Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28.09.2018 Ran by Moskid (administrator) on DESKTOP-3QHCN73 (29-09-2018 21:37:06) Running from D:\Users\Moskid\Downloads Loaded Profiles: Moskid (Available Profiles: Moskid) Platform: Windows 10 Pro 10240.17443 (X64) Language: Angielski (Stany Zjednoczone) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdredline.exe (Bitdefender) C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe (Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe (Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsserv.exe (Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdagent.exe (Microsoft Corporation) C:\Windows\SoftwareDistribution\Download\772dd4c2e15cb94721b442a8bc12c657\WindowsUpdateBox.exe (Microsoft Corporation) C:\$WINDOWS.~BT\Sources\SetupHost.exe (Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [316392 2018-05-11] (Adobe Systems, Incorporated) HKLM-x32\...\Run: [V0770Mon.exe] => C:\Windows\V0770Mon.exe [41600 2018-09-29] (Creative Technology Ltd.) HKU\S-1-5-21-2101708781-258250328-2606944135-1001\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [3207968 2018-09-08] (Valve Corporation) HKU\S-1-5-21-2101708781-258250328-2606944135-1001\...\Run: [Discord] => C:\Users\Moskid\AppData\Local\Discord\app-0.0.301\Discord.exe [57816920 2018-04-30] (Discord Inc.) HKU\S-1-5-21-2101708781-258250328-2606944135-1001\...\Run: [uTorrent] => C:\Users\Moskid\AppData\Roaming\uTorrent\uTorrent.exe [1991608 2018-09-29] (BitTorrent Inc.) HKU\S-1-5-21-2101708781-258250328-2606944135-1001\...\MountPoints2: {7744df20-c3fc-11e8-9bc3-ac890492edaf} - "D:\HiSuiteDownLoader.exe" ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)