Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 14-04-2023 Uruchomiony przez Henry (administrator) HOME (Gigabyte Technology Co., Ltd. Z370 AORUS Gaming 7) (17-04-2023 13:38:11) Uruchomiony z C:\Users\Henry\Desktop\FRST64.exe Załadowane profile: Henry Platforma: Microsoft Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska) Domyślna przeglądarka: FF Tryb startu: Normal ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe (C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe (explorer.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe (services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\afwServ.exe (services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe (services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe (services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe (services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe (services.exe ->) (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe (services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2> (taskeng.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [MouseDriver] => c:\windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Microsoft Windows Hardware Compatibility Publisher -> Pixart Imaging Inc) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [220056 2023-04-13] (Avast Software s.r.o. -> AVAST Software) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA HKLM\...\Print\Monitors\Adobe PDF Port Monitor: c:\windows\system32\AdobePDF.dll [65488 2020-05-30] (Adobe Inc. -> Adobe Systems Inc) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{AC76BA86-0000-0000-7760-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat DC\Esl\Aiod.dll [2020-05-30] (Adobe Inc. -> Adobe Systems, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2023-04-17] HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA ==================== Zaplanowane zadania (filtrowane) ============ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {15D3277A-236F-43CC-BFAF-31C18EBB6F3E} - System32\Tasks\Process Explorer-Home-Henry => C:\USERS\HENRY\DOWNLOADS\SOFT\PROCEXP\PROCEXP64.EXE [1452200 2017-02-02] (Microsoft Corporation -> Sysinternals - www.sysinternals.com) Task: {1BE07783-DFE9-4B52-B870-D1C4B9122C87} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [973744 2022-04-28] (Microsoft Corporation -> Microsoft Corporation) Task: {21712054-41DC-4080-A0AB-C46174B13A28} - System32\Tasks\MSISW_Host => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) Task: {3209153C-39FF-4F26-8411-1F3E4627F57A} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [718752 2023-04-12] (Mozilla Corporation -> Mozilla Foundation) Task: {421E6AD2-FC07-4332-A5A5-A1F2B6194522} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3827728 2022-10-21] (Corel Corporation -> Corel Corporation) Task: {62F4914B-1C70-4012-80E3-906159472BDD} - System32\Tasks\CorelUpdateHelperTask-07486706BFCEFB239FDD114D1DA2ECAA => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3827728 2022-10-21] (Corel Corporation -> Corel Corporation) Task: {64BFDFFA-F304-4FC0-A6EB-348F2F0F520D} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [677280 2023-04-12] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate Task: {77B18188-6441-4128-9112-8C7605DE016B} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {93527AA0-24D9-4721-9192-F40CE035BE8C} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [7092120 2023-03-28] (Avast Software s.r.o. -> Avast Software) Task: {9A40C05C-005F-413A-ADD7-F13054E421EF} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4885912 2023-04-13] (Avast Software s.r.o. -> AVAST Software) Task: {A94A512C-1B5E-4B8C-AB99-155EBC6C44B9} - System32\Tasks\Avast Software\Avast Cleanup Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe [6788312 2023-01-04] (Avast Software s.r.o. -> Avast Software) Task: {B33E9CC7-FA49-4B48-8CBB-1665E34C18BA} - System32\Tasks\WD Discovery Service Task henry => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [79640 2023-02-15] (Western Digital Technologies, Inc. -> ) Task: {C0B93D88-2DA0-4521-AA5F-75B1D3DCF62D} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [5030808 2023-03-30] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\Avast Software\SecureLine VPN\log" --guid aee533be-7676-473a-a391-cd68b43fb766 Task: {D43ACA84-FB0C-44A8-8039-4A2F6D6ADBA4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-09] (Adobe Inc. -> Adobe) Task: {D6C9BBD1-08A1-42B6-88EC-32A3A1E7CFB8} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [973744 2022-04-28] (Microsoft Corporation -> Microsoft Corporation) Task: {D9DCE1B5-7EF6-4DB3-8C92-EE2FAB2B2B35} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2113024 2023-03-20] () [Brak podpisu cyfrowego] Task: {E050100B-C2EC-4FD8-91EA-A93E71CA38E7} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2135448 2023-04-14] (Avast Software s.r.o. -> Avast Software) Task: {E559107E-5A52-481E-AD38-05CA934F1912} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems) Task: {E575550A-7D15-4CE9-AECA-C8DAAC76F4D8} - System32\Tasks\WD Device Agent Task henry => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [724760 2023-02-15] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) Task: {EE2AA6DB-3ECD-44E4-B373-4BFF41B2B40B} - System32\Tasks\Avast Software\Avast Cleanup BugReport => C:\Program Files\Avast Software\Cleanup\AvBugReport.exe [4664216 2023-01-31] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 62 --programpath "C:\Program Files\Avast Software\Cleanup\Setup\.." --configpath "C:\Program Files\Avast Software\Cleanup\Setup" --path "C:\ProgramData\Avast Software\Cleanup\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\Avast Software\Cleanup\log" --guid 22580e01-8aee-4293-869d-8d226585ebfe Task: {F17B08B9-2054-4372-97F2-DF3956A6B4FF} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe [1243544 2023-03-30] (Avast Software s.r.o. -> AVAST Software) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc. -> Apple Inc.) Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-31] (Apple Inc. -> Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{2233DDD8-A6A4-40BB-83E4-3760C3413D90}: [NameServer] 100.120.159.1 Tcpip\..\Interfaces\{93EC1225-3178-47CC-92E4-B7136C7FD239}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{FC06721B-91B5-4CBF-BBCD-A4E29A60ED7D}: [DhcpNameServer] 192.168.1.1 Edge: ======= Edge Profile: C:\Users\Henry\AppData\Local\Microsoft\Edge\User Data\Default [2023-04-15] FireFox: ======== FF DefaultProfile: aai6eyhx.default FF ProfilePath: C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\aai6eyhx.default [2023-04-17] FF ProfilePath: C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\e2eb5ul7.default-release [2023-04-17] FF DownloadDir: G:\INSTALKI\z sieci\Firefox FF Homepage: Mozilla\Firefox\Profiles\e2eb5ul7.default-release -> chrome://browser/content/blanktab.html FF Extension: (AdBlocker Ultimate) - C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\e2eb5ul7.default-release\Extensions\adblockultimate@adblockultimate.net.xpi [2023-02-17] FF Extension: (Enhancer for YouTube™) - C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\e2eb5ul7.default-release\Extensions\enhancerforyoutube@maximerf.addons.mozilla.org.xpi [2023-02-16] FF Extension: (Galaxy Space Theme) - C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\e2eb5ul7.default-release\Extensions\{5eae7880-dab2-4337-bc53-e4b58db7aec4}.xpi [2023-02-16] FF Extension: (Video DownloadHelper) - C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\e2eb5ul7.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2023-02-16] FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2020-05-29] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (Electronic Sports Network i Sverige AB -> ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB) [Brak podpisu cyfrowego] FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2017-11-21] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2020-05-30] (Adobe Inc. -> Adobe Systems Inc.) Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [ofoeigeaodhbjogdigckajfhjbonaofg] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [88648 2020-02-25] (Adobe Inc. -> Adobe Systems) S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-09] (Adobe Inc. -> Adobe) S3 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated) S3 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated) R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8808344 2023-04-13] (Avast Software s.r.o. -> AVAST Software) R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [583064 2023-04-13] (Avast Software s.r.o. -> AVAST Software) R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2079128 2023-04-13] (Avast Software s.r.o. -> AVAST Software) R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [584088 2023-04-13] (Avast Software s.r.o. -> AVAST Software) S3 AvastAntiTrackSvc; C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\AntiTrackSvc.exe [5779160 2023-01-31] (Avast Software s.r.o. -> AVAST Software) R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2023-01-31] (Avast Software s.r.o. -> AVAST Software) S4 Backupper Service; C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.1.2\ABService.exe [1095112 2022-08-31] (AOMEI International Network Limited -> AOMEI International Network Limited) S3 CleanupPSvc; C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe [15615384 2023-01-31] (Avast Software s.r.o. -> AVAST Software) S3 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3054520 2022-04-28] (Microsoft Corporation -> Microsoft Corporation) S4 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [347408 2022-10-03] (Underwriters Laboratories Inc. -> Futuremark) S3 HFGService; C:\Windows\System32\HFGService.dll [535552 2009-12-21] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc) S4 Origin Client Service; G:\Program Files (x86)\Origin_\Origin\OriginClientService.exe [2579264 2022-11-09] (Electronic Arts, Inc. -> Electronic Arts) S4 Origin Web Helper Service; G:\Program Files (x86)\Origin_\Origin\OriginWebHelperService.exe [3497800 2022-11-09] (Electronic Arts, Inc. -> Electronic Arts) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2018-01-24] (Even Balance, Inc. -> ) R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc) S3 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [10043288 2023-03-30] (Avast Software s.r.o. -> AVAST Software) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation) S4 aspnet_state; Brak ImagePath ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 61883; C:\Windows\System32\DRIVERS\61883.sys [60288 2009-07-14] (Microsoft Windows -> Microsoft Corporation) R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [51120 2019-05-14] (CHENGDU AOMEI Tech Co., Ltd. -> ) S3 AmdTools64; C:\Windows\System32\DRIVERS\AmdTools64.sys [63392 2020-06-16] (Microsoft Windows Hardware Compatibility Publisher -> ) R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [171952 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> ) S3 ampa; C:\Windows\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> ) R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [38320 2019-05-14] (CHENGDU AOMEI Tech Co., Ltd. -> ) S3 AsrDrv101; C:\Windows\SysWOW64\Drivers\AsrDrv101.sys [22280 2018-10-15] (ASROCK Incorporation -> ASRock Incorporation) R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [235424 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software) R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [391808 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software) R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [297840 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software) R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [95960 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software) R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [39608 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software) R1 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [269464 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software) R1 aswNetHub; C:\Windows\System32\drivers\aswNetHub.sys [557096 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software) R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [23472 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software) R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [105208 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software) R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [80376 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software) R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [942952 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software) R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [702784 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software) R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [212640 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software) R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [319568 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software) R3 aswWintun; C:\Windows\System32\DRIVERS\aswWintun.sys [41472 2022-12-06] (Avast Software s.r.o. -> AVAST Software) S3 aswWireGuard; C:\Windows\System32\DRIVERS\aswWireguard.sys [184544 2023-01-31] (Avast Software s.r.o. -> Avast Software) S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [42888 2018-02-08] (IVT SOFTWARE TECHNOLOGY Inc. -> IVT Corporation.) S3 BthAudioHF; C:\Windows\System32\DRIVERS\BthAudioHF.sys [52224 2009-12-21] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc) S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc) S3 csr_a2dp; C:\Windows\System32\drivers\bthav.sys [78848 2009-12-21] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc) S3 cthda; C:\Windows\System32\drivers\cthda.sys [1067304 2017-12-16] (Creative Technology Ltd -> Creative Technology Ltd) R1 CTIIO; C:\Windows\system32\drivers\CtiIo64.sys [32296 2022-10-26] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.) S3 ddmdrv; C:\Windows\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> ) S4 EneTechIo; C:\Windows\system32\drivers\ene.sys [19968 2019-10-17] (Microsoft Windows Hardware Compatibility Publisher -> ) S3 gdrv; C:\Windows\gdrv.sys [26792 2019-05-16] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) S3 gdrv3; C:\Windows\System32\drivers\gdrv3.sys [45248 2022-10-26] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [32384 2018-03-14] (Sony Mobile Communications AB -> Sony Mobile Communications) R2 inpoutx64; C:\Windows\System32\Drivers\inpoutx64.sys [15008 2018-10-13] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk]) R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [17424 2022-10-28] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd) R1 netfilter2; C:\Windows\System32\drivers\netfilter2.sys [124952 2023-01-31] (Avast Software s.r.o. -> Windows (R) Win 7 DDK provider) R3 NVHDA; C:\Windows\System32\drivers\nvhda64v.sys [129960 2021-09-14] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation) R3 nvlddmkm; C:\Windows\System32\DRIVERS\nvlddmkm.sys [36865432 2021-09-16] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation) S3 phantomtap; C:\Windows\System32\DRIVERS\phantomtap.sys [35664 2020-05-08] (Avira Operations GmbH & Co. KG -> The OpenVPN Project) R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> ) S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> ) R3 ROCKEYNT; C:\Windows\System32\DRIVERS\Rockey4.sys [36904 2020-01-16] (Feitian Technologies Co., Ltd. -> Feitian Technologies Co., Ltd.) S3 rspLLL; C:\Windows\System32\DRIVERS\rspLLL64.sys [26368 2015-07-13] (Daniel Terhell -> Resplendence Software Projects Sp.) S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [748648 2010-08-12] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation) R0 SdFilter; C:\Windows\System32\DRIVERS\SdFilter.sys [13760 2017-12-14] (Lite-On Technology Corporation -> PLEXTOR) [Brak podpisu cyfrowego] R0 SdFilterUp; C:\Windows\System32\DRIVERS\SdFilterUp.sys [33216 2017-12-14] (Lite-On Technology Corporation -> PLEXTOR) [Brak podpisu cyfrowego] S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [163644 2019-06-18] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Brak podpisu cyfrowego] R0 secnvme; C:\Windows\System32\DRIVERS\secnvme.sys [90704 2021-07-12] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd) R0 secnvmeF; C:\Windows\System32\DRIVERS\secnvmeF.sys [30512 2021-07-12] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd) R2 SSGDIO; C:\Windows\SysWOW64\DRIVERS\ssgdio64.sys [14608 2018-02-21] (ATI Technologies, Inc -> ATI Technologies Inc.) S3 sssmbus; C:\Windows\System32\DRIVERS\sssmbus.sys [32520 2017-12-16] (SteelSeries ApS -> SteelSeries ApS) S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project) R3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] (Microsoft Windows Hardware Compatibility Publisher -> ) S3 V0260VID; C:\Windows\System32\DRIVERS\V0260Vid.sys [189664 2007-07-18] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.) U5 vsock; C:\Windows\System32\Drivers\vsock.sys [93576 2019-04-27] (VMware, Inc. -> VMware, Inc.) R1 wdfsconnect2017; C:\Windows\system32\drivers\wdfsconnect2017.sys [468096 2017-11-21] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) R3 wdvpnpbus; C:\Windows\System32\DRIVERS\wdvpnpbus.sys [20608 2017-11-21] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) S3 cpuz149; \??\C:\Windows\temp\cpuz149\cpuz149_x64.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2023-04-17 13:38 - 2023-04-17 13:38 - 000024406 _____ C:\Users\Henry\Desktop\FRST.txt 2023-04-17 13:38 - 2023-04-17 13:38 - 000000000 ____D C:\FRST 2023-04-17 13:34 - 2023-04-17 13:34 - 002380288 _____ (Farbar) C:\Users\Henry\Desktop\FRST64.exe 2023-04-17 13:22 - 2023-04-17 13:22 - 000000000 ____D C:\KPRM 2023-04-17 13:18 - 2023-04-17 13:18 - 000000008 __RSH C:\ProgramData\ntuser.pol 2023-04-16 19:26 - 2023-04-13 11:36 - 000313240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2023-04-15 18:44 - 2023-04-15 18:44 - 000345392 _____ C:\Windows\system32\FNTCACHE.DAT 2023-04-15 18:07 - 2023-04-16 19:33 - 000003230 _____ C:\Windows\system32\Tasks\Process Explorer-Home-Henry 2023-04-15 14:54 - 2023-04-17 13:30 - 000191548 _____ C:\Windows\ntbtlog.txt 2023-04-12 09:09 - 2023-04-12 10:54 - 000000000 ____D C:\Program Files\Mozilla Firefox 2023-04-11 22:18 - 2023-04-11 22:18 - 000000000 ____D C:\Windows\SysWOW64\vcq 2023-04-11 22:18 - 2023-04-11 22:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Clip QuickTool 2023-04-11 22:18 - 2023-04-11 22:18 - 000000000 ____D C:\Program Files (x86)\Video Clip QuickTool 2023-03-18 19:14 - 2023-03-18 19:14 - 000548734 _____ C:\Users\Henry\Downloads\Crysis 2 Ramstead.xlsx ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2023-04-17 13:35 - 2009-07-14 06:45 - 000030704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2023-04-17 13:35 - 2009-07-14 06:45 - 000030704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2023-04-17 13:34 - 2023-02-16 17:32 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2023-04-17 13:32 - 2011-04-12 15:21 - 000717370 _____ C:\Windows\system32\perfh015.dat 2023-04-17 13:32 - 2011-04-12 15:21 - 000147534 _____ C:\Windows\system32\perfc015.dat 2023-04-17 13:32 - 2009-07-14 07:13 - 001608060 _____ C:\Windows\system32\PerfStringBackup.INI 2023-04-17 13:32 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf 2023-04-17 13:27 - 2023-01-31 16:24 - 000000000 ____D C:\ProgramData\Avast Software 2023-04-17 13:27 - 2022-10-26 13:24 - 000000000 ____D C:\ProgramData\NVIDIA 2023-04-17 13:27 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2023-04-17 13:14 - 2019-07-04 14:16 - 000000000 ____D C:\Users\Henry\AppData\LocalLow\Temp 2023-04-17 13:14 - 2009-07-14 05:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy 2023-04-17 13:14 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy 2023-04-16 22:38 - 2023-02-17 09:06 - 000003466 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2023-04-16 22:38 - 2023-02-17 09:06 - 000003338 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2023-04-16 22:38 - 2023-02-09 15:58 - 000003128 _____ C:\Windows\system32\Tasks\CorelUpdateHelperTask-07486706BFCEFB239FDD114D1DA2ECAA 2023-04-16 22:38 - 2022-06-06 21:04 - 000003242 _____ C:\Windows\system32\Tasks\klcp_update 2023-04-16 22:38 - 2022-03-10 20:03 - 000003002 _____ C:\Windows\system32\Tasks\MSISW_Host 2023-04-16 22:38 - 2020-06-29 09:53 - 000004476 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task 2023-04-16 22:38 - 2019-11-23 14:17 - 000003308 _____ C:\Windows\system32\Tasks\CorelUpdateHelperTaskCore 2023-04-16 22:38 - 2019-05-16 14:59 - 000004382 _____ C:\Windows\system32\Tasks\Adobe Flash Player Updater 2023-04-16 20:38 - 2023-01-31 16:24 - 000000000 ____D C:\Windows\system32\Tasks\Avast Software 2023-04-16 19:27 - 2023-01-31 16:24 - 000003938 _____ C:\Windows\system32\Tasks\Avast SecureLine VPN Update 2023-04-16 19:26 - 2023-01-31 16:29 - 000003910 _____ C:\Windows\system32\Tasks\Avast Emergency Update 2023-04-15 17:50 - 2023-01-22 09:58 - 000000000 ____D C:\Windows\system32\Tasks\Intel 2023-04-15 14:48 - 2023-02-07 13:41 - 000000000 ____D C:\Users\Henry\AppData\Local\Corel 2023-04-15 14:48 - 2022-06-06 21:05 - 000000000 ____D C:\Users\Henry\AppData\Roaming\MPC-HC 2023-04-15 14:48 - 2020-07-08 17:06 - 000000000 ____D C:\ProgramData\AomeiBR 2023-04-15 14:48 - 2017-11-29 23:31 - 000000000 ____D C:\Program Files\Defraggler 2023-04-15 14:48 - 2017-11-19 09:21 - 000000000 ____D C:\Users\Henry\AppData\Local\CrashDumps 2023-04-15 14:46 - 2023-01-31 16:30 - 000000000 ____D C:\Users\Henry\AppData\Local\Avast Software 2023-04-15 13:12 - 2018-08-11 22:13 - 000000000 ____D C:\Windows\pss 2023-04-14 22:42 - 2021-10-20 06:14 - 000000000 ____D C:\Users\Henry\AppData\Roaming\AVI ReComp 2023-04-13 13:41 - 2023-02-07 13:41 - 000000000 ____D C:\Users\Henry\Documents\My PSP Files 2023-04-13 13:41 - 2017-11-19 01:14 - 000003764 ___SH C:\ProgramData\KGyGaAvL.sys 2023-04-13 11:36 - 2023-01-31 16:29 - 000942952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2023-04-13 11:36 - 2023-01-31 16:29 - 000702784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2023-04-13 11:36 - 2023-01-31 16:29 - 000557096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetHub.sys 2023-04-13 11:36 - 2023-01-31 16:29 - 000391808 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys 2023-04-13 11:36 - 2023-01-31 16:29 - 000319568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2023-04-13 11:36 - 2023-01-31 16:29 - 000297840 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys 2023-04-13 11:36 - 2023-01-31 16:29 - 000269464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2023-04-13 11:36 - 2023-01-31 16:29 - 000235424 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys 2023-04-13 11:36 - 2023-01-31 16:29 - 000105208 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2023-04-13 11:36 - 2023-01-31 16:29 - 000095960 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys 2023-04-13 11:36 - 2023-01-31 16:29 - 000080376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2023-04-13 11:36 - 2023-01-31 16:29 - 000039608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2023-04-13 11:36 - 2023-01-31 16:29 - 000023472 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetNd6.sys 2023-04-12 10:54 - 2023-02-16 17:32 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2023-04-12 09:12 - 2023-02-16 17:32 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla 2023-04-12 09:12 - 2023-02-16 17:32 - 000000000 ____D C:\Users\Henry\AppData\LocalLow\Mozilla 2023-04-12 09:07 - 2017-11-18 02:50 - 000000000 ____D C:\Windows\system32\MRT 2023-04-12 09:06 - 2017-11-18 02:50 - 156112424 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2023-04-11 14:30 - 2023-02-07 12:43 - 000000088 __RSH C:\ProgramData\A3C1E1E7BA.sys 2023-04-05 16:10 - 2020-03-03 01:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64 2023-04-05 16:10 - 2020-03-03 01:23 - 000000000 ____D C:\Program Files\HWiNFO64 2023-04-02 14:27 - 2017-11-18 01:54 - 000000000 ____D C:\ProgramData\Package Cache 2023-03-30 21:52 - 2022-11-22 13:41 - 000000000 ____D C:\Program Files\ATOMI 2023-03-30 21:47 - 2018-10-10 09:44 - 000007671 _____ C:\Users\Henry\AppData\Local\Resmon.ResmonCfg 2023-03-30 18:21 - 2023-01-31 16:24 - 000040344 _____ (Avast Software) C:\Windows\system32\icarus_rvrt.exe 2023-03-28 00:12 - 2023-01-19 20:34 - 000000000 ____D C:\Program Files (x86)\AOMEI Partition Assistant 2023-03-28 00:12 - 2019-06-16 13:19 - 000001024 ____H C:\AMTAG.BIN 2023-03-24 10:56 - 2023-02-17 09:06 - 000002235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2023-03-22 07:30 - 2018-01-19 00:01 - 000000000 ____D C:\symbols 2023-03-22 07:29 - 2018-01-08 20:43 - 000000000 ____D C:\Program Files\Debugging Tools for Windows (x64) 2023-03-21 09:02 - 2017-11-18 20:48 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2023-03-21 09:01 - 2017-11-18 20:44 - 000000000 ____D C:\Program Files\Microsoft Office 15 2023-03-20 18:17 - 2009-07-14 07:08 - 000032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT ==================== Pliki w katalogu głównym wybranych folderów ======== 2017-11-19 14:28 - 2017-11-19 14:28 - 000000908 _____ () C:\Users\Henry\Workaround.vbs 2023-02-07 13:55 - 2011-08-23 19:34 - 000465264 _____ (Corel) C:\Program Files (x86)\Common Files\AppFramework.dll 2014-07-10 08:16 - 2014-07-10 08:16 - 002174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll 2023-02-07 13:55 - 2011-08-23 17:42 - 000148177 _____ () C:\Program Files (x86)\Common Files\BookViewer.xap 2023-02-07 13:55 - 2011-08-23 19:35 - 000402800 _____ () C:\Program Files (x86)\Common Files\facebook.dll 2023-02-07 13:55 - 2011-08-23 19:35 - 000033136 _____ (Corel-V1E) C:\Program Files (x86)\Common Files\FlickrProvider.dll 2023-02-07 13:55 - 2011-08-23 19:42 - 000332144 _____ (Corel) C:\Program Files (x86)\Common Files\MediaOrganizer.dll 2023-02-07 13:55 - 2011-08-23 19:35 - 000130416 _____ () C:\Program Files (x86)\Common Files\PluginCommon.dll 2022-10-10 09:23 - 2022-10-10 09:23 - 000000012 _____ () C:\Users\Henry\AppData\Roaming\2457fe3357cbf1220231e8917326f70f 2017-11-18 22:52 - 2022-10-27 17:14 - 000024542 _____ () C:\Users\Henry\AppData\Roaming\Wartości oddzielone przecinkami.ADR 2022-10-27 17:09 - 2022-10-27 17:09 - 000008658 _____ () C:\Users\Henry\AppData\Roaming\Wartości oddzielone przecinkami.EML 2020-10-01 21:12 - 2023-01-20 14:02 - 002128896 _____ () C:\Users\Henry\AppData\Local\file__0.localstorage 2023-02-08 18:49 - 2023-02-08 18:49 - 000000093 _____ () C:\Users\Henry\AppData\Local\fusioncache.dat 2020-04-08 12:39 - 2020-04-08 12:39 - 000000000 _____ () C:\Users\Henry\AppData\Local\oobelibMkey.log 2018-10-10 09:44 - 2023-03-30 21:47 - 000007671 _____ () C:\Users\Henry\AppData\Local\Resmon.ResmonCfg 2018-10-02 22:26 - 2018-10-02 22:26 - 000000138 _____ () C:\Users\Henry\AppData\Local\uts.ini ==================== FCheck ================================ (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) FCheck: C:\Windows\SysWOW64\version_IObitDel.dll [2023-01-19] <==== UWAGA (zerobajtowy plik/folder) ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) LastRegBack: 2023-04-17 11:13 ==================== Koniec FRST.txt ========================