Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 24-05-2020 01
- Uruchomiony przez kl (administrator) KL-KOMPUTER (25-05-2020 11:22:30)
- Uruchomiony z C:\Users\kl\Desktop
- Załadowane profile: kl
- Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
- Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
- Tryb startu: Normal
- Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
- ==================== Procesy (filtrowane) =================
- (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
- () [Brak podpisu cyfrowego] C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
- (Advanced Micro Devices Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
- (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
- (ATI Technologies Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
- (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
- (GG Network S.A. -> GG Network S.A.) C:\Program Files (x86)\Gadu-Gadu 10\gg.exe
- (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
- (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
- (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
- (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
- (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
- (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
- (Microsoft Corporation) [Brak podpisu cyfrowego] C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
- (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
- (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
- (Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <10>
- (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
- (Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
- (Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7>
- (Valve -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
- ==================== Rejestr (filtrowane) ===================
- (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
- HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12681320 2011-08-25] (Realtek Semiconductor Corp -> Realtek Semiconductor)
- HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
- HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-25] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego]
- HKU\S-1-5-21-2303417795-1636681810-1638741690-1000\...\MountPoints2: {533d1ca8-d4f0-11e3-846e-5404a68499e5} - F:\LGAutoRun.exe
- HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
- HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.138\Installer\chrmstp.exe [2020-05-08] (Google LLC -> Google LLC)
- HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
- HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
- HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
- Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2017-01-16]
- ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe () [Brak podpisu cyfrowego]
- ==================== Zaplanowane zadania (filtrowane) ============
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- Task: {0A3044E0-FBEF-4130-8E48-381DD3622FEA} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_371_Plugin.exe [1458232 2020-05-13] (Adobe Inc. -> Adobe)
- Task: {16418F88-B42A-454D-9EDE-896338F14EFA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
- Task: {836E3EC0-B508-4451-8D9F-B1ED9D80F2C1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-05-13] (Adobe Inc. -> Adobe)
- Task: {90AC373E-5E94-4E44-A622-FEC8F9D356BC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [3129184 2012-09-24] (Piriform Ltd -> Piriform Ltd)
- Task: {AF5403A0-153E-44B7-9040-DEDD70EBFFB9} - System32\Tasks\{7DDCF5C6-C710-45D4-AEC7-FC6B37EFBDD6} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- Task: {BB814F18-DA92-4F89-9ABC-DEF2B4586A2C} - System32\Tasks\{3C8EBC94-763D-421C-810C-400B4214F865} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- Task: {E84E22C5-851D-4E9A-8AE2-5087A83B3D1A} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [127176 2020-05-08] (Mozilla Corporation -> Mozilla Foundation)
- Task: {FA39EDD3-0074-4D68-879B-C726967FFEEC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
- (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
- ==================== Internet (filtrowane) ====================
- (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
- Winsock: Catalog5 07 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [134528 2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
- Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [134528 2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
- Winsock: Catalog5-x64 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [168304 2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
- Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [168304 2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
- Tcpip\Parameters: [DhcpNameServer] 192.168.8.1
- Tcpip\..\Interfaces\{0499B856-60FA-4AF3-8C11-534AE630A357}: [DhcpNameServer] 194.204.152.34 194.204.159.1
- Tcpip\..\Interfaces\{16C9F0CC-C2B0-4520-BE79-0F32BDFB765C}: [DhcpNameServer] 194.204.152.34 194.204.159.1
- Tcpip\..\Interfaces\{55A4A2C0-2A5F-4A2F-910E-DBF635C8FEA1}: [DhcpNameServer] 194.204.152.34 194.204.159.1
- Tcpip\..\Interfaces\{68DA1C05-5D94-4A4D-96E0-B5BEBB55E8BE}: [DhcpNameServer] 194.204.152.34 194.204.159.1
- Tcpip\..\Interfaces\{781DD7C8-FF24-409F-B27F-A0A1324967F3}: [NameServer] 8.8.8.8,8.8.4.4
- Tcpip\..\Interfaces\{781DD7C8-FF24-409F-B27F-A0A1324967F3}: [DhcpNameServer] 192.168.1.1
- Tcpip\..\Interfaces\{7E04BFED-3378-4E1F-AEA4-0734AF2BF84F}: [DhcpNameServer] 194.204.152.34 194.204.159.1
- Tcpip\..\Interfaces\{97D91FCC-6CD7-4DDA-B177-B3D2A5386740}: [DhcpNameServer] 194.204.152.34 194.204.159.1
- Tcpip\..\Interfaces\{CD71B0A4-A583-4CD6-B65C-C914B66F9ABA}: [DhcpNameServer] 10.0.0.1
- Tcpip\..\Interfaces\{D7FEEBB0-C76C-4933-9299-E7BEEEFB0603}: [DhcpNameServer] 192.168.8.1
- Internet Explorer:
- ==================
- SearchScopes: HKLM-x32 -> DefaultScope - brak wartości
- BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
- BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2005-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
- BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-06-21] (Oracle America, Inc. -> Oracle Corporation)
- BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
- BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-06-21] (Oracle America, Inc. -> Oracle Corporation)
- DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
- FireFox:
- ========
- FF DefaultProfile: ujbg7wq7.default-1377201318639
- FF ProfilePath: C:\Users\kl\AppData\Roaming\Mozilla\Firefox\Profiles\ujbg7wq7.default-1377201318639 [2020-05-25]
- FF Homepage: Mozilla\Firefox\Profiles\ujbg7wq7.default-1377201318639 -> hxxps://www.google.pl
- FF Notifications: Mozilla\Firefox\Profiles\ujbg7wq7.default-1377201318639 -> hxxps://poczta.onet.pl; hxxps://www.fanatical.com
- FF Extension: (Webutation) - C:\Users\kl\AppData\Roaming\Mozilla\Firefox\Profiles\ujbg7wq7.default-1377201318639\Extensions\{15fe27f3-e5ab-2d59-4c5c-dadc7945bdbd}.xpi [2016-04-27] [Przestarzałe]
- FF Extension: (Adblock Plus - darmowy adblocker) - C:\Users\kl\AppData\Roaming\Mozilla\Firefox\Profiles\ujbg7wq7.default-1377201318639\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-04-01]
- FF Extension: (Dark Fox) - C:\Users\kl\AppData\Roaming\Mozilla\Firefox\Profiles\ujbg7wq7.default-1377201318639\Extensions\{e7fe4ffe-f256-4f85-906d-072fdd698585}.xpi [2019-05-13]
- FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_371.dll [2020-05-13] (Adobe Inc. -> )
- FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll [2013-09-14] (Oracle America, Inc. -> Oracle Corporation)
- FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
- FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
- FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_371.dll [2020-05-13] (Adobe Inc. -> )
- FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google Inc -> Google)
- FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2012-10-22] (Oracle America, Inc. -> Oracle Corporation)
- FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\new_plugin\npjp2.dll [Brak pliku]
- FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-06-21] (Oracle America, Inc. -> Oracle Corporation)
- FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
- FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
- FF Plugin HKU\S-1-5-21-2303417795-1636681810-1638741690-1000: @zoom.us/ZoomVideoPlugin -> C:\Users\kl\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2020-04-09] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
- FF Plugin HKU\S-1-5-21-2303417795-1636681810-1638741690-1000: ubisoft.com/uplaypc -> D:\ubisoft game launcher\npuplaypc.dll [2020-01-28] (Ubisoft Entertainment Sweden AB -> )
- Chrome:
- =======
- CHR DefaultProfile: Default
- CHR Profile: C:\Users\kl\AppData\Local\Google\Chrome\User Data\Default [2020-05-25]
- CHR Notifications: Default -> hxxps://www.facebook.com; hxxps://www.ipla.tv
- CHR HomePage: Default -> hxxp://www.google.com
- CHR StartupUrls: Default -> "hxxp://www.google.com"
- CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\kl\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-13]
- CHR Extension: (Chrome Media Router) - C:\Users\kl\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-22]
- ==================== Usługi (filtrowane) ===================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [204288 2011-05-25] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
- R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-05-25] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego]
- S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Brak podpisu cyfrowego]
- S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-04-13] (Malwarebytes Inc -> Malwarebytes)
- R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Brak podpisu cyfrowego]
- R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
- R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
- S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2158912 2018-03-28] (Electronic Arts, Inc. -> Electronic Arts)
- S4 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3028808 2018-03-28] (Electronic Arts, Inc. -> Electronic Arts)
- R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2011-12-29] (Even Balance, Inc. -> )
- S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
- R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2291568 2009-08-18] (Microsoft Corporation -> Microsoft Corporation)
- ===================== Sterowniki (filtrowane) ===================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- R3 amdiox64; C:\Windows\System32\DRIVERS\amdiox64.sys [46136 2010-02-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
- R3 amdkmdag; C:\Windows\System32\DRIVERS\atikmdag.sys [9359872 2011-05-25] (Microsoft Windows Hardware Compatibility Publisher -> ATI Technologies Inc.)
- R3 amdkmdap; C:\Windows\System32\DRIVERS\atikmpag.sys [309760 2011-05-25] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
- R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13368 2009-04-06] (ASUSTeK Computer Inc. -> )
- S3 athrusb; C:\Windows\System32\DRIVERS\athrxusb.sys [1075712 2008-07-29] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
- R3 athur; C:\Windows\System32\DRIVERS\athurx.sys [1930240 2014-05-23] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
- R0 AtiPcie; C:\Windows\System32\DRIVERS\AtiPcie.sys [16440 2010-05-20] (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.)
- R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-01-22] (Tages SA -> )
- S3 cpuz148; C:\Windows\temp\cpuz148\cpuz148_x64.sys [35360 2019-09-22] (CPUID S.A.R.L.U. -> CPUID)
- R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-01-22] (Tages SA -> )
- R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)
- R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] (ASUSTeK Computer Inc. -> )
- S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.)
- R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)
- R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-09-26] (Disc Soft Ltd -> Duplex Secure Ltd.)
- ==================== NetSvcs (filtrowane) ===================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- ==================== Jeden miesiąc (utworzone) ===================
- (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
- 2020-05-25 11:22 - 2020-05-25 11:23 - 000017944 _____ C:\Users\kl\Desktop\FRST.txt
- 2020-05-25 09:39 - 2020-05-25 09:39 - 002286592 _____ (Farbar) C:\Users\kl\Desktop\FRST64(1).exe
- 2020-05-23 17:43 - 2020-05-24 15:58 - 000000000 ____D C:\Users\kl\Desktop\Recovered
- 2020-05-23 16:39 - 2020-04-23 19:04 - 001702512 _____ (Defiant Technologies, LLC) C:\Users\kl\Desktop\DiskDigger.exe
- 2020-05-23 16:38 - 2020-05-23 16:39 - 000626497 _____ C:\Users\kl\Desktop\diskdigger.zip
- 2020-05-23 16:07 - 2020-05-23 16:07 - 000000000 ____D C:\Users\kl\AppData\Roaming\DiskTuna
- 2020-05-23 15:27 - 2020-05-23 15:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters
- 2020-05-23 15:27 - 2020-05-23 15:27 - 000000000 ____D C:\Program Files (x86)\LAV Filters
- 2020-05-23 15:26 - 2020-05-23 16:03 - 000000000 ____D C:\ProgramData\Wondershare
- 2020-05-22 11:37 - 2020-05-22 11:37 - 000000000 ____D C:\Users\kl\AppData\LocalLow\GUTS Department
- 2020-05-21 20:59 - 2020-05-21 20:59 - 000000222 _____ C:\Users\kl\Desktop\Aegis Defenders.url
- 2020-05-20 09:51 - 2020-05-20 10:18 - 000000000 ____D C:\Users\kl\AppData\Local\gameName
- 2020-05-17 20:13 - 2020-05-17 20:13 - 000000222 _____ C:\Users\kl\Desktop\This Book Is A Dungeon.url
- 2020-05-15 21:24 - 2020-05-15 21:24 - 000060273 _____ C:\Users\kl\Downloads\pko_trans_details_20200515_212009.pdf
- 2020-05-15 11:41 - 2020-05-15 11:41 - 000000000 ____D C:\Users\kl\AppData\LocalLow\Paper Castle Games
- 2020-05-13 11:29 - 2020-05-13 11:29 - 006136376 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
- 2020-05-08 23:34 - 2020-05-10 09:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
- 2020-05-06 13:56 - 2020-05-06 13:56 - 000000000 ____D C:\Users\kl\AppData\LocalLow\Vladis Fire
- 2020-04-28 21:45 - 2020-04-28 21:45 - 000000000 ____D C:\Users\kl\AppData\Local\GameAnalytics
- ==================== Jeden miesiąc (zmodyfikowane) ==================
- (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
- 2020-05-25 11:23 - 2017-11-09 11:06 - 000000000 ____D C:\FRST
- 2020-05-25 09:20 - 2015-09-10 11:49 - 000000000 ____D C:\Program Files (x86)\Steam
- 2020-05-25 09:16 - 2009-07-14 06:45 - 000028528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
- 2020-05-25 09:16 - 2009-07-14 06:45 - 000028528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
- 2020-05-25 09:14 - 2016-11-19 11:43 - 000000000 ____D C:\Users\kl\AppData\LocalLow\Mozilla
- 2020-05-25 09:07 - 2011-04-12 15:21 - 000740438 _____ C:\Windows\system32\perfh015.dat
- 2020-05-25 09:07 - 2011-04-12 15:21 - 000156012 _____ C:\Windows\system32\perfc015.dat
- 2020-05-25 09:07 - 2009-07-14 07:13 - 001670590 _____ C:\Windows\system32\PerfStringBackup.INI
- 2020-05-25 09:07 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
- 2020-05-25 09:01 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
- 2020-05-24 17:03 - 2019-12-23 14:46 - 000000000 ____D C:\Users\kl\Documents\selde
- 2020-05-24 16:14 - 2019-11-27 00:28 - 000000000 ____D C:\Users\kl\Documents\per aspera
- 2020-05-24 15:25 - 2019-10-12 16:51 - 000000000 ____D C:\Users\kl\Desktop\studia
- 2020-05-24 09:09 - 2015-05-14 09:56 - 000430264 _____ C:\Windows\system32\FNTCACHE.DAT
- 2020-05-23 16:22 - 2018-05-20 22:31 - 000000000 ___RD C:\Users\kl\Desktop\Składowisko plików wszelakich
- 2020-05-23 16:07 - 2015-05-14 09:59 - 000115040 _____ C:\Users\kl\AppData\Local\GDIPFONTCACHEV1.DAT
- 2020-05-23 15:20 - 2015-10-15 20:51 - 000000000 ____D C:\Users\kl\Documents\Gladiatus
- 2020-05-20 19:52 - 2012-11-18 19:20 - 000000000 ____D C:\Users\kl\Documents\Euro Truck Simulator 2
- 2020-05-17 22:32 - 2014-11-17 19:22 - 000000000 ___HD C:\Users\kl\al
- 2020-05-15 11:36 - 2014-08-14 14:22 - 000000000 ____D C:\ProgramData\Package Cache
- 2020-05-14 20:48 - 2013-11-12 18:09 - 000000000 ____D C:\Users\kl\AppData\Roaming\Audacity
- 2020-05-14 00:11 - 2013-07-30 23:43 - 000000000 ____D C:\Windows\system32\MRT
- 2020-05-14 00:02 - 2012-10-22 01:27 - 120636720 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
- 2020-05-13 15:40 - 2012-11-04 21:55 - 000000000 ____D C:\Users\kl\.gimp-2.8
- 2020-05-13 11:29 - 2018-03-13 16:29 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Flash Player NPAPI Notifier
- 2020-05-13 11:29 - 2012-10-22 01:32 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
- 2020-05-13 11:29 - 2012-10-22 01:32 - 000004412 _____ C:\Windows\system32\Tasks\Adobe Flash Player Updater
- 2020-05-13 11:29 - 2012-01-16 21:47 - 000000000 ____D C:\Windows\system32\Macromed
- 2020-05-13 11:29 - 2011-12-25 22:52 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
- 2020-05-13 11:29 - 2011-12-24 23:08 - 000000000 ____D C:\Windows\SysWOW64\Macromed
- 2020-05-10 09:08 - 2012-06-24 09:27 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
- 2020-05-08 09:13 - 2011-12-23 00:21 - 000002230 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
- 2020-05-08 09:13 - 2011-12-23 00:21 - 000002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
- 2020-05-08 09:13 - 2011-12-23 00:21 - 000002189 _____ C:\ProgramData\Desktop\Google Chrome.lnk
- 2020-05-05 14:53 - 2019-10-12 17:40 - 000000000 ____D C:\Users\kl\Desktop\zysk i ska
- ==================== Pliki w katalogu głównym wybranych folderów ========
- 2012-01-16 21:37 - 2019-06-26 09:47 - 000187904 _____ () C:\Users\kl\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
- 2018-07-26 16:35 - 2018-07-26 16:35 - 000006962 _____ () C:\Users\kl\AppData\Local\recently-used.xbel
- 2013-07-28 10:03 - 2018-02-16 13:46 - 000007597 _____ () C:\Users\kl\AppData\Local\Resmon.ResmonCfg
- ==================== SigCheck ============================
- (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
- LastRegBack: 2020-05-17 13:55
- ==================== Koniec FRST.txt ========================
Add Comment
Please, Sign In to add comment