB80-41E6-9C93-F2A710B47BFA} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch = & gt; C:\WINDOWS\ehome\ehPrivJob.exe /DoActivateWindowsSearch (Brak pliku)
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor = & gt; {EA9155A3-8A39-40b4-8963-D3C761B18371}
Task: {B329AE14-F418-48C7-8685-B51DA2D532E5} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery = & gt; C:\WINDOWS\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (Brak pliku)
Task: {C0B42406-F9C0-4E24-8FAF-43E9876AB1F8} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery = & gt; C:\WINDOWS\ehome\ehPrivJob.exe /PBDADiscovery (Brak pliku)
Task: {C0E3F8EB-F7A8-4E32-B005-C7EB48E45D34} - System32\Tasks\EOSv3 Scheduler onTime = & gt; C:\Users\Karolina\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [18007968 2022-01-19] (ESET, spol. s r.o. - & gt; ESET)
Task: {CE83045D-DF6F-4CC5-8586-6CBA9CD250F9} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService = & gt; C:\WINDOWS\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (Brak pliku)
Task: {D32A6D7C-7118-46B4-96D9-E4616B794185} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath = & gt; C:\WINDOWS\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) (Brak pliku)
Task: {D56E9B80-F1B7-439A-8DE0-5840C018BF09} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 = & gt; D:\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation - & gt; Microsoft Corporation)
Task: {D84F58D8-DE2D-4489-9389-7844DC836EB2} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask = & gt; C:\WINDOWS\ehome\mcupdate.exe -PvrSchedule (Brak pliku)
Task: {DA56BE57-3000-4BEF-95FD-F61BC88156A6} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry = & gt; C:\WINDOWS\ehome\MCUpdate.exe -pscn 0 (Brak pliku)
Task: {DD4D0469-5D33-4FC2-B541-417C13334C90} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat = & gt; C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation - & gt; Microsoft Corporation)
Task: {EE4EFF49-7048-41A8-94B2-222E73F704F9} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate = & gt; C:\WINDOWS\ehome\mcupdate.exe $(Arg0) (Brak pliku)
Task: {F0164A6F-4F31-4B2B-80A2-AD3F1A3C947D} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot = & gt; C:\WINDOWS\ehome\ehPrivJob.exe /DoReindexSearchRoot (Brak pliku)
Task: {F6C9B091-0D96-4009-B3E0-DC972E387FCE} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask = & gt; C:\WINDOWS\ehome\mcupdate.exe -ObjectStoreRecoveryTask (Brak pliku)
Task: {F8AAE636-C901-4A7A-BB02-C58814270B47} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate = & gt; C:\WINDOWS\ehome\ehPrivJob.exe /OCURActivate (Brak pliku)
Task: {FBA3A82E-7FDE-4B64-B5BD-CACE121E6F64} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB = & gt; C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task " 308046B0AF4A39CB "
Task: {FD53A8F9-5C79-449B-8FC8-B6B7373822D2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan = & gt; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-09] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
==================== Internet (filtrowane) ====================
(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E50D214B-AB82-4AF1-8C09-32FB7F5E844A}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Karolina\AppData\Local\Microsoft\Edge\User Data\Default [2022-02-16]
Edge Notifications: Default - & gt; hxxps://www.onet.pl
FireFox:
========
FF DefaultProfile: pyx8dzpo.default
FF ProfilePath: C:\Users\Karolina\AppData\Roaming\Mozilla\Firefox\Profiles\wor593fx.default-release-1 [2022-02-16]
FF DownloadDir: C:\Users\Karolina\Desktop
FF Homepage: Mozilla\Firefox\Profiles\wor593fx.default-release-1 - & gt; hxxps://www.onet.pl/
FF Extension: (AdBlocker Ultimate) - C:\Users\Karolina\AppData\Roaming\Mozilla\Firefox\Profiles\wor593fx.default-release-1\Extensions\adblockultimate@adblockultimate.net.xpi [2022-01-13]
FF Extension: (Bloker reklam AdGuard) - C:\Users\Karolina\AppData\Roaming\Mozilla\Firefox\Profiles\wor593fx.default-release-1\Extensions\adguardadblocker@adguard.com.xpi [2022-01-13]
FF ProfilePath: C:\Users\Karolina\AppData\Roaming\Mozilla\Firefox\Profiles\pyx8dzpo.default [2021-11-08]
FF ProfilePath: C:\Users\Karolina\AppData\Roaming\Mozilla\Firefox\Profiles\zfd1m8ae.default-release-1642065099104 [2022-01-13]
FF Plugin: @microsoft.com/SharePoint,version=14.0 - & gt; D:\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation - & gt; Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - & gt; C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation - & gt; Microsoft Corporation)
==================== Usługi (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R2 ElevationService; C:\Program Files (x86)\Wondershare\Wondershare Dr.Fone\Addins\Recovery\ElevationService.exe [913408 2021-11-18] () [Brak podpisu cyfrowego]
R2 GoProDeviceDetectionService; C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe [38328 2018-08-31] (GoPro Media, Inc. - & gt; )
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6136536 2022-02-09] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\NisSrv.exe [2909208 2022-02-09] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe [128376 2022-02-09] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
R2 WirelessBackupService; C:\Program Files (x86)\Wondershare\Wondershare Dr.Fone\Addins\Backup\WirelessBackupService.exe [7484936 2021-12-17] (Wondershare Technology Co.,Ltd - & gt; )
R2 Wondershare InstallAssist; C:\ProgramData\Wondershare\Service\InstallAssistService.exe [262880 2022-01-05] (Wondershare Technology Co.,Ltd - & gt; Wondershare)
S2 DFWSIDService; C:\Program Files (x86)\Wondershare\Wondershare Dr.Fone\WsidService.exe [X]
===================== Sterowniki (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Brak podpisu cyfrowego]
R3 DFX11_1; C:\WINDOWS\system32\drivers\dfx11_1x64.sys [28008 2012-12-13] (Power Technology - & gt; Windows (R) Win 7 DDK provider)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. - & gt; Samsung Electronics Co., Ltd.)
S3 scsiscan; C:\WINDOWS\system32\DRIVERS\scsiscan.sys [21504 2020-11-19] (Microsoft Windows - & gt; Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. - & gt; Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2022-02-09] (Microsoft Windows Early Launch Anti-malware Publisher - & gt; Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [438520 2022-02-09] (Microsoft Windows - & gt; Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90360 2022-02-09] (Microsoft Windows - & gt; Microsoft Corporation)
U3 idsvc; Brak ImagePath
S3 MpKslf80d54a9; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E35FC253-F729-4371-9505-B286B0B1F656}\MpKslDrv.sys [X]
==================== NetSvcs (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
==================== Jeden miesiąc (utworzone) (filtrowane) =========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2022-02-16 21:29 - 2022-02-16 21:29 - 001306376 _____ () C:\Users\Karolina\Desktop\quickmemorytestok-6628693115881089-AsystentPobierania_v3.821.492.894.exe
2022-02-16 21:26 - 2022-02-16 21:29 - 000017910 _____ C:\Users\Karolina\Desktop\FRST.txt
2022-02-16 21:26 - 2022-02-16 21:26 - 000000000 ____D C:\Users\Karolina\Desktop\FRST-OlderVersion
2022-02-16 21:25 - 2022-02-16 21:26 - 002312192 _____ (Farbar) C:\Users\Karolina\Desktop\FRST64.exe
2022-02-16 21:16 - 2022-02-16 21:16 - 000642632 _____ (EFD Software ) C:\Users\Karolina\Desktop\hdtune_255.exe
2022-02-16 21:16 - 2022-02-16 21:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune
2022-02-16 21:13 - 2022-02-16 21:15 - 000464071 _____ C:\Users\Karolina\Desktop\Report.htm
2022-02-13 06:05 - 2022-02-13 06:10 - 000883572 _____ C:\WINDOWS\Minidump\021322-39015-01.dmp
2022-02-09 14:40 - 2022-02-09 14:40 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2022-02-09 14:40 - 2022-02-09 14:40 - 000011813 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-02-09 14:38 - 2022-02-09 14:38 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-02-09 14:38 - 2022-02-09 14:38 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2022-02-09 14:38 - 2022-02-09 14:38 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2022-02-09 14:01 - 2022-02-09 14:01 - 000000000 ___HD C:\$WinREAgent
2022-02-09 13:48 - 2022-02-09 21:01 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-02-09 09:13 - 2022-02-16 21:20 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-02-09 07:24 - 2022-02-09 07:24 - 000000000 ____D C:\Users\Karolina\AppData\Local\Mozilla Firefox
2022-02-06 16:59 - 2022-02-06 17:00 - 000000000 ____D C:\Users\Karolina\AppData\Local\WhatsApp
2022-02-06 15:56 - 2022-02-06 17:00 - 000002253 _____ C:\Users\Karolina\Desktop\WhatsApp.lnk
2022-02-06 14:51 - 2022-02-11 17:59 - 000000000 ____D C:\Users\Karolina\AppData\Roaming\WhatsApp
2022-02-06 14:51 - 2022-02-06 17:00 - 000000000 ____D C:\Users\Karolina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2022-02-06 14:48 - 2022-02-06 17:00 - 000000000 ____D C:\Users\Karolina\AppData\Local\SquirrelTemp
2022-02-06 14:26 - 2022-02-06 14:26 - 000000000 ____D C:\Users\Karolina\AppData\Local\Program4PC
2022-02-06 13:45 - 2022-02-06 13:45 - 000000000 ____D C:\Users\Karolina\Documents\DJMusicMixer
2022-02-05 23:47 - 2022-02-05 23:47 - 000000000 ____D C:\Users\Karolina\AppData\Local\DFX
2022-02-05 23:34 - 2022-02-11 19:57 - 000000000 ____D C:\Program Files (x86)\DFX
2022-02-05 23:34 - 2022-02-05 23:34 - 000000000 ____D C:\Users\WDAGUtilityAccount
2022-02-05 23:34 - 2022-02-05 23:34 - 000000000 ____D C:\Users\Konto domyślne
2022-02-05 23:34 - 2022-02-05 23:34 - 000000000 ____D C:\Users\Karolina\AppData\Roaming\vlc
2022-02-05 23:34 - 2022-02-05 23:34 - 000000000 ____D C:\Users\Gość
2022-02-05 23:34 - 2022-02-05 23:34 - 000000000 ____D C:\Users\Administrator
2022-02-05 23:34 - 2022-02-05 23:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DFX Audio Enhancer
2022-02-01 22:58 - 2022-02-01 23:30 - 000000000 ____D C:\Users\Karolina\Desktop\Meksyk 2021
2022-02-01 20:38 - 2022-02-01 20:38 - 000000000 ____D C:\Users\Karolina\AppData\Local\CrashDumps
2022-02-01 18:40 - 2022-02-01 18:46 - 000000000 ____D C:\Users\Karolina\Desktop\Dominikana 2021
2022-01-28 03:03 - 2022-01-28 03:03 - 000000000 ____D C:\ProgramData\WsAppHelper
2022-01-27 19:50 - 2022-01-27 19:50 - 000000016 _____ C:\ProgramData\mntemp
2022-01-27 19:49 - 2022-01-27 19:50 - 000000000 ____D C:\Users\Karolina\AppData\Roaming\MobileBackupForeverIni
2022-01-27 19:49 - 2022-01-27 19:49 - 000000000 ____D C:\Users\Karolina\Documents\Wondershare
2022-01-27 19:49 - 2022-01-27 19:49 - 000000000 ____D C:\ProgramData\Apple
2022-01-27 19:46 - 2022-02-05 09:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2022-01-27 19:46 - 2022-01-27 19:50 - 000000000 ____D C:\Users\Karolina\AppData\Roaming\Wondershare
2022-01-27 19:45 - 2022-01-27 19:49 - 000000000 ____D C:\ProgramData\Wondershare
2022-01-27 19:45 - 2022-01-27 19:45 - 000000000 ____D C:\Program Files (x86)\Wondershare
2022-01-27 19:44 - 2022-01-27 20:02 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2022-01-26 20:43 - 2020-11-11 03:54 - 000167280 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2022-01-22 16:56 - 2022-01-27 20:02 - 000000000 ____D C:\Users\Karolina\.android
2022-01-22 16:54 - 2022-01-22 16:54 - 000000000 ____D C:\Users\Karolina\AppData\Local\FoneDog
2022-01-22 16:54 - 2022-01-22 16:54 - 000000000 ____D C:\Program Files\FoneDog
2022-01-21 17:33 - 2021-10-08 11:00 - 000160376 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus2.sys
2022-01-20 20:02 - 2022-01-20 20:02 - 000000000 ____D C:\Users\Karolina\AppData\Local\CEF
2022-01-20 19:54 - 2022-01-20 19:53 - 000005016 _____ C:\ProgramData\rsEngine.config.backup
2022-01-20 19:53 - 2022-01-20 19:53 - 000000000 ____D C:\Users\Karolina\AppData\Roaming\QuickMemoryTestOK
2022-01-20 19:52 - 2022-01-21 13:20 - 000000000 ____D C:\ProgramData\AVG
2022-01-20 19:52 - 2022-01-20 19:52 - 000414392 _____ C:\Users\Karolina\Downloads\QuickMemoryTestOK_x64_Installer.zip
2022-01-20 19:52 - 2022-01-20 19:52 - 000414392 _____ C:\Users\Karolina\Downloads\QuickMemoryTestOK_x64_Installer (1).zip
2022-01-19 11:42 - 2022-01-19 11:47 - 001085084 _____ C:\WINDOWS\Minidump\011922-48203-01.dmp
==================== Jeden miesiąc (zmodyfikowane) ==================
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2022-02-16 21:31 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-02-16 21:28 - 2021-08-03 16:19 - 000000000 ____D C:\FRST
2022-02-16 21:19 - 2021-02-26 14:45 - 000000000 ____D C:\Users\Karolina\AppData\LocalLow\Mozilla
2022-02-16 20:59 - 2021-02-27 00:38 - 000028956 _____ C:\Users\Karolina\Desktop\Z.xlsx
2022-02-16 19:53 - 2021-02-27 00:38 - 000013038 _____ C:\Users\Karolina\Desktop\PASKI- zestawienie2.xlsx
2022-02-16 16:31 - 2021-02-26 18:49 - 000000000 ____D C:\Users\Karolina
2022-02-16 16:19 - 2021-02-26 18:42 - 000008192 ___SH C:\DumpStack.log.tmp
2022-02-16 16:19 - 2020-11-19 00:39 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-02-16 16:19 - 2020-11-18 23:38 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-02-16 08:35 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-02-16 08:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-02-15 20:34 - 2021-04-04 14:30 - 000000000 ____D C:\Users\Karolina\AppData\Roaming\gd-gameroom
2022-02-14 14:59 - 2021-12-05 10:21 - 000015495 _____ C:\Users\Karolina\Desktop\Bank od 4.12.2021.xlsx
2022-02-14 13:15 - 2021-05-30 07:49 - 000000908 _____ C:\Users\Karolina\Desktop\Allegro kody monety.txt
2022-02-13 06:28 - 2021-08-12 05:46 - 000001314 _____ C:\Users\Karolina\Desktop\ESET Online Scanner.lnk
2022-02-13 06:28 - 2021-04-05 12:11 - 000001420 _____ C:\Users\Karolina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2022-02-13 06:10 - 2021-07-11 17:02 - 000000000 ____D C:\WINDOWS\Minidump
2022-02-13 06:10 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2022-02-13 06:05 - 2021-07-11 17:02 - 596072680 _____ C:\WINDOWS\MEMORY.DMP
2022-02-12 07:15 - 2020-11-19 00:41 - 000002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-02-11 07:07 - 2021-02-28 01:01 - 000000000 ____D C:\Users\Karolina\Desktop\różne
2022-02-10 00:00 - 2021-02-26 18:59 - 001767984 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-02-10 00:00 - 2019-12-07 16:09 - 000784340 _____ C:\WINDOWS\system32\perfh015.dat
2022-02-10 00:00 - 2019-12-07 16:09 - 000152236 _____ C:\WINDOWS\system32\perfc015.dat
2022-02-09 23:59 - 2020-11-19 00:39 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-02-09 21:04 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-02-09 21:02 - 2020-11-18 23:38 - 000349072 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-02-09 21:01 - 2021-11-08 17:46 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-02-09 20:59 - 2019-12-07 16:12 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-02-09 20:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-02-09 20:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-02-09 20:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-02-09 20:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-02-09 20:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-02-09 20:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-02-09 20:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-02-09 20:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-02-09 20:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-02-09 20:59 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2022-02-09 20:15 - 2022-01-13 10:04 - 000001321 _____ C:\Users\Karolina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-02-09 20:15 - 2021-11-08 17:46 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-02-09 20:15 - 2021-11-08 17:46 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-02-09 20:15 - 2021-02-26 14:45 - 000000000 ____D C:\ProgramData\Mozilla
2022-02-09 14:48 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-02-09 14:40 - 2021-02-26 13:46 - 000414870 __RSH C:\bootmgr
2022-02-09 14:38 - 2020-11-19 00:41 - 002877440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-02-09 12:49 - 2021-02-26 19:32 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-02-09 12:46 - 2021-02-26 19:32 - 149611728 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-02-07 20:25 - 2021-09-25 23:35 - 000000000 ____D C:\Users\Karolina\Desktop\15 Decathlon 30.01
2022-02-06 17:50 - 2021-10-05 13:39 - 000003858 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2022-02-06 17:50 - 2021-10-05 13:39 - 000003416 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2022-02-06 00:17 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2022-02-05 09:17 - 2021-04-10 18:37 - 000000000 ____D C:\ProgramData\SlySoft
2022-02-01 10:03 - 2021-02-26 18:59 - 000000000 ____D C:\Users\Karolina\AppData\Local\Packages
2022-01-28 06:34 - 2021-03-05 08:34 - 000003416 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d70c686601b4f4
2022-01-28 06:34 - 2020-11-19 00:41 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-01-20 19:55 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
==================== SigCheck ============================
(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
==================== Koniec FRST.txt ========================