Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 31-08-2019 Uruchomiony przez user (administrator) USER-KOMPUTER (LENOVO 4260A46) (02-09-2019 07:28:39) Uruchomiony z C:\Users\user\Downloads Załadowane profile: user (Dostępne profile: user) Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [60920 2013-05-29] (LENOVO(JAPAN)LTD. -> Lenovo Group Limited) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] (Fortemedia Inc -> ) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant Systems, Inc. -> Conexant systems, Inc.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [269192 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation -> Microsoft Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2925096 2018-11-21] (Synaptics Incorporated -> Synaptics Incorporated) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-07-19] (Apple Inc. -> Apple Inc.) HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation -> Renesas Electronics Corporation) HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.) [Brak podpisu cyfrowego] HKLM-x32\...\Run: [PWMTRV] => C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL [6420264 2018-05-16] (Lenovo -> Lenovo Group Limited) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA HKU\S-1-5-21-3204543512-43601097-1406453025-1000\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1840424 2008-06-24] (Nero AG -> Nero AG) HKU\S-1-5-21-3204543512-43601097-1406453025-1000\...\MountPoints2: {1c99d060-ac46-11e9-80fa-cc52afe32dd4} - E:\AutoRun.exe HKU\S-1-5-21-3204543512-43601097-1406453025-1000\...\MountPoints2: {1c99d06f-ac46-11e9-80fa-cc52afe32dd4} - E:\AutoRun.exe HKU\S-1-5-21-3204543512-43601097-1406453025-1000\...\MountPoints2: {3c505852-872d-11e8-83e6-cc52afe32dd4} - E:\HiSuiteDownLoader.exe HKU\S-1-5-21-3204543512-43601097-1406453025-1000\...\MountPoints2: {f9eac9a4-014c-11e8-a9d3-cc52afe32dd4} - E:\AutoRun.exe HKU\S-1-5-21-3204543512-43601097-1406453025-1000\...\MountPoints2: {f9eac9b1-014c-11e8-a9d3-cc52afe32dd4} - E:\AutoRun.exe HKU\S-1-5-21-3204543512-43601097-1406453025-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Ribbons.scr [241664 2010-11-21] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.132\Installer\chrmstp.exe [2019-08-30] (Google LLC -> Google LLC) HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\ThinkPad\Bluetooth Software\\BtwCP.dll [2013-05-14] (Broadcom Corporation -> Broadcom Corporation.) HKLM\Software\...\Authentication\Credential Providers: [{D28973E5-8630-41af-8831-50A15FEB396B}] -> C:\Program Files\ThinkPad\Bluetooth Software\BtwProximityCP.dll [2013-05-14] (Broadcom Corporation -> Broadcom Corporation.) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [181088 2017-03-31] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [158392 2017-03-31] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) Lsa: [Notification Packages] scecli C:\Program Files\ThinkPad\Bluetooth Software\BtwProximityCP.dll Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2017-08-11] ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.) FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {0F109D85-8FB1-46DA-948E-432490EA4EE9} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_238_Plugin.exe [1457208 2019-08-13] (Adobe Inc. -> Adobe) Task: {253D5C82-8B3D-4E29-9DD7-B0290F686E25} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-08-13] (Adobe Inc. -> Adobe) Task: {4A36DDC6-8C86-4A5C-BF89-36AB182007AA} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1758488 2019-05-24] (Lenovo -> ) Task: {526E600F-BE54-4921-BDB1-5C038566E6C2} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [1321240 2017-06-09] (Lenovo -> Lenovo) Task: {5BFED906-66FA-469A-8B34-9EB32A36E14F} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [10197784 2017-06-09] (Lenovo -> Lenovo) Task: {626B4B0A-7023-4732-B253-8869E524A620} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [10197784 2017-06-09] (Lenovo -> Lenovo) Task: {70B51622-177C-41F6-87C1-3457B70E3F26} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe [264984 2017-06-09] (Lenovo -> ) Task: {7DB19EE0-C7E6-453D-9870-67FC0AD29FEF} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1758488 2019-05-24] (Lenovo -> ) Task: {92E4FDC7-FEE4-4F4E-B8EB-09E8AFC11C95} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2045832 2019-08-20] (AVAST Software s.r.o. -> AVAST Software) Task: {9D6952A6-0DD9-4E79-B7A8-CDD9209330C6} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PwmIdTsv.exe [3647272 2018-05-16] (Lenovo -> Lenovo Group Limited) Task: {B76B6201-93DA-40C7-99A2-9539C6686AC6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-08-23] (Google Inc -> Google Inc.) Task: {B7F6ACBB-462A-48DE-98D2-CF4AE5AA924D} - System32\Tasks\EPSON XP-243 245 247 Series Update {801BD0C2-4F4C-4BB5-B927-F80026E87E7F} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSRFE.EXE [690536 2013-11-22] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) Task: {C665A6C1-3E7D-4C2C-860C-7E11CFD5C75B} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe Task: {D6ABF2BB-252B-4DDD-BF8F-FCC2A9B878F2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1236048 2019-07-24] (Adobe Inc. -> Adobe Systems) Task: {D89CD466-7F9F-4C61-A2E7-6F363DDDC9A4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [570240 2017-02-14] (Apple Inc. -> Apple Inc.) Task: {EB8152C9-E332-4591-922C-B69CED21B2F0} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3940232 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) Task: {F4A99655-1DE1-473E-B93F-6CDB2E3BA1EA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-08-23] (Google Inc -> Google Inc.) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\EPSON XP-243 245 247 Series Update {801BD0C2-4F4C-4BB5-B927-F80026E87E7F}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSRFE.EXE:/EXE:{801BD0C2-4F4C-4BB5-B927-F80026E87E7F} /F:UpdateSYSTEMĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{141A54E3-D334-49F9-AE0A-D54F1980C54A}: [NameServer] 213.158.199.1 213.158.199.5 Tcpip\..\Interfaces\{964481A7-30B8-4E53-8D7E-478866D2EC77}: [DhcpNameServer] 172.20.10.1 Tcpip\..\Interfaces\{BBDD03E3-EA8E-4C64-A95C-7FF66FE4EB34}: [DhcpNameServer] 192.168.1.1 172.24.24.1 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{E93A49A8-A7BE-411B-9688-CA72452A7094}: [DhcpNameServer] 192.168.1.254 Internet Explorer: ================== HKU\S-1-5-21-3204543512-43601097-1406453025-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation -> Microsoft Corporation) Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll [2017-04-04] (Microsoft Corporation) [Brak podpisu cyfrowego] Handler-x32: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll [2017-04-04] (Microsoft Corporation) [Brak podpisu cyfrowego] FireFox: ======== FF DefaultProfile: eqksdeor.default FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\eqksdeor.default [2019-09-02] FF user.js: detected! => C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\eqksdeor.default\user.js [2019-07-07] FF Homepage: Mozilla\Firefox\Profiles\eqksdeor.default -> www.gazeta.pl/ FF Extension: (AdBlocker Ultimate) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\eqksdeor.default\Extensions\adblockultimate@adblockultimate.net.xpi [2018-06-03] FF Extension: (Classic Theme Restorer) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\eqksdeor.default\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2017-08-19] [Przestarzałe] FF Extension: (Video Downloader professional) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\eqksdeor.default\Extensions\ffext_basicvideoext@startpage24.xpi [2019-08-28] FF Extension: (Eliminator Slajdów) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\eqksdeor.default\Extensions\jid0-GaZOxvWNYcafEsmayJDIG3XXVi8@jetpack.xpi [2017-07-12] [Przestarzałe] FF Extension: (Avast SafePrice | Porównania, promocje, kupony) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\eqksdeor.default\Extensions\sp@avast.com.xpi [2019-02-17] FF Extension: (Avast Online Security) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\eqksdeor.default\Extensions\wrc@avast.com.xpi [2018-06-03] FF Extension: (Video DownloadHelper) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\eqksdeor.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2019-08-28] FF Extension: (Brak nazwy) - C:\Users\marek\AppData\Roaming\Mozilla\Firefox\Profiles\sv9e8n16.default-1470334134380\extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [nie znaleziono] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_238.dll [2019-08-13] (Adobe Inc. -> ) FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_238.dll [2019-08-13] (Adobe Inc. -> ) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC) FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=3.0.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-07-31] (Adobe Inc. -> Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default [2019-09-02] CHR Extension: (Prezentacje) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-20] CHR Extension: (Dokumenty) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-20] CHR Extension: (Dysk Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-23] CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-23] CHR Extension: (Avast SafePrice | Porównania, promocje, kupony) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2019-06-06] CHR Extension: (Arkusze) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-20] CHR Extension: (Dokumenty Google offline) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-09] CHR Extension: (Avast Online Security) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-07-22] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-10] CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-03] CHR Extension: (Chrome Media Router) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-08-13] CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-09-20] CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\System Profile [2017-09-20] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2019-04-29] (Apple Inc. -> Apple Inc.) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6797008 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [414976 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [326160 2018-05-16] (LENOVO -> Lenovo.) R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [145224 2016-11-08] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) R2 HsfXAudioService; C:\Windows\SysWOW64\XAudio64.dll [436736 2009-04-29] (Microsoft Windows Hardware Compatibility Publisher -> Conexant Systems, Inc.) R2 HWDeviceService64.exe; C:\Program Files (x86)\DatacardService\HWDeviceService64.exe [351888 2016-03-24] (Huawei Technologies Co.,Ltd. -> ) S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [682072 2015-02-24] (Huawei Technologies Co.,Ltd. -> ) R2 LPlatSvc; C:\Windows\system32\LPlatSvc.exe [711248 2017-04-01] (Lenovo -> Lenovo.) S3 LSC.Services.SystemService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [271128 2017-06-09] (Lenovo -> Lenovo) R3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-06-24] (Nero AG -> Nero AG) R2 RapiMgr; C:\Windows\WindowsMobile\rapimgr.dll [225672 2007-05-31] (Microsoft Corporation -> Microsoft Corporation) R2 WcesComm; C:\Windows\WindowsMobile\wcescomm.dll [443784 2007-05-31] (Microsoft Corporation -> Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2016-08-20] (Microsoft Windows -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" S2 PDF Architect 5 Manager; "C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe" [X] ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 5U877; C:\Windows\System32\DRIVERS\5U877.sys [166016 2011-03-04] (Microsoft Windows Hardware Compatibility Publisher -> Ricoh co.,Ltd.) S3 Accelerometer; C:\Windows\system32\drivers\Accelerometer.sys [43320 2011-05-13] (Hewlett-Packard Company -> Hewlett-Packard Company) R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37320 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [209256 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [263224 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [206056 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [61688 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [279336 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42504 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [168896 2019-07-31] (AVAST Software s.r.o. -> AVAST Software) R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [112520 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [88160 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1030784 2019-07-31] (AVAST Software s.r.o. -> AVAST Software) R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [477288 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [225816 2019-07-21] (AVAST Software s.r.o. -> AVAST Software) R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [387688 2019-08-06] (AVAST Software s.r.o. -> AVAST Software) R3 CAXHWAZL; C:\Windows\System32\DRIVERS\CAXHWAZL.sys [292864 2009-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Conexant Systems, Inc.) S3 d554gps; C:\Windows\system32\drivers\d554gps64.sys [103184 2012-03-01] (Ericsson AB -> Ericsson AB) S3 ew_hwusbdev; C:\Windows\System32\DRIVERS\ew_hwusbdev.sys [109568 2013-01-25] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.) S3 ew_usbenumfilter; C:\Windows\System32\DRIVERS\ew_usbenumfilter.sys [26368 2017-08-04] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.) S3 FUJ02B1; C:\Windows\system32\drivers\FUJ02B1.sys [7808 2006-11-01] (Microsoft Windows Hardware Compatibility Publisher -> FUJITSU LIMITED) S3 FUJ02E3; C:\Windows\system32\drivers\FUJ02E3.sys [7296 2006-11-01] (Microsoft Windows Hardware Compatibility Publisher -> FUJITSU LIMITED) R0 hpdskflt; C:\Windows\System32\drivers\hpdskflt.sys [30008 2011-05-13] (Hewlett-Packard Company -> Hewlett-Packard Company) R3 HSF_DPV; C:\Windows\System32\DRIVERS\CAX_DPV.sys [1486848 2009-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Conexant Systems, Inc.) S3 hwusb_cdcacm; C:\Windows\System32\DRIVERS\ew_cdcacm.sys [155136 2017-08-04] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.) S3 hwusb_wwanecm; C:\Windows\System32\DRIVERS\ew_wwanecm.sys [352896 2017-08-04] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.) S3 ISCT; C:\Windows\system32\drivers\ISCTD.sys [44744 2014-02-03] (Intel CASE -> ) S3 l36wgps; C:\Windows\system32\drivers\l36wgps64.sys [103184 2012-03-01] (Ericsson AB -> Ericsson AB) S3 Mbm3DevMt; C:\Windows\system32\drivers\Mbm3DevMt.sys [453960 2012-10-02] (MCCI Corporation -> MCCI Corporation) R2 mdmxsdk; C:\Windows\System32\DRIVERS\mdmxsdk.sys [17024 2006-06-18] (Microsoft Windows Hardware Compatibility Publisher -> Conexant) S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [23040 2016-12-21] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.) R3 NETwNs64; C:\Windows\System32\DRIVERS\NETwsw01.sys [11534096 2015-05-04] (Intel Corporation-Wireless Connectivity Solutions -> Intel Corporation) R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [97792 2012-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation) R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [217600 2012-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation) R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [316464 2017-03-31] (NVIDIA Corporation -> NVIDIA Corporation) S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [31152 2019-09-02] (PAIPTAC Driver -> ) S3 rimmptsk; C:\Windows\system32\drivers\rimmpx64.sys [52224 2006-11-17] (Microsoft Windows Hardware Compatibility Publisher -> REDC) S3 rimspci; C:\Windows\system32\drivers\rimspe64.sys [61952 2009-10-26] (Microsoft Windows Hardware Compatibility Publisher -> REDC) S2 risdsnpe; C:\Windows\System32\DRIVERS\risdsne64.sys [78848 2010-09-08] (Microsoft Windows Hardware Compatibility Publisher -> REDC) R2 risdxc; C:\Windows\System32\DRIVERS\risdxc64.sys [101888 2011-05-25] (Microsoft Windows Hardware Compatibility Publisher -> REDC) S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver_AMDASF.sys [30448 2014-04-07] (Synaptics Incorporated -> Synaptics Incorporated) R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [53800 2018-11-21] (Synaptics Incorporated -> Synaptics Incorporated) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2016-12-21] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.) R3 winachsf; C:\Windows\System32\DRIVERS\CAX_CNXT.sys [740864 2009-06-30] (Microsoft Windows Hardware Compatibility Publisher -> Conexant Systems, Inc.) R2 XAudio; C:\Windows\System32\DRIVERS\XAudio64.sys [10240 2009-04-29] (Microsoft Windows Hardware Compatibility Publisher -> Conexant Systems, Inc.) S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-09-02 07:28 - 2019-09-02 07:29 - 000025488 _____ C:\Users\user\Downloads\FRST.txt 2019-09-02 07:27 - 2019-09-02 07:28 - 000000000 ____D C:\FRST 2019-09-02 07:25 - 2019-09-02 07:26 - 001615360 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe 2019-09-02 07:16 - 2019-09-02 07:16 - 123481732 _____ C:\Users\user\Downloads\39.i.pol.tygodnia.S01E01.PL.WEB-DL.XviD-FmX.avi.part 2019-09-02 07:16 - 2019-09-02 07:16 - 000000000 _____ C:\Users\user\Downloads\39.i.pol.tygodnia.S01E01.PL.WEB-DL.XviD-FmX.avi 2019-09-02 07:06 - 2019-09-02 07:06 - 000000999 _____ C:\Users\user\Desktop\mks_vir skaner online.lnk 2019-09-02 07:06 - 2019-09-02 07:06 - 000000000 ____D C:\ProgramData\mks_vir 2019-09-02 07:03 - 2019-09-02 07:04 - 000000000 ____D C:\ProgramData\F-Secure 2019-09-02 07:03 - 2019-09-02 07:03 - 000000000 ____D C:\Users\user\AppData\Local\F-Secure 2019-09-02 07:03 - 2019-09-02 07:03 - 000000000 ____D C:\Users\user\AppData\Local\FSDART 2019-09-01 18:27 - 2019-09-02 06:59 - 000000790 _____ C:\Users\user\Desktop\ESET Online Scanner.lnk 2019-08-29 09:20 - 2019-08-29 10:06 - 420726658 _____ C:\Users\user\Downloads\Na.Dobre.i.Na.Zle.E746.PL.WEB-DL.XviD-FmX.avi 2019-08-28 22:13 - 2019-08-28 23:32 - 000000000 ____D C:\Users\user\Downloads\Video 2019-08-28 22:13 - 2019-08-28 22:13 - 000000000 ____D C:\Users\user\Downloads\Compressed 2019-08-28 22:02 - 2019-08-28 22:02 - 000000000 ____D C:\Users\user\Downloads\IDM.6.35.3 2019-08-28 22:01 - 2019-08-28 22:01 - 007446535 _____ C:\Users\user\Downloads\IDM.6.35.3.7z 2019-08-28 21:15 - 2019-08-28 23:32 - 000000000 ____D C:\Users\user\dwhelper 2019-08-28 14:45 - 2019-08-28 15:23 - 357970648 _____ C:\Users\user\Downloads\Pulapka.S02E01.PL.WEB-DL.XviD-FmX.avi 2019-08-26 15:42 - 2019-08-25 21:40 - 000000000 ____D C:\Users\user\Downloads\Jeff Buckley - You and I (extended edition) 2019-08-25 19:12 - 2019-08-25 19:12 - 000077310 _____ C:\Users\user\Downloads\Wykaz podręczników dla klas pierwszych 2019 abs gim.pdf 2019-08-16 16:48 - 2019-08-29 08:05 - 000000000 ____D C:\Program Files\Mozilla Firefox 2019-08-12 16:21 - 2019-08-12 16:22 - 000000000 ____D C:\Users\user\Documents\angielski w tłumaczeniach ==================== Jeden miesiąc (zmodyfikowane) ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-09-02 07:03 - 2019-06-23 22:03 - 000000911 _____ C:\Windows\Tasks\EPSON XP-243 245 247 Series Update {801BD0C2-4F4C-4BB5-B927-F80026E87E7F}.job 2019-09-02 06:44 - 2017-08-17 12:38 - 000000000 ____D C:\Users\user\AppData\LocalLow\Mozilla 2019-09-02 06:37 - 2009-07-14 06:45 - 000021904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2019-09-02 06:37 - 2009-07-14 06:45 - 000021904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2019-09-02 06:32 - 2011-04-12 15:21 - 000740348 _____ C:\Windows\system32\perfh015.dat 2019-09-02 06:32 - 2011-04-12 15:21 - 000155890 _____ C:\Windows\system32\perfc015.dat 2019-09-02 06:32 - 2009-07-14 07:13 - 001669190 _____ C:\Windows\system32\PerfStringBackup.INI 2019-09-02 06:32 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf 2019-09-02 06:30 - 2017-08-11 15:30 - 000031152 _____ C:\Windows\system32\Drivers\pmxdrv.sys 2019-09-02 06:28 - 2017-08-11 13:53 - 000000000 ____D C:\ProgramData\NVIDIA 2019-09-02 06:28 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2019-09-02 05:39 - 2017-08-20 23:24 - 006323288 _____ C:\Windows\ntbtlog.txt 2019-09-01 18:08 - 2017-08-17 12:36 - 000000000 ____D C:\ProgramData\AVAST Software 2019-09-01 18:07 - 2019-06-23 22:03 - 000003978 _____ C:\Windows\System32\Tasks\EPSON XP-243 245 247 Series Update {801BD0C2-4F4C-4BB5-B927-F80026E87E7F} 2019-09-01 18:07 - 2018-03-13 22:39 - 000004570 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier 2019-09-01 18:07 - 2017-08-23 12:49 - 000003482 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2019-09-01 18:07 - 2017-08-23 12:49 - 000003354 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2019-09-01 18:07 - 2017-08-17 12:53 - 000004424 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2019-09-01 18:07 - 2017-08-17 12:48 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2019-09-01 18:07 - 2017-08-11 15:35 - 000003020 _____ C:\Windows\System32\Tasks\PMTask 2019-09-01 17:38 - 2017-12-06 22:01 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software 2019-09-01 16:17 - 2017-08-19 20:25 - 000000000 ____D C:\Users\user\AppData\Local\CrashDumps 2019-08-30 08:31 - 2017-08-23 12:50 - 000002190 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-08-30 08:31 - 2017-08-23 12:50 - 000002149 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2019-08-29 20:36 - 2017-08-20 22:11 - 000000000 ____D C:\Users\user\Documents\DRUKI Gofin 2019-08-29 10:06 - 2017-08-19 19:37 - 000000000 ____D C:\Users\user\AppData\Roaming\vlc 2019-08-29 08:05 - 2017-08-17 12:38 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2019-08-28 20:45 - 2017-09-10 18:57 - 000000000 ____D C:\Users\user\AppData\Roaming\Anvsoft 2019-08-25 17:38 - 2017-08-17 12:48 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2019-08-20 22:33 - 2017-08-17 12:38 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update 2019-08-17 21:33 - 2019-07-09 19:11 - 000000000 ____D C:\Users\user\Documents\Ester Shany 2019-08-13 19:54 - 2017-08-17 12:53 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe 2019-08-13 19:54 - 2017-08-17 12:53 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2019-08-13 19:54 - 2017-08-17 12:53 - 000000000 ____D C:\Windows\SysWOW64\Macromed 2019-08-13 19:54 - 2017-08-17 12:53 - 000000000 ____D C:\Windows\system32\Macromed 2019-08-07 06:36 - 2018-01-28 23:24 - 000000000 ____D C:\ProgramData\DatacardService 2019-08-06 22:38 - 2017-08-17 12:38 - 000387688 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys ==================== Pliki w katalogu głównym wybranych folderów ================ 2017-09-10 13:57 - 2019-05-03 09:33 - 000010240 _____ () C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2017-09-10 20:40 - 2017-09-10 20:40 - 000004096 ____H () C:\Users\user\AppData\Local\keyfile3.drm ==================== FLock ================ 2017-08-11 13:52 C:\Windows\CSC ==================== SigCheck =============================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) LastRegBack: 2019-08-31 18:17 ==================== Koniec FRST.txt ============================