Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 15.11.2018
Uruchomiony przez Magda (administrator)  LENOVO-PC (21-11-2018 12:31:05)
Uruchomiony z C:\Users\Magda\Downloads
Załadowane profile: Magda (Dostępne profile: Magda)
Platform: Windows 8.1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Windows\System32\igfxTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(© 2015 Microsoft Corporation) C:\Users\Magda\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Chemtable Software) C:\Program Files (x86)\Registry Life\StartupCheckingService.exe
(AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler.exe
(AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler64.exe
(AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(CRYPTOCOMPANY OU) C:\Program Files (x86)\CryptoCompany\Update\CryptoTabUpdate.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(CRYPTOCOMPANY OU) C:\Program Files (x86)\CryptoCompany\Update\1.3.99.7\CryptoTabCrashHandler.exe
(CRYPTOCOMPANY OU) C:\Program Files (x86)\CryptoCompany\Update\1.3.99.7\CryptoTabCrashHandler64.exe
(CRYPTOCOMPANY OU) C:\Program Files (x86)\CryptoCompany\Update\CryptoTabUpdate.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [IgfxTray] => C:\WINDOWS\system32\igfxtray.exe [380904 2018-09-13] ()
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-04] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2891080 2013-10-17] (ELAN Microelectronics Corp.)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161728 2015-11-12] (IvoSoft)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242392 2018-11-19] (AVAST Software)
HKLM-x32\...\Run: [CryptoTab Browser] => C:\Program Files (x86)\CryptoTab Browser\Application\browser.exe [1553448 2018-11-14] (The Chromium and CryptoTab Browser Authors)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-10-29] (Atheros Communications)
HKU\S-1-5-21-907838667-449044099-1821486178-1001\...\Run: [BingSvc] => C:\Users\Magda\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2016-01-18] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-907838667-449044099-1821486178-1001\...\Run: [uTorrent] => C:\Users\Magda\AppData\Roaming\uTorrent\uTorrent.exe [1987768 2018-09-28] (BitTorrent Inc.)
HKU\S-1-5-21-907838667-449044099-1821486178-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19476424 2018-11-06] (Piriform Software Ltd)
HKU\S-1-5-21-907838667-449044099-1821486178-1001\...\MountPoints2: {33032f9c-1877-11e6-831f-28e3471137d0} - "I:\setup.exe" 
HKU\S-1-5-21-907838667-449044099-1821486178-1001\...\MountPoints2: {462fc0cc-5efd-11e6-8388-28d24455f30a} - "Y:\setup.exe" 
HKU\S-1-5-21-907838667-449044099-1821486178-1001\...\MountPoints2: {670e0388-1d1c-11e6-832d-28e3471137d0} - "O:\setup.exe" 
HKU\S-1-5-21-907838667-449044099-1821486178-1001\...\MountPoints2: {d965ad15-1b92-11e6-8327-28e3471137d0} - "K:\setup.exe" 
HKU\S-1-5-21-907838667-449044099-1821486178-1001\...\MountPoints2: {e7c50eda-ee77-11e7-84cf-28e3471137d0} - "G:\AutoRun.exe" 
HKU\S-1-5-21-907838667-449044099-1821486178-1001\...\MountPoints2: {f9f705b9-5de0-11e7-8461-28e3471137d0} - "G:\AutoRun.exe" 
HKU\S-1-5-21-907838667-449044099-1821486178-1001\...\MountPoints2: {fe9c54e4-1776-11e6-831b-28e3471137d0} - "G:\OriginSetup.exe" 
HKU\S-1-5-21-907838667-449044099-1821486178-1001\...\MountPoints2: {fe9c5553-1776-11e6-831b-28e3471137d0} - "G:\setup.exe" 
HKU\S-1-5-21-907838667-449044099-1821486178-1001\...\MountPoints2: {ffb943f2-24f1-11e6-8345-28e3471137d0} - "W:\setup.exe" 
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 84.205.31.4 84.205.31.5
Tcpip\..\Interfaces\{2EBBE074-548A-441E-88F4-070174D02E56}: [DhcpNameServer] 84.205.31.4 84.205.31.5

Internet Explorer:
==================
HKU\S-1-5-21-907838667-449044099-1821486178-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki
HKU\S-1-5-21-907838667-449044099-1821486178-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-907838667-449044099-1821486178-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.google.pl/
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-907838667-449044099-1821486178-1001 -> DefaultScope {F17C143C-F26C-4DD0-B689-909F0FF9F33A} URL = 
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12] (IvoSoft)
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2018-09-27] (McAfee, Inc.)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2015-11-12] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12] (IvoSoft)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2018-09-27] (McAfee, Inc.)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2015-11-12] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2015-11-12] (IvoSoft)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2018-09-27] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2018-09-27] (McAfee, Inc.)

FireFox:
========
FF ProfilePath: C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\5v5cda7b.default-1491332505102 [2018-11-19]
FF user.js: detected! => C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\5v5cda7b.default-1491332505102\user.js [2017-07-28]
FF Extension: (Avast SafePrice) - C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\5v5cda7b.default-1491332505102\Extensions\sp@avast.com.xpi [2018-07-05]
FF Extension: (Avast Online Security) - C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\5v5cda7b.default-1491332505102\Extensions\wrc@avast.com.xpi [2018-07-08]
FF Extension: (Firefox Monitor) - C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\5v5cda7b.default-1491332505102\features\{9dbbd7d9-4565-47f8-838f-48de74dfa556}\fxmonitor@mozilla.org.xpi [2018-10-02]
FF Extension: (Telemetry coverage) - C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\5v5cda7b.default-1491332505102\features\{9dbbd7d9-4565-47f8-838f-48de74dfa556}\telemetry-coverage-bug1487578@mozilla.org.xpi [2018-10-02] [Przestarzałe]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi [2018-10-18]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_31_0_0_148.dll [2018-11-15] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_148.dll [2018-11-15] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @tools.CryptoTab.com/CryptoTab Update;version=3 -> C:\Program Files (x86)\CryptoCompany\Update\1.3.99.7\npCryptoTabUpdate3.dll [2018-11-18] (CRYPTOCOMPANY OU)
FF Plugin-x32: @tools.CryptoTab.com/CryptoTab Update;version=9 -> C:\Program Files (x86)\CryptoCompany\Update\1.3.99.7\npCryptoTabUpdate3.dll [2018-11-18] (CRYPTOCOMPANY OU)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-22] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-22] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-29] (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: Default -> msn.com
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR DefaultSearchURL: Default -> hxxps://pl.search.yahoo.com/search?fr=mcafee_uninternational&type=D210PL91105G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Profile: C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default [2018-11-19]
CHR Extension: (Prezentacje) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Dokumenty) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Dysk Google) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-17]
CHR Extension: (Video AdBlock for Chrome) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\bknbnapaddjdnbilpmlacdkjdkjmbjhd [2016-01-17]
CHR Extension: (YouTube) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-17]
CHR Extension: (Google Search) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-17]
CHR Extension: (Avast SafePrice | Porównania, promocje, kupony) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-11-16]
CHR Extension: (Bing) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2018-03-19]
CHR Extension: (Arkusze) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2018-10-18]
CHR Extension: (Dokumenty Google offline) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-17]
CHR Extension: (Avast Online Security) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-09-26]
CHR Extension: (Skype) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-12-17]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-15]
CHR Extension: (Gmail) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-17]
CHR Extension: (Chrome Media Router) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-11-12]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-907838667-449044099-1821486178-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd] - hxxp://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-907838667-449044099-1821486178-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <nie znaleziono>
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [8188768 2018-11-19] (AVAST Software)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [317568 2013-10-29] (Windows (R) Win 7 DDK provider) [Brak podpisu cyfrowego]
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-19] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [324000 2018-11-19] (AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-19] (AVAST Software)
R2 Chemtable Startup Checking; C:\Program Files (x86)\Registry Life\StartupCheckingService.exe [9924368 2018-08-09] (Chemtable Software)
S2 cryptobrowser; C:\Program Files (x86)\CryptoCompany\Update\CryptoTabUpdate.exe [185896 2018-11-18] (CRYPTOCOMPANY OU)
S3 cryptobrowserm; C:\Program Files (x86)\CryptoCompany\Update\CryptoTabUpdate.exe [185896 2018-11-18] (CRYPTOCOMPANY OU)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1443520 2016-04-12] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [779392 2018-04-20] (EasyAntiCheat Ltd)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [99632 2013-10-09] (ELAN Microelectronics Corp.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [343016 2018-09-13] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [604824 2018-09-27] (McAfee, Inc.)
S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [7677008 2017-10-16] (INCA Internet Co., Ltd.)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2269504 2018-10-25] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3130184 2018-10-25] (Electronic Arts)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-10-29] (Atheros) [Brak podpisu cyfrowego]

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [201240 2018-11-19] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [230344 2018-11-19] (AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsha.sys [201768 2018-11-19] (AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswbloga.sys [346592 2018-11-19] (AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniva.sys [59496 2018-11-19] (AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [185072 2018-11-19] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [46384 2018-11-19] (AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42288 2018-11-19] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [163208 2018-11-19] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [111800 2018-11-19] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [87432 2018-11-19] (AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1028680 2018-11-19] (AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [469272 2018-11-19] (AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [208472 2018-11-19] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [380464 2018-11-19] (AVAST Software)
R3 athr; C:\WINDOWS\system32\DRIVERS\athwbx.sys [3880448 2013-11-13] (Qualcomm Atheros Communications, Inc.)
R3 BTATH_LWFLT; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [77464 2013-10-29] (Qualcomm Atheros)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-05-11] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-05-11] (Disc Soft Ltd)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [111608 2017-02-14] (McAfee, Inc.)
S3 NETwNe64; C:\WINDOWS\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 RSUSBVSTOR; \SystemRoot\System32\Drivers\RtsUVStor.sys [X]
S3 rtsuvc; \SystemRoot\system32\DRIVERS\rtsuvc.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-11-21 12:31 - 2018-11-21 12:32 - 000023502 _____ C:\Users\Magda\Downloads\FRST.txt
2018-11-19 20:11 - 2018-11-19 20:11 - 000378584 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2018-11-18 17:38 - 2018-11-18 17:38 - 000002312 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CryptoTab Browser.lnk
2018-11-18 17:38 - 2018-11-18 17:38 - 000002271 _____ C:\Users\Public\Desktop\CryptoTab Browser.lnk
2018-11-18 17:37 - 2018-11-18 17:38 - 000000000 ____D C:\Program Files (x86)\CryptoTab Browser
2018-11-18 17:36 - 2018-11-19 21:31 - 000003562 _____ C:\WINDOWS\System32\Tasks\CryptoTabUpdateTaskMachineUA
2018-11-18 17:36 - 2018-11-19 21:30 - 000003434 _____ C:\WINDOWS\System32\Tasks\CryptoTabUpdateTaskMachineCore
2018-11-18 17:36 - 2018-11-18 17:36 - 001243688 _____ (CRYPTOCOMPANY OU) C:\Users\Magda\Downloads\CryptoTabBrowserUpdate.exe
2018-11-18 17:36 - 2018-11-18 17:36 - 000000000 ____D C:\Program Files (x86)\CryptoCompany
2018-11-18 15:40 - 2018-11-18 15:40 - 002416128 _____ (Farbar) C:\Users\Magda\Downloads\FRST64.exe
2018-11-16 17:25 - 2018-11-16 17:25 - 000000000 ____D C:\WINDOWS\System32\Tasks\DelayedItemsByChemtableSoftware
2018-11-16 17:21 - 2018-11-16 17:21 - 000000000 ____D C:\Users\Magda\AppData\Local\ChemTable Software
2018-11-16 17:20 - 2018-11-16 17:20 - 000001177 _____ C:\Users\Public\Desktop\Registry Life.lnk
2018-11-16 17:20 - 2018-11-16 17:20 - 000000000 ____D C:\Users\Magda\AppData\Roaming\ChemTable Software
2018-11-16 17:20 - 2018-11-16 17:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Registry Life
2018-11-16 17:20 - 2018-11-16 17:20 - 000000000 ____D C:\ProgramData\Chemtable Software
2018-11-16 17:20 - 2018-11-16 17:20 - 000000000 ____D C:\Program Files (x86)\Registry Life
2018-11-16 15:46 - 2018-11-16 15:47 - 018071560 _____ (Piriform Software Ltd) C:\Users\Magda\Downloads\ccsetup549.exe
2018-11-16 15:41 - 2018-11-16 15:41 - 000014616 _____ C:\Users\Magda\Documents\cc_20181116_154108.reg
2018-11-16 15:33 - 2018-11-16 15:33 - 000019400 _____ C:\Users\Magda\Documents\cc_20181116_153341.reg
2018-11-16 14:57 - 2018-11-21 12:31 - 000000000 ____D C:\FRST
2018-11-16 14:57 - 2018-11-16 15:35 - 000000000 ____D C:\Users\Magda\Downloads\FRST-OlderVersion
2018-11-16 14:25 - 2018-11-16 14:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune
2018-11-16 14:25 - 2018-11-16 14:25 - 000000000 ____D C:\Program Files (x86)\HD Tune
2018-11-16 12:27 - 2018-11-16 12:27 - 000071042 _____ C:\Users\Magda\Documents\cc_20181116_122749.reg
2018-11-15 12:15 - 2018-11-15 12:15 - 000000000 ____D C:\Program Files (x86)\Realtek
2018-11-15 12:15 - 2018-05-27 21:51 - 001071552 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys
2018-11-15 12:15 - 2018-05-27 21:51 - 000122816 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2018-11-13 09:05 - 2018-11-16 12:28 - 000000000 ____D C:\WINDOWS\Minidump
2018-11-13 08:32 - 2018-11-13 08:32 - 000000118 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-11-12 15:16 - 2018-11-12 15:16 - 000007598 _____ C:\Users\Magda\AppData\Local\Resmon.ResmonCfg
2018-11-12 15:12 - 2018-11-21 12:27 - 000000000 __SHD C:\Users\Magda\IntelGraphicsProfiles
2018-11-12 15:12 - 2018-11-12 15:12 - 000000401 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2018-11-12 15:07 - 2018-11-15 12:18 - 000000000 ____D C:\WINDOWS\LastGood
2018-11-12 14:37 - 2018-11-12 14:37 - 000000000 ____D C:\Users\Magda\AppData\Local\AMD
2018-11-12 14:32 - 2018-11-18 16:18 - 000003160 _____ C:\WINDOWS\System32\Tasks\StartCN
2018-11-12 14:32 - 2018-11-12 15:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kreator raportowania problemów AMD
2018-11-12 14:32 - 2018-11-12 14:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2018-11-12 14:30 - 2018-11-12 14:31 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2018-11-12 14:30 - 2018-11-12 14:30 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2018-11-12 14:30 - 2017-01-27 23:05 - 000103936 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2018-11-12 14:30 - 2017-01-27 23:04 - 000326656 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2018-11-12 14:30 - 2017-01-27 23:02 - 000118272 _____ C:\WINDOWS\system32\vulkaninfo.exe
2018-11-12 14:30 - 2017-01-27 23:01 - 000322560 _____ C:\WINDOWS\system32\vulkan-1.dll
2018-11-12 14:29 - 2017-07-04 23:38 - 009446336 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll
2018-11-12 14:29 - 2017-07-04 23:38 - 007663888 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll
2018-11-12 14:29 - 2017-07-04 23:38 - 000522632 _____ C:\WINDOWS\system32\GameManager64.dll
2018-11-12 14:29 - 2017-07-04 23:38 - 000207760 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll
2018-11-12 14:29 - 2017-07-04 23:38 - 000185088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll
2018-11-12 14:29 - 2017-07-04 23:38 - 000161344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll
2018-11-12 14:29 - 2017-07-04 23:38 - 000143864 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 015728008 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 014318984 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 013254256 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 012574408 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 010444400 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 001654880 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 001347952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 001032072 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 001032072 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000768904 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2018-11-12 14:29 - 2017-07-04 23:37 - 000544136 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000543112 _____ C:\WINDOWS\system32\dgtrayicon.exe
2018-11-12 14:29 - 2017-07-04 23:37 - 000543112 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2018-11-12 14:29 - 2017-07-04 23:37 - 000537992 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000520584 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2018-11-12 14:29 - 2017-07-04 23:37 - 000475016 _____ C:\WINDOWS\system32\atieah64.exe
2018-11-12 14:29 - 2017-07-04 23:37 - 000469384 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000458632 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000402312 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2018-11-12 14:29 - 2017-07-04 23:37 - 000356744 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000349064 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe
2018-11-12 14:29 - 2017-07-04 23:37 - 000325512 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2018-11-12 14:29 - 2017-07-04 23:37 - 000236424 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000194952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000182664 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000161160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000155528 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000142216 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000126344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000124808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000124808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000114056 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000078728 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000072072 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000068488 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000067464 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe
2018-11-12 14:29 - 2017-07-04 23:37 - 000065416 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000060296 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000036232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000033672 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000020360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2018-11-12 14:29 - 2017-07-04 23:37 - 000020360 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 059237768 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 046457736 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 036562312 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2018-11-12 14:29 - 2017-07-04 23:36 - 028797832 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 022739336 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 014414072 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 010313608 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 009899912 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 007955848 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 002527624 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 002189704 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000915848 _____ (AMD) C:\WINDOWS\system32\coinst_17.10.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000855432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000687496 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000559984 _____ C:\WINDOWS\system32\amdmiracast.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000505736 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000351624 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000305544 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdacpksd.sys
2018-11-12 14:29 - 2017-07-04 23:36 - 000269704 _____ C:\WINDOWS\system32\clinfo.exe
2018-11-12 14:29 - 2017-07-04 23:36 - 000185600 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000159112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000154152 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000128968 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000124808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000121240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000121240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000112520 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000106248 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000103304 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000092840 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2018-11-12 14:29 - 2017-07-04 23:36 - 000092840 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2018-11-12 14:29 - 2017-07-04 23:35 - 032738184 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll
2018-11-12 14:29 - 2017-07-04 23:35 - 026831240 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll
2018-11-12 14:29 - 2017-07-04 23:35 - 008471432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll
2018-11-12 14:29 - 2017-07-04 23:35 - 000456584 _____ C:\WINDOWS\system32\amdhdl64.dll
2018-11-12 14:29 - 2017-07-04 23:35 - 000311176 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll
2018-11-12 14:29 - 2017-07-04 23:35 - 000166280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amduve64.dll
2018-11-12 14:29 - 2017-07-04 23:35 - 000135560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amduve32.dll
2018-11-12 14:29 - 2017-07-04 23:35 - 000082824 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2018-11-12 14:29 - 2017-07-04 23:35 - 000066952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll
2018-11-12 14:29 - 2017-07-04 23:35 - 000066440 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2018-11-12 14:29 - 2017-07-04 23:35 - 000054664 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll
2018-11-12 14:29 - 2017-07-04 22:59 - 000798552 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb
2018-11-12 14:29 - 2017-07-04 22:59 - 000798552 _____ C:\WINDOWS\system32\atiapfxx.blb
2018-11-12 14:29 - 2017-07-04 22:58 - 003437632 _____ C:\WINDOWS\system32\atiumd6a.cap
2018-11-12 14:29 - 2017-07-04 22:53 - 003471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap
2018-11-12 14:29 - 2017-07-04 16:29 - 000368576 _____ C:\WINDOWS\system32\ativvaxy_el_nd.dat
2018-11-12 14:29 - 2017-06-22 09:46 - 000951878 _____ C:\WINDOWS\system32\amdicdxx.dat
2018-11-12 14:29 - 2017-05-16 16:15 - 000166560 _____ C:\WINDOWS\system32\amde34b.dat
2018-11-12 14:29 - 2017-05-16 16:15 - 000166560 _____ C:\WINDOWS\system32\amde34a.dat
2018-11-12 14:29 - 2017-05-16 16:03 - 000159072 _____ C:\WINDOWS\system32\amde31a.dat
2018-11-12 14:29 - 2017-05-16 16:01 - 000160768 _____ C:\WINDOWS\system32\ativce03.dat
2018-11-12 14:29 - 2017-03-03 17:39 - 000120368 _____ C:\WINDOWS\system32\kapp_ci.sbin
2018-11-12 14:29 - 2017-02-17 00:51 - 000234292 _____ C:\WINDOWS\system32\ativvaxy_cik.dat
2018-11-12 14:29 - 2017-02-17 00:51 - 000234032 _____ C:\WINDOWS\system32\ativvaxy_cik_nd.dat
2018-11-12 14:29 - 2017-02-17 00:42 - 000325316 _____ C:\WINDOWS\system32\ativvaxy_vi.dat
2018-11-12 14:29 - 2017-02-17 00:42 - 000325056 _____ C:\WINDOWS\system32\ativvaxy_vi_nd.dat
2018-11-12 14:29 - 2017-02-17 00:34 - 000266772 _____ C:\WINDOWS\system32\ativvaxy_FJ.dat
2018-11-12 14:29 - 2017-02-17 00:34 - 000266512 _____ C:\WINDOWS\system32\ativvaxy_FJ_nd.dat
2018-11-12 14:29 - 2017-02-17 00:29 - 000276960 _____ C:\WINDOWS\system32\ativvaxy_stn_nd.dat
2018-11-12 14:29 - 2017-02-16 23:28 - 000271456 _____ C:\WINDOWS\system32\ativvaxy_cz_nd.dat
2018-11-12 14:29 - 2017-02-16 23:20 - 000369792 _____ C:\WINDOWS\system32\ativvaxy_gl_nd.dat
2018-11-12 14:29 - 2017-01-26 18:33 - 000164960 _____ C:\WINDOWS\system32\amde40a.dat
2018-11-12 14:29 - 2017-01-12 23:25 - 000100832 _____ C:\WINDOWS\system32\ativce02.dat
2018-11-12 14:29 - 2016-10-17 20:28 - 000020580 _____ C:\WINDOWS\system32\AMDKernelEvents.man
2018-11-12 14:29 - 2016-09-02 23:30 - 000114704 _____ C:\WINDOWS\system32\kapp_si.sbin
2018-11-12 14:29 - 2016-09-02 16:24 - 000154384 _____ C:\WINDOWS\system32\samu_krnl_ci.sbin
2018-11-12 14:29 - 2015-12-16 22:06 - 000000144 _____ C:\WINDOWS\system32\amd-vulkan64.json
2018-11-12 14:29 - 2015-12-15 18:54 - 000000144 _____ C:\WINDOWS\SysWOW64\amd-vulkan32.json
2018-11-12 14:18 - 2018-11-12 14:19 - 046525442 _____ C:\Users\Magda\Downloads\20543799_ab60a74da9a8c7d907b9174d83fc4545ff2e8ee6.cab
2018-11-12 14:09 - 2017-07-28 16:32 - 000003117 _____ C:\Users\Magda\Downloads\Sklep Google Play — kopia.html
2018-11-12 14:09 - 2017-06-24 15:29 - 000021009 _____ C:\Users\Magda\Downloads\Minionki Rozrabiają 3 FILM — kopia.torrent
2018-11-12 14:09 - 2017-04-08 14:47 - 000096323 _____ C:\Users\Magda\Downloads\The.Witcher.3.Wild.Hunt.Game.of.the.Year.Edition.PROPER-GOG — kopia.torrent
2018-11-12 14:07 - 2018-11-12 14:07 - 000027610 _____ C:\Users\Magda\Documents\cc_20181112_140738.reg
2018-10-31 23:23 - 2018-11-18 17:38 - 000000000 ____D C:\Users\Magda\AppData\Local\CRYPTOCOMPANY
2018-10-31 23:23 - 2018-11-18 17:36 - 000000000 ____D C:\Users\Magda\AppData\Local\CryptoTab Browser
2018-10-31 23:23 - 2018-10-31 23:23 - 001236520 _____ (CRYPTOCOMPANY OU) C:\Users\Magda\Downloads\CryptoTabBrowserx64__b3AJPEo.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-11-21 12:32 - 2016-05-11 15:21 - 000000000 ____D C:\ProgramData\Origin
2018-11-21 12:31 - 2016-01-16 15:12 - 000003594 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-907838667-449044099-1821486178-1001
2018-11-21 12:30 - 2018-04-19 18:45 - 000000000 ____D C:\Users\Magda\AppData\Local\AVAST Software
2018-11-21 12:29 - 2016-01-16 17:06 - 000000000 ____D C:\Users\Magda\AppData\Local\ClassicShell
2018-11-21 12:26 - 2013-08-22 15:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-11-19 21:32 - 2016-11-26 23:46 - 000000000 ____D C:\Users\Magda\AppData\LocalLow\Mozilla
2018-11-19 21:32 - 2013-08-22 14:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI
2018-11-19 21:31 - 2018-03-17 22:44 - 000004566 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-11-19 21:31 - 2016-05-14 17:42 - 000004478 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2018-11-19 21:31 - 2016-01-16 17:04 - 000004390 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2018-11-19 21:21 - 2017-04-08 11:26 - 000000000 ____D C:\Users\Magda\AppData\Roaming\Raptr
2018-11-19 21:20 - 2016-01-16 16:44 - 000003988 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5A3E14EA-6DE7-433A-BCB5-34209DF6F848}
2018-11-19 20:14 - 2017-03-05 19:43 - 000003910 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2018-11-19 20:11 - 2017-11-16 21:41 - 000201240 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2018-11-19 20:11 - 2016-01-16 17:02 - 000469272 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2018-11-19 20:11 - 2016-01-16 17:02 - 000380464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2018-11-19 20:11 - 2016-01-16 17:02 - 000208472 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2018-11-19 20:11 - 2016-01-16 17:02 - 000163208 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2018-11-19 20:11 - 2016-01-16 17:02 - 000111800 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2018-11-19 20:11 - 2016-01-16 17:02 - 000087432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2018-11-19 20:11 - 2016-01-16 17:02 - 000046384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2018-11-19 20:10 - 2018-01-08 15:48 - 000185072 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2018-11-19 20:10 - 2017-03-05 19:43 - 000346592 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbloga.sys
2018-11-19 20:10 - 2017-03-05 19:43 - 000230344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2018-11-19 20:10 - 2017-03-05 19:43 - 000201768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2018-11-19 20:10 - 2017-03-05 19:43 - 000059496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2018-11-19 20:10 - 2016-03-20 20:10 - 000042288 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2018-11-19 20:10 - 2016-01-16 17:02 - 001028680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2018-11-19 19:53 - 2014-02-13 13:30 - 000808198 _____ C:\WINDOWS\system32\perfh015.dat
2018-11-19 19:53 - 2014-02-13 13:30 - 000164014 _____ C:\WINDOWS\system32\perfc015.dat
2018-11-19 19:53 - 2013-10-07 19:27 - 001828496 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-11-19 19:53 - 2013-08-22 14:36 - 000000000 ____D C:\WINDOWS\Inf
2018-11-18 16:51 - 2016-02-27 19:23 - 000000000 ____D C:\Users\Magda\AppData\Local\CrashDumps
2018-11-18 16:18 - 2018-04-06 04:50 - 000003972 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2018-11-18 16:18 - 2018-02-05 19:54 - 000003202 _____ C:\WINDOWS\System32\Tasks\{CA4B1797-57AF-403F-AE6B-A82FFA1F1489}
2018-11-18 16:18 - 2016-05-11 18:55 - 000002792 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2018-11-18 16:18 - 2016-05-11 17:30 - 000002994 _____ C:\WINDOWS\System32\Tasks\GMHSkipUAC
2018-11-18 16:18 - 2016-01-17 21:54 - 000003482 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-11-18 16:18 - 2016-01-17 21:54 - 000003354 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-11-18 16:18 - 2016-01-16 17:02 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2018-11-18 16:18 - 2014-02-13 05:36 - 000003056 _____ C:\WINDOWS\System32\Tasks\PDVDServ Task
2018-11-16 17:28 - 2016-01-16 15:05 - 000000000 ____D C:\Users\Magda
2018-11-16 17:25 - 2018-04-19 18:45 - 000004300 _____ C:\WINDOWS\System32\Tasks\AvastUpdateTaskMachineCore
2018-11-16 15:47 - 2016-05-11 18:55 - 000000845 _____ C:\Users\Public\Desktop\CCleaner.lnk
2018-11-16 15:47 - 2016-05-11 18:55 - 000000000 ____D C:\Program Files\CCleaner
2018-11-15 12:22 - 2016-01-17 22:12 - 000002261 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-11-15 12:22 - 2016-01-17 22:12 - 000002220 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-11-15 12:17 - 2013-08-22 16:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-11-15 12:17 - 2013-08-22 16:36 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-11-15 12:15 - 2014-02-13 05:04 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2018-11-13 10:10 - 2018-02-18 02:13 - 000000000 ____D C:\Users\Magda\Documents\Gothic3
2018-11-12 15:13 - 2014-02-13 04:54 - 000000000 ___HD C:\Intel
2018-11-12 15:04 - 2014-02-13 04:58 - 000000000 ____D C:\ProgramData\Package Cache
2018-11-12 15:04 - 2014-02-13 04:55 - 000000000 ____D C:\Program Files\Intel
2018-11-12 15:00 - 2017-04-08 11:21 - 000000000 ____D C:\Program Files\AMD
2018-11-12 15:00 - 2014-02-13 05:05 - 000000000 ____D C:\ProgramData\Intel
2018-11-12 14:32 - 2017-04-08 11:25 - 000000000 ____D C:\Program Files (x86)\AMD
2018-11-12 14:08 - 2016-05-09 18:03 - 000000000 ____D C:\Users\Magda\AppData\Roaming\uTorrent
2018-11-12 14:08 - 2016-01-17 21:55 - 000000000 ____D C:\Users\Magda\AppData\Roaming\PhotoScape
2018-11-12 14:08 - 2013-08-22 16:36 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-11-12 13:31 - 2018-02-01 14:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-11-12 13:31 - 2016-01-16 16:52 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-11-12 02:36 - 2016-01-16 16:53 - 000001182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-11-10 17:47 - 2018-02-05 20:09 - 000000000 ____D C:\Program Files (x86)\Origin
2018-10-28 08:05 - 2018-04-19 18:47 - 000002458 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk

==================== Pliki w katalogu głównym wybranych folderów =======

2018-09-05 17:58 - 2014-12-14 07:34 - 001836032 _____ () C:\Program Files (x86)\3dmgame.dll
2018-09-05 17:58 - 2014-12-01 12:21 - 000000044 _____ () C:\Program Files (x86)\3dmgame.ini
2018-09-05 17:58 - 2014-09-10 08:58 - 000514560 _____ () C:\Program Files (x86)\Launcher.exe
2017-07-28 16:33 - 2017-07-28 16:33 - 000073476 _____ () C:\Users\Magda\AppData\Roaming\DMGR_1J1F1H1E2Y2Z1P1C1B2W1L1T2ZtJ1V0O1E1P1C1T0B1C1F2W1B1P1CtBtDtCyB.txt
2017-07-28 16:33 - 2017-07-28 16:33 - 000154802 _____ () C:\Users\Magda\AppData\Roaming\DMGR_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt
2018-06-07 16:29 - 2018-08-31 10:30 - 000000136 _____ () C:\Users\Magda\AppData\Roaming\WB.CFG
2018-11-12 15:16 - 2018-11-12 15:16 - 000007598 _____ () C:\Users\Magda\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2018-11-18 17:07

==================== Koniec  FRST.txt ============================