Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 11-05.2019 Uruchomiony przez Rafal (administrator) DESKTOP-LCCVM0J (MSI MS-7A63) (13-05-2019 12:34:09) Uruchomiony z C:\Users\Rafal\Downloads\The Green Mile (1999) [1080p] Załadowane profile: Rafal (Dostępne profile: Rafal) Platform: Windows 10 Pro Wersja 1709 16299.547 (X64) Język: Polski (Polska) Domyślna przeglądarka: Chrome Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0339583.inf_amd64_c5b07d1a3a73ac05\B339442\atieclxx.exe (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0339583.inf_amd64_c5b07d1a3a73ac05\B339442\atiesrxx.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.154.333\AvastBrowserCrashHandler.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.154.333\AvastBrowserCrashHandler64.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe (A-Volute -> A-Volute) C:\Program Files\Nahimic\Nahimic VR\Foundation\NahimicVRSvc32.exe (A-Volute -> A-Volute) C:\Program Files\Nahimic\Nahimic VR\Foundation\x64\NahimicVRSvc64.exe (cFos Software GmbH -> cFos Software GmbH) C:\Program Files\cFosSpeed\spd.exe (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) [Brak podpisu cyfrowego] C:\Windows\System32\IPROSetMonitor.exe (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel(R) Extreme Tuning Utility -> Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Optane Memory\OptaneMemoryUIIcon.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_d778d9f2df7418ce\RstMwService.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\Rafal\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation) [Brak podpisu cyfrowego] C:\Program Files\Windows Defender\MSASCuiL.exe (Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\MSI\MSI Gaming Lan Manager\MSI_Gaming_Lan_Manager.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\MSI_LED.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\NahimicMonitor.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI X Boost\X_Boost.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\RAMDisk\MSI_RAMDisk_Service.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe (Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (SteelSeries ApS -> SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [193024 2018-10-04] (Microsoft Corporation) [Brak podpisu cyfrowego] HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [261000 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) HKLM\...\Run: [OptaneMemoryUI] => C:\Program Files\Intel\Intel(R) Optane Memory\OptaneMemoryUIIcon.exe [410696 2017-03-29] (Intel(R) Rapid Storage Technology -> Intel Corporation) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320568 2016-09-20] (Intel(R) Rapid Storage Technology -> Intel Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9280848 2018-06-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [NahimicVRSvc32] => C:\Program Files\Nahimic\Nahimic VR\Foundation\NahimicVRSvc32.exe [990256 2018-02-05] (A-Volute -> A-Volute) HKLM\...\Run: [NahimicVRSvc64] => C:\Program Files\Nahimic\Nahimic VR\Foundation\x64\NahimicVRSvc64.exe [1142320 2018-02-05] (A-Volute -> A-Volute) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-01-21] (Microsoft Corporation -> Microsoft Corporation) HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [835768 2018-07-06] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) HKLM-x32\...\Run: [MSI Gaming Lan Manager] => C:\MSI\MSI Gaming Lan Manager\MSI_Gaming_Lan_Manager.exe [4568224 2018-04-16] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1028280 2017-11-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) HKLM-x32\...\Run: [X_Boost] => C:\Program Files (x86)\MSI\MSI X Boost\X_Boost.exe [4261024 2018-04-17] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) HKLM\...\Policies\Explorer: [HideSCAHealth] 1 HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA HKU\S-1-5-21-9037245-4227049587-2625589235-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [35184016 2019-01-11] (Epic Games Inc. -> Epic Games, Inc.) HKU\S-1-5-21-9037245-4227049587-2625589235-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [729704 2018-06-20] (AVB Disc Soft, SIA -> Disc Soft Ltd) HKU\S-1-5-21-9037245-4227049587-2625589235-1001\...\Run: [AvastBrowserAutoLaunch_1ED1D97D6891366234C1C5B915C7ACE9] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1952880 2019-04-11] (AVAST Software s.r.o. -> AVAST Software) HKU\S-1-5-21-9037245-4227049587-2625589235-1001\...\Run: [uTorrent] => C:\Users\Rafal\AppData\Roaming\uTorrent\uTorrent.exe [1996008 2019-05-11] (BitTorrent Inc -> BitTorrent Inc.) HKU\S-1-5-21-9037245-4227049587-2625589235-1001\...\Run: [ALLUpdate] => C:\Program Files\ALLPlayer\ALLUpdate.exe [3884720 2017-10-04] (ALLPlayer Group -> ALLPlayer.org) HKU\S-1-5-21-9037245-4227049587-2625589235-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3133216 2019-01-05] (Valve -> Valve Corporation) HKU\S-1-5-21-9037245-4227049587-2625589235-1001\...\Run: [Napisy24Update] => C:\Program Files (x86)\Napisy24\Napisy24Update.exe [3990528 2018-02-02] (Napisy24.pl) [Brak podpisu cyfrowego] HKU\S-1-5-21-9037245-4227049587-2625589235-1001\...\Run: [Napisy24.pl] => C:\Program Files (x86)\Napisy24\Napisy24.exe [7006208 2018-02-02] (Napisy24.pl) [Brak podpisu cyfrowego] HKU\S-1-5-21-9037245-4227049587-2625589235-1001\...\Run: [FACEIT] => C:\Users\Rafal\AppData\Local\FACEITApp\update.exe [2203584 2019-01-06] (FACE IT LIMITED -> ) HKU\S-1-5-21-9037245-4227049587-2625589235-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19646312 2019-02-12] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-9037245-4227049587-2625589235-1001\...\Run: [Rafal] => cmd.exe /c start www.dipladoks.org HKU\S-1-5-21-9037245-4227049587-2625589235-1001\...\RunOnce: [Application Restart #2] => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.131\Installer\chrmstp.exe [2019-05-01] (Google LLC -> Google Inc.) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\73.0.1270.87\Installer\chrmstp.exe [2019-04-22] (AVAST Software s.r.o. -> AVAST Software) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2018-11-04] ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS -> SteelSeries ApS) GroupPolicy: Ograniczenia ? <==== UWAGA FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {19D8C9A8-2D40-4D44-9D5A-A65E46A8E3E6} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Task: {3206CD2F-3179-4ACB-910B-22F1E07452EF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [14680792 2019-02-12] (Piriform Software Ltd -> Piriform Software Ltd) Task: {3B3D5093-2BBF-4DC4-8D57-0750409319D8} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2380088 2019-04-03] (AVAST Software s.r.o. -> AVAST Software) Task: {4D72A821-1187-4A9B-98D9-45A3EF7EB7AC} - System32\Tasks\NahimicVRSvc32Run => C:\Program Files\Nahimic\Nahimic VR\Foundation\NahimicVRSvc32.exe [990256 2018-02-05] (A-Volute -> A-Volute) Task: {53B26470-C33F-41D0-9143-0E71BB51CE60} - System32\Tasks\MSIGH_Host => C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe [3353784 2018-03-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) Task: {5B826E42-12B5-4192-A6FF-9B19FE87483E} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [468992 2019-02-20] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego] Task: {5C19678C-270E-48C1-A330-4BB22171E9F7} - System32\Tasks\NahimicVRSvc64Run => C:\Program Files\Nahimic\Nahimic VR\Foundation\x64\NahimicVRSvc64.exe [1142320 2018-02-05] (A-Volute -> A-Volute) Task: {61FB8C4A-646F-49AC-8F11-7990DC9F4BDE} - System32\Tasks\Rafal => cmd.exe /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v Rafal /t REG_SZ /d "cmd.exe /c start www.dipladoks.org" Task: {697FAE29-A39F-415B-99CE-6960CF728EF2} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-07-28] (AVAST Software s.r.o. -> AVAST Software) Task: {69AC1A0B-C6EC-40EE-A6CC-08A4B884BF30} - System32\Tasks\MSISW_Host => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) Task: {7A61247E-98BD-4B4E-89AC-37FC6959B7DA} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1952880 2019-04-11] (AVAST Software s.r.o. -> AVAST Software) Task: {7E212C0E-E527-4E58-889A-EDF3957F306E} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2925960 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) Task: {85DF879C-8FBF-498B-84D5-192F0D5754E8} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-07-28] (AVAST Software s.r.o. -> AVAST Software) Task: {8F27A2BA-B82D-45F6-8BFC-739372F22219} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-12] (Piriform Software Ltd -> Piriform Software Ltd) Task: {90D62877-FC14-4453-BA29-A881B6DD82F9} - System32\Tasks\S-1-5-21-9037245-4227049587-2625589235-1001\DataSenseLiveTileTask => C:\Windows\System32\DataUsageLiveTileTask.exe [139264 2017-09-29] (Microsoft Windows -> Microsoft Corporation) Task: {97744FF6-9B6E-4723-B67C-FDD556A3BE18} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [468992 2019-02-20] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego] Task: {A0ACDFAD-0505-4062-834F-AB780EB78B7D} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\dvrcmd.exe "C:\Windows\System32\Tasks\Intel\Intel Telemetry 2 (x86)" został odblokowany. <==== UWAGA Task: {A45E5593-33D5-4307-A569-62A1761F5693} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [1328392 2015-11-20] (Intel(R) Software -> Intel Corporation) Task: {B9F642F1-C4E9-4811-B5D3-E92AC363AEEC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-07-28] (Google Inc -> Google Inc.) Task: {C4D92178-8C76-40DF-9DE4-7C2DCBAF5BAA} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe [814872 2018-03-02] (Intel(R) Trust Services -> Intel(R) Corporation) Task: {C4EB74E3-4E48-4D9B-8686-E0EFB86BAAA2} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [58760 2019-02-20] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {D6D40003-8CEB-4D73-AC25-4A10B4F1D046} - System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => rundll32.exe StartupCheckLibrary.dll,DllMainRunLibrary <==== UWAGA Task: {D73EA076-6EC2-4311-A03D-990FA5344551} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1952880 2019-04-11] (AVAST Software s.r.o. -> AVAST Software) Task: {E1BF08FA-4122-4318-AF2B-BB497405B124} - System32\Tasks\SystemMaintanceTask => C:\Users\Rafal\AppData\Roaming\Bus.Simulator.16.Gold.Edition.Repack\tbzshmw.exe Task: {E4EB29B9-8A9D-48F3-8557-998971299FE3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-07-28] (Google Inc -> Google Inc.) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{50802491-844a-43e3-ab6f-ba7351ee96a1}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{992d1059-d5d5-4b50-a333-5c9922fa7e6a}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Internet Explorer: ================== BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation -> Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation -> Microsoft Corporation) FireFox: ======== FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-11-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.) Chrome: ======= CHR NewTab: Default -> Not-active:"chrome-extension://nladljmabboanhihfkjacnnkgjhnokhj/new-tab.html" CHR DefaultSearchURL: Default -> hxxps://defaultsearch.co/?q={searchTerms} CHR DefaultSearchKeyword: Default -> Adaware Secure CHR Profile: C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default [2019-05-13] CHR Extension: (Prezentacje) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-07-28] CHR Extension: (Dokumenty) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-07-28] CHR Extension: (Dysk Google) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-07-28] CHR Extension: (YouTube) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-07-28] CHR Extension: (Arkusze) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-07-28] CHR Extension: (Dokumenty Google offline) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-22] CHR Extension: (AdBlock) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-05-07] CHR Extension: (Avast Online Security) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-04-30] CHR Extension: (Adaware Secure) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj [2019-05-13] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-07-28] CHR Extension: (Gmail) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-30] CHR Extension: (Chrome Media Router) - C:\Users\Rafal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-04-25] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj] - hxxps://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AMD External Events Utility; C:\Windows\System32\DriverStore\FileRepository\u0339583.inf_amd64_c5b07d1a3a73ac05\B339442\atiesrxx.exe [509048 2019-02-25] (Advanced Micro Devices, Inc. -> AMD) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6660888 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-07-28] (AVAST Software s.r.o. -> AVAST Software) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [362488 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-07-28] (AVAST Software s.r.o. -> AVAST Software) S3 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8348064 2018-12-19] (BattlEye Innovations e.K. -> ) R2 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [604504 2017-12-11] (cFos Software GmbH -> cFos Software GmbH) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3606632 2018-06-20] (AVB Disc Soft, SIA -> Disc Soft Ltd) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [781440 2019-02-04] (EasyAntiCheat Oy -> EasyAntiCheat Ltd) R2 GamingApp_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe [46264 2018-07-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) R2 GamingHotkey_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe [2027192 2018-03-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) S4 HfcDisableService; C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_d778d9f2df7418ce\HfcDisableService.exe [1860064 2019-01-09] (Intel(R) Rapid Storage Technology -> Intel Corporation) S3 iaStorAfsService; C:\Windows\System32\iaStorAfsService.exe [2788320 2019-01-09] (Intel(R) Rapid Storage Technology -> Intel Corporation) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [17976 2016-09-20] (Intel(R) Rapid Storage Technology -> Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe [758552 2018-03-02] (Intel(R) Trust Services -> Intel(R) Corporation) R2 Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [505856 2018-01-31] (Intel Corporation) [Brak podpisu cyfrowego] S2 Intel(R) TPM Provisioning Service; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe [719640 2018-03-02] (Intel(R) Trust Services -> Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [205968 2017-12-03] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService_x64.exe [2669240 2018-01-12] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2343608 2018-01-12] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService_x64.exe [2725048 2017-12-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [2252472 2017-12-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2506936 2018-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2136248 2018-03-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [2724536 2018-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [83616 2018-04-17] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) R2 MSI_RAMDisk_Service; C:\Program Files (x86)\MSI\RAMDisk\MSI_RAMDisk_Service.exe [71864 2018-02-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [183992 2017-12-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego] S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2303792 2019-04-22] (Electronic Arts, Inc. -> Electronic Arts) R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3175216 2019-04-22] (Electronic Arts, Inc. -> Electronic Arts) R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Brak podpisu cyfrowego] R2 RstMwService; C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_d778d9f2df7418ce\RstMwService.exe [2112480 2019-01-09] (Intel(R) Rapid Storage Technology -> Intel Corporation) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\NisSrv.exe [3925648 2018-07-28] (Microsoft Corporation -> Microsoft Corporation) R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [18264 2017-02-23] (Intel(R) Extreme Tuning Utility -> Intel(R) Corporation) S3 AvastSecureBrowserElevationService; "C:\Program Files (x86)\AVAST Software\Browser\Application\73.0.1270.87\elevation_service.exe" [X] ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [58136 2018-06-12] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R3 amdkmdag; C:\Windows\System32\DriverStore\FileRepository\u0339583.inf_amd64_c5b07d1a3a73ac05\B339442\atikmdag.sys [52881528 2019-02-25] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R3 AMDKMDAP; C:\Windows\System32\DriverStore\FileRepository\u0339583.inf_amd64_c5b07d1a3a73ac05\B339442\atikmpag.sys [590968 2019-02-25] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [103456 2019-02-25] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37104 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [205400 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [254128 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [196000 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R0 aswblog; C:\Windows\System32\drivers\aswblog.sys [320624 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [57888 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R0 aswElam; C:\Windows\System32\drivers\aswElam.sys [15488 2019-02-27] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software) R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [257832 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42288 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [166848 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [112520 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [88160 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1031000 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [476776 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [220640 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [385848 2019-04-24] (AVAST Software s.r.o. -> AVAST Software) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [107496 2018-05-28] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices) S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-09-25] (Hewlett-Packard Company -> Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-09-25] (Hewlett-Packard Company -> Windows (R) Win 7 DDK provider) S3 dot4usb; C:\Windows\system32\DRIVERS\dot4usb.sys [49056 2012-09-25] (Hewlett-Packard Company -> Microsoft Corporation) R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2018-06-23] (Disc Soft Ltd -> Disc Soft Ltd) R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2018-06-23] (Disc Soft Ltd -> Disc Soft Ltd) R3 I2cHkBurn; C:\Windows\system32\drivers\I2cHkBurn.sys [41760 2015-07-27] (Feature Integration Technology -> FINTEK Corp.) R0 iaStorAC; C:\Windows\System32\drivers\iaStorAC.sys [1017312 2019-01-09] (Intel(R) Rapid Storage Technology -> Intel Corporation) S3 iaStorAfs; C:\Windows\System32\drivers\iaStorAfs.sys [73184 2019-01-09] (Intel(R) Rapid Storage Technology -> Intel Corporation) R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [37064 2016-08-24] (Intel Corporation -> Intel Corporation) S3 NTIOLib_CC_Clock; C:\Program Files (x86)\MSI\Command Center\ClockGen\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 NTIOLib_CC_CPU; C:\Program Files (x86)\MSI\Command Center\CPU\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) R3 NTIOLib_MBAPI; C:\Program Files (x86)\MSI\Gaming APP\Lib\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 RtlWlanu; C:\Windows\System32\drivers\rtwlanu.sys [6740328 2017-08-04] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation ) R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions) S3 ssbthid; C:\Windows\System32\drivers\ssbthid.sys [43824 2017-12-15] (SteelSeries ApS -> ) R3 ssdevfactory; C:\Windows\System32\drivers\ssdevfactory.sys [48320 2018-08-20] (SteelSeries ApS -> ) R3 sshid; C:\Windows\System32\drivers\sshid.sys [48056 2018-09-13] (SteelSeries ApS -> SteelSeries ApS) R3 sssmbus; C:\Windows\System32\drivers\sssmbus.sys [32520 2017-12-15] (SteelSeries ApS -> SteelSeries ApS) S3 STTub30; C:\Windows\System32\Drivers\STTub30.sys [54104 2017-12-15] (STMicroelectronics -> STMicroelectronics) S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46592 2018-07-28] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [340008 2018-07-28] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [59944 2018-07-28] (Microsoft Windows -> Microsoft Corporation) S3 XtuAcpiDriver; C:\Windows\System32\drivers\XtuAcpiDriver.sys [54352 2016-08-18] (Intel Corporation -> Intel Corporation) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-05-13 12:33 - 2019-05-13 12:34 - 000000000 ____D C:\FRST 2019-05-13 12:28 - 2019-05-13 12:29 - 000000248 _____ C:\DelFix.txt 2019-05-12 01:46 - 2019-05-12 01:46 - 000000975 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk 2019-05-12 01:46 - 2019-05-12 01:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2019-05-12 01:46 - 2019-05-12 01:46 - 000000000 ____D C:\Program Files\CPUID 2019-04-29 16:04 - 2019-04-29 16:04 - 000000000 ____D C:\Users\Rafal\Documents\CPY_SAVES 2019-04-29 16:04 - 2019-04-29 16:04 - 000000000 ____D C:\Users\Rafal\Documents\Assassin's Creed Odyssey 2019-04-29 13:58 - 2019-04-29 13:58 - 000000527 _____ C:\Users\Public\Desktop\Assassin's Creed - Odyssey.lnk 2019-04-24 20:41 - 2019-04-24 20:41 - 000362888 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2019-04-24 20:41 - 2019-04-24 20:41 - 000000077 _____ C:\Windows\system32\Drivers\aswSP.sys.sum 2019-04-23 09:30 - 2019-04-23 09:30 - 000000233 _____ C:\Users\Rafal\Desktop\Assassin’s Creed Unity.url 2019-04-23 08:29 - 2019-04-23 10:13 - 000000000 ____D C:\Users\Rafal\Documents\Assassin's Creed Unity 2019-04-23 00:07 - 2019-05-03 11:24 - 000000000 ____D C:\Users\Rafal\AppData\Local\Ubisoft Game Launcher 2019-04-23 00:07 - 2019-04-23 00:07 - 000001270 _____ C:\Users\Rafal\Desktop\Uplay.lnk 2019-04-23 00:07 - 2019-04-23 00:07 - 000000000 ____D C:\Users\Rafal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2019-04-23 00:07 - 2019-04-23 00:07 - 000000000 ____D C:\Program Files (x86)\Ubisoft 2019-04-22 15:55 - 2019-04-22 15:55 - 000003856 _____ C:\Windows\System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) 2019-04-22 15:55 - 2019-04-22 15:55 - 000003272 _____ C:\Windows\System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) ==================== Jeden miesiąc (zmodyfikowane) ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-05-13 12:34 - 2019-02-18 12:59 - 000000000 ____D C:\Users\Rafal\Downloads\The Green Mile (1999) [1080p] 2019-05-13 12:26 - 2018-07-28 11:59 - 007097678 _____ C:\Windows\system32\perfh015.dat 2019-05-13 12:26 - 2018-07-28 11:59 - 002096940 _____ C:\Windows\system32\perfc015.dat 2019-05-13 12:26 - 2018-07-28 04:08 - 014240416 _____ C:\Windows\system32\PerfStringBackup.INI 2019-05-13 12:18 - 2019-03-21 21:14 - 000003112 _____ C:\Windows\System32\Tasks\AMDLinkUpdate 2019-05-13 12:17 - 2018-07-28 13:03 - 000065536 _____ C:\Windows\system32\spu_storage.bin 2019-05-13 12:17 - 2018-07-28 13:02 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2019-05-13 12:17 - 2018-07-28 11:53 - 000524288 _____ C:\Windows\system32\config\BBI 2019-05-13 12:16 - 2018-08-22 22:12 - 000000000 ____D C:\Users\Rafal\AppData\Roaming\uTorrent 2019-05-13 11:54 - 2018-07-28 13:02 - 000000000 ____D C:\Windows\system32\SleepStudy 2019-05-13 11:35 - 2018-08-05 18:12 - 000000000 ____D C:\Users\Rafal\AppData\Local\CrashDumps 2019-05-13 11:35 - 2018-07-28 11:56 - 000000000 ____D C:\Windows\INF 2019-05-12 16:33 - 2018-07-28 09:36 - 000000000 ____D C:\Users\Rafal 2019-05-12 16:12 - 2018-07-28 09:36 - 000000000 ____D C:\Users\Rafal\AppData\Local\VirtualStore 2019-05-12 15:57 - 2018-07-28 11:23 - 000004264 _____ C:\Windows\System32\Tasks\Avast Emergency Update 2019-05-12 02:52 - 2019-02-27 14:08 - 000003194 _____ C:\Windows\System32\Tasks\CCleaner Update 2019-05-12 02:52 - 2019-02-27 14:08 - 000002232 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2019-05-12 02:52 - 2019-02-27 13:54 - 000002594 _____ C:\Windows\System32\Tasks\Rafal 2019-05-12 02:52 - 2019-02-26 00:37 - 000002392 _____ C:\Windows\System32\Tasks\ModifyLinkUpdate 2019-05-12 02:52 - 2019-02-26 00:37 - 000002202 _____ C:\Windows\System32\Tasks\StartCN 2019-05-12 02:52 - 2019-02-26 00:37 - 000002116 _____ C:\Windows\System32\Tasks\StartDVR 2019-05-12 02:52 - 2018-10-01 15:49 - 000003022 _____ C:\Windows\System32\Tasks\SystemMaintanceTask 2019-05-12 02:52 - 2018-08-11 17:53 - 000003482 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2019-05-12 02:52 - 2018-07-28 17:40 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software 2019-05-12 02:52 - 2018-07-28 12:22 - 000003174 _____ C:\Windows\System32\Tasks\Intel PTT EK Recertification 2019-05-12 02:52 - 2018-07-28 11:45 - 000002388 _____ C:\Windows\System32\Tasks\NahimicVRSvc64Run 2019-05-12 02:52 - 2018-07-28 11:45 - 000002380 _____ C:\Windows\System32\Tasks\NahimicVRSvc32Run 2019-05-12 02:52 - 2018-07-28 11:33 - 000002280 _____ C:\Windows\System32\Tasks\MSIGH_Host 2019-05-12 02:52 - 2018-07-28 11:33 - 000002148 _____ C:\Windows\System32\Tasks\MSISW_Host 2019-05-12 02:52 - 2018-07-28 10:30 - 000002850 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-9037245-4227049587-2625589235-1001 2019-05-12 02:52 - 2018-07-28 09:42 - 000003494 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2019-05-12 02:52 - 2018-07-28 09:42 - 000003270 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2019-05-12 01:47 - 2018-12-28 18:38 - 000000000 ____D C:\Users\Rafal\AppData\Roaming\DS4Windows 2019-05-11 17:50 - 2018-07-28 09:38 - 000002403 _____ C:\Users\Rafal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2019-05-11 17:50 - 2018-07-28 09:38 - 000000000 ___RD C:\Users\Rafal\OneDrive 2019-05-07 01:32 - 2019-03-24 18:38 - 000000000 ____D C:\Users\Rafal\AppData\Local\BitTorrentHelper 2019-05-01 11:27 - 2018-07-28 09:43 - 000002307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-05-01 11:27 - 2018-07-28 09:43 - 000002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2019-04-30 14:13 - 2018-09-16 12:59 - 000000000 ____D C:\Program Files (x86)\Origin 2019-04-29 16:03 - 2018-10-01 15:46 - 000000000 ____D C:\Windows\SysWOW64\directx 2019-04-24 21:24 - 2018-09-16 12:54 - 000000000 ____D C:\ProgramData\Origin 2019-04-24 20:41 - 2019-02-27 14:00 - 000320624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswblog.sys 2019-04-24 20:41 - 2019-02-27 14:00 - 000254128 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys 2019-04-24 20:41 - 2019-02-27 14:00 - 000196000 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys 2019-04-24 20:41 - 2019-02-27 14:00 - 000057888 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys 2019-04-24 20:41 - 2019-02-27 14:00 - 000042288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2019-04-24 20:41 - 2019-02-27 14:00 - 000037104 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys 2019-04-24 20:41 - 2019-02-27 00:45 - 000000000 ____D C:\APEX 2019-04-24 20:41 - 2018-09-16 12:54 - 000000000 ____D C:\Users\Rafal\AppData\Roaming\Origin 2019-04-24 20:41 - 2018-07-28 11:56 - 000000000 ___HD C:\Windows\ELAMBKUP 2019-04-24 20:41 - 2018-07-28 11:23 - 001031000 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2019-04-24 20:41 - 2018-07-28 11:23 - 000476776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2019-04-24 20:41 - 2018-07-28 11:23 - 000385848 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2019-04-24 20:41 - 2018-07-28 11:23 - 000257832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys 2019-04-24 20:41 - 2018-07-28 11:23 - 000220640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2019-04-24 20:41 - 2018-07-28 11:23 - 000205400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys 2019-04-24 20:41 - 2018-07-28 11:23 - 000166848 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2019-04-24 20:41 - 2018-07-28 11:23 - 000112520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2019-04-24 20:41 - 2018-07-28 11:23 - 000088160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2019-04-23 00:15 - 2018-07-28 09:40 - 000000000 ____D C:\ProgramData\Package Cache 2019-04-22 15:55 - 2018-07-28 11:25 - 000002504 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk 2019-04-18 07:18 - 2018-07-28 11:56 - 000000000 ____D C:\ProgramData\USOPrivate ==================== SigCheck =============================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) LastRegBack: 2019-05-09 19:41 ==================== Koniec FRST.txt ============================