Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 07-07-2021
Uruchomiony przez olusk (administrator)  DESKTOP-4RNPE3N (LENOVO 10TS0006PB) (08-07-2021 06:28:49)
Uruchomiony z C:\Users\olusk\Downloads
Załadowane profile: olusk & Administrator
Platform: Windows 10 Home Wersja 20H2 19042.1083 (X64) Język: Polski (Polska)
Domyślna przeglądarka: FF
Tryb startu: Normal

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <24>
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_31a8dbbf39dcdc3b\jhi_service.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_51074a304c325b5d\LMS.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_50687667eb165e9b\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_50687667eb165e9b\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_50687667eb165e9b\IntelCpHDCPSvc.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_50687667eb165e9b\IntelCpHeciSvc.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.7.19.0\Lenovo.Vantage.AddinHost.exe
(Lenovo -> Lenovo Group Ltd.) C:\Program Files (x86)\Lenovo\VantageService\3.7.19.0\LenovoVantageService.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.CompanionApp.exe
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe <2>
(Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(LITE-ON TECHNOLOGY CORP. -> Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Calliope USB Keyboard\SklFundKb.exe
(LITE-ON TECHNOLOGY CORP. -> LITE-ON TECHNOLOGY CORP.) C:\Program Files\Lenovo\USB Enhanced Performance Keyboard\Skdaemon.exe
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\browserhost.exe
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12104.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(TP-Link Technologies Co., Ltd) [Brak podpisu cyfrowego] C:\Program Files (x86)\TP-Link\TP-Link Wireless Adapter WPS Tool\TWCU.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7>
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [956920 2019-12-12] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Enhanced Performance Keyboard] => C:\Program Files\Lenovo\USB Enhanced Performance Keyboard\SKDaemon.exe [4018976 2015-12-23] (LITE-ON TECHNOLOGY CORP. -> LITE-ON TECHNOLOGY CORP.)
HKLM\...\Run: [Lenovo Fundamental USB Keyboard] => C:\Program Files (x86)\Lenovo\Lenovo Calliope USB Keyboard\SklFundKb.exe [2644472 2017-04-10] (LITE-ON TECHNOLOGY CORP. -> Lenovo)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [123672 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [WPSTool] => C:\Program Files (x86)\TP-Link\TP-Link Wireless Adapter WPS Tool\TWCU.exe [1891840 2018-01-30] (TP-Link Technologies Co., Ltd) [Brak podpisu cyfrowego]
HKU\S-1-5-21-2646896609-2709708262-2910677975-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [53646904 2019-07-18] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-2646896609-2709708262-2910677975-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4109032 2021-06-09] (Valve -> Valve Corporation)
HKU\S-1-5-21-2646896609-2709708262-2910677975-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3638008 2021-05-15] (Electronic Arts, Inc. -> Electronic Arts) [Brak podpisu cyfrowego]
HKU\S-1-5-21-2646896609-2709708262-2910677975-500\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
HKU\S-1-5-21-2646896609-2709708262-2910677975-500\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
HKU\S-1-5-21-2646896609-2709708262-2910677975-500\...\MountPoints2: {7ada3aea-6c37-11e8-9300-806e6f6e6963} - "D:\SETUP.EXE" 
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\91.0.4472.124\Installer\chrmstp.exe [2021-07-07] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA

==================== Zaplanowane zadania (filtrowane) ============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {134E0FF4-69DB-450F-B9D9-52C94BFC932B} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\455db87b-040f-4f89-9f64-2534fea9cb46 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81824 2021-03-14] (Lenovo -> Lenovo Group Ltd.)
Task: {1FF0C8A4-3043-49C8-9552-3CAAA1A6D3D5} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => "%windir%\system32\sc.exe" START ImControllerService
Task: {3B93E2C7-50E6-48CC-9ECC-2937246E7DA4} - System32\Tasks\Lenovo\Vantage\Schedule\VantageTelemetryAddinTask => C:\Program Files (x86)\Lenovo\VantageService\3.6.15.0\ScheduleEventAction.exe
Task: {4B6BA405-6C3F-4511-B929-F147B9277B00} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2020-12-13] (Google Inc -> Google LLC)
Task: {8546F45C-CC71-44B2-A020-C6178986E867} - System32\Tasks\Mozilla\Firefox Default Browser Agent 3303BF83D1AC7B52 => C:\Users\olusk\AppData\Local\Mozilla Firefox\default-browser-agent.exe [690616 2021-06-20] (Mozilla Corporation -> Mozilla Foundation)
Task: {9232D8EF-8311-4159-BCFC-5EF61B800091} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1790184 2021-06-20] (Avast Software s.r.o. -> Avast Software)
Task: {9310F882-A284-44BE-8A8F-C1C7BB7DCD22} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\3.7.19.0\ScheduleEventAction.exe [23968 2021-05-17] (Lenovo -> Lenovo Group Ltd.)
Task: {95CEF581-459A-4756-91FF-1E46DE9A0D34} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\078d113b-1e29-42de-ac3d-6d6ec5f45fa2 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81824 2021-03-14] (Lenovo -> Lenovo Group Ltd.)
Task: {A0827F5A-0739-4BF2-B0EF-ACC93D1327E2} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe [144456 2021-05-19] (Lenovo -> Lenovo Group Ltd.)
Task: {A77421BC-F657-4059-9DD0-3D9237958899} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [62392 2021-03-14] (Lenovo -> Lenovo Group Ltd.)
Task: {AFCBBC8C-D33E-4F6C-8BB2-D50EFC32B1CA} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler  /v start /t reg_dword /d 1 /f /reg:32
Task: {BDE7417F-2F4C-4879-96B8-FAA029336291} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\031145d3-7648-4836-b626-6741ad9d6aae => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81824 2021-03-14] (Lenovo -> Lenovo Group Ltd.)
Task: {C1095619-241E-4BA8-B35B-487CFA2D0A1A} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\edad0040-2623-4cc7-8166-7788bd887a38 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81824 2021-03-14] (Lenovo -> Lenovo Group Ltd.)
Task: {C269EEFC-4A3F-4EC8-955D-14050DEE9169} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => %systemroot%\system32\sc.exe start LenovoVantageService
Task: {C2D74C25-54A1-4F09-883A-522CB8F0BB7F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2020-12-13] (Google Inc -> Google LLC)
Task: {FCF7E7D5-90BB-43C2-920A-A5D9F2BCA619} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4903192 2021-06-20] (Avast Software s.r.o. -> AVAST Software)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)


==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{41a1bae8-6501-42cf-9a39-d6d8ab3f4e4a}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{84a654fb-7d04-4695-b519-3461aca92ef7}: [DhcpNameServer] 192.168.1.1

Edge: 
=======
Edge Extension: (Brak nazwy) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nie znaleziono]
Edge Extension: (Brak nazwy) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nie znaleziono]
Edge Extension: (Brak nazwy) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nie znaleziono]
Edge Extension: (Brak nazwy) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nie znaleziono]
Edge DefaultProfile: Default
Edge Profile: C:\Users\olusk\AppData\Local\Microsoft\Edge\User Data\Default [2021-07-08]
Edge Notifications: Default -> hxxps://www.ipla.tv

FireFox:
========
FF DefaultProfile: vsma6ni4.default
FF ProfilePath: C:\Users\olusk\AppData\Roaming\Mozilla\Firefox\Profiles\hu5uwdfv.default-release-1 [2021-07-08]
FF ProfilePath: C:\Users\olusk\AppData\Roaming\Mozilla\Firefox\Profiles\vsma6ni4.default [2020-06-02]
FF ProfilePath: C:\Users\olusk\AppData\Roaming\Mozilla\Firefox\Profiles\48tqn5ga.default-release [2021-03-12]
FF Session Restore: Mozilla\Firefox\Profiles\48tqn5ga.default-release -> [funkcja włączona]
FF Notifications: Mozilla\Firefox\Profiles\48tqn5ga.default-release -> hxxps://thebodyshop.pl

Chrome: 
=======
CHR Profile: C:\Users\olusk\AppData\Local\Google\Chrome\User Data\Default [2021-07-08]
CHR Notifications: Default -> hxxps://www.facebook.com; hxxps://www.ipla.tv
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR DefaultSearchURL: Default -> hxxps://pl.search.yahoo.com/search?fr=mcafee_uninternational&type=E210PL91105G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (McAfee® WebAdvisor) - C:\Users\olusk\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2021-06-20]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\olusk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-06]
CHR Extension: (e-pity - dodatek) - C:\Users\olusk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofoeigeaodhbjogdigckajfhjbonaofg [2021-04-28]
CHR Extension: (Chrome Media Router) - C:\Users\olusk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-05-26]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [ofoeigeaodhbjogdigckajfhjbonaofg]

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8249936 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [625432 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [373528 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [81824 2021-03-14] (Lenovo -> Lenovo Group Ltd.)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.7.19.0\LenovoVantageService.exe [28576 2021-05-17] (Lenovo -> Lenovo Group Ltd.)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [974168 2021-06-24] (McAfee, LLC -> McAfee, LLC)
S3 mracsvc; C:\WINDOWS\System32\mracsvc.exe [21816880 2021-04-22] (Mail.Ru LLC -> LLC Mail.Ru)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2177296 2021-05-15] (Electronic Arts, Inc. -> Electronic Arts) [Brak podpisu cyfrowego]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\NisSrv.exe [2644776 2021-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MsMpEng.exe [136656 2021-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [35720 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [216928 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [366616 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [250392 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [99352 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [17328 2021-06-20] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [41352 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [182600 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [524400 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [107848 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [82912 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [851192 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [471920 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [215384 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [327536 2021-06-20] (Avast Software s.r.o. -> AVAST Software)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2021-02-25] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2018-10-22] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 HWHandSet; C:\WINDOWS\System32\drivers\hw_quusbmdm.sys [226560 2018-10-22] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 hwusb_cdcacm; C:\WINDOWS\System32\drivers\hw_cdcacm.sys [127360 2018-10-22] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 hw_usbdev; C:\WINDOWS\System32\drivers\hw_usbdev.sys [116864 2018-10-22] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 mracdrv; C:\WINDOWS\System32\drivers\mracdrv1.sys [21049568 2021-04-22] (Mail.Ru LLC -> LLC Mail.Ru)
S3 ssudcdf; C:\WINDOWS\System32\drivers\ssudcdf.sys [36608 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssuddmgr; C:\WINDOWS\System32\drivers\ssuddmgr.sys [206080 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssudobex; C:\WINDOWS\System32\drivers\ssudobex.sys [206080 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssudrmnet; C:\WINDOWS\System32\drivers\ssudrmnet.sys [70400 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.)
S3 ssudserd; C:\WINDOWS\System32\drivers\ssudserd.sys [206080 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ss_conn_usb_driver; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver.sys [26368 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49568 2021-06-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [425184 2021-06-13] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [76000 2021-06-13] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2021-07-08 06:28 - 2021-07-08 06:31 - 000020519 _____ C:\Users\olusk\Downloads\FRST.txt
2021-07-08 06:25 - 2021-07-08 06:30 - 000000000 ____D C:\FRST
2021-07-08 06:21 - 2021-07-08 06:21 - 002301440 _____ (Farbar) C:\Users\olusk\Downloads\FRST64.exe
2021-07-08 06:09 - 2021-07-08 06:11 - 000000000 ____D C:\AdwCleaner
2021-07-08 06:09 - 2021-07-08 06:09 - 008534696 _____ (Malwarebytes) C:\Users\olusk\Downloads\adwcleaner_8.2.exe
2021-07-08 06:09 - 2021-07-08 06:09 - 008534696 _____ (Malwarebytes) C:\Users\olusk\Downloads\adwcleaner_8.2 (1).exe
2021-07-08 04:30 - 2021-07-08 05:59 - 000007605 _____ C:\Users\olusk\AppData\Local\resmon.resmoncfg
2021-07-07 21:48 - 2021-07-07 21:48 - 000166086 _____ C:\Users\olusk\Downloads\4-3-3_psv_-_solid_defence__attack_machinef7652779ae2fda29_86251.fmf
2021-07-07 21:07 - 2021-07-07 21:07 - 000044479 _____ C:\Users\olusk\Downloads\RDFs Luis Enrique Barca MSN.fmf
2021-07-07 15:30 - 2021-07-07 15:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-07-07 03:18 - 2021-07-07 03:18 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-07-07 03:18 - 2021-07-07 03:18 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-07-07 03:18 - 2021-07-07 03:18 - 000570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-07-07 03:18 - 2021-07-07 03:18 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-07-07 03:18 - 2021-07-07 03:18 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-07-07 03:18 - 2021-07-07 03:18 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-07-07 03:18 - 2021-07-07 03:18 - 000011351 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-07-07 03:17 - 2021-07-07 03:17 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-07-07 03:17 - 2021-07-07 03:17 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-07-07 03:17 - 2021-07-07 03:17 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-07-07 03:16 - 2021-07-07 03:16 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-07-07 03:16 - 2021-07-07 03:16 - 000097792 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-06-30 06:27 - 2021-06-30 06:27 - 000046577 _____ C:\Users\olusk\Downloads\Bielsas Boys.fmf
2021-06-30 06:19 - 2021-06-30 06:19 - 000045448 _____ C:\Users\olusk\Downloads\raging_bull_184477.fmf
2021-06-20 13:55 - 2021-06-20 13:55 - 000000000 ____D C:\Users\olusk\AppData\Local\Avast Software
2021-06-20 13:54 - 2021-06-20 13:54 - 000002171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2021-06-20 13:54 - 2021-06-20 13:54 - 000002159 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2021-06-20 13:54 - 2021-06-20 13:54 - 000000000 ____D C:\Users\olusk\AppData\Roaming\Avast Software
2021-06-20 13:51 - 2021-06-20 13:51 - 000003990 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2021-06-20 13:50 - 2021-06-20 13:50 - 000851192 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2021-06-20 13:50 - 2021-06-20 13:50 - 000524400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2021-06-20 13:50 - 2021-06-20 13:50 - 000471920 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2021-06-20 13:50 - 2021-06-20 13:50 - 000339736 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2021-06-20 13:50 - 2021-06-20 13:50 - 000327536 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2021-06-20 13:50 - 2021-06-20 13:50 - 000250392 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2021-06-20 13:50 - 2021-06-20 13:50 - 000216928 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2021-06-20 13:50 - 2021-06-20 13:50 - 000215384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2021-06-20 13:50 - 2021-06-20 13:50 - 000182600 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2021-06-20 13:50 - 2021-06-20 13:50 - 000107848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2021-06-20 13:50 - 2021-06-20 13:50 - 000099352 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2021-06-20 13:50 - 2021-06-20 13:50 - 000082912 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2021-06-20 13:50 - 2021-06-20 13:50 - 000041352 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2021-06-20 13:50 - 2021-06-20 13:50 - 000035720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2021-06-20 13:50 - 2021-06-20 13:50 - 000017328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswElam.sys
2021-06-20 13:50 - 2021-06-20 13:50 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2021-06-20 13:50 - 2021-06-20 13:49 - 000366616 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2021-06-20 13:49 - 2021-07-07 15:32 - 000000000 ____D C:\Users\olusk\AppData\Local\Mozilla Firefox
2021-06-20 13:48 - 2021-06-20 13:48 - 000000000 ____D C:\Program Files\Avast Software
2021-06-20 13:47 - 2021-07-08 06:14 - 000000000 ____D C:\ProgramData\Avast Software
2021-06-20 13:47 - 2021-06-20 13:48 - 000000000 ____D C:\Program Files\McAfee
2021-06-20 13:47 - 2021-06-20 13:47 - 005252896 _____ (BitTorrent Inc.) C:\Users\olusk\Downloads\windows.exe
2021-06-20 13:47 - 2021-06-20 13:47 - 000000000 ____D C:\ProgramData\McAfee
2021-06-20 13:46 - 2021-06-20 13:46 - 001220848 _____ () C:\Users\olusk\Downloads\utorrent-6628624360319105-AsystentPobierania_v1.09.43.56.69.4.exe
2021-06-09 16:08 - 2021-06-09 16:08 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-06-09 16:08 - 2021-06-09 16:08 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-06-09 16:07 - 2021-06-09 16:07 - 001864192 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2021-06-09 16:07 - 2021-06-09 16:07 - 000468440 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-06-09 16:07 - 2021-06-09 16:07 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-06-09 16:07 - 2021-06-09 16:07 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-06-09 16:05 - 2021-06-09 16:05 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-06-09 16:05 - 2021-06-09 16:05 - 000657464 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-06-09 16:05 - 2021-06-09 16:05 - 000563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-06-09 16:05 - 2021-06-09 16:05 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2021-06-09 16:05 - 2021-06-09 16:05 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-06-08 21:53 - 2020-08-26 13:35 - 009917432 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2021-07-08 06:30 - 2021-02-12 10:57 - 000000000 ____D C:\Program Files (x86)\Steam
2021-07-08 06:23 - 2021-02-25 14:35 - 001767980 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-07-08 06:23 - 2019-12-07 17:08 - 000784334 _____ C:\WINDOWS\system32\perfh015.dat
2021-07-08 06:23 - 2019-12-07 17:08 - 000152230 _____ C:\WINDOWS\system32\perfc015.dat
2021-07-08 06:23 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-07-08 06:15 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-07-08 06:14 - 2019-01-27 03:16 - 000000000 __SHD C:\Users\olusk\IntelGraphicsProfiles
2021-07-08 06:13 - 2021-02-25 14:42 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-07-08 06:13 - 2021-02-25 14:21 - 000008192 ___SH C:\DumpStack.log.tmp
2021-07-08 06:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-07-08 06:12 - 2021-02-25 14:25 - 000000000 ____D C:\Users\olusk
2021-07-08 06:12 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-07-08 06:11 - 2020-05-24 14:53 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2021-07-08 06:07 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2021-07-08 06:05 - 2020-05-24 16:16 - 000000000 ____D C:\Users\olusk\AppData\Local\Packages
2021-07-08 06:05 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-07-08 06:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-07-08 05:56 - 2020-12-19 12:39 - 000000000 ____D C:\Users\olusk\AppData\Local\CrashDumps
2021-07-08 05:29 - 2020-05-24 16:21 - 000000000 ____D C:\Users\olusk\AppData\Local\PlaceholderTileLogoFolder
2021-07-08 05:19 - 2021-02-25 14:21 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-07-08 04:14 - 2020-06-30 20:00 - 000000000 ____D C:\Users\olusk\AppData\Local\D3DSCache
2021-07-08 02:24 - 2020-05-24 14:39 - 000000000 ____D C:\Users\olusk\AppData\Local\Host App Service
2021-07-08 02:10 - 2021-03-12 23:02 - 000002858 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2646896609-2709708262-2910677975-500
2021-07-08 02:10 - 2021-03-06 02:13 - 000003242 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d70b72f98e34c
2021-07-08 02:10 - 2021-02-25 14:42 - 000003496 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-07-08 02:10 - 2021-02-25 14:42 - 000003438 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-07-08 02:10 - 2021-02-25 14:42 - 000003272 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-07-08 02:10 - 2021-02-25 14:42 - 000003214 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-07-08 02:10 - 2021-02-25 14:42 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2646896609-2709708262-2910677975-1001
2021-07-08 02:10 - 2021-02-25 14:42 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2021-07-08 00:42 - 2020-05-30 20:11 - 000000000 ____D C:\ProgramData\Mozilla
2021-07-08 00:42 - 2019-01-26 12:27 - 000000000 ____D C:\Users\olusk\AppData\LocalLow\Mozilla
2021-07-07 23:41 - 2021-04-28 13:26 - 000000081 _____ C:\Users\olusk\AppData\Local\.bidstack.fault
2021-07-07 15:30 - 2020-09-01 22:55 - 000001284 _____ C:\Users\olusk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-07-07 13:46 - 2021-02-25 14:25 - 000002434 _____ C:\Users\olusk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-07-07 13:46 - 2019-01-27 03:20 - 000000000 ___RD C:\Users\olusk\OneDrive
2021-07-07 06:40 - 2021-05-15 20:56 - 000000000 ____D C:\ProgramData\Origin
2021-07-07 04:06 - 2020-12-13 12:28 - 000002260 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-07-07 04:06 - 2020-12-13 12:28 - 000002219 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-07-07 04:01 - 2021-02-25 14:21 - 000258584 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-07-07 03:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-07-07 03:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-07-07 03:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-07-07 03:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-07-07 03:58 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-07-07 03:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-07-07 03:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-07-07 03:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-07-07 03:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-07-07 03:58 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-07-07 03:26 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-06-20 13:50 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-06-18 19:12 - 2020-10-01 18:10 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-06-13 01:18 - 2020-05-24 14:55 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-06-10 01:04 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-06-10 01:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2021-06-10 01:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2021-06-10 01:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2021-06-10 01:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-06-10 01:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-06-10 01:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-06-10 01:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-06-09 15:36 - 2020-05-24 18:39 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-06-09 15:32 - 2020-05-24 18:39 - 132447432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-06-08 21:54 - 2020-05-24 16:30 - 000000000 ____D C:\WINDOWS\TempInst

==================== Pliki w katalogu głównym wybranych folderów ========

2021-04-28 13:26 - 2021-07-07 23:41 - 000000081 _____ () C:\Users\olusk\AppData\Local\.bidstack.fault
2021-07-08 04:30 - 2021-07-08 05:59 - 000007605 _____ () C:\Users\olusk\AppData\Local\resmon.resmoncfg
2020-12-13 12:35 - 2020-12-13 12:35 - 000000000 _____ () C:\Users\olusk\AppData\Local\{8964DDFA-C129-46D6-9CDE-D68D1859A597}

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

==================== Koniec  FRST.txt ========================