Advertisement
Guest User

Untitled

a guest
May 22nd, 2022
20
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 30.62 KB | None | 0 0
  1. Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x86) Wersja: 22-05-2022
  2. Uruchomiony przez Adrian11 (administrator) DESKTOP-R1TB42B (LENOVO 80E3) (22-05-2022 20:37:16)
  3. Uruchomiony z C:\Users\Adrian11\Desktop
  4. Załadowane profile: Adrian11
  5. Platforma: Microsoft Windows 10 Home Wersja 21H2 19044.1706 (X86) Język: Polski (Polska)
  6. Domyślna przeglądarka: Chrome
  7. Tryb startu: Normal
  8.  
  9. ==================== Procesy (filtrowane) =================
  10.  
  11. (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
  12.  
  13. (atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
  14. (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
  15. (C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
  16. (C:\Program Files\Elantech\ETDCtrl.exe ->) (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
  17. (C:\Program Files\Elantech\ETDCtrl.exe ->) (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
  18. (C:\Program Files\Elantech\ETDService.exe ->) (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
  19. (explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <12>
  20. (PrintCtrl.exe ->) (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe <2>
  21. (services.exe ->) (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) C:\Windows\System32\PrintCtrl.exe
  22. (services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\afwServ.exe
  23. (services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
  24. (services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
  25. (services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
  26. (services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
  27. (services.exe ->) (Beijing YiChengWeiLai Culture-Tech Co., Ltd. -> SHADOWDEFENDER.COM) C:\Program Files\Shadow Defender\Service.exe
  28. (services.exe ->) (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
  29. (services.exe ->) (Huawei Technologies Co., Ltd. -> ) [Brak podpisu cyfrowego] C:\Program Files\HiSuite\HandSetService\HuaweiHiSuiteService.exe
  30. (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
  31. (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
  32. (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x86__8wekyb3d8bbwe\HxOutlook.exe
  33. (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x86__8wekyb3d8bbwe\HxTsr.exe
  34. (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
  35. (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
  36. (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
  37. (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
  38.  
  39. ==================== Rejestr (filtrowane) ===================
  40.  
  41. (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
  42.  
  43. HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [188240 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  44. HKLM\...\Run: [Shadow Defender Daemon] => C:\Program Files\Shadow Defender\DefenderDaemon.exe [341968 2020-08-06] (Beijing YiChengWeiLai Culture-Tech Co., Ltd. -> SHADOWDEFENDER.COM)
  45. HKLM\...\Run: [KeePass 2 PreLoad] => C:\Program Files\KeePass Password Safe 2\KeePass.exe [3163248 2022-01-09] (Open Source Developer, Dominik Reichl -> Dominik Reichl)
  46. HKU\S-1-5-21-3093184379-4238663051-604853877-1001\...\MountPoints2: {04cf34ea-d873-11ec-bf0e-ace0102ee6d8} - "F:\HiSuiteDownLoader.exe"
  47. HKU\S-1-5-21-3093184379-4238663051-604853877-1001\...\MountPoints2: {04cf4f5c-d873-11ec-bf0e-ace0102ee6d8} - "F:\HiSuiteDownLoader.exe"
  48. HKU\S-1-5-21-3093184379-4238663051-604853877-1001\...\MountPoints2: {66859759-a3d1-11ec-be73-806e6f6e6963} - "F:\HiSuiteDownLoader.exe"
  49. HKLM\...\Windows NT x86\Print Processors\ActMaskR: C:\Windows\System32\spool\prtprocs\W32X86\ActPrint.dll [29696 2019-03-05] (ActMask Co.,Ltd) [Brak podpisu cyfrowego]
  50. HKLM\...\Windows NT x86\Print Processors\HP1006PrintProc: C:\Windows\System32\spool\prtprocs\W32X86\HP1006PP.dll [59904 2013-04-15] (Microsoft Windows Hardware Compatibility Publisher -> )
  51. HKLM\...\Print\Monitors\HP1006LM: C:\WINDOWS\system32\HP1006LM.DLL [176128 2013-04-15] (Microsoft Windows Hardware Compatibility Publisher -> )
  52. HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\101.0.4951.67\Installer\chrmstp.exe [2022-05-18] (Google LLC -> Google LLC)
  53. HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
  54.  
  55. ==================== Zaplanowane zadania (filtrowane) ============
  56.  
  57. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  58.  
  59. Task: {0F4BEA76-057E-435B-9E47-A1421CE9F430} - System32\Tasks\GoogleUpdateTaskMachineUA{F0BD3C5B-9345-4C84-A352-51D3BADFF2B2} => C:\Program Files\Google\Update\GoogleUpdate.exe [156232 2022-03-12] (Google LLC -> Google LLC)
  60. Task: {10061677-0544-4E34-A090-4FF8EC5BC351} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1947984 2022-05-20] (Avast Software s.r.o. -> Avast Software)
  61. Task: {71BF970C-AD24-4B43-8C7F-44A09CC0A19A} - System32\Tasks\Opera scheduled Autoupdate 1649538064 => c:\users\adrian11\appdata\local\programs\opera\launcher.exe [1878784 2022-05-17] (Opera Software AS -> Opera Software)
  62. Task: {877A6036-A17B-4A3E-AE80-A68DB77F8443} - System32\Tasks\PrivaZer_SkipUAC => C:\Program Files\PrivaZer\PrivaZer.exe [20007528 2022-04-09] (Goversoft LLC -> Goversoft LLC)
  63. Task: {9AE48E4A-D476-41E0-B832-99677A4D343B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2201.10-0\MpCmdRun.exe [753984 2022-03-10] (Microsoft Windows Publisher -> Microsoft Corporation)
  64. Task: {BCEB4898-2D85-4F01-A249-1135A06C84C2} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4361040 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  65. Task: {CCC1F010-91D9-4CD7-A605-9287133E5DB8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2201.10-0\MpCmdRun.exe [753984 2022-03-10] (Microsoft Windows Publisher -> Microsoft Corporation)
  66. Task: {D81434C6-F14A-4915-92DD-9B161CB741D2} - System32\Tasks\GoogleUpdateTaskMachineCore{5AD7CAEF-1BDD-4036-9694-99A9AEEAC176} => C:\Program Files\Google\Update\GoogleUpdate.exe [156232 2022-03-12] (Google LLC -> Google LLC)
  67. Task: {F478555E-B0AD-46A7-97C5-C116A20C6B90} - System32\Tasks\Microsoft\Windows\AppListBackup\Backup => {E0DCC2CC-3354-45F2-8914-519E07809082} C:\WINDOWS\system32\AppListBackupLauncher.dll [68096 2022-04-01] (Microsoft Windows -> Microsoft Corporation)
  68.  
  69. (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
  70.  
  71. Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
  72.  
  73. ==================== Internet (filtrowane) ====================
  74.  
  75. (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
  76.  
  77. Winsock: Catalog5 01 %SystemRoot%\system32\napinsp.dll => Brak pliku UWAGA: LibraryPath powinno kierować na "%SystemRoot%\system32\napinsp.dll"
  78. Winsock: Catalog5 02 %SystemRoot%\system32\pnrpnsp.dll => Brak pliku UWAGA: LibraryPath powinno kierować na "%SystemRoot%\system32\pnrpnsp.dll"
  79. Winsock: Catalog5 03 %SystemRoot%\system32\pnrpnsp.dll => Brak pliku UWAGA: LibraryPath powinno kierować na "%SystemRoot%\system32\pnrpnsp.dll"
  80. Winsock: Catalog5 04 %SystemRoot%\system32\NLAapi.dll => Brak pliku UWAGA: LibraryPath powinno kierować na "%SystemRoot%\system32\NLAapi.dll"
  81. Winsock: Catalog5 05 %SystemRoot%\System32\winrnr.dll => Brak pliku UWAGA: LibraryPath powinno kierować na "%SystemRoot%\System32\winrnr.dll"
  82. Winsock: Catalog5 06 %SystemRoot%\System32\mswsock.dll => Brak pliku UWAGA: LibraryPath powinno kierować na "%SystemRoot%\System32\mswsock.dll"
  83. Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
  84. Tcpip\..\Interfaces\{353536cb-da71-4370-a830-9bd77fe26b55}: [DhcpNameServer] 192.168.43.1
  85. Tcpip\..\Interfaces\{ad5aae0b-bfdd-49ee-b9ff-7b2385653a51}: [DhcpNameServer] 192.0.2.42
  86. Tcpip\..\Interfaces\{c7fb4299-cf0a-47ad-b051-36e4342a8db8}: [DhcpNameServer] 192.168.42.129
  87.  
  88. Chrome:
  89. =======
  90. CHR Profile: C:\Users\Adrian11\AppData\Local\Google\Chrome\User Data\Default [2022-05-22]
  91. CHR Extension: (Bloker reklam AdGuard) - C:\Users\Adrian11\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2022-04-15]
  92. CHR Extension: (TrafficLight) - C:\Users\Adrian11\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfnpidifppmenkapgihekkeednfoenal [2022-04-08]
  93. CHR Extension: (uBlock Origin) - C:\Users\Adrian11\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2022-04-24]
  94. CHR Extension: (Avira Browser Safety) - C:\Users\Adrian11\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2022-05-18]
  95. CHR Extension: (User-Agent Switcher) - C:\Users\Adrian11\AppData\Local\Google\Chrome\User Data\Default\Extensions\kchfmpdcejfkipopnolndinkeoipnoia [2022-04-08]
  96. CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Adrian11\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-03-13]
  97.  
  98. Opera:
  99. =======
  100. OPR Profile: C:\Users\Adrian11\AppData\Roaming\Opera Software\Opera Stable [2022-05-22]
  101. OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
  102. OPR Extension: (Rich Hints Agent) - C:\Users\Adrian11\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-04-09]
  103. OPR Extension: (Opera Crypto Wallet) - C:\Users\Adrian11\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2022-04-25]
  104. OPR Extension: (Amazon Assistant Promotion) - C:\Users\Adrian11\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2022-04-09]
  105.  
  106. ==================== Usługi (filtrowane) ===================
  107.  
  108. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  109.  
  110. R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [224776 2020-09-02] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
  111. R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [7617160 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  112. R2 AtherosSvc; C:\WINDOWS\System32\drivers\AdminService.exe [338360 2021-09-04] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
  113. R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [520016 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  114. R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [1825104 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  115. R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [520016 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  116. R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2022-03-10] (Avast Software s.r.o. -> AVAST Software)
  117. R2 ETDService; C:\Program Files\Elantech\ETDService.exe [119528 2016-08-14] (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.)
  118. R2 HuaweiHiSuiteService.exe; C:\Program Files\HiSuite\HandSetService\HuaweiHiSuiteService.exe [191808 2021-11-08] (Huawei Technologies Co., Ltd. -> ) [Brak podpisu cyfrowego]
  119. S2 LPlatSvc; C:\WINDOWS\System32\LPlatSvc.exe [839544 2019-12-11] (Lenovo -> Lenovo.)
  120. R2 Printer Control; C:\WINDOWS\system32\PrintCtrl.exe [110216 2015-10-01] (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM)
  121. S4 uhssvc; C:\Program Files\Microsoft Update Health Tools\uhssvc.exe [279384 2022-03-23] (Microsoft Windows -> Microsoft Corporation)
  122. S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2201.10-0\NisSrv.exe [1900632 2022-03-10] (Microsoft Windows Publisher -> Microsoft Corporation)
  123. S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2201.10-0\MsMpEng.exe [89704 2022-03-10] (Microsoft Windows Publisher -> Microsoft Corporation)
  124. R2 {0CBD4F48-3751-475D-BE88-4F271385B672}; C:\Program Files\Shadow Defender\Service.exe [120272 2020-08-06] (Beijing YiChengWeiLai Culture-Tech Co., Ltd. -> SHADOWDEFENDER.COM)
  125.  
  126. ===================== Sterowniki (filtrowane) ===================
  127.  
  128. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  129.  
  130. R3 ACPIVPC; C:\WINDOWS\System32\drivers\AcpiVpc.sys [36176 2015-06-15] (LENOVO -> Lenovo Corporation)
  131. R3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [19522056 2020-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
  132. R3 AMDKMDAP; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [543240 2020-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
  133. R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [63384 2017-04-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
  134. R0 amdpsp; C:\WINDOWS\System32\drivers\amdpsp.sys [118744 2020-09-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
  135. R0 amd_sata; C:\WINDOWS\System32\drivers\amd_sata.sys [82504 2016-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
  136. R0 amd_xata; C:\WINDOWS\System32\drivers\amd_xata.sys [30272 2016-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
  137. R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [193224 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  138. R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [324776 2022-05-18] (Avast Software s.r.o. -> AVAST Software)
  139. R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [210600 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  140. R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [94880 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  141. R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [19400 2022-03-10] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
  142. R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42520 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  143. R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [229544 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  144. R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [401392 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  145. R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [95976 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  146. R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [75112 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  147. R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [694952 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  148. R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [465920 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  149. R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [164584 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  150. R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [267840 2022-05-10] (Avast Software s.r.o. -> AVAST Software)
  151. R3 athr; C:\WINDOWS\System32\drivers\athw10.sys [3294600 2020-09-02] (Qualcomm Atheros -> Qualcomm Atheros Communications, Inc.)
  152. R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT3.sys [91656 2017-11-17] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
  153. R3 BtFilter; C:\WINDOWS\System32\drivers\btfilter.sys [92488 2021-09-04] (Qualcomm Atheros, Inc. -> Qualcomm)
  154. S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus2.sys [131952 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
  155. R0 diskpt; C:\WINDOWS\System32\drivers\diskpt.sys [350536 2020-08-01] (Beijing YiChengWeiLai Culture-Tech Co., Ltd. -> SHADOWDEFENDER.COM)
  156. R3 ETD; C:\WINDOWS\System32\drivers\ETD.sys [568408 2016-08-14] (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.)
  157. S3 ETDSMBus; C:\WINDOWS\System32\drivers\ETDSMBus.sys [28744 2020-09-02] (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronic Corp.)
  158. S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [15360 2021-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
  159. U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [102272 2021-11-08] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
  160. R2 inpout32; C:\WINDOWS\System32\Drivers\inpout32.sys [11936 2022-03-30] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])
  161. R3 necbatt; C:\WINDOWS\System32\drivers\necbatt.sys [18448 2020-09-02] (Microsoft Windows Hardware Compatibility Publisher -> NEC Personal Computers, Ltd.)
  162. R0 PMDRVS; C:\WINDOWS\System32\drivers\pmdrvs.sys [30480 2019-12-11] (Lenovo -> Lenovo.)
  163. R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [984064 2021-09-04] (Realtek Semiconductor Corp. -> Realtek)
  164. R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [685984 2022-03-30] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)
  165. S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [55664 2020-11-11] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated)
  166. R0 stormmc; C:\WINDOWS\System32\drivers\stormmc.sys [40160 2020-09-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
  167. R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [23040 2019-10-15] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
  168. S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [15872 2022-03-10] (Microsoft Windows -> Microsoft Corporation)
  169. S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [39320 2022-03-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
  170. S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [343272 2022-03-10] (Microsoft Windows -> Microsoft Corporation)
  171. S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [63736 2022-03-10] (Microsoft Windows -> Microsoft Corporation)
  172. S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [218624 2022-04-01] (Microsoft Windows -> Microsoft Corporation)
  173.  
  174. ==================== NetSvcs (filtrowane) ===================
  175.  
  176. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  177.  
  178.  
  179. ==================== Jeden miesiąc (utworzone) (filtrowane) =========
  180.  
  181. (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
  182.  
  183. 2022-05-22 20:37 - 2022-05-22 20:40 - 000019961 _____ C:\Users\Adrian11\Desktop\FRST.txt
  184. 2022-05-22 20:36 - 2022-05-22 20:36 - 002071552 ____C (Farbar) C:\Users\Adrian11\Desktop\FRST.exe
  185. 2022-05-20 23:09 - 2022-05-20 23:13 - 000000000 ___DC C:\AdwCleaner
  186. 2022-05-20 23:08 - 2022-05-20 23:08 - 002546400 _____ (Malwarebytes) C:\Users\Adrian11\Downloads\MBSetup.exe
  187. 2022-05-20 23:07 - 2022-05-20 23:07 - 008551608 _____ (Malwarebytes) C:\Users\Adrian11\Downloads\adwcleaner.exe
  188. 2022-05-20 21:41 - 2022-05-20 21:41 - 000000000 ____D C:\Users\Adrian11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiSuite
  189. 2022-05-20 21:40 - 2021-11-08 03:20 - 000249856 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbnet.sys
  190. 2022-05-20 21:40 - 2021-11-08 03:20 - 000199680 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbmdm.sys
  191. 2022-05-20 21:40 - 2021-11-08 03:20 - 000113792 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_cdcacm.sys
  192. 2022-05-20 21:40 - 2021-11-08 03:20 - 000102272 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_usbdev.sys
  193. 2022-05-20 21:37 - 2022-05-20 21:41 - 000000000 ____D C:\Program Files\HiSuite
  194. 2022-05-18 22:40 - 2022-05-18 22:40 - 000000000 ___DC C:\AMD
  195. 2022-05-18 22:40 - 2022-05-18 22:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Odkurzacz 12
  196. 2022-05-18 22:39 - 2022-05-22 20:34 - 000000000 ____D C:\Program Files\Odkurzacz 12
  197. 2022-05-18 22:39 - 2021-11-08 03:20 - 001834304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFUpdate_01009.dll
  198. 2022-05-18 22:39 - 2021-11-08 03:20 - 001459008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfCoInstaller01009.dll
  199. 2022-05-18 22:39 - 2021-11-08 03:20 - 000848192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winusbcoinstaller2.dll
  200. 2022-05-18 22:39 - 2021-06-03 03:06 - 000015360 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_usbccgpfilter.sys
  201. 2022-05-18 22:37 - 2022-05-20 21:35 - 000000000 ____D C:\Users\Adrian11\AppData\Local\HiSuite
  202. 2022-05-18 22:32 - 2022-05-18 22:32 - 000003384 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3093184379-4238663051-604853877-1001
  203. 2022-05-18 22:32 - 2022-05-18 22:32 - 000002416 _____ C:\Users\Adrian11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
  204. 2022-05-18 22:15 - 2022-05-22 20:36 - 000000000 ____D C:\Users\Adrian11\Desktop\FRST-OlderVersion
  205. 2022-05-18 22:15 - 2022-05-18 22:15 - 000000000 __HDC C:\$AV_ASW
  206. 2022-05-18 22:13 - 2022-05-22 20:39 - 000000000 ___DC C:\FRST
  207. 2022-05-18 22:12 - 2022-05-18 22:12 - 002013184 _____ (Farbar) C:\Users\Adrian11\Downloads\FRST.exe
  208. 2022-05-18 21:24 - 2022-05-18 21:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
  209. 2022-05-18 21:24 - 2022-05-18 21:24 - 000000000 ____D C:\ProgramData\Arcabit
  210. 2022-05-18 21:24 - 2022-05-18 21:24 - 000000000 ____D C:\Program Files\HitmanPro
  211. 2022-05-18 21:23 - 2022-05-18 21:26 - 000000000 ____D C:\ProgramData\HitmanPro
  212. 2022-05-18 21:22 - 2022-05-18 21:22 - 037143064 _____ (Arcabit) C:\Users\Adrian11\Downloads\arcabit_online.exe
  213. 2022-05-18 21:21 - 2022-05-18 21:21 - 011617216 _____ (SurfRight B.V.) C:\Users\Adrian11\Downloads\HitmanPro.exe
  214. 2022-05-18 16:26 - 2022-05-18 16:26 - 000000000 __HDC C:\$WinREAgent
  215. 2022-05-18 14:03 - 2022-05-18 14:03 - 000004276 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1649538064
  216. 2022-05-18 14:02 - 2022-05-18 14:02 - 000001450 _____ C:\Users\Adrian11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Przeglądarka Opera.lnk
  217. 2022-05-18 13:31 - 2022-05-18 13:31 - 000324776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
  218. 2022-05-18 11:14 - 2022-05-18 11:14 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
  219. 2022-05-18 11:13 - 2022-05-22 20:23 - 000008192 ___SH C:\DumpStack.log.tmp
  220. 2022-05-12 22:39 - 2022-05-18 11:36 - 000000000 ____D C:\WINDOWS\Minidump
  221. 2022-05-12 22:06 - 2022-05-12 22:07 - 029069888 _____ (Piriform Software Ltd) C:\Users\Adrian11\Downloads\CCleaner_v5.72.7994.exe
  222. 2022-05-12 22:01 - 2022-05-12 22:01 - 002798830 _____ C:\Users\Adrian11\Downloads\R3P4CK.rar
  223. 2022-05-11 16:23 - 2022-05-11 16:23 - 000227105 _____ C:\Users\Adrian11\Downloads\JottiScanGui.zip
  224. 2022-05-11 16:21 - 2022-05-11 16:21 - 008653016 _____ (Datpol ) C:\Users\Adrian11\Downloads\setupfree.exe
  225. 2022-05-10 10:20 - 2022-05-22 19:53 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
  226. 2022-05-10 10:20 - 2022-05-10 10:20 - 000267840 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
  227. 2022-05-10 10:19 - 2022-05-10 10:19 - 000465920 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
  228. 2022-05-10 10:19 - 2022-05-10 10:19 - 000401392 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
  229. 2022-05-10 10:19 - 2022-05-10 10:19 - 000252240 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
  230. 2022-05-10 10:19 - 2022-05-10 10:19 - 000229544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
  231. 2022-05-10 10:19 - 2022-05-10 10:19 - 000210600 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
  232. 2022-05-10 10:19 - 2022-05-10 10:19 - 000164584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
  233. 2022-05-10 10:19 - 2022-05-10 10:19 - 000095976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
  234. 2022-05-10 10:19 - 2022-05-10 10:19 - 000094880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
  235. 2022-05-10 10:19 - 2022-05-10 10:19 - 000075112 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
  236. 2022-05-10 10:19 - 2022-05-10 10:19 - 000042520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
  237. 2022-05-10 10:19 - 2022-05-10 10:18 - 000694952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
  238. 2022-05-10 10:19 - 2022-05-10 10:18 - 000193224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
  239. 2022-04-26 13:31 - 2022-04-26 13:31 - 001797120 _____ C:\WINDOWS\system32\dwmscene.dll
  240. 2022-04-26 13:31 - 2022-04-26 13:31 - 000069632 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
  241. 2022-04-26 13:30 - 2022-04-26 13:30 - 000224256 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
  242.  
  243. ==================== Jeden miesiąc (zmodyfikowane) ==================
  244.  
  245. (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
  246.  
  247. 2022-05-22 20:44 - 2019-12-07 08:12 - 000000000 ____D C:\WINDOWS\AppReadiness
  248. 2022-05-22 20:36 - 2022-03-10 17:51 - 000000000 ____D C:\Users\Adrian11\OneDrive
  249. 2022-05-22 20:36 - 2022-03-10 17:46 - 000000000 ____D C:\Users\Adrian11\AppData\Local\VirtualStore
  250. 2022-05-22 20:36 - 2022-03-10 17:46 - 000000000 ____D C:\Users\Adrian11\3D Objects
  251. 2022-05-22 20:33 - 2022-03-12 15:22 - 000000000 ____D C:\Program Files\Google
  252. 2022-05-22 20:32 - 2022-04-14 21:25 - 000000000 ___DC C:\EEK
  253. 2022-05-22 20:32 - 2022-04-03 22:47 - 000000000 ____D C:\Program Files\KeePass Password Safe 2
  254. 2022-05-22 20:32 - 2022-03-11 00:08 - 000000000 ____D C:\Users\Adrian11\AppData\Roaming\WhatsApp
  255. 2022-05-22 20:32 - 2022-03-10 21:01 - 000000000 ____D C:\ProgramData\Avast Software
  256. 2022-05-22 20:32 - 2022-03-10 19:12 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
  257. 2022-05-22 20:32 - 2019-12-07 08:12 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
  258. 2022-05-22 20:31 - 2019-12-07 08:10 - 000000000 ____D C:\WINDOWS\INF
  259. 2022-05-22 20:23 - 2022-03-10 17:24 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
  260. 2022-05-22 20:22 - 2022-03-10 17:28 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
  261. 2022-05-22 20:22 - 2019-12-07 08:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
  262. 2022-05-22 20:20 - 2019-12-07 08:12 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
  263. 2022-05-22 20:17 - 2022-03-10 17:23 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
  264. 2022-05-20 23:28 - 2022-03-10 21:28 - 000000000 ____D C:\Users\Adrian11\AppData\Roaming\Unofficial desktop client for ProtonMail
  265. 2022-05-20 21:56 - 2019-12-07 08:12 - 000000000 ___HD C:\Program Files\WindowsApps
  266. 2022-05-18 22:32 - 2022-03-10 20:54 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3093184379-4238663051-604853877-1001
  267. 2022-05-18 21:31 - 2022-03-10 19:12 - 000000000 ___RD C:\Users\Adrian11\Desktop\Centrum dowodzenia
  268. 2022-05-18 17:29 - 2022-03-12 22:04 - 000000000 ____D C:\Users\Adrian11\AppData\Roaming\HiBit Uninstaller
  269. 2022-05-18 17:27 - 2022-03-10 17:43 - 001767980 _____ C:\WINDOWS\system32\PerfStringBackup.INI
  270. 2022-05-18 17:27 - 2019-12-07 14:23 - 000785414 _____ C:\WINDOWS\system32\perfh015.dat
  271. 2022-05-18 17:27 - 2019-12-07 14:23 - 000152274 _____ C:\WINDOWS\system32\perfc015.dat
  272. 2022-05-18 17:17 - 2019-12-07 08:12 - 000000000 ____D C:\WINDOWS\SystemResources
  273. 2022-05-18 17:17 - 2019-12-07 08:12 - 000000000 ____D C:\WINDOWS\bcastdvr
  274. 2022-05-18 17:17 - 2019-12-07 08:12 - 000000000 ____D C:\Program Files\Common Files\System
  275. 2022-05-18 17:10 - 2019-12-07 08:03 - 000000000 ____D C:\WINDOWS\CbsTemp
  276. 2022-05-18 16:20 - 2022-03-10 19:23 - 000000000 ____D C:\WINDOWS\system32\MRT
  277. 2022-05-18 16:06 - 2022-03-10 19:23 - 141577752 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
  278. 2022-05-18 16:04 - 2022-03-12 15:27 - 000002253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
  279. 2022-05-18 11:19 - 2022-03-10 17:45 - 000000000 ____D C:\Users\Adrian11
  280. 2022-05-12 22:01 - 2022-03-12 22:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HiBit Uninstaller
  281. 2022-05-12 22:01 - 2022-03-12 22:03 - 000000000 ____D C:\Program Files\HiBit Uninstaller
  282. 2022-05-12 21:50 - 2022-03-10 21:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
  283. 2022-05-12 21:50 - 2022-03-10 21:37 - 000000000 ____D C:\Program Files\Ashampoo
  284. 2022-05-11 17:30 - 2022-04-09 17:11 - 000002402 _____ C:\WINDOWS\system32\Tasks\PrivaZer_SkipUAC
  285. 2022-05-11 17:30 - 2022-03-12 15:22 - 000003562 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{F0BD3C5B-9345-4C84-A352-51D3BADFF2B2}
  286. 2022-05-11 17:30 - 2022-03-12 15:22 - 000003338 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{5AD7CAEF-1BDD-4036-9694-99A9AEEAC176}
  287. 2022-05-11 17:30 - 2022-03-10 21:06 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
  288. 2022-05-10 11:10 - 2022-03-11 23:22 - 000000000 ____D C:\Users\Adrian11\AppData\LocalLow\Mozilla
  289. 2022-04-26 18:02 - 2019-12-07 08:12 - 000000000 ___SD C:\WINDOWS\system32\UNP
  290. 2022-04-26 18:01 - 2019-12-07 08:12 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
  291. 2022-04-22 22:24 - 2022-03-11 00:08 - 000000000 ____D C:\Users\Adrian11\AppData\Local\WhatsApp
  292.  
  293. ==================== Pliki w katalogu głównym wybranych folderów ========
  294.  
  295. 2022-04-03 21:17 - 2022-04-03 21:17 - 000000036 _____ () C:\Users\Adrian11\AppData\Local\housecall.guid.cache
  296. 2022-04-07 21:36 - 2022-04-08 20:49 - 000000010 _____ () C:\Users\Adrian11\AppData\Local\sponge.last.runtime.cache
  297.  
  298. ==================== SigCheck ============================
  299.  
  300. (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
  301.  
  302. ==================== Koniec FRST.txt ========================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement