nie można znaleźć pliku skryptu: jscript9.dll.mui.js".

Question

Cześć. Ostatnio wyskakuje mi komunikat na pulpicie. Może być spowodowane to tym że miałem wirusa na komputerze i w trakcie walki z nim i finalnym usunięciem zaczęło wyskakiwać mi okienko "windows script host" o treści:

nie można znaleźć pliku skryptu "C:\Windows\Web\Wallpaper\jscript9.dll.mui.js".

Proszę o poradę, co mogę zrobić żeby mi się to nie wyświetlało? jak to naprawić?

mati12_14 · Answer

Możesz wrzucić zrzut ekranu z błędem?
Sprawdziłem na szybko i wydaje mi się, że tego pliku w ogóle nie powinno być w systemie - to prawdopodobnie część jakiegoś trojana ukrywająca się w systemie

Żabson44 · Answer

windows 11

mati12_14 · Answer

Myślę że ten wątek powinien się znaleźć w dziale "Pogotowie antywirusowe"
Spróbuj sprawdzić w harmonogramie zadań co może to odpalać, albo odpal skrypt PowerShell i podrzuć wynik

Get-ScheduledTask | foreach {Write-Host $_.TaskName;$_.Actions}

dt1 · Answer

Wrzuć logi ze skanowania programem FRST do analizy.

Żabson44 · Answer

Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 19.04.2024 01
Uruchomiony przez Żaba (administrator) DESKTOP-58OQ4EB (Gigabyte Technology Co., Ltd. H610M S2H DDR4) (23-04-2024 20:56:59)
Uruchomiony z C:\Users\Piotr\Downloads\Programs\FRST64.exe
Załadowane profile: Żaba
Platforma: Microsoft Windows 11 Home Wersja 23H2 22631.3447 (X64) Język: Polski (Polska)
Domyślna przeglądarka: FF
Tryb startu: Normal

Spoiler:

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

() [Brak podpisu cyfrowego] C:\Program Files (x86)\Kalendarz XP\Kalendarz.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Pro 8.3\DTShellHlp.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (AntGROUP) [Brak podpisu cyfrowego] C:\Program Files (x86)\Ant Download Manager\antFF\antFF.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(C:\Program Files\WindowsApps\MicrosoftTeams_24060.3102.2733.5911_x64__8wekyb3d8bbwe\msteams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.51\msedgewebview2.exe <6>
(explorer.exe ->) (ACD Systems International Inc. -> ) [Brak podpisu cyfrowego] C:\Program Files\ACD Systems\ACDSee Ultimate\14.0\ACDSeeCommanderUltimate14.exe
(explorer.exe ->) (ACD Systems International Inc. -> ACD Systems) [Brak podpisu cyfrowego] C:\Program Files\ACD Systems\ACDSee Ultimate\14.0\acdIDInTouch2.exe
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Pro 8.3\DTAgent.exe
(explorer.exe ->) (PeerBlock, LLC -> PeerBlock, LLC) C:\Program Files\PeerBlock 1.2\peerblock.exe
(explorer.exe ->) (Tonec Inc.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <19>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <14>
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Pro 8.3\DiscSoftBusServicePro.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe
(services.exe ->) (Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_1b5e80ff87b1f5c8\Display.NvContainer\NVDisplay.Container.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.1301.450.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [ACUW14EN] => C:\Program Files\ACD Systems\ACDSee Ultimate\14.0\acdIDInTouch2.exe [2088408 2022-11-01] (ACD Systems International Inc. -> ACD Systems) [Brak podpisu cyfrowego]
HKLM-x32\...\Run: [Kalendarz XP] => C:\Program Files (x86)\Kalendarz XP\Kalendarz.exe [1194496 2007-05-06] () [Brak podpisu cyfrowego]
HKLM-x32\...\Run: [UPNP Manager] => C:\Program Files (x86)\UPNP Manager\upnpmgr.exe [39400 2022-05-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3478108254-1136682308-626092646-1001\...\Run: [ACDSeeCommanderUltimate14] => C:\Program Files\ACD Systems\ACDSee Ultimate\14.0\ACDSeeCommanderUltimate14.exe [6728864 2022-11-01] (ACD Systems International Inc. -> ) [Brak podpisu cyfrowego]
HKU\S-1-5-21-3478108254-1136682308-626092646-1001\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files\DAEMON Tools Pro 8.3\DTAgent.exe [4765040 2020-05-14] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-3478108254-1136682308-626092646-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [5862400 2023-01-12] (Tonec Inc.) [Brak podpisu cyfrowego]
HKU\S-1-5-21-3478108254-1136682308-626092646-1001\...\Run: [PeerBlock] => C:\Program Files\PeerBlock 1.2\peerblock.exe [2513992 2014-01-14] (PeerBlock, LLC -> PeerBlock, LLC)
HKU\S-1-5-21-3478108254-1136682308-626092646-1001\...\Run: [MicrosoftEdgeAutoLaunch_89C6CAEBF8A17E34C3550DAA0F4B2986] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4082112 2024-04-18] (Microsoft Corporation -> Microsoft Corporation)
GroupPolicy: Ograniczenia ? <==== UWAGA
Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA

==================== Zaplanowane zadania (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {5A16D812-AEA2-4F2F-A73A-2826F9BB96F5} - System32\Tasks\DLL-Files.Com Fixer_MONTHLY => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe scan (Brak pliku)
Task: {E76449B6-FEF5-4281-8687-D518914D8BE0} - System32\Tasks\DLL-Files.Com Fixer_Updates => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe -updatecheck (Brak pliku)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Brak pliku)
Task: {F2AFC396-1737-4077-BF7D-1BF59CD3DE9F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6A886254-F4EA-48B6-8075-F8F75E10504C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {557FE90F-85CB-4C57-B09B-2063F34F8766} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7157779B-DFFE-443C-A14A-E1F644D5F21F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B9A8D9E0-DAE1-4854-85E7-614D2AD4D69F} - System32\Tasks\Microsoft\Windows\WOF\UsageDataRUXIMTŻaba => C:\Windows\Web\Wallpaper\jscript9.dll.mui.js (Brak pliku)
Task: {99998493-E4C8-4680-9568-477911C48BB4} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34720 2024-04-07] (Mozilla Corporation -> Mozilla Foundation)
Task: {73B2A653-A080-4CCC-AB43-B310EE04BAFE} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [7018264 2018-07-19] (Nero AG -> Nero AG)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

Task: C:\WINDOWS\Tasks\DLL-Files.Com Fixer_MONTHLY.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
Task: C:\WINDOWS\Tasks\DLL-Files.Com Fixer_Updates.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 194.24.244.3 194.24.244.4
Tcpip\..\Interfaces\{5294a947-63c7-4695-ba3a-b39895c46e14}: [DhcpNameServer] 194.24.244.3 194.24.244.4
Tcpip\..\Interfaces\{5294a947-63c7-4695-ba3a-b39895c46e14}: [DhcpDomain] home

Edge:
=======
Edge Profile: C:\Users\Piotr\AppData\Local\Microsoft\Edge\User Data\Default [2024-04-23]
Edge Extension: (Dokumenty Google offline) - C:\Users\Piotr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-29]
Edge Extension: (Edge relevant text changes) - C:\Users\Piotr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-29]
Edge Extension: (IDM Integration Module) - C:\Users\Piotr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\llbjbkhnmlidjebalopleeepgdfgcpec [2024-04-22]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKU\S-1-5-21-3478108254-1136682308-626092646-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [llbjbkhnmlidjebalopleeepgdfgcpec] - C:\Program Files (x86)\Internet Download Manager\IDMEdgeExt.crx [2022-03-24]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]

FireFox:
========
FF DefaultProfile: o0wh9ibp.default
FF ProfilePath: C:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\o0wh9ibp.default [2022-10-27]
FF Homepage: Mozilla\Firefox\Profiles\o0wh9ibp.default -> hxxps://www.google.com/
FF ProfilePath: C:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\tb3gk8ra.default-release [2024-04-23]
FF DownloadDir: C:\Users\Piotr\Desktop
FF Homepage: Mozilla\Firefox\Profiles\tb3gk8ra.default-release -> www.wp.pl
FF Session Restore: Mozilla\Firefox\Profiles\tb3gk8ra.default-release -> [funkcja włączona]
FF Notifications: Mozilla\Firefox\Profiles\tb3gk8ra.default-release -> hxxps://www.filmweb.pl
FF Extension: (Download with Ant Download Manager) - C:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\tb3gk8ra.default-release\Extensions\antffw@antdownloadmanager.com.xpi [2023-06-09]
FF Extension: (IDM Integration Module) - C:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\tb3gk8ra.default-release\Extensions\mozilla_cc3@internetdownloadmanager.com.xpi [2024-01-19]
FF Extension: (uBlock Origin) - C:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\tb3gk8ra.default-release\Extensions\uBlock0@raymondhill.net.xpi [2024-04-15]
FF Extension: (Allow Right-Click) - C:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\tb3gk8ra.default-release\Extensions\{278b0ae0-da9d-4cc6-be81-5aa7f3202672}.xpi [2024-02-16]
FF HKU\S-1-5-21-3478108254-1136682308-626092646-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Piotr\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Piotr\AppData\Roaming\IDM\idmmzcc5 [2023-01-12] [Przestarzałe] [Brak podpisu cyfrowego]
FF HKU\S-1-5-21-3478108254-1136682308-626092646-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] [Przestarzałe]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2022-03-24]
CHR HKU\S-1-5-21-3478108254-1136682308-626092646-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2022-03-24]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2022-03-24]

Opera:
=======
OPR DefaultProfile: Default

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 Disc Soft Pro Bus Service; C:\Program Files\DAEMON Tools Pro 8.3\DiscSoftBusServicePro.exe [2863472 2020-05-14] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8884840 2024-04-22] (Malwarebytes Inc. -> Malwarebytes)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe [3199648 2024-04-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe [133576 2024-04-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 GigabyteUpdateService; C:\WINDOWS\system32\GigabyteUpdateService.exe [611752 2024-04-23] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_1b5e80ff87b1f5c8\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_1b5e80ff87b1f5c8\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 dtproscsibus; C:\WINDOWS\System32\drivers\dtproscsibus.sys [42472 2022-11-24] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223296 2024-04-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-02-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2024-04-22] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MpKsl6730f723; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1B395EA4-4EB9-4049-BA9C-939C14C5EE2C}\MpKslDrv.sys [301336 2024-04-23] (Microsoft Windows -> Microsoft Corporation)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2022-10-07] (Nvidia Corporation -> NVIDIA Corporation)
R3 pbfilter; C:\Program Files\PeerBlock 1.2\pbfilter.sys [22600 2014-01-14] (PeerBlock, LLC -> )
R0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20936 2024-04-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [601376 2024-04-15] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105760 2024-04-15] (Microsoft Windows -> Microsoft Corporation)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2024-04-23 20:56 - 2024-04-23 20:57 - 000000000 ____D C:\FRST
2024-04-23 20:49 - 2024-04-23 20:49 - 000000000 ____D C:\bases
2024-04-23 19:09 - 2024-04-23 19:09 - 000798244 _____ C:\WINDOWS\system32\perfh015.dat
2024-04-23 19:09 - 2024-04-23 19:09 - 000158294 _____ C:\WINDOWS\system32\perfc015.dat
2024-04-23 18:32 - 2024-04-23 18:32 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\Microsoft\HTML Help
2024-04-23 18:31 - 2024-04-23 18:31 - 000227392 _____ C:\WINDOWS\system32\lc.dat
2024-04-23 18:02 - 2024-04-23 18:02 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2024-04-23 18:01 - 2024-04-23 19:09 - 001797768 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-04-23 18:00 - 2024-04-23 19:02 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-04-23 18:00 - 2024-04-23 18:00 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2024-04-23 18:00 - 2024-04-23 18:00 - 000011433 _____ C:\WINDOWS\diagerr.xml
2024-04-23 18:00 - 2024-04-23 18:00 - 000003570 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{CA595B97-EDF3-49C9-914E-E4D32FD9238F}
2024-04-23 18:00 - 2024-04-23 18:00 - 000003346 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{5F928A1B-57F0-42DF-9E96-1C53381F7997}
2024-04-23 18:00 - 2024-04-23 18:00 - 000002766 _____ C:\WINDOWS\system32\Tasks\DLL-Files.Com Fixer_Updates
2024-04-23 18:00 - 2024-04-23 18:00 - 000002752 _____ C:\WINDOWS\system32\Tasks\DLL-Files.Com Fixer_MONTHLY
2024-04-23 18:00 - 2024-04-23 18:00 - 000000266 __RSH C:\ProgramData\ntuser.pol
2024-04-23 18:00 - 2024-04-23 18:00 - 000000020 ___SH C:\Users\Piotr\ntuser.ini
2024-04-23 18:00 - 2024-04-23 18:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\Outbyte
2024-04-23 18:00 - 2024-04-23 18:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\Nero
2024-04-23 18:00 - 2024-04-23 18:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2024-04-23 18:00 - 2024-04-23 18:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2024-04-23 17:59 - 2024-04-23 19:02 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2024-04-23 17:59 - 2024-04-23 18:00 - 000000000 ____D C:\Windows.old
2024-04-23 17:59 - 2024-04-23 17:59 - 000510264 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-04-23 17:59 - 2024-04-23 17:59 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-04-23 17:59 - 2024-04-23 17:59 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Network
2024-04-23 17:24 - 2024-04-23 17:59 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\Microsoft\Crypto
2024-04-23 17:24 - 2024-04-23 17:24 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\Microsoft\SystemCertificates
2024-04-23 17:24 - 2024-04-23 17:24 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\Microsoft\Network
2024-04-23 17:23 - 2024-04-23 17:59 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2024-04-23 17:22 - 2024-04-23 20:53 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\Microsoft\Windows
2024-04-23 17:22 - 2024-04-23 18:00 - 000000000 ____D C:\Users\Piotr
2024-04-23 17:22 - 2024-04-23 17:59 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\Microsoft\Spelling
2024-04-23 17:22 - 2024-04-23 17:23 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2024-04-23 17:22 - 2024-04-23 17:22 - 000000000 _SHDL C:\Users\Piotr\Ustawienia lokalne
2024-04-23 17:22 - 2024-04-23 17:22 - 000000000 _SHDL C:\Users\Piotr\Szablony
2024-04-23 17:22 - 2024-04-23 17:22 - 000000000 _SHDL C:\Users\Piotr\Moje dokumenty
2024-04-23 17:22 - 2024-04-23 17:22 - 000000000 _SHDL C:\Users\Piotr\Menu Start
2024-04-23 17:22 - 2024-04-23 17:22 - 000000000 _SHDL C:\Users\Piotr\Documents\Moje wideo
2024-04-23 17:22 - 2024-04-23 17:22 - 000000000 _SHDL C:\Users\Piotr\Documents\Moje obrazy
2024-04-23 17:22 - 2024-04-23 17:22 - 000000000 _SHDL C:\Users\Piotr\Documents\Moja muzyka
2024-04-23 17:22 - 2024-04-23 17:22 - 000000000 _SHDL C:\Users\Piotr\Dane aplikacji
2024-04-23 17:22 - 2024-04-23 17:22 - 000000000 _SHDL C:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2024-04-23 17:22 - 2024-04-23 17:22 - 000000000 _SHDL C:\Users\Piotr\AppData\Local\Tymczasowe pliki internetowe
2024-04-23 17:22 - 2024-04-23 17:22 - 000000000 _SHDL C:\Users\Piotr\AppData\Local\Historia
2024-04-23 17:22 - 2024-04-23 17:22 - 000000000 _SHDL C:\Users\Piotr\AppData\Local\Dane aplikacji
2024-04-23 17:21 - 2024-04-23 17:21 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2024-04-23 17:21 - 2024-04-23 17:21 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2024-04-23 17:21 - 2024-04-23 17:21 - 000000000 ____D C:\WINDOWS\InboxApps
2024-04-23 17:18 - 2024-04-23 17:18 - 000060462 _____ C:\WINDOWS\SysWOW64\ctac.json
2024-04-23 17:18 - 2024-04-23 17:18 - 000060462 _____ C:\WINDOWS\system32\ctac.json
2024-04-23 17:18 - 2024-04-23 17:18 - 000024320 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-04-23 17:18 - 2024-04-23 17:18 - 000024320 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2024-04-23 17:16 - 2024-04-23 17:16 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2024-04-23 17:16 - 2024-04-23 17:16 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2024-04-23 17:16 - 2024-04-23 17:16 - 000000000 ____D C:\WINDOWS\addins
2024-04-23 17:15 - 2024-04-23 17:15 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2024-04-23 17:15 - 2024-04-23 17:15 - 000000000 ____D C:\Program Files\Reference Assemblies
2024-04-23 17:15 - 2024-04-23 17:15 - 000000000 ____D C:\Program Files\MSBuild
2024-04-23 17:15 - 2024-04-23 17:15 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2024-04-23 17:15 - 2024-04-23 17:15 - 000000000 ____D C:\Program Files (x86)\MSBuild
2024-04-23 17:11 - 2024-04-23 17:11 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2024-04-23 17:01 - 2024-04-23 18:31 - 000000000 ___DC C:\WINDOWS\Panther
2024-04-23 16:44 - 2024-04-23 16:47 - 049999647 _____ (McRip ) C:\Users\Piotr\Downloads\VC_RedistInstaller.exe
2024-04-22 22:21 - 2024-04-22 22:22 - 026541512 _____ (Outbyte) C:\Users\Piotr\Downloads\outbyte-pc-repair.exe
2024-04-22 21:34 - 2024-04-22 22:04 - 000000322 _____ C:\WINDOWS\Tasks\DLL-Files.Com Fixer_Updates.job
2024-04-22 21:34 - 2024-04-22 22:04 - 000000306 _____ C:\WINDOWS\Tasks\DLL-Files.Com Fixer_MONTHLY.job
2024-04-22 21:34 - 2024-04-22 21:34 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\dll-files.com
2024-04-22 21:34 - 2024-04-22 21:34 - 000000000 ____D C:\ProgramData\TEMP
2024-04-22 20:15 - 2024-04-22 20:15 - 000000000 ____D C:\Users\Piotr\AppData\Local\ElevatedDiagnostics
2024-04-22 18:32 - 2024-04-22 18:32 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\5C2E92A2-83C8-4BB9-9DF9-B39A8B7AA8B4
2024-04-22 18:18 - 2024-04-23 19:56 - 000001378 _____ C:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2024-04-22 18:18 - 2024-04-23 19:56 - 000001272 _____ C:\Users\Piotr\Desktop\ESET Online Scanner.lnk
2024-04-22 18:18 - 2024-04-22 18:18 - 000000000 ____D C:\Users\Piotr\AppData\Local\ESET
2024-04-22 17:49 - 2024-04-22 17:49 - 000000000 ____D C:\Users\Piotr\AppData\LocalLow\uTorrent.WebView2
2024-04-22 16:57 - 2024-04-22 16:57 - 000000000 ____D C:\Kaspersky Toolkit Updated 22 July 2023
2024-04-16 00:00 - 2024-04-16 00:00 - 000032423 _____ C:\Users\Piotr\Desktop\ACDSee_Photo_Studio_Ultimate_2023_v16.0.3.3188_x64.torrent
2024-04-16 00:00 - 2024-04-16 00:00 - 000022779 _____ C:\Users\Piotr\Desktop\ACDSee_Photo_Studio_Ultimate_2023_v16.0.3.3188_x64_PORTABLE [PL-DARIUSZKU].torrent
2024-04-16 00:00 - 2024-04-16 00:00 - 000019440 _____ C:\Users\Piotr\Desktop\ACDSee Photo Studio Ultimate 2021 v14.0.1.2451 [PL].torrent
2024-04-15 20:27 - 2024-04-15 20:27 - 001195008 _____ C:\Users\Piotr\Desktop\Fallout (2024) (Sezon 01) [MULTi] [720p] [AMZN] [WEB-DL] [H264] [DDP5.1.Atmos-K83] [Lektor i Napisy PL].torrent
2024-04-15 19:55 - 2024-04-15 19:56 - 000000000 ___HD C:\$WinREAgent
2024-04-15 19:17 - 2024-04-15 19:17 - 000017176 _____ C:\Users\Piotr\Desktop\Kaspersky Toolkit Updated 22 July 2023.torrent
2024-04-15 18:51 - 2024-04-23 17:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Max Payne 3
2024-04-15 18:51 - 2024-04-15 18:51 - 000000647 _____ C:\Users\Piotr\Desktop\Max Payne 3.lnk
2024-04-07 14:24 - 2024-04-07 14:24 - 000000000 ____D C:\Users\Piotr\AppData\Local\Rufus
2024-04-07 12:23 - 2024-04-23 20:48 - 000000955 _____ C:\Users\Piotr\Desktop\mks_vir skaner online.lnk
2024-04-07 12:23 - 2024-04-07 12:41 - 000000000 ____D C:\ProgramData\mks_vir
2024-04-07 11:06 - 2024-04-07 11:06 - 000000000 ____D C:\Program Files (x86)\The KMPlayer 4.2.3.10
2024-04-07 11:04 - 2024-04-23 17:59 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2024-04-07 11:04 - 2024-04-07 11:06 - 000001169 _____ C:\Users\Piotr\Desktop\The KMPlayer 4.2.3.10.lnk
2024-04-07 10:43 - 2024-04-23 17:59 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2024-04-07 10:43 - 2024-04-23 17:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2024-04-07 10:42 - 2024-04-07 10:43 - 000000000 ____D C:\Program Files\WinRAR 7.00
2024-04-07 10:12 - 2024-04-07 10:12 - 000000000 ____D C:\Users\Public\Settings
2024-04-07 10:12 - 2024-04-07 10:12 - 000000000 ____D C:\ProgramData\Adobe
2024-04-06 20:55 - 2024-03-23 08:42 - 000000748 _____ C:\ProgramData\SHA256SUMS
2024-04-06 20:54 - 2024-04-06 20:54 - 000000000 ____D C:\Program Files (x86)\UPNP Manager
2024-04-06 20:48 - 2024-04-23 20:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uTorrent
2024-04-06 20:48 - 2024-04-23 17:59 - 000000000 ____D C:\WINDOWS\system32\Registration
2024-04-06 20:48 - 2024-04-06 20:48 - 000000000 ____D C:\Users\Public\Crack
2024-03-29 18:13 - 2024-03-29 18:13 - 000000000 ____D C:\Users\Piotr\Desktop\ściągnąć Kaspersky, ściągnąć nową wersję ACDSee (zainstalować, sprawdzić czy po polsku), wyrzucić z przenośnego dysku film RV wakacje na kółkach i od wesela do wesela

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2024-04-23 20:46 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-04-23 20:45 - 2022-10-27 22:14 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\AIMP
2024-04-23 20:22 - 2022-11-01 20:27 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\uTorrent
2024-04-23 19:47 - 2022-05-07 07:22 - 000000000 ____D C:\WINDOWS\INF
2024-04-23 19:05 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-04-23 19:03 - 2023-07-02 13:52 - 000000000 ____D C:\Program Files\PeerBlock 1.2
2024-04-23 19:03 - 2023-05-15 18:27 - 000000000 ____D C:\Users\Piotr\AppData\Local\Malwarebytes
2024-04-23 19:03 - 2022-10-26 16:12 - 000000000 ____D C:\ProgramData\NVIDIA
2024-04-23 19:03 - 2022-10-26 16:06 - 000089512 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteDownloadAssistant.exe
2024-04-23 19:02 - 2023-01-12 20:21 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\DMCache
2024-04-23 19:02 - 2022-10-26 16:02 - 000627496 _____ C:\WINDOWS\system32\wpbbin.exe
2024-04-23 19:02 - 2022-10-26 16:02 - 000611752 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteUpdateService.exe
2024-04-23 19:02 - 2022-10-26 16:02 - 000012288 ___SH C:\DumpStack.log.tmp
2024-04-23 19:02 - 2022-05-07 07:17 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2024-04-23 18:31 - 2022-11-16 20:14 - 000000000 ____D C:\Users\Piotr\AppData\Local\CrashDumps
2024-04-23 18:28 - 2022-10-26 16:06 - 000000000 ____D C:\Users\Piotr\AppData\Local\D3DSCache
2024-04-23 18:17 - 2022-05-07 07:24 - 000000000 ___RD C:\WINDOWS\PrintDialog
2024-04-23 18:17 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-04-23 18:17 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-04-23 18:15 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-04-23 18:02 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\appcompat
2024-04-23 18:01 - 2022-10-26 16:06 - 000000000 __RHD C:\Users\Public\AccountPictures
2024-04-23 18:01 - 2022-10-26 16:06 - 000000000 ____D C:\Users\Piotr\AppData\Local\Packages
2024-04-23 18:01 - 2022-05-07 07:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-04-23 18:00 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-04-23 18:00 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\Media
2024-04-23 18:00 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Windows NT
2024-04-23 18:00 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Windows Defender
2024-04-23 17:59 - 2023-07-02 13:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeerBlock
2024-04-23 17:59 - 2023-06-09 16:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\F.E.A.R. Platinum Collection
2024-04-23 17:59 - 2023-02-06 22:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mafia Definitive Edition
2024-04-23 17:59 - 2023-02-06 19:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Titanfall 2
2024-04-23 17:59 - 2023-01-28 03:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Far Cry 4
2024-04-23 17:59 - 2023-01-12 20:21 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2024-04-23 17:59 - 2023-01-12 20:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2024-04-23 17:59 - 2023-01-03 16:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MKVToolNix
2024-04-23 17:59 - 2022-11-28 21:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2019
2024-04-23 17:59 - 2022-11-28 21:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2024-04-23 17:59 - 2022-11-24 21:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Pro
2024-04-23 17:59 - 2022-11-10 00:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ant Download Manager
2024-04-23 17:59 - 2022-11-02 23:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Subtitle Edit
2024-04-23 17:59 - 2022-11-01 21:58 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2024-04-23 17:59 - 2022-11-01 21:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NapiProjekt
2024-04-23 17:59 - 2022-11-01 20:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACD Systems
2024-04-23 17:59 - 2022-10-28 00:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kalendarz XP
2024-04-23 17:59 - 2022-10-28 00:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2024-04-23 17:59 - 2022-10-27 22:41 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2024-04-23 17:59 - 2022-10-27 22:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
2024-04-23 17:59 - 2022-10-27 22:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP
2024-04-23 17:59 - 2022-10-26 16:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2024-04-23 17:59 - 2022-10-26 16:12 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2024-04-23 17:59 - 2022-10-26 16:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.3
2024-04-23 17:59 - 2022-05-07 07:24 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\spool
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\NDF
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\et-EE
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\es-MX
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ServiceState
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2024-04-23 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2024-04-23 17:59 - 2021-06-05 14:10 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2024-04-23 17:59 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2024-04-23 17:25 - 2022-05-07 07:28 - 000000000 ____D C:\WINDOWS\Setup
2024-04-23 17:23 - 2022-10-27 23:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2024-04-23 17:22 - 2022-05-07 07:24 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows
2024-04-23 17:22 - 2022-05-07 07:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-04-23 17:21 - 2022-05-07 12:40 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2024-04-23 17:21 - 2022-05-07 12:40 - 000023775 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2024-04-23 17:21 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\SysWOW64\pl
2024-04-23 17:21 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\system32\pl
2024-04-23 17:21 - 2022-05-07 07:25 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2024-04-23 17:21 - 2022-05-07 07:24 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\system32\UNP
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\WUModels
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\UUS
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemResources
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemApps
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\setup
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\migwiz
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\id-ID
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\DDFs
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\appraiser
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ShellComponents
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\Provisioning
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\Globalization
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\DiagTrack
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\BrowserCore
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-04-23 17:21 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\System
2024-04-23 17:21 - 2022-05-07 07:17 - 000000000 ____D C:\WINDOWS\servicing
2024-04-23 17:16 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\OCR
2024-04-23 17:15 - 2022-05-07 12:40 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2024-04-23 17:15 - 2022-05-07 12:40 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2024-04-23 17:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2024-04-23 17:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2024-04-23 17:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2024-04-23 17:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2024-04-23 17:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\system32\winrm
2024-04-23 17:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\system32\WCN
2024-04-23 17:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\system32\slmgr
2024-04-23 17:15 - 2022-05-07 12:31 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2024-04-23 17:15 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2024-04-23 17:15 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\system32\F12
2024-04-23 17:15 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2024-04-23 17:15 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2024-04-23 17:15 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\MUI
2024-04-23 17:15 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2024-04-22 21:53 - 2022-11-09 23:33 - 000000000 ____D C:\Users\Piotr\Downloads\Compressed
2024-04-22 18:20 - 2022-11-24 21:41 - 000000000 ____D C:\Program Files\DAEMON Tools Pro 8.3
2024-04-22 18:20 - 2022-10-27 22:14 - 000000000 ____D C:\Program Files\AIMP 5.03
2024-04-22 17:24 - 2023-02-07 23:03 - 000239576 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2024-04-22 17:23 - 2022-11-01 20:26 - 000000000 ____D C:\Users\Piotr\AppData\Local\UTU003
2024-04-22 17:23 - 2022-10-27 23:42 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\Opera Software
2024-04-22 17:23 - 2022-10-27 23:42 - 000000000 ____D C:\Users\Piotr\AppData\Local\Opera Software
2024-04-22 16:44 - 2022-10-26 16:02 - 000002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-04-22 16:44 - 2022-10-26 16:02 - 000002288 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-04-16 00:08 - 2022-10-26 16:23 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-04-15 23:46 - 2022-10-26 16:23 - 192651728 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-04-15 22:19 - 2022-10-27 21:39 - 000000000 ____D C:\Users\Piotr\Desktop\Moje dokumenty
2024-04-15 21:30 - 2023-01-17 23:14 - 000000000 ____D C:\Users\Piotr\Documents\Rockstar Games
2024-04-15 21:29 - 2023-01-17 23:14 - 000000000 ____D C:\Users\Piotr\AppData\Local\Rockstar Games
2024-04-15 20:11 - 2022-10-26 16:06 - 000000000 ____D C:\ProgramData\Packages
2024-04-15 18:53 - 2023-01-17 23:14 - 000000000 ____D C:\Users\Piotr\AppData\Roaming\Goldberg SocialClub Emu Saves
2024-04-15 18:21 - 2022-10-26 16:02 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-04-07 13:17 - 2022-10-27 22:03 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-04-07 13:17 - 2022-10-27 22:03 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-04-07 13:10 - 2022-10-27 22:03 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-04-07 11:25 - 2022-10-28 00:49 - 000000000 ____D C:\Users\Piotr\AppData\LocalLow\KMPlayer
2024-04-06 20:32 - 2022-11-09 23:33 - 000000000 ____D C:\Users\Piotr\Downloads\Video
2024-04-05 18:32 - 2022-10-26 16:08 - 000002423 _____ C:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

==================== Koniec FRST.txt ========================

dt1 · Answer

Załącz oba pliki, do tego nie wklejaj ich w treść postu, tylko po prostu dołącz jako załącznik.

Żabson44 · Answer

prosze bardzo

dt1 · Answer

Uruchom w FRST ten skrypt:

FirewallRules: [{CA88ED0D-AA17-4707-8134-E86B05FB68C6}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe => Brak pliku
FirewallRules: [{E2AEFBDB-2F3A-4F0F-89B3-9B00E759F8B5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe => Brak pliku
FirewallRules: [{B25F0F62-2D9E-45A4-BA58-E20FC2B02220}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe => Brak pliku
FirewallRules: [{C72C73FA-CBEE-4FB2-8713-8DC75039FF93}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe => Brak pliku
FirewallRules: [{0FA923F0-EC09-4D8F-8F67-760DA6144E26}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe => Brak pliku
HKU\S-1-5-21-3478108254-1136682308-626092646-1001\...\Run: [MicrosoftEdgeAutoLaunch_89C6CAEBF8A17E34C3550DAA0F4B2986] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4082112 2024-04-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {5A16D812-AEA2-4F2F-A73A-2826F9BB96F5} - System32\Tasks\DLL-Files.Com Fixer_MONTHLY => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe  scan (Brak pliku)
Task: {E76449B6-FEF5-4281-8687-D518914D8BE0} - System32\Tasks\DLL-Files.Com Fixer_Updates => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe  -updatecheck (Brak pliku)
Task: {B9A8D9E0-DAE1-4854-85E7-614D2AD4D69F} - System32\Tasks\Microsoft\Windows\WOF\UsageDataRUXIMTŻaba => C:\Windows\Web\Wallpaper\jscript9.dll.mui.js  (Brak pliku)
Task: {73B2A653-A080-4CCC-AB43-B310EE04BAFE} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [7018264 2018-07-19] (Nero AG -> Nero AG)
Task: C:\WINDOWS\Tasks\DLL-Files.Com Fixer_MONTHLY.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
Task: C:\WINDOWS\Tasks\DLL-Files.Com Fixer_Updates.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
RemoveDirectory: C:\Program Files (x86)\Dll-Files.com Fixer

Żabson44 · Answer

Dziękuje bardzo za pomoc. Naprawione. Już mi to okienko nie wyskakuje.

[Rozwiązano] nie można znaleźć pliku skryptu: jscript9.dll.mui.js".

Post #1

Post #2

Post #3

Post #4

Post #5

Post #6

Post #7

Post #8

Post #9

Post #10

Podsumowanie tematu