Advertisement
Guest User

FRST

a guest
Feb 18th, 2019
173
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 20.10 KB | None | 0 0
  1. Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 20-08-2017
  2. Uruchomiony przez oem (administrator) OEM-KOMPUTER (18-02-2019 17:49:55)
  3. Uruchomiony z C:\Users\oem\Downloads
  4. Załadowane profile: oem (Dostępne profile: oem)
  5. Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
  6. Internet Explorer Wersja 8 (Domyślna przeglądarka: FF)
  7. Tryb startu: Normal
  8. Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Procesy (filtrowane) =================
  11.  
  12. (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
  13.  
  14. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
  15. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
  16. (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  17. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
  18. (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
  19. (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
  20. () C:\Advanced Wheel Mouse\wh_exec.exe
  21. (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
  22. (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
  23. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  24. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
  25. (TeamViewer GmbH) D:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  26. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  27. (AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler.exe
  28. (AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler64.exe
  29. (AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
  30. (Microsoft Corporation) C:\Windows\System32\taskmgr.exe
  31. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  32. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
  33. (PortableApps.com) C:\Users\oem\Downloads\GoogleChromePortable\GoogleChromePortable.exe
  34. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  35. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  36. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  37. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  38. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  39. () C:\Program Files (x86)\screenSHU\screenSHU.exe
  40. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  41. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  42. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  43. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  44. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  45. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  46. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  47. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  48. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  49. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  50. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  51. (Google Inc.) C:\Users\oem\Downloads\GoogleChromePortable\App\Chrome-bin\chrome.exe
  52.  
  53. ==================== Rejestr (filtrowane) ====================
  54.  
  55. (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
  56.  
  57. HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16473344 2000-01-01] (Realtek Semiconductor)
  58. HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  59. HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [259976 2019-02-15] (AVAST Software)
  60. HKLM-x32\...\Run: [WheelMouse] => C:\Advanced Wheel Mouse\wh_exec.exe [147456 2000-01-01] ()
  61. HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [259976 2019-02-15] (AVAST Software)
  62. HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
  63.  
  64. ==================== Internet (filtrowane) ====================
  65.  
  66. (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
  67.  
  68. Tcpip\Parameters: [DhcpNameServer] 194.204.159.1 194.204.152.34
  69. Tcpip\..\Interfaces\{582B0274-CA87-4332-8B7A-FE3F0454BF61}: [DhcpNameServer] 194.204.159.1 194.204.152.34
  70. Tcpip\..\Interfaces\{D0DAD9D1-07B4-4C1B-9898-6645604757B8}: [DhcpNameServer] 194.204.159.1 194.204.152.34
  71.  
  72. Internet Explorer:
  73. ==================
  74. HKU\S-1-5-21-402273477-2533903143-1535139638-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
  75. BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.)
  76. BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.)
  77. Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
  78. Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
  79. Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
  80. Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
  81.  
  82. FireFox:
  83. ========
  84. FF DefaultProfile: rineyvge.default-1486652163160-1530355237425
  85. FF ProfilePath: C:\Users\oem\AppData\Roaming\Mozilla\Firefox\Profiles\rineyvge.default-1486652163160-1530355237425 [2019-02-18]
  86. FF Homepage: Mozilla\Firefox\Profiles\rineyvge.default-1486652163160-1530355237425 -> hxxps://www.google.pl/?gws_rd=ssl
  87. FF Extension: (Avast Online Security) - C:\Users\oem\AppData\Roaming\Mozilla\Firefox\Profiles\rineyvge.default-1486652163160-1530355237425\Extensions\wrc@avast.com.xpi [2019-02-15]
  88. FF Extension: (Brak nazwy) - C:\Users\oem\AppData\Roaming\Mozilla\Firefox\Profiles\rineyvge.default-1486652163160-1530355237425\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-01-23]
  89. FF Extension: (Firefox Monitor) - C:\Users\oem\AppData\Roaming\Mozilla\Firefox\Profiles\rineyvge.default-1486652163160-1530355237425\features\{ae192c57-4ff8-4646-afc8-25f59ba71dd3}\fxmonitor@mozilla.org.xpi [2019-02-14]
  90. FF Extension: (WebCompat Reporter) - C:\Program Files (x86)\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi [2019-01-30] [Brak podpisu cyfrowego]
  91. FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
  92. FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2016-02-03] [Brak podpisu cyfrowego]
  93. FF HKU\S-1-5-21-402273477-2533903143-1535139638-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
  94. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-17] ()
  95. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40620.0\npctrl.dll [2015-06-19] ( Microsoft Corporation)
  96. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-17] ()
  97. FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [Brak pliku]
  98. FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [Brak pliku]
  99. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40620.0\npctrl.dll [2015-06-19] ( Microsoft Corporation)
  100. FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-06-27] (NVIDIA Corporation)
  101. FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-06-27] (NVIDIA Corporation)
  102.  
  103. Chrome:
  104. =======
  105. CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
  106. CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <nie znaleziono>
  107.  
  108. Opera:
  109. =======
  110. StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe
  111.  
  112. ==================== Usługi (filtrowane) ====================
  113.  
  114. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  115.  
  116. S3 ACTION_SVC; C:\Program Files (x86)\Mirillis\Action!\action_svc.exe [16064 2014-10-25] ()
  117. R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6758976 2019-02-15] (AVAST Software)
  118. S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-03-23] (AVAST Software)
  119. R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [357304 2019-02-15] (AVAST Software)
  120. S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-03-23] (AVAST Software)
  121. S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\71.0.1037.98\elevation_service.exe [390552 2019-01-09] (AVAST Software)
  122. R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [Brak podpisu cyfrowego]
  123. R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [Brak podpisu cyfrowego]
  124. R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-20] (Hewlett-Packard Co.) [Brak podpisu cyfrowego]
  125. R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego]
  126. S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
  127. R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [Brak podpisu cyfrowego]
  128. R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-07-26] (NVIDIA Corporation)
  129. S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-07-26] (NVIDIA Corporation)
  130. R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-06-27] (NVIDIA Corporation)
  131. R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-07-26] (NVIDIA Corporation)
  132. R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [Brak podpisu cyfrowego]
  133. R2 TeamViewer; D:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7500048 2016-09-20] (TeamViewer GmbH)
  134. S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
  135.  
  136. ===================== Sterowniki (filtrowane) ======================
  137.  
  138. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  139.  
  140. R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37104 2019-02-15] (AVAST Software)
  141. R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [205400 2019-02-15] (AVAST Software)
  142. R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [225680 2019-02-15] (AVAST Software)
  143. R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [196072 2019-02-15] (AVAST Software)
  144. R0 aswblog; C:\Windows\System32\drivers\aswblog.sys [320696 2019-02-15] (AVAST Software)
  145. R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [57960 2019-02-15] (AVAST Software)
  146. R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [249672 2019-02-15] (AVAST Software)
  147. R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42288 2019-02-15] (AVAST Software)
  148. R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [167304 2019-02-15] (AVAST Software)
  149. R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [112312 2019-02-15] (AVAST Software)
  150. R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [87944 2019-02-15] (AVAST Software)
  151. R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1034432 2019-02-15] (AVAST Software)
  152. R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [474456 2019-02-15] (AVAST Software)
  153. R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [216784 2019-02-15] (AVAST Software)
  154. R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [379952 2019-02-15] (AVAST Software)
  155. R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [125952 2014-06-24] (Intel Corporation)
  156. S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-07-26] (NVIDIA Corporation)
  157. R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [48064 2017-07-26] (NVIDIA Corporation)
  158. R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57976 2017-06-21] (NVIDIA Corporation)
  159. R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31472 2000-01-01] (Synaptics Incorporated)
  160. R3 whfltr2k; C:\Windows\System32\DRIVERS\whfltr2k.sys [10368 2000-01-01] ()
  161.  
  162. ==================== NetSvcs (filtrowane) ===================
  163.  
  164. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  165.  
  166.  
  167. ==================== Jeden miesiąc - utworzone pliki i foldery ========
  168.  
  169. (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
  170.  
  171. 2019-02-15 09:43 - 2019-02-15 09:43 - 000249672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
  172. 2019-02-15 09:43 - 2019-02-15 09:42 - 000362888 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
  173. 2019-02-13 12:35 - 2019-02-13 12:35 - 000183696 _____ C:\Users\oem\Downloads\wniosek o zwrot.pdf
  174. 2019-02-13 10:58 - 2019-02-13 10:58 - 007316688 _____ (Malwarebytes) C:\Users\oem\Downloads\adwcleaner_7.2.7.0.exe
  175. 2019-01-30 11:08 - 2019-01-30 11:08 - 000000000 ____D C:\ProgramData\Mozilla
  176.  
  177. ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========
  178.  
  179. (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
  180.  
  181. 2019-02-18 17:49 - 2017-02-09 19:33 - 000014652 _____ C:\Users\oem\Downloads\FRST.txt
  182. 2019-02-18 17:49 - 2016-11-16 12:52 - 000000000 ____D C:\Users\oem\AppData\LocalLow\Mozilla
  183. 2019-02-18 17:47 - 2017-02-09 19:33 - 000000000 ____D C:\FRST
  184. 2019-02-18 17:45 - 2015-08-04 18:46 - 000000000 ____D C:\Users\oem\AppData\Local\screenSHU
  185. 2019-02-18 17:44 - 2018-09-06 13:22 - 000004128 _____ C:\Windows\System32\Tasks\CCleaner Update
  186. 2019-02-18 17:44 - 2017-04-12 15:16 - 000003884 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1492006570
  187. 2019-02-18 17:44 - 2015-12-03 15:17 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
  188. 2019-02-18 17:44 - 2015-08-04 17:51 - 000002794 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
  189. 2019-02-18 17:41 - 2015-08-04 14:18 - 000000000 ____D C:\ProgramData\NVIDIA
  190. 2019-02-18 17:11 - 2009-07-14 05:45 - 000028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  191. 2019-02-18 17:11 - 2009-07-14 05:45 - 000028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  192. 2019-02-18 17:04 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
  193. 2019-02-18 16:26 - 2015-08-04 15:12 - 000000000 ____D C:\Users\oem\AppData\Roaming\GG
  194. 2019-02-15 16:10 - 2015-08-04 15:06 - 000474456 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
  195. 2019-02-15 12:02 - 2017-04-04 10:11 - 000000000 ____D C:\Program Files\Opera
  196. 2019-02-15 10:21 - 2009-07-14 06:08 - 000032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
  197. 2019-02-15 09:43 - 2017-04-04 19:33 - 000003910 _____ C:\Windows\System32\Tasks\Avast Emergency Update
  198. 2019-02-15 09:43 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
  199. 2019-02-15 09:42 - 2019-01-14 15:02 - 000225680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
  200. 2019-02-15 09:42 - 2019-01-06 08:03 - 000320696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswblog.sys
  201. 2019-02-15 09:42 - 2019-01-06 08:03 - 000196072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
  202. 2019-02-15 09:42 - 2019-01-06 08:03 - 000057960 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
  203. 2019-02-15 09:42 - 2019-01-06 08:03 - 000037104 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys
  204. 2019-02-15 09:42 - 2018-10-19 14:04 - 000042288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
  205. 2019-02-15 09:42 - 2017-11-09 17:52 - 000205400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
  206. 2019-02-15 09:42 - 2015-08-04 15:06 - 001034432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
  207. 2019-02-15 09:42 - 2015-08-04 15:06 - 000379952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
  208. 2019-02-15 09:42 - 2015-08-04 15:06 - 000216784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
  209. 2019-02-15 09:42 - 2015-08-04 15:06 - 000167304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
  210. 2019-02-15 09:42 - 2015-08-04 15:06 - 000112312 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
  211. 2019-02-15 09:42 - 2015-08-04 15:06 - 000087944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
  212. 2019-02-13 23:55 - 2016-08-15 08:58 - 000000000 ____D C:\Users\oem\AppData\Local\CrashDumps
  213. 2019-02-13 23:54 - 2017-02-09 15:55 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
  214. 2019-02-13 10:57 - 2015-08-06 10:39 - 000000000 ____D C:\Users\oem\AppData\Roaming\MPC-HC
  215. 2019-02-10 08:11 - 2018-09-16 10:19 - 000000158 _____ C:\Users\oem\Desktop\torqcfc.txt
  216. 2019-02-04 18:43 - 2015-08-04 17:51 - 000000000 ____D C:\Program Files\CCleaner
  217.  
  218. ==================== Pliki w katalogu głównym wybranych folderów =======
  219.  
  220. 2015-08-05 20:15 - 2018-01-27 16:25 - 000007602 _____ () C:\Users\oem\AppData\Local\Resmon.ResmonCfg
  221. 2016-02-03 14:16 - 2016-02-03 15:25 - 000001930 _____ () C:\ProgramData\hpzinstall.log
  222.  
  223. ==================== Bamital & volsnap ======================
  224.  
  225. (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
  226.  
  227. C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
  228. C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
  229. C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
  230. C:\Windows\explorer.exe => Plik podpisany cyfrowo
  231. C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
  232. C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
  233. C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
  234. C:\Windows\system32\services.exe => Plik podpisany cyfrowo
  235. C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
  236. C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
  237. C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
  238. C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
  239. C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
  240. C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
  241. C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
  242. C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo
  243.  
  244. LastRegBack: 2019-02-17 16:01
  245.  
  246. ==================== Koniec FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement