Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 20.06.2018
- Uruchomiony przez Krzysiekk (administrator) KRZYSIEK (08-07-2018 07:22:25)
- Uruchomiony z C:\Users\Krzysiekk\Desktop
- Załadowane profile: Krzysiekk (Dostępne profile: Krzysiekk & Gość)
- Platform: Windows 8.1 (Update) (X64) Język: Polski (Polska)
- Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
- Tryb startu: Normal
- Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
- ==================== Procesy (filtrowane) =================
- (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
- (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
- (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe
- (Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
- (IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
- (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
- (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
- (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
- (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
- (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
- (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
- (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
- (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe
- (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
- (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
- (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
- (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
- (Intel Corporation) C:\Windows\System32\hkcmd.exe
- () C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
- (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
- (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
- (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
- (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
- (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
- (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
- (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
- (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
- (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
- (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
- (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
- (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
- (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
- (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
- (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
- (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
- (Intel Corporation) C:\Windows\System32\igfxpers.exe
- (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- ==================== Rejestr (filtrowane) ===========================
- (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
- HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-01-18] (IvoSoft)
- HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
- HKLM\...\Run: [AVGUI.exe] => C:\Program Files (x86)\AVG\Antivirus\AvLaunch.exe [291568 2018-06-25] (AVG Technologies CZ, s.r.o.)
- HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
- Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
- HKU\S-1-5-21-127158954-2590044604-2016604374-1002\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
- HKU\S-1-5-21-127158954-2590044604-2016604374-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
- HKU\S-1-5-21-127158954-2590044604-2016604374-1002\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
- HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
- AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [170872 2016-11-24] (NVIDIA Corporation)
- AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [170872 2016-11-24] (NVIDIA Corporation)
- AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [148200 2016-11-24] (NVIDIA Corporation)
- BootExecute: autocheck autochk * smartdefragboottime.exe
- ==================== Internet (filtrowane) ====================
- (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
- Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
- Tcpip\..\Interfaces\{310AFB52-3E95-4C34-9AF7-5A3FFAA0132B}: [DhcpNameServer] 62.179.1.61 62.179.1.63
- Tcpip\..\Interfaces\{36F06993-77FD-4D19-AAA2-9A75A72FC571}: [DhcpNameServer] 192.168.0.1
- Internet Explorer:
- ==================
- HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <==== UWAGA
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.msn.com/?pc=avmsp&ocid=PerDHP
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
- HKU\S-1-5-21-127158954-2590044604-2016604374-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
- SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
- SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
- SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
- SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
- SearchScopes: HKU\S-1-5-21-127158954-2590044604-2016604374-1002 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
- BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-11-18] (Microsoft Corporation)
- BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-01-18] (IvoSoft)
- BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2017-01-03] (Oracle Corporation)
- BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-03-27] (Qualcomm Atheros Commnucations)
- BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-11-10] (Microsoft Corporation)
- BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2017-01-03] (Oracle Corporation)
- BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-01-18] (IvoSoft)
- BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-11-18] (Microsoft Corporation)
- BHO-x32: Brak nazwy -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> Brak pliku
- BHO-x32: Brak nazwy -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> Brak pliku
- BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-11-10] (Microsoft Corporation)
- BHO-x32: Brak nazwy -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> Brak pliku
- BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-01-18] (IvoSoft)
- Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-01-18] (IvoSoft)
- Toolbar: HKLM-x32 - Brak nazwy - {553891B7-A0D5-4526-BE18-D3CE461D6310} - Brak pliku
- FireFox:
- ========
- FF ProfilePath: C:\Users\Krzysiekk\AppData\Roaming\Mozilla\Firefox\Profiles\x9xtbr1v.default [2018-07-06]
- FF user.js: detected! => C:\Users\Krzysiekk\AppData\Roaming\Mozilla\Firefox\Profiles\x9xtbr1v.default\user.js [2016-07-30]
- FF Homepage: Mozilla\Firefox\Profiles\x9xtbr1v.default -> onet.pl
- FF NewTab: Mozilla\Firefox\Profiles\x9xtbr1v.default -> about:newtab
- FF Extension: (AVG SafePrice) - C:\Users\Krzysiekk\AppData\Roaming\Mozilla\Firefox\Profiles\x9xtbr1v.default\Extensions\[email protected] [2016-11-18]
- FF Extension: (Adblock Plus) - C:\Users\Krzysiekk\AppData\Roaming\Mozilla\Firefox\Profiles\x9xtbr1v.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-06-04]
- FF Extension: (QuickJava) - C:\Users\Krzysiekk\AppData\Roaming\Mozilla\Firefox\Profiles\x9xtbr1v.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2016-10-12] [Przestarzałe]
- FF Extension: (Tpay.com) - C:\Users\Krzysiekk\AppData\Roaming\Mozilla\Firefox\Profiles\x9xtbr1v.default\Extensions\{ed5a5d58-4e89-4ade-903c-34f4b64265cd}.xpi [2017-10-14]
- FF SearchPlugin: C:\Users\Krzysiekk\AppData\Roaming\Mozilla\Firefox\Profiles\x9xtbr1v.default\searchplugins\bing-avast.xml [2014-06-16]
- FF SearchPlugin: C:\Users\Krzysiekk\AppData\Roaming\Mozilla\Firefox\Profiles\x9xtbr1v.default\searchplugins\google-avast.xml [2016-04-18]
- FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\McAfee\MSK => nie znaleziono
- FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_30_0_0_113.dll [2018-06-07] ()
- FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2017-01-03] (Oracle Corporation)
- FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2017-01-03] (Oracle Corporation)
- FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
- FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_113.dll [2018-06-07] ()
- FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
- FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
- FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
- FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-18] (Microsoft Corporation)
- FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
- FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
- FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
- FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
- FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
- FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.)
- Chrome:
- =======
- CHR HomePage: Default -> hxxp://onet.pl/
- CHR StartupUrls: Default -> "hxxp://onet.pl/"
- CHR Profile: C:\Users\Krzysiekk\AppData\Local\Google\Chrome\User Data\Default [2018-07-08]
- CHR Extension: (Prezentacje) - C:\Users\Krzysiekk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
- CHR Extension: (Dokumenty) - C:\Users\Krzysiekk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
- CHR Extension: (Dysk Google) - C:\Users\Krzysiekk\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-05-27]
- CHR Extension: (YouTube) - C:\Users\Krzysiekk\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-05-27]
- CHR Extension: (Arkusze) - C:\Users\Krzysiekk\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
- CHR Extension: (Dokumenty Google offline) - C:\Users\Krzysiekk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-05-27]
- CHR Extension: (AdBlock) - C:\Users\Krzysiekk\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-06-14]
- CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Krzysiekk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
- CHR Extension: (Gmail) - C:\Users\Krzysiekk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-05-27]
- CHR Extension: (Chrome Media Router) - C:\Users\Krzysiekk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-14]
- ==================== Usługi (filtrowane) ====================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- R3 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
- R3 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [Brak podpisu cyfrowego]
- R3 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227968 2013-03-27] (Qualcomm Atheros Commnucations) [Brak podpisu cyfrowego]
- R2 AVG Antivirus; C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe [323512 2018-06-25] (AVG Technologies CZ, s.r.o.)
- R3 avgbIDSAgent; C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe [7829784 2018-06-25] (AVG Technologies CZ, s.r.o.)
- R3 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
- R3 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
- R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [3046688 2016-12-16] (IObit)
- R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-11-24] (NVIDIA Corporation)
- S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
- S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
- R3 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-03-27] (Atheros) [Brak podpisu cyfrowego]
- R2 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
- S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000
- R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
- ===================== Sterowniki (filtrowane) ======================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- S3 ASUSProcObsrv; C:\eSupport\eDriver\I386\AsPrOb64.sys [12416 2010-05-26] ()
- R3 athr; C:\WINDOWS\system32\DRIVERS\athwbx.sys [3837440 2013-08-14] (Qualcomm Atheros Communications, Inc.)
- R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [65784 2013-04-16] (ASUS Corporation)
- R1 avgArPot; C:\WINDOWS\System32\drivers\avgArPot.sys [189544 2018-06-25] (AVG Technologies CZ, s.r.o.)
- R1 avgbidsdriver; C:\WINDOWS\System32\drivers\avgbidsdrivera.sys [222288 2018-06-25] (AVG Technologies CZ, s.r.o.)
- R0 avgbidsh; C:\WINDOWS\System32\drivers\avgbidsha.sys [194224 2018-06-25] (AVG Technologies CZ, s.r.o.)
- R0 avgblog; C:\WINDOWS\System32\drivers\avgbloga.sys [339048 2018-06-25] (AVG Technologies CZ, s.r.o.)
- R0 avgbuniv; C:\WINDOWS\System32\drivers\avgbuniva.sys [51952 2018-06-25] (AVG Technologies CZ, s.r.o.)
- S3 avgHwid; C:\WINDOWS\System32\drivers\avgHwid.sys [39352 2018-06-25] (AVG Technologies CZ, s.r.o.)
- R2 avgMonFlt; C:\WINDOWS\System32\drivers\avgMonFlt.sys [152016 2018-06-25] (AVG Technologies CZ, s.r.o.)
- R1 avgRdr; C:\WINDOWS\System32\drivers\avgRdr2.sys [104256 2018-06-25] (AVG Technologies CZ, s.r.o.)
- R0 avgRvrt; C:\WINDOWS\System32\drivers\avgRvrt.sys [78352 2018-06-25] (AVG Technologies CZ, s.r.o.)
- R1 avgSnx; C:\WINDOWS\System32\drivers\avgSnx.sys [1020112 2018-06-25] (AVG Technologies CZ, s.r.o.)
- R1 avgSP; C:\WINDOWS\System32\drivers\avgSP.sys [455464 2018-06-25] (AVG Technologies CZ, s.r.o.)
- R2 avgStm; C:\WINDOWS\System32\drivers\avgStm.sys [203544 2018-06-25] (AVG Technologies CZ, s.r.o.)
- R0 avgVmm; C:\WINDOWS\System32\drivers\avgVmm.sys [373944 2018-06-25] (AVG Technologies CZ, s.r.o.)
- S3 BTATH_LWFLT; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [77464 2013-03-27] (Qualcomm Atheros)
- R1 dtsoftbus01; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [283064 2014-08-03] (Disc Soft Ltd)
- R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-12-26] (REALiX(tm))
- R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
- R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2017-08-03] (Riverbed Technology, Inc.)
- S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-11-24] (NVIDIA Corporation)
- R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-11-24] (NVIDIA Corporation)
- S3 qcfilter; C:\WINDOWS\System32\drivers\qcusbfilter.sys [49208 2017-03-15] (QUALCOMM Incorporated)
- S3 qcusbnet; C:\WINDOWS\system32\DRIVERS\qcusbnet.sys [428600 2017-03-15] (QUALCOMM Incorporated)
- S3 qcusbser; C:\WINDOWS\system32\DRIVERS\qcusbser.sys [254520 2017-03-15] (QUALCOMM Incorporated)
- S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [11376 2003-12-02] () [Brak podpisu cyfrowego]
- S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
- S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
- S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
- U0 aswVmm; Brak ImagePath
- ==================== NetSvcs (filtrowane) ===================
- (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
- ==================== Jeden miesiąc - utworzone pliki i foldery ========
- (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
- 2018-07-08 07:22 - 2018-07-08 07:22 - 000023695 _____ C:\Users\Krzysiekk\Desktop\FRST.txt
- 2018-07-08 07:06 - 2018-07-08 07:21 - 000000000 ____D C:\FRST
- 2018-07-08 07:05 - 2018-07-08 07:05 - 002412544 _____ (Farbar) C:\Users\Krzysiekk\Desktop\FRST64.exe
- 2018-07-07 18:22 - 2018-07-07 18:47 - 000000000 ____D C:\AVG_Remover
- 2018-07-07 16:01 - 2018-07-07 16:01 - 007395536 _____ (Malwarebytes) C:\Users\Krzysiekk\Desktop\AdwCleaner.exe
- 2018-07-07 16:00 - 2018-07-07 16:00 - 007986864 _____ ( ) C:\Users\Krzysiekk\Desktop\AVG_Remover.exe
- 2018-06-26 23:22 - 2018-06-26 23:22 - 000153655 _____ C:\Users\Krzysiekk\Downloads\menu-19.06-08.07.pdf
- 2018-06-25 18:44 - 2018-06-25 18:44 - 000003916 _____ C:\WINDOWS\System32\Tasks\Antivirus Emergency Update
- 2018-06-25 18:44 - 2018-06-25 18:43 - 000455464 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSP.sys
- 2018-06-25 18:44 - 2018-06-25 18:43 - 000373944 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgVmm.sys
- 2018-06-25 18:44 - 2018-06-25 18:43 - 000203544 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgStm.sys
- 2018-06-25 18:44 - 2018-06-25 18:43 - 000189544 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgArPot.sys
- 2018-06-25 18:44 - 2018-06-25 18:43 - 000152016 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys
- 2018-06-25 18:44 - 2018-06-25 18:43 - 000104256 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRdr2.sys
- 2018-06-25 18:44 - 2018-06-25 18:43 - 000078352 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRvrt.sys
- 2018-06-25 18:44 - 2018-06-25 18:43 - 000039352 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgHwid.sys
- 2018-06-25 18:44 - 2018-06-25 18:42 - 001020112 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSnx.sys
- 2018-06-25 18:44 - 2018-06-25 18:42 - 000339048 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbloga.sys
- 2018-06-25 18:44 - 2018-06-25 18:42 - 000222288 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsdrivera.sys
- 2018-06-25 18:44 - 2018-06-25 18:42 - 000194224 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsha.sys
- 2018-06-25 18:44 - 2018-06-25 18:42 - 000051952 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbuniva.sys
- 2018-06-25 18:43 - 2018-06-25 18:43 - 000379120 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\avgBoot.exe
- 2018-06-15 18:59 - 2018-06-17 17:26 - 000011227 _____ C:\Users\Krzysiekk\Desktop\Mundial.odt
- ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========
- (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
- 2018-07-08 07:22 - 2017-03-31 14:41 - 000000000 ____D C:\Users\Krzysiekk\AppData\Roaming\PhotoScape
- 2018-07-08 07:22 - 2014-01-28 23:02 - 000000000 ____D C:\Users\Krzysiekk\AppData\Roaming\ClassicShell
- 2018-07-08 07:01 - 2014-01-28 20:22 - 000000062 _____ C:\Users\Krzysiekk\AppData\Roaming\sp_data.sys
- 2018-07-08 06:58 - 2013-06-26 07:44 - 000003542 _____ C:\WINDOWS\System32\Tasks\ASUS Touchpad Launcher (x64)
- 2018-07-08 06:57 - 2013-06-26 07:59 - 000003004 _____ C:\WINDOWS\System32\Tasks\ASUS Splendid ColorU
- 2018-07-08 06:57 - 2013-06-26 07:59 - 000002988 _____ C:\WINDOWS\System32\Tasks\ASUS Splendid ACMON
- 2018-07-08 06:57 - 2013-06-26 07:56 - 000003052 _____ C:\WINDOWS\System32\Tasks\ASUS P4G
- 2018-07-08 06:57 - 2013-06-26 07:55 - 000003114 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update
- 2018-07-08 06:56 - 2014-04-30 23:05 - 000000000 ____D C:\ProgramData\NVIDIA
- 2018-07-08 06:55 - 2013-08-22 16:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
- 2018-07-08 06:51 - 2014-08-18 00:18 - 000004000 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{8AD71181-CA98-4A83-BC10-7F1A6F3B9838}
- 2018-07-07 22:10 - 2013-08-22 15:36 - 000000000 ____D C:\WINDOWS\Inf
- 2018-07-07 19:23 - 2014-01-30 18:12 - 000003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-127158954-2590044604-2016604374-1002
- 2018-07-07 18:35 - 2016-09-09 18:53 - 000000000 ____D C:\Users\Krzysiekk\AppData\Roaming\AVG
- 2018-07-07 18:35 - 2016-09-09 18:44 - 000000000 ____D C:\Program Files (x86)\AVG
- 2018-07-07 18:35 - 2016-09-09 18:43 - 000000000 ____D C:\ProgramData\Avg
- 2018-07-07 16:04 - 2016-10-28 07:39 - 000000000 ____D C:\Users\Gość\AppData\Roaming\IObit
- 2018-07-07 16:04 - 2016-07-02 20:36 - 000000000 ____D C:\Users\Krzysiekk\AppData\LocalLow\IObit
- 2018-07-07 16:04 - 2016-07-02 20:35 - 000000000 ____D C:\ProgramData\IObit
- 2018-07-07 16:03 - 2014-06-16 13:33 - 000000000 ____D C:\AdwCleaner
- 2018-07-06 22:23 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI
- 2018-07-06 16:50 - 2016-11-18 08:28 - 000000000 ____D C:\Users\Krzysiekk\AppData\LocalLow\Mozilla
- 2018-07-06 16:03 - 2017-12-18 21:03 - 000000000 ____D C:\ProgramData\boost_interprocess
- 2018-07-06 07:19 - 2016-07-02 20:36 - 000000000 ____D C:\ProgramData\ProductData
- 2018-06-30 09:45 - 2014-01-31 21:38 - 000969216 ___SH C:\Users\Krzysiekk\Desktop\Thumbs.db
- 2018-06-26 00:18 - 2017-05-27 21:18 - 000002214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
- 2018-06-26 00:18 - 2017-05-27 21:18 - 000002173 _____ C:\Users\Public\Desktop\Google Chrome.lnk
- 2018-06-19 10:38 - 2017-10-14 08:46 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
- 2018-06-19 10:38 - 2014-01-28 23:15 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
- 2018-06-19 02:07 - 2014-01-28 23:15 - 000001137 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
- ==================== Pliki w katalogu głównym wybranych folderów =======
- 2014-01-28 20:22 - 2018-07-08 07:01 - 000000062 _____ () C:\Users\Krzysiekk\AppData\Roaming\sp_data.sys
- 2014-03-23 11:48 - 2014-03-23 11:48 - 000000292 _____ () C:\Users\Krzysiekk\AppData\Local\HamsterBookConverter.cfg
- 2014-06-15 13:51 - 2014-06-15 13:51 - 000301608 _____ (VuuPC Limited) C:\Users\Krzysiekk\AppData\Local\nsxAC4B.tmp
- ==================== Bamital & volsnap ======================
- (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
- C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
- C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
- C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
- C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
- C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
- C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
- C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
- C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
- C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
- C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
- C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
- C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
- C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
- C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
- C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo
- LastRegBack: 2018-07-07 17:28
- ==================== Koniec FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement