Po instalacji iCloud, ale nie wiem czy nie była jakaś "lewa" bo robiła same problemy w Win10 nie działał pasek wyszukiwania w 'Start' oraz w ogóle sama aplikacja się dziwnie zachowywała. Miałem też problemy aby ją usunąć z komputera bo się nie chciała. Zostały po niej jakieś ślady, ale jednocześnie usunęła Outlooka z komputera (nie wiem w jaki sposób). Dziś udało mi się przywrócić Outlooka, naprawić wyszukiwanie przez start (wpisywanie ręczne czy przez użycie 'lupki') i zainstalowanie chyba prawidłowej aplikacji iCloud. Problem jaki mam to pozbycia się tych starych śmieci. W załączeniu logi.
Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 14-02-2022 01
Uruchomiony przez Michał Tomczyk (administrator) DESKTOP-F0F9VD2 (Dell Inc. Latitude E5470) (17-02-2022 21:32:11)
Uruchomiony z C:\Users\Michał Tomczyk\Downloads
Załadowane profile: Michał Tomczyk
Platform: Microsoft Windows 10 Pro Wersja 21H2 19044.1526 (X64) Język: Polski (Polska)
Domyślna przeglądarka: FF
Tryb startu: Normal
==================== Procesy (filtrowane) =================
(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
(ALPS ALPINE CO., LTD. - & gt; ALPSALPINE Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(C:\Program Files\DellTPad\Apoint.exe - & gt; ) (ALPS ALPINE CO., LTD. - & gt; ALPSALPINE Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(C:\Program Files\DellTPad\Apoint.exe - & gt; ) (ALPS ELECTRIC CO., LTD. - & gt; ALPSALPINE CO., LTD.) C:\Program Files\DellTPad\hidfind.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe - & gt; ) (Realtek Semiconductor Corp. - & gt; Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe & lt; 4 & gt;
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe - & gt; ) (Microsoft Windows Publisher - & gt; Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCopyAccelerator.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe - & gt; ) (Intel Corporation - & gt; Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxEM.exe
(explorer.exe - & gt; ) (ALPS ALPINE CO., LTD. - & gt; ALPSALPINE Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(explorer.exe - & gt; ) (Ghisler Software GmbH - & gt; Ghisler Software GmbH) C:\Program Files\Totalcmd\TOTALCMD64.EXE
(explorer.exe - & gt; ) (Google LLC - & gt; ) C:\Program Files\Google\Drive File Stream\55.0.3.0\crashpad_handler.exe & lt; 3 & gt;
(explorer.exe - & gt; ) (Realtek Semiconductor Corp. - & gt; Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(explorer.exe - & gt; ) (Viber Media S.à r.l. - & gt; Viber Media S.Ã r.l.) C:\Users\Michał Tomczyk\AppData\Local\Viber\Viber.exe
(explorer.exe - & gt; ) (Waves Inc - & gt; Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe
(Intel\DPTF\esif_uf.exe - & gt; ) (Intel Corporation - & gt; Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Mozilla Corporation - & gt; Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe & lt; 17 & gt;
(services.exe - & gt; ) ( " STMicroelectronics Srl " - & gt; ) C:\Windows\System32\drivers\DellFFDPWmiService.exe
(services.exe - & gt; ) (Adobe Inc. - & gt; Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe - & gt; ) (Apple Inc. - & gt; Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe - & gt; ) (Dell Inc - & gt; ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(services.exe - & gt; ) (Intel Corporation - & gt; Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe - & gt; ) (Intel Corporation - & gt; Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe
(services.exe - & gt; ) (Intel Corporation - & gt; Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_9cf4db1a1fd1b22d\OneApp.IGCC.WinService.exe
(services.exe - & gt; ) (Intel Corporation - & gt; Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_22e8552b44b17c6d\IntelCpHDCPSvc.exe
(services.exe - & gt; ) (Intel Corporation - & gt; Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_22e8552b44b17c6d\IntelCpHeciSvc.exe
(services.exe - & gt; ) (Intel Corporation - & gt; Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe - & gt; ) (Intel Corporation - & gt; Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe
(services.exe - & gt; ) (Intel(R) Embedded Subsystems and IP Blocks Group - & gt; Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe - & gt; ) (Intel(R) Rapid Storage Technology - & gt; Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_ecb9604542bb4ba6\RstMwService.exe
(services.exe - & gt; ) (Microsoft Corporation - & gt; Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe - & gt; ) (Microsoft Corporation - & gt; Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe - & gt; ) (Microsoft Windows Hardware Compatibility Publisher - & gt; ) C:\Windows\System32\UshUpgradeService.exe
(services.exe - & gt; ) (Microsoft Windows Hardware Compatibility Publisher - & gt; Broadcom Corporation) C:\Windows\System32\HostControlService.exe
(services.exe - & gt; ) (Microsoft Windows Hardware Compatibility Publisher - & gt; Broadcom Corporation) C:\Windows\System32\HostStorageService.exe
(services.exe - & gt; ) (Microsoft Windows Publisher - & gt; Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe
(services.exe - & gt; ) (Microsoft Windows Publisher - & gt; Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\NisSrv.exe
(services.exe - & gt; ) (Palo Alto Networks - & gt; Palo Alto Networks) C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.exe
(services.exe - & gt; ) (Realtek Semiconductor Corp - & gt; Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe - & gt; ) (TeamViewer Germany GmbH - & gt; TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(services.exe - & gt; ) (Waves Inc - & gt; Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe
(svchost.exe - & gt; ) (Microsoft Corporation - & gt; Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe - & gt; ) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.2008.2277.0_x64__8wekyb3d8bbwe\ScreenSketch.exe
(svchost.exe - & gt; ) (Microsoft Windows - & gt; Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe - & gt; ) (Microsoft Windows - & gt; Microsoft Corporation) C:\Windows\System32\dllhost.exe & lt; 2 & gt;
(svchost.exe - & gt; ) (Microsoft Windows - & gt; Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe - & gt; ) (Microsoft Windows - & gt; Microsoft Corporation) C:\Windows\System32\wlanext.exe
==================== Rejestr (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
HKLM\...\Run: [RtHDVCpl] = & gt; C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9230176 2018-10-09] (Realtek Semiconductor Corp. - & gt; Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_MAXX6] = & gt; C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1489280 2018-10-09] (Realtek Semiconductor Corp. - & gt; Realtek Semiconductor)
HKLM\...\Run: [Apoint] = & gt; C:\Program Files\DellTPad\Apoint.exe [779152 2019-12-12] (ALPS ALPINE CO., LTD. - & gt; ALPSALPINE Co., Ltd.)
HKLM\...\Run: [RtHDVBg_PushButton] = & gt; C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1489280 2018-10-09] (Realtek Semiconductor Corp. - & gt; Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] = & gt; C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [723928 2017-01-26] (Waves Inc - & gt; Waves Audio Ltd.)
HKLM\...\Run: [GlobalProtect] = & gt; C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPA.exe [10666336 2021-04-07] (Palo Alto Networks - & gt; Palo Alto Networks)
HKU\S-1-5-19\...\Run: [GoogleDriveFS] = & gt; C:\Program Files\Google\Drive File Stream\55.0.3.0\GoogleDriveFS.exe [55334232 2022-01-25] (Google LLC - & gt; Google, Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] = & gt; C:\Program Files\Google\Drive File Stream\55.0.3.0\GoogleDriveFS.exe [55334232 2022-01-25] (Google LLC - & gt; Google, Inc.)
HKU\S-1-5-21-3385536632-2986707316-1468309649-1002\...\Run: [GoogleDriveFS] = & gt; C:\Program Files\Google\Drive File Stream\54.0.3.0\GoogleDriveFS.exe --startup_mode (Brak pliku)
HKU\S-1-5-21-3385536632-2986707316-1468309649-1003\...\Run: [com.squirrel.Teams.Teams] = & gt; C:\Users\Michał Tomczyk\AppData\Local\Microsoft\Teams\Update.exe [2459304 2022-01-07] (Microsoft 3rd Party Application Component - & gt; Microsoft Corporation)
HKU\S-1-5-21-3385536632-2986707316-1468309649-1003\...\Run: [GoogleDriveFS] = & gt; C:\Program Files\Google\Drive File Stream\55.0.3.0\GoogleDriveFS.exe [55334232 2022-01-25] (Google LLC - & gt; Google, Inc.)
HKU\S-1-5-21-3385536632-2986707316-1468309649-1003\...\Run: [Viber] = & gt; C:\Users\Michał Tomczyk\AppData\Local\Viber\Viber.exe [51544336 2022-02-15] (Viber Media S.à r.l. - & gt; Viber Media S.Ã r.l.)
HKU\S-1-5-21-3385536632-2986707316-1468309649-500\...\Run: [GoogleDriveFS] = & gt; C:\Program Files\Google\Drive File Stream\54.0.3.0\GoogleDriveFS.exe --startup_mode (Brak pliku)
HKU\S-1-5-21-3385536632-2986707316-1468309649-500\...\Run: [iCloudServices] = & gt; C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2020-09-08] (Apple Inc. - & gt; Apple Inc.)
HKU\S-1-5-21-3385536632-2986707316-1468309649-500\...\RunOnce: [Delete Cached Update Binary] = & gt; C:\WINDOWS\system32\cmd.exe /q /c del /q " C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe "
HKU\S-1-5-21-3385536632-2986707316-1468309649-500\...\RunOnce: [Delete Cached Standalone Update Binary] = & gt; C:\WINDOWS\system32\cmd.exe /q /c del /q " C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe "
HKU\S-1-5-21-3385536632-2986707316-1468309649-500\...\RunOnce: [Uninstall 20.201.1005.0009] = & gt; C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q " C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\20.201.1005.0009 "
HKU\S-1-5-18\...\Run: [GoogleDriveFS] = & gt; C:\Program Files\Google\Drive File Stream\55.0.3.0\GoogleDriveFS.exe [55334232 2022-01-25] (Google LLC - & gt; Google, Inc.)
HKLM\...\Windows x64\Print Processors\Canon MG2200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDB6.DLL [30208 2012-03-26] (Microsoft Windows Hardware Compatibility Publisher - & gt; CANON INC.)
HKLM\...\Windows x64\Print Processors\hpcpp160: C:\Windows\System32\spool\prtprocs\x64\hpcpp160.dll [602912 2013-12-04] (Hewlett-Packard Company - & gt; Hewlett-Packard Corporation)
HKLM\...\Windows x64\Print Processors\ssy3cPC: C:\Windows\System32\spool\prtprocs\x64\ssy3cpc.dll [52296 2019-07-30] (Microsoft Windows Hardware Compatibility Publisher - & gt; Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG2200 series: C:\WINDOWS\system32\CNMLMB6.DLL [389120 2012-03-26] (Microsoft Windows Hardware Compatibility Publisher - & gt; CANON INC.)
HKLM\...\Print\Monitors\EPSON L550 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMI6E.DLL [120320 2015-01-14] (SEIKO EPSON CORPORATION) [Brak podpisu cyfrowego]
HKLM\...\Print\Monitors\HP Universal Print Monitor: C:\WINDOWS\system32\HPMPW081.DLL [74016 2013-12-04] (Hewlett-Packard Company - & gt; Hewlett-Packard)
HKLM\...\Print\Monitors\HPMLM135: C:\WINDOWS\system32\hpmlm135.dll [237344 2013-12-04] (Hewlett-Packard Company - & gt; Hewlett-Packard Company)
HKLM\...\Print\Monitors\ssy3c Langmon: C:\WINDOWS\system32\ssy3clm.dll [22528 2015-04-24] (Microsoft Windows Hardware Compatibility Publisher - & gt; )
HKLM\...\Print\Monitors\us008 Langmon: C:\WINDOWS\system32\us008lm.dll [31256 2016-02-15] (Microsoft Windows Hardware Compatibility Publisher - & gt; )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] - & gt; C:\Program Files (x86)\Google\Chrome\Application\98.0.4758.102\Installer\chrmstp.exe [2022-02-15] (Google LLC - & gt; Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{25CA8579-1BD8-469c-B9FC-6AC45A161C18}] - & gt; C:\WINDOWS\system32\PanV2CredProv.dll [2021-04-07] (Palo Alto Networks - & gt; )
GroupPolicy: Ograniczenia - Chrome & lt; ==== UWAGA
GroupPolicy\User: Ograniczenia ? & lt; ==== UWAGA
Policies: C:\ProgramData\NTUSER.pol: Ograniczenia & lt; ==== UWAGA
Policies: C:\Users\michal.tomczyk\NTUSER.pol: Ograniczenia & lt; ==== UWAGA
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia & lt; ==== UWAGA
HKLM\SOFTWARE\Policies\Google: Ograniczenia & lt; ==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Edge: Ograniczenia & lt; ==== UWAGA
==================== Zaplanowane zadania (filtrowane) ============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
Task: {08F267C8-8D2E-4930-80D1-F31C575B4EB7} - System32\Tasks\GoogleUpdateTaskMachineCore = & gt; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-04-09] (Google Inc - & gt; Google Inc.)
Task: {10DE925E-9148-44FD-B25F-24363F5963B8} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B = & gt; C:\Program Files (x86)\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {20F9E696-05B2-47D5-B10B-963B4B8E4857} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification = & gt; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-11] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
Task: {2DC3D374-0A97-4F75-87FC-2B35A39E8BBE} - System32\Tasks\Microsoft\Office\Office Feature Updates = & gt; C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139664 2022-02-15] (Microsoft Corporation - & gt; Microsoft Corporation)
Task: {38706540-9739-4886-9FC0-5B9ADF009CBA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup = & gt; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-11] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
Task: {38EFF027-EA8C-4CB5-A3FA-2D18BC04B55E} - System32\Tasks\Xerox XeroxPrintExperience Printer Configuration - New or Changed = & gt; c:\program files\xerox\xeroxprintexperience\xeroxprintexperience\XeroxPrinterConfiguration.exe [403312 2021-11-24] (Xerox Corporation - & gt; Xerox Corporation)
Task: {48F08BFB-88A5-4722-9807-D308785726C8} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor = & gt; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22882216 2022-02-15] (Microsoft Corporation - & gt; Microsoft Corporation)
Task: {59689C53-7BBF-40B3-A084-C8E58C8B075F} - System32\Tasks\Microsoft\Windows\GroupPolicy\{A7719E0F-10DB-4640-AD8C-490CC6AD5202} = & gt; C:\WINDOWS\system32\gpupdate.exe [30720 2020-10-16] (Microsoft Windows - & gt; Microsoft Corporation)
Task: {5D703A60-5B8F-47C6-87D6-FCF2E238EAB6} - System32\Tasks\Adobe Flash Player Updater = & gt; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-11-26] (Adobe Inc. - & gt; Adobe)
Task: {5DA0F75E-CB39-4FCA-9BB3-9F89BA1BC5FD} - System32\Tasks\Microsoft\Windows\GroupPolicy\{3E0A038B-D834-4930-9981-E89C9BFF83AA} = & gt; C:\WINDOWS\system32\gpupdate.exe [30720 2020-10-16] (Microsoft Windows - & gt; Microsoft Corporation)
Task: {64172E79-1201-4CE6-8FB0-DF2D4D68A0B7} - System32\Tasks\Xerox XeroxPrintExperience Printer Configuration - Periodic Refresh = & gt; c:\program files\xerox\xeroxprintexperience\xeroxprintexperience\XeroxPrinterConfiguration.exe [403312 2021-11-24] (Xerox Corporation - & gt; Xerox Corporation)
Task: {7050D247-BD5F-4FDE-B878-61D219A6A2DE} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB = & gt; C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task " 308046B0AF4A39CB "
Task: {787FE0EF-3483-4C4E-B23F-DA1AC443E35D} - System32\Tasks\Adobe Acrobat Update Task = & gt; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. - & gt; Adobe Inc.)
Task: {792EED15-54BF-4ABA-BAC3-A3AA9F9FCF18} - System32\Tasks\CCleaner Update = & gt; C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-01-25] (Piriform Software Ltd - & gt; Piriform)
Task: {7F9A9E0C-177C-4906-AA69-68A9DB5A308F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan = & gt; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-11] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
Task: {9352A09E-A001-4BB4-A8FC-ACB4F67FB813} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B = & gt; C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe do-task " E7CF176E110C211B "
Task: {99C27361-C921-4FDC-AAB4-2B6EC9D9DE56} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance = & gt; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MpCmdRun.exe [925848 2022-02-11] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
Task: {9AFADB27-D8F8-4656-9A28-A2354A2030B1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 = & gt; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22882216 2022-02-15] (Microsoft Corporation - & gt; Microsoft Corporation)
Task: {A8297FE1-75EC-4EB6-A0C9-F766BDE5B908} - System32\Tasks\Apple\AppleSoftwareUpdate = & gt; C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. - & gt; Apple Inc.)
Task: {B2298D55-49A5-4653-AD41-187D38F0F5F1} - \Microsoft\Windows\UNP\RunCampaignManager - & gt; Brak pliku & lt; ==== UWAGA
Task: {B835D774-E619-425A-837A-C418061F092F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon = & gt; C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139664 2022-02-15] (Microsoft Corporation - & gt; Microsoft Corporation)
Task: {B8DC15B5-6DEF-468F-BF8B-BF75DB1D7061} - System32\Tasks\GoogleUpdateTaskMachineUA = & gt; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-04-09] (Google Inc - & gt; Google Inc.)
Task: {B8E49A4F-C23D-4CA6-A552-7443B4484547} - System32\Tasks\CommView for WiFi Update = & gt; C:\Program Files (x86)\CommViewWiFi\Updater.exe [2690704 2019-06-03] (TamoSoft Ltd - & gt; TamoSoft)
Task: {D9ABAD30-A81D-4F48-98F7-155CE6C87AA8} - System32\Tasks\RtHDVBg_PushButton = & gt; C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1489280 2018-10-09] (Realtek Semiconductor Corp. - & gt; Realtek Semiconductor)
Task: {D9F8C53D-C50F-42F5-96C2-A300F81D38E8} - System32\Tasks\CCleanerSkipUAC - Michał Tomczyk = & gt; C:\Program Files\CCleaner\CCleaner.exe [29453952 2022-01-25] (Piriform Software Ltd - & gt; Piriform Software Ltd)
Task: {E3E236E5-2F5D-45BE-B597-B149E2A20ED6} - System32\Tasks\Adobe Flash Player NPAPI Notifier = & gt; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_453_Plugin.exe [1502776 2020-11-26] (Adobe Inc. - & gt; Adobe)
Task: {E9E4FF3A-EA1D-4A70-A885-C3F9D506F44F} - System32\Tasks\Xerox XeroxPrintExperience Printer Configuration - User Logon = & gt; c:\program files\xerox\xeroxprintexperience\xeroxprintexperience\XeroxPrinterConfiguration.exe [403312 2021-11-24] (Xerox Corporation - & gt; Xerox Corporation)
(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job = & gt; C:\WINDOWS\explorer.exe
==================== Internet (filtrowane) ====================
(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.200
Tcpip\..\Interfaces\{155a0813-b45a-4cb8-9f07-0b28336d9156}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{17ccf0fc-49f8-425f-bce6-40b93543ca52}: [NameServer] 172.30.60.111,172.30.60.112
Tcpip\..\Interfaces\{22b4c742-b55a-49a3-8614-158afe1ff473}: [NameServer] 172.30.60.111,172.30.60.112
Tcpip\..\Interfaces\{34953392-ab02-45a8-a4bb-1bd0f3b13ed0}: [DhcpNameServer] 86.111.204.10 86.111.204.11
Tcpip\..\Interfaces\{4ccba3de-b213-4324-97b5-0336e92eaafe}: [NameServer] 172.30.60.111,172.30.60.112
Tcpip\..\Interfaces\{94a4878c-f004-4138-a9fa-02f9b2105149}: [DhcpNameServer] 192.168.107.1 8.8.8.8
Tcpip\..\Interfaces\{c019c7a7-ee24-4193-b762-75a1be39f753}: [DhcpNameServer] 192.168.1.200
Tcpip\..\Interfaces\{e5cccff0-e2c0-4b22-8a04-a05f5a49c715}: [DhcpNameServer] 172.20.10.1
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia & lt; ==== UWAGA
Edge:
=======
DownloadDir: C:\Users\Michał Tomczyk\Downloads
Edge Extension: (Brak nazwy) - & gt; AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 = & gt; C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nie znaleziono]
Edge Extension: (Brak nazwy) - & gt; BookReader_B171F20233094AC88D05A8EF7B9763E8 = & gt; C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nie znaleziono]
Edge Extension: (Brak nazwy) - & gt; LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 = & gt; C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nie znaleziono]
Edge Extension: (Brak nazwy) - & gt; PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 = & gt; C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nie znaleziono]
Edge DefaultProfile: Profile 2
Edge Profile: C:\Users\Michał Tomczyk\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2022-02-16]
Edge Profile: C:\Users\Michał Tomczyk\AppData\Local\Microsoft\Edge\User Data\Profile 2 [2022-02-17]
FireFox:
========
FF DefaultProfile: 1nv7k7mg.default-1596569330018
FF ProfilePath: C:\Users\Michał Tomczyk\AppData\Roaming\Mozilla\Firefox\Profiles\izj9p88k.default-release [2022-02-17]
FF ProfilePath: C:\Users\Michał Tomczyk\AppData\Roaming\Mozilla\Firefox\Profiles\1nv7k7mg.default-1596569330018 [2022-02-17]
FF Homepage: Mozilla\Firefox\Profiles\1nv7k7mg.default-1596569330018 - & gt; hxxps://duckduckgo.com/?kl=pl-pl & kad=pl_PL & kae=d
FF Extension: (BetterTTV) - C:\Users\Michał Tomczyk\AppData\Roaming\Mozilla\Firefox\Profiles\1nv7k7mg.default-1596569330018\Extensions\firefox@betterttv.net.xpi [2022-02-11]
FF Extension: (DuckDuckGo Privacy Essentials) - C:\Users\Michał Tomczyk\AppData\Roaming\Mozilla\Firefox\Profiles\1nv7k7mg.default-1596569330018\Extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi [2022-02-02]
FF Extension: (New Tab Override) - C:\Users\Michał Tomczyk\AppData\Roaming\Mozilla\Firefox\Profiles\1nv7k7mg.default-1596569330018\Extensions\newtaboverride@agenedia.com.xpi [2021-05-27]
FF Plugin: @adobe.com/FlashPlayer - & gt; C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_453.dll [2020-11-26] (Adobe Inc. - & gt; )
FF Plugin: @java.com/DTPlugin,version=11.271.2 - & gt; C:\Program Files\Java\jre1.8.0_271\bin\dtplugin\npDeployJava1.dll [2020-11-16] (Oracle America, Inc. - & gt; Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.271.2 - & gt; C:\Program Files\Java\jre1.8.0_271\bin\plugin2\npjp2.dll [2020-11-16] (Oracle America, Inc. - & gt; Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - & gt; C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-01-27] (Microsoft Corporation - & gt; Microsoft Corporation)
FF Plugin: Adobe Acrobat - & gt; C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-12-24] (Adobe Inc. - & gt; Adobe Systems Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer - & gt; C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_453.dll [2020-11-26] (Adobe Inc. - & gt; )
FF Plugin-x32: @DVR/npmedia,version=3.1.0.4 - & gt; C:\Program Files (x86)\webrec\WEB30\WebPlugin\npmedia.dll [2016-12-09] () [Brak podpisu cyfrowego]
FF Plugin-x32: @DVR/npplugin,version=3.1.0.4 - & gt; C:\Program Files (x86)\webrec\WEB30\WebPlugin\npPlugin.dll [2015-08-25] (Zhejiang Dahua Technology CO.,LTD. - & gt; )
FF Plugin-x32: @DVR/npplugin,version=3.1.0.4_l - & gt; C:\Program Files (x86)\webrec\WEB30\WebView_L\npPlugin.dll [2017-09-13] (Zhejiang Dahua Technology CO.,LTD. - & gt; )
FF Plugin-x32: @DVR/npTimeGrid,version=3.1.0.4 - & gt; C:\Program Files (x86)\webrec\WEB30\WebPlugin\npTimeGrid.dll [2016-12-09] (Unauthorized copy) [Brak podpisu cyfrowego]
FF Plugin-x32: @java.com/DTPlugin,version=11.271.2 - & gt; C:\Program Files (x86)\Java\jre1.8.0_271\bin\dtplugin\npDeployJava1.dll [2020-11-16] (Oracle America, Inc. - & gt; Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.271.2 - & gt; C:\Program Files (x86)\Java\jre1.8.0_271\bin\plugin2\npjp2.dll [2020-11-16] (Oracle America, Inc. - & gt; Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - & gt; C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-10-31] (Microsoft Corporation - & gt; Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - & gt; C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-10-31] (Microsoft Corporation - & gt; Microsoft Corporation)
FF Plugin-x32: @surveillance.com/npnetsdkplayer - & gt; C:\Program Files (x86)\Surveillance Viewer\Surveillance Viewer Unity\npnetsdkplayer.dll [2017-07-11] (bcscctv - & gt; Surveillance Viewer)
FF Plugin-x32: @web.com/mycloudframe - & gt; C:\Program Files (x86)\Star4Live\Star4Live_P2P\npmycloudframe.dll [Brak pliku]
FF Plugin-x32: JFGuide - & gt; C:\Program Files (x86)\NetSurveillance\CMS\npGuide.dll [2018-12-26] () [Brak podpisu cyfrowego]
FF Plugin-x32: JFWeb - & gt; C:\Program Files (x86)\NetSurveillance\CMS\npWebPlugin.dll [2018-12-26] () [Brak podpisu cyfrowego]
FF Plugin-x32: Web Components - & gt; C:\Program Files (x86)\Web Components\npWebVideoPlugin.dll [2013-04-16] () [Brak podpisu cyfrowego]
FF Plugin HKU\S-1-5-21-3385536632-2986707316-1468309649-1003: SkypeForBusinessPlugin-16.2 - & gt; C:\Users\Michał Tomczyk\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi.dll [2019-08-03] (Microsoft Corporation - & gt; Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3385536632-2986707316-1468309649-1003: SkypeForBusinessPlugin64-16.2 - & gt; C:\Users\Michał Tomczyk\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi-x64.dll [2019-08-03] (Microsoft Corporation - & gt; Microsoft Corporation)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2020-12-16]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\!.js [2020-12-18] & lt; ==== UWAGA (Linkuje do pliku *.cfg)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2021-04-12]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\fp_mozilla_F1E.cfg [2020-12-18] & lt; ==== UWAGA
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Michał Tomczyk\AppData\Local\Google\Chrome\User Data\Default [2022-02-17]
CHR StartupUrls: Default - & gt; " hxxps://duckduckgo.com/?kl=pl-pl & kad=pl_PL & kae=d "
CHR DefaultSearchURL: Default - & gt; hxxps://duckduckgo.com/?q={searchTerms}
CHR DefaultSearchKeyword: Default - & gt; duckduckgo.com
CHR DefaultNewTabURL: Default - & gt; hxxps://duckduckgo.com/chrome_newtab
CHR DefaultSuggestURL: Default - & gt; hxxps://duckduckgo.com/ac/?q={searchTerms} & type=list
CHR Extension: (Prezentacje) - C:\Users\Michał Tomczyk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-13]
CHR Extension: (Dokumenty) - C:\Users\Michał Tomczyk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-13]
CHR Extension: (Dysk Google) - C:\Users\Michał Tomczyk\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-27]
CHR Extension: (DuckDuckGo) - C:\Users\Michał Tomczyk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2021-10-06]
CHR Extension: (YouTube) - C:\Users\Michał Tomczyk\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-09]
CHR Extension: (Arkusze) - C:\Users\Michał Tomczyk\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-12-13]
CHR Extension: (Pulpit zdalny Chrome) - C:\Users\Michał Tomczyk\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2019-07-18]
CHR Extension: (Dokumenty Google offline) - C:\Users\Michał Tomczyk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-11-19]
CHR Extension: (DuckDuckGo) - C:\Users\Michał Tomczyk\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgbpnphgnepniglilgmfoommbalaineo [2020-04-23]
CHR Extension: (Program uruchamiający aplikacje dla plików z Dysku (od Google)) - C:\Users\Michał Tomczyk\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2021-02-12]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Michał Tomczyk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-12]
CHR Extension: (Gmail) - C:\Users\Michał Tomczyk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-27]
CHR Profile: C:\Users\Michał Tomczyk\AppData\Local\Google\Chrome\User Data\System Profile [2022-02-16]
CHR HKU\S-1-5-21-3385536632-2986707316-1468309649-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
==================== Usługi (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. - & gt; Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-11-26] (Adobe Inc. - & gt; Adobe)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [99104 2021-08-20] (Apple Inc. - & gt; Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12124536 2022-01-27] (Microsoft Corporation - & gt; Microsoft Corporation)
S3 dcpm-notify; C:\Program Files\Dell\CommandPowerManager\NotifyService.exe [86048 2017-08-16] (Dell Inc - & gt; Dell Inc.)
S3 Dell.CommandPowerManager.Service; C:\WINDOWS\system32\dllhost.exe /Processid:{2DE96847-DE11-467D-BA4A-771FE35F5F45} [21312 2020-10-16] (Microsoft Windows - & gt; Microsoft Corporation)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [38592 2021-01-19] (Dell Inc - & gt; )
R2 DellFFDPWmiService; C:\WINDOWS\System32\drivers\DellFFDPWmiService.exe [41136 2020-08-28] ( " STMicroelectronics Srl " - & gt; )
R2 hostcontrolsvc; C:\WINDOWS\System32\HostControlService.exe [824424 2019-12-16] (Microsoft Windows Hardware Compatibility Publisher - & gt; Broadcom Corporation)
R2 hoststoragesvc; C:\WINDOWS\System32\HostStorageService.exe [170088 2019-12-16] (Microsoft Windows Hardware Compatibility Publisher - & gt; Broadcom Corporation)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2013-11-14] (Hewlett-Packard) [Brak podpisu cyfrowego]
S4 P2PService; C:\Program Files (x86)\Star4Live\Star4Live_P2P\CloudHttpWin32Server.exe [11264 2016-05-05] () [Brak podpisu cyfrowego]
R2 PanGPS; C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.exe [7453536 2021-04-07] (Palo Alto Networks - & gt; Palo Alto Networks)
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2013-11-14] (Hewlett-Packard) [Brak podpisu cyfrowego]
S4 QualysAgent; C:\Program Files\Qualys\QualysAgent\QualysAgent.exe [11508464 2021-07-01] (Qualys, Inc - & gt; Qualys, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6136536 2022-02-15] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
S4 SEVPNCLIENT; C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe [5881656 2020-03-11] (SoftEther Corporation - & gt; SoftEther VPN Project at University of Tsukuba, Japan.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12986664 2021-12-17] (TeamViewer Germany GmbH - & gt; TeamViewer Germany GmbH)
R2 ushupgradesvc; C:\WINDOWS\System32\UshUpgradeService.exe [274536 2019-12-16] (Microsoft Windows Hardware Compatibility Publisher - & gt; )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\NisSrv.exe [2909208 2022-02-11] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe [128376 2022-02-11] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
S4 XeroxPrintJobEventManagerService; C:\Program Files\Xerox\XeroxPrintExperience\CommonFiles\XeroxPrintJobEventManagerService.exe [506848 2021-11-24] (Xerox Corporation - & gt; Xerox Corporation)
===================== Sterowniki (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 - & gt; Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 - & gt; Apple Inc.)
S3 bcmnfcusb; C:\WINDOWS\System32\drivers\bcmnfcusb.sys [46176 2016-11-09] (Broadcom Corporation - & gt; Broadcom Corporation.)
R3 DellRbtn; C:\WINDOWS\System32\drivers\DellRbtn.sys [22864 2016-10-27] (WDKTestCert Andy_Chen6,131219483243550933 - & gt; OSR Open Systems Resources, Inc.)
R3 DellRctl; C:\WINDOWS\System32\drivers\DellRctl.sys [33608 2017-01-05] (FPT USA Corp. - & gt; )
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-11-27] (Disc Soft Ltd - & gt; Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-11-27] (Disc Soft Ltd - & gt; Disc Soft Ltd)
R1 googledrivefs3688; C:\WINDOWS\System32\DRIVERS\googledrivefs3688.sys [381456 2021-12-14] (Microsoft Windows Hardware Compatibility Publisher - & gt; Google, Inc.)
S3 gpfltdrv; C:\WINDOWS\system32\DRIVERS\gpfltdrv.sys [87712 2021-04-07] (Palo Alto Networks - & gt; Palo Alto Networks)
R3 MpKsl1015cbb2; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{4F27A753-5723-4A25-9D87-8BFA25D21B59}\MpKslDrv.sys [135440 2022-02-17] (Microsoft Windows - & gt; Microsoft Corporation)
R3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [37824 2020-03-11] (SoftEther Corporation - & gt; SoftEther Corporation)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [32352 2017-11-28] (Microsoft Windows Hardware Compatibility Publisher - & gt; Apple Inc.)
S3 PanGpd; C:\WINDOWS\system32\DRIVERS\pangpd.sys [71968 2021-04-07] (Palo Alto Networks - & gt; Palo Alto Networks Inc.)
S2 SSPORT; C:\WINDOWS\system32\Drivers\SSPORT.sys [19016 2019-05-31] (HP Inc. - & gt; )
R0 stdcfltn; C:\WINDOWS\System32\DRIVERS\stdcfltn.sys [30352 2016-10-07] (STMICROELECTRONICS S.R.L. - & gt; ST Microelectronics)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2022-02-11] (Microsoft Windows Early Launch Anti-malware Publisher - & gt; Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [438520 2022-02-11] (Microsoft Windows - & gt; Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90360 2022-02-11] (Microsoft Windows - & gt; Microsoft Corporation)
R1 Win10Pcap; C:\WINDOWS\system32\DRIVERS\Win10Pcap.sys [50304 2015-10-07] (SoftEther Corporation - & gt; Daiyuu Nobori, University of Tsukuba, Japan)
S4 CSDeviceControl; \SystemRoot\System32\drivers\CSDeviceControl.sys [X]
S4 CSFirmwareAnalysis; \SystemRoot\system32\DRIVERS\CSFirmwareAnalysis.sys [X]
S2 NPF; \??\C:\Program Files\HQ Video Management System Station\HQ Video Management System\Drivers\npf64.sys [X]
==================== NetSvcs (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
==================== Jeden miesiąc (utworzone) (filtrowane) =========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2022-02-17 21:32 - 2022-02-17 21:32 - 000035873 _____ C:\Users\Michał Tomczyk\Downloads\FRST.txt
2022-02-17 21:29 - 2022-02-17 21:32 - 000000000 ____D C:\FRST
2022-02-17 21:25 - 2022-02-17 21:25 - 002312192 _____ (Farbar) C:\Users\Michał Tomczyk\Downloads\FRST64.exe
2022-02-17 17:51 - 2022-02-17 17:51 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Local\Viber Media S.à r.l
2022-02-17 14:33 - 2022-02-17 14:34 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Local\Viber
2022-02-17 14:31 - 2022-02-17 21:11 - 000000000 ____D C:\Users\Michał Tomczyk\Documents\ViberDownloads
2022-02-17 14:31 - 2022-02-17 14:35 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Roaming\ViberPC
2022-02-17 14:31 - 2022-02-17 14:31 - 000001087 _____ C:\Users\Michał Tomczyk\AppData\Roaming\Microsoft\Windows\Start Menu\Viber.lnk
2022-02-17 14:31 - 2022-02-17 14:31 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber
2022-02-17 14:31 - 2022-02-17 14:31 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Local\Package Cache
2022-02-17 13:53 - 2022-02-17 21:11 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Roaming\WhatsApp
2022-02-17 13:53 - 2022-02-17 13:53 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2022-02-17 13:53 - 2022-02-17 13:53 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Local\WhatsApp
2022-02-17 13:19 - 2022-02-17 13:19 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3385536632-2986707316-1468309649-500
2022-02-17 09:53 - 2022-02-17 09:53 - 001031125 _____ C:\Users\Michał Tomczyk\Desktop\Zasady+naliczania+składki+zdrowotnej+dla+przedsiębiorców.pdf
2022-02-17 09:19 - 2022-02-17 09:19 - 000000000 ____D C:\Users\Administrator\AppData\Local\SolidDocuments
2022-02-17 09:19 - 2022-02-17 09:19 - 000000000 ____D C:\Users\Administrator\AppData\Local\CEF
2022-02-17 09:09 - 2022-02-17 09:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2022-02-17 09:05 - 2022-02-17 09:05 - 000000000 ____D C:\Users\Administrator\AppData\Local\Apple Computer
2022-02-17 08:13 - 2022-02-17 08:14 - 161146680 _____ (Apple Inc.) C:\Users\Michał Tomczyk\Downloads\iCloudSetup.exe
2022-02-17 08:00 - 2022-02-17 08:01 - 144137936 _____ (WhatsApp) C:\Users\Michał Tomczyk\Downloads\WhatsAppSetup.exe
2022-02-17 07:41 - 2022-02-17 07:41 - 000000000 _____ C:\WINDOWS\invcol.tmp
2022-02-16 13:36 - 2022-02-16 13:36 - 000002459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2022-02-16 13:36 - 2022-02-16 13:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Narzędzia pakietu Microsoft Office
2022-02-16 01:40 - 2022-02-16 01:40 - 000000000 ____D C:\ProgramData\Apple Inc
2022-02-16 01:33 - 2022-02-16 01:33 - 000000000 ____D C:\Users\Default\AppData\Local\D3DSCache
2022-02-16 01:32 - 2022-02-16 01:32 - 000000000 ____D C:\Users\Michał Tomczyk\Documents\FeedbackHub
2022-02-15 22:05 - 2022-02-15 22:05 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2022-02-15 22:05 - 2022-02-15 22:05 - 000011813 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-02-15 22:04 - 2022-02-15 22:04 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-02-15 22:04 - 2022-02-15 22:04 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2022-02-15 22:04 - 2022-02-15 22:04 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2022-02-15 21:59 - 2022-02-15 21:59 - 000000000 ___HD C:\$WinREAgent
2022-02-12 13:32 - 2022-02-17 21:13 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-02-11 20:12 - 2022-02-16 00:56 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2022-01-24 21:21 - 2022-01-24 21:21 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Local\SolidDocuments
2022-01-24 00:04 - 2022-01-23 22:35 - 000131072 _____ C:\WINDOWS\system32\config\sam-ms
2022-01-23 23:11 - 2022-01-23 23:12 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2022-01-23 23:11 - 2022-01-23 23:11 - 000000000 ____D C:\Program Files\Adobe
2022-01-23 23:10 - 2022-01-23 23:11 - 000000000 ____D C:\Program Files\Common Files\Adobe
2022-01-23 22:27 - 2022-02-16 01:38 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3385536632-2986707316-1468309649-1003
2022-01-23 22:20 - 2022-01-23 22:20 - 000523776 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-01-23 22:20 - 2022-01-23 22:20 - 000464384 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
==================== Jeden miesiąc (zmodyfikowane) ==================
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2022-02-17 21:32 - 2020-09-22 10:40 - 000000000 ____D C:\Users\defaultuser0
2022-02-17 21:29 - 2017-04-09 00:15 - 000000000 ____D C:\Program Files (x86)\Google
2022-02-17 21:27 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-02-17 21:14 - 2021-07-29 10:28 - 000004244 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{3AE7368A-A69B-437C-9E6A-E6957EC0AD3F}
2022-02-17 21:14 - 2017-04-08 23:56 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\LocalLow\Mozilla
2022-02-17 21:11 - 2020-09-22 11:04 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-02-17 18:14 - 2020-07-13 11:33 - 000002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-02-17 18:14 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-02-17 18:14 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-02-17 17:58 - 2020-04-10 08:38 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Local\KeePassXC
2022-02-17 17:51 - 2017-04-08 20:52 - 000000000 __SHD C:\Users\Michał Tomczyk\IntelGraphicsProfiles
2022-02-17 14:30 - 2020-09-22 11:15 - 001767984 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-02-17 14:30 - 2019-12-07 16:09 - 000787066 _____ C:\WINDOWS\system32\perfh015.dat
2022-02-17 14:30 - 2019-12-07 16:09 - 000152910 _____ C:\WINDOWS\system32\perfc015.dat
2022-02-17 14:30 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2022-02-17 14:27 - 2018-05-25 09:02 - 000000000 ____D C:\Program Files\CCleaner
2022-02-17 14:25 - 2020-09-22 11:12 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-02-17 14:25 - 2020-09-22 11:04 - 000008192 ___SH C:\DumpStack.log.tmp
2022-02-17 14:25 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-02-17 14:25 - 2017-06-02 13:42 - 000868486 _____ C:\WINDOWS\system32\CVFirmwareUpgradeLog.txt
2022-02-17 14:25 - 2017-04-08 23:49 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2022-02-17 14:25 - 2017-03-21 09:47 - 000000000 ____D C:\Intel
2022-02-17 14:24 - 2019-12-07 10:03 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2022-02-17 13:53 - 2017-06-28 04:43 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Local\SquirrelTemp
2022-02-17 13:20 - 2020-12-16 10:27 - 000003394 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3385536632-2986707316-1468309649-500
2022-02-17 13:20 - 2020-12-16 10:25 - 000002492 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-02-17 13:09 - 2020-09-22 11:12 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-02-17 11:07 - 2020-12-16 10:27 - 000000000 ____D C:\Users\Administrator\AppData\Local\PlaceholderTileLogoFolder
2022-02-17 11:07 - 2020-12-16 10:26 - 000000000 ____D C:\Users\Administrator\AppData\Local\Packages
2022-02-17 10:14 - 2018-06-20 08:44 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Local\D3DSCache
2022-02-17 10:12 - 2017-04-20 01:48 - 000000000 ___RD C:\Users\Michał Tomczyk\Dysk Google
2022-02-17 09:20 - 2021-05-18 22:49 - 000000000 ____D C:\Users\Michał Tomczyk\Desktop\Benefit Systems
2022-02-17 09:20 - 2020-09-22 10:20 - 000000000 ___DC C:\WINDOWS\Panther
2022-02-17 09:20 - 2020-07-06 14:41 - 000000000 ____D C:\Users\michal.tomczyk\AppData\Local\CrashDumps
2022-02-17 09:20 - 2019-11-24 15:25 - 000000000 ____D C:\Program Files (x86)\CommViewWiFi
2022-02-17 09:20 - 2017-04-08 20:52 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Local\VirtualStore
2022-02-17 09:19 - 2020-12-16 10:37 - 000000000 ____D C:\Users\Administrator\AppData\Local\Adobe
2022-02-17 09:19 - 2020-12-16 10:26 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe
2022-02-17 09:09 - 2017-06-05 02:24 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Roaming\Apple Computer
2022-02-17 09:09 - 2017-06-05 02:24 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Local\Apple Computer
2022-02-17 09:07 - 2020-12-16 10:26 - 000000000 __SHD C:\Users\Administrator\IntelGraphicsProfiles
2022-02-17 09:05 - 2020-12-16 10:25 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Apple Computer
2022-02-17 09:05 - 2020-12-16 10:25 - 000000000 ____D C:\Users\Administrator
2022-02-17 09:05 - 2017-06-05 02:22 - 000000000 ____D C:\Program Files\Common Files\Apple
2022-02-17 09:04 - 2020-12-16 10:26 - 000000000 ____D C:\Users\Administrator\AppData\Local\Publishers
2022-02-17 09:02 - 2020-12-16 10:26 - 000002358 _____ C:\Users\Administrator\Desktop\Microsoft Edge.lnk
2022-02-17 09:02 - 2020-12-16 10:26 - 000002338 _____ C:\Users\Administrator\Desktop\Google Chrome.lnk
2022-02-17 09:02 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-02-17 08:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\registration
2022-02-17 08:54 - 2020-10-20 20:26 - 000000000 ___RD C:\Users\Michał Tomczyk\OneDrive - Benefit Systems SA
2022-02-17 08:54 - 2020-09-22 14:12 - 000000000 ____D C:\WINDOWS\ADFS
2022-02-17 08:54 - 2020-09-22 13:43 - 000000000 ____D C:\WINDOWS\ADAM
2022-02-17 08:54 - 2020-02-04 10:54 - 000000000 ____D C:\WINDOWS\Cluster
2022-02-17 08:54 - 2019-12-07 16:12 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2022-02-17 08:54 - 2019-12-07 16:10 - 000000000 ____D C:\WINDOWS\addins
2022-02-17 08:54 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2022-02-17 08:54 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-02-17 08:54 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\schemas
2022-02-17 08:54 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-02-17 08:54 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\IME
2022-02-17 08:54 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Containers
2022-02-17 08:54 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-02-17 08:54 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2022-02-17 08:53 - 2021-12-28 00:08 - 000000000 ____D C:\WINDOWS\SystemTemp
2022-02-17 08:53 - 2020-09-22 11:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-02-17 08:53 - 2020-02-04 10:54 - 000000000 ____D C:\WINDOWS\system32\HardenedFabric
2022-02-17 08:53 - 2019-12-07 16:12 - 000000000 ___SD C:\WINDOWS\system32\AppV
2022-02-17 08:53 - 2019-12-07 16:10 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2022-02-17 08:53 - 2019-12-07 16:09 - 000000000 ____D C:\WINDOWS\SysWOW64\pl
2022-02-17 08:53 - 2019-12-07 16:08 - 000000000 ____D C:\WINDOWS\system32\pl
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\dsc
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemApps
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\MUI
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\IME
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\downlevel
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Com
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-02-17 08:53 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2022-02-17 07:55 - 2021-09-17 07:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2022-02-16 13:36 - 2021-05-24 20:59 - 000002568 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype dla firm.lnk
2022-02-16 13:36 - 2020-11-04 18:49 - 000002471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2022-02-16 13:36 - 2020-11-04 18:49 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2022-02-16 13:36 - 2020-11-04 18:49 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2022-02-16 13:36 - 2020-11-04 18:49 - 000002405 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2022-02-16 13:36 - 2020-11-04 18:49 - 000002395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2022-02-16 12:57 - 2020-06-17 14:41 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Local\CrashDumps
2022-02-16 01:41 - 2020-09-22 10:40 - 000000000 ____D C:\Users\Michał Tomczyk
2022-02-16 01:40 - 2021-06-20 19:55 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Local\Apple Inc
2022-02-16 01:38 - 2020-09-22 11:12 - 000003398 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3385536632-2986707316-1468309649-1003
2022-02-16 01:38 - 2020-09-22 10:40 - 000002499 _____ C:\Users\Michał Tomczyk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-02-16 01:38 - 2018-06-15 08:19 - 000000000 ____D C:\ProgramData\Packages
2022-02-16 01:38 - 2017-11-02 11:45 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Local\PlaceholderTileLogoFolder
2022-02-16 01:38 - 2017-11-02 11:33 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Local\Packages
2022-02-16 00:57 - 2020-09-22 11:04 - 000660600 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-02-16 00:57 - 2017-04-20 00:55 - 000000000 ____D C:\Program Files\Microsoft Office
2022-02-16 00:56 - 2017-04-08 23:56 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-02-16 00:52 - 2019-12-07 16:12 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-02-16 00:46 - 2020-12-18 09:37 - 000000000 ____D C:\WINDOWS\Minidump
2022-02-16 00:46 - 2018-01-12 23:00 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Roaming\uTorrent
2022-02-16 00:46 - 2017-04-21 11:40 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Roaming\TeamViewer
2022-02-15 22:07 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-02-15 22:04 - 2020-09-22 11:05 - 002877440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-02-15 21:59 - 2021-05-05 11:58 - 000000000 ____D C:\ProgramData\Intel Package Cache {1CEAC85D-2590-4760-800F-8DE5E91F3700}
2022-02-15 21:59 - 2020-07-24 15:00 - 000000000 ____D C:\ProgramData\Intel
2022-02-15 21:59 - 2017-06-02 13:41 - 000000000 ____D C:\Program Files\Intel
2022-02-15 21:59 - 2017-04-25 06:25 - 000000000 ____D C:\ProgramData\Package Cache
2022-02-15 21:58 - 2017-05-13 19:18 - 000000000 ____D C:\Program Files (x86)\Intel
2022-02-15 21:58 - 2017-03-28 15:19 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-02-15 21:57 - 2020-08-09 19:26 - 000000000 ____D C:\Program Files\Dell
2022-02-15 21:54 - 2017-04-09 00:15 - 000002307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-02-15 21:54 - 2017-03-28 15:19 - 149611728 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-02-12 13:32 - 2019-01-30 14:06 - 000000000 ____D C:\ProgramData\Mozilla
2022-02-12 13:32 - 2017-04-20 01:46 - 000001350 _____ C:\Users\Michał Tomczyk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\firefox.lnk
2022-02-11 20:12 - 2018-03-01 09:36 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-02-11 20:11 - 2021-09-03 11:08 - 000002057 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2022-02-11 20:11 - 2021-09-03 11:08 - 000001899 _____ C:\Users\Default\Desktop\Google Slides.lnk
2022-02-11 20:11 - 2021-09-03 11:08 - 000001899 _____ C:\Users\Default\Desktop\Google Sheets.lnk
2022-02-11 20:11 - 2021-09-03 11:08 - 000001887 _____ C:\Users\Default\Desktop\Google Docs.lnk
2022-02-02 10:08 - 2020-09-22 11:12 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-02-02 10:08 - 2020-09-22 11:12 - 000003386 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-01-24 21:21 - 2017-04-08 20:52 - 000000000 ____D C:\Users\Michał Tomczyk\AppData\Roaming\Adobe
2022-01-23 23:12 - 2020-09-22 11:12 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-01-23 23:10 - 2017-04-08 22:48 - 000000000 ____D C:\ProgramData\Adobe
2022-01-23 22:24 - 2020-09-22 11:12 - 000003570 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-01-23 22:24 - 2020-09-22 11:12 - 000003446 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
==================== Pliki w katalogu głównym wybranych folderów ========
2020-02-20 19:33 - 2020-10-16 11:36 - 000120091 _____ () C:\Program Files (x86)\CMS Setup Log.txt
2020-02-20 19:46 - 2020-02-20 19:46 - 000025019 _____ () C:\Program Files (x86)\CMS Uninstall Log.txt
2018-02-01 14:33 - 2018-02-01 14:33 - 000000084 _____ () C:\Users\Michał Tomczyk\AppData\Roaming\Camdata.ini
2018-02-01 14:33 - 2018-02-01 14:33 - 000000408 _____ () C:\Users\Michał Tomczyk\AppData\Roaming\CamLayout.ini
2018-02-01 14:33 - 2018-02-01 14:33 - 000000408 _____ () C:\Users\Michał Tomczyk\AppData\Roaming\CamShapes.ini
2018-02-01 14:33 - 2018-02-01 14:33 - 000004528 _____ () C:\Users\Michał Tomczyk\AppData\Roaming\CamStudio.cfg
2018-02-01 15:14 - 2018-02-01 15:14 - 000000299 _____ () C:\Users\Michał Tomczyk\AppData\Roaming\uninstall.bat
2018-02-01 14:23 - 2018-02-01 14:23 - 000000096 _____ () C:\Users\Michał Tomczyk\AppData\Roaming\version2.xml
2019-11-16 13:18 - 2019-11-16 13:21 - 000028400 _____ () C:\Users\Michał Tomczyk\AppData\Roaming\Wartości oddzielone przecinkami.ADR
2017-11-08 16:46 - 2020-04-21 09:14 - 000000600 _____ () C:\Users\Michał Tomczyk\AppData\Local\PUTTY.RND
2017-08-30 08:59 - 2021-07-20 20:52 - 000007688 _____ () C:\Users\Michał Tomczyk\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
==================== Koniec FRST.txt ========================