Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 25-04-2023
Uruchomiony przez Henry (administrator)  HOME (Gigabyte Technology Co., Ltd. Z370 AORUS Gaming 7) (25-04-2023 17:32:15)
Uruchomiony z C:\Users\Henry\Desktop\FRST64.exe
Załadowane profile: Henry
Platforma: Microsoft Windows 7 Ultimate  Service Pack 1 (X64) Język: Polski (Polska)
Domyślna przeglądarka: FF
Tryb startu: Normal

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <6>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Cleanup\TuneupUI.exe <3>
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(explorer.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe <4>
(explorer.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\AntiTrackSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\afwServ.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe
(services.exe ->) (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(taskeng.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [MouseDriver] => c:\windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Microsoft Windows Hardware Compatibility Publisher -> Pixart Imaging Inc)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [215960 2023-01-31] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [TuneupUI.exe] => C:\Program Files\Avast Software\Cleanup\TuneupUI.exe [4481432 2023-04-25] (Avast Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: c:\windows\system32\AdobePDF.dll [65488 2020-05-30] (Adobe Inc. -> Adobe Systems Inc)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{AC76BA86-0000-0000-7760-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat DC\Esl\Aiod.dll [2020-05-30] (Adobe Inc. -> Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2023-01-31]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
BootExecute: 
GroupPolicy: Ograniczenia ? <==== UWAGA
Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA

==================== Zaplanowane zadania (filtrowane) ============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {012962C4-1117-4C53-9668-3100F66F7135} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [973744 2022-04-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {06DE6BC4-708E-481F-886E-3B06C6454B75} - System32\Tasks\WD Device Agent Task henry => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [724760 2022-09-01] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
Task: {21712054-41DC-4080-A0AB-C46174B13A28} - System32\Tasks\MSISW_Host => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
Task: {33884871-2832-4490-82BC-B6F56C28D33D} - System32\Tasks\WD Discovery Service Task henry => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [79640 2022-09-01] (Western Digital Technologies, Inc. -> )
Task: {33E5A951-FEC8-4BA5-BD66-2A875C885D27} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676768 2023-04-25] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {366F82F5-1C25-485A-A472-C043734499B5} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [718240 2023-04-25] (Mozilla Corporation -> Mozilla Foundation)
Task: {3A7142FE-E8BD-44C4-AD3D-DCF7F67F0F70} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe [1217944 2023-01-31] (Avast Software s.r.o. -> AVAST Software)
Task: {421E6AD2-FC07-4332-A5A5-A1F2B6194522} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3827728 2022-10-21] (Corel Corporation -> Corel Corporation)
Task: {75F6F4A0-D7A0-468D-B5DB-EB4EB9094B1D} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4954008 2023-01-31] (Avast Software s.r.o. -> AVAST Software)
Task: {77B18188-6441-4128-9112-8C7605DE016B} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {785784AA-D6AE-4853-AE7A-1DD3BCA713B2} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\10.2.0\AutoUpdate.exe /auto (Brak pliku)
Task: {7A2BE90C-553F-48FC-8B4F-9C7115E2C0EC} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe $(Arg0) (Brak pliku)
Task: {93527AA0-24D9-4721-9192-F40CE035BE8C} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [6694224 2023-01-26] (Avast Software s.r.o. -> Avast Software)
Task: {A52AF53B-AB7B-45D8-BD2A-85597814A48B} - System32\Tasks\CorelUpdateHelperTask-07486706BFCEFB239FDD114D1DA2ECAA => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3827728 2022-10-21] (Corel Corporation -> Corel Corporation)
Task: {A578529B-C3E6-41BB-8196-8D5BDD23A8AE} - System32\Tasks\PC HelpSoft Driver Updater automatic scan and new device notifications => C:\Program Files (x86)\PC HelpSoft Driver Updater\HDMTray.exe (Brak pliku) <==== UWAGA
Task: {A94A512C-1B5E-4B8C-AB99-155EBC6C44B9} - System32\Tasks\Avast Software\Avast Cleanup Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe [7092120 2023-04-18] (Avast Software s.r.o. -> Avast Software)
Task: {C0B93D88-2DA0-4521-AA5F-75B1D3DCF62D} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [4698008 2023-01-31] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\Avast Software\SecureLine VPN\log" --guid aee533be-7676-473a-a391-cd68b43fb766
Task: {D43ACA84-FB0C-44A8-8039-4A2F6D6ADBA4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-09] (Adobe Inc. -> Adobe)
Task: {D7EF6190-E36F-4F1B-B5A6-9C841C4EABA7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [973744 2022-04-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {D9DCE1B5-7EF6-4DB3-8C92-EE2FAB2B2B35} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2113024 2022-12-28] () [Brak podpisu cyfrowego]
Task: {E050100B-C2EC-4FD8-91EA-A93E71CA38E7} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2295192 2023-01-31] (Avast Software s.r.o. -> Avast Software)
Task: {E559107E-5A52-481E-AD38-05CA934F1912} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)
Task: {E9682595-D4D3-43D8-BE01-1D4908EBBAE2} - System32\Tasks\Driver Booster SkipUAC (Henry) => C:\Program Files (x86)\IObit\Driver Booster\10.2.0\DriverBooster.exe /skipuac (Brak pliku)
Task: {EE2AA6DB-3ECD-44E4-B373-4BFF41B2B40B} - System32\Tasks\Avast Software\Avast Cleanup BugReport => C:\Program Files\Avast Software\Cleanup\AvBugReport.exe [5029784 2023-04-25] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 62 --programpath "C:\Program Files\Avast Software\Cleanup\Setup\.." --configpath "C:\Program Files\Avast Software\Cleanup\Setup" --path "C:\ProgramData\Avast Software\Cleanup\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\Avast Software\Cleanup\log" --guid 22580e01-8aee-4293-869d-8d226585ebfe

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)


==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-31] (Apple Inc. -> Apple Inc.)
Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2233DDD8-A6A4-40BB-83E4-3760C3413D90}: [NameServer] 100.120.181.1
Tcpip\..\Interfaces\{93EC1225-3178-47CC-92E4-B7136C7FD239}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{FC06721B-91B5-4CBF-BBCD-A4E29A60ED7D}: [DhcpNameServer] 192.168.1.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Henry\AppData\Local\Microsoft\Edge\User Data\Default [2023-02-13]
Edge HomePage: Default -> hxxp://go.microsoft.com/fwlink/?LinkId=69157

FireFox:
========
FF DefaultProfile: 1ibxpj79.default
FF ProfilePath: C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\1ibxpj79.default [2021-06-03]
FF ProfilePath: C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\52x8315k.default-release-1675435655654 [2023-04-25]
FF DownloadDir: G:\INSTALKI\z sieci\Firefox
FF Homepage: Mozilla\Firefox\Profiles\52x8315k.default-release-1675435655654 -> chrome://browser/content/blanktab.html
FF Extension: (AdBlocker Ultimate) - C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\52x8315k.default-release-1675435655654\Extensions\adblockultimate@adblockultimate.net.xpi [2023-02-06]
FF Extension: (Enhancer for YouTube™) - C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\52x8315k.default-release-1675435655654\Extensions\enhancerforyoutube@maximerf.addons.mozilla.org.xpi [2023-02-03]
FF Extension: (Galaxy Space Theme) - C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\52x8315k.default-release-1675435655654\Extensions\{5eae7880-dab2-4337-bc53-e4b58db7aec4}.xpi [2023-02-04]
FF Extension: (Video DownloadHelper) - C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\52x8315k.default-release-1675435655654\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2023-02-03]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2020-05-29]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Brak pliku]
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (Electronic Sports Network i Sverige AB -> ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB) [Brak podpisu cyfrowego]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Brak pliku]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Brak pliku]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2017-11-21] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2020-05-30] (Adobe Inc. -> Adobe Systems Inc.)

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ofoeigeaodhbjogdigckajfhjbonaofg]

Opera: 
=======
OPR Profile: C:\Users\Henry\AppData\Roaming\Opera Software\Opera Stable [2019-10-10]
OPR DownloadDir: I:\z sieci\Firefox\Opera
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.pl/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [88648 2020-02-25] (Adobe Inc. -> Adobe Systems)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-09] (Adobe Inc. -> Adobe)
S3 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
S3 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8553880 2023-01-31] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [597400 2023-01-31] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2038168 2023-01-31] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [597400 2023-01-31] (Avast Software s.r.o. -> AVAST Software)
R2 AvastAntiTrackSvc; C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\AntiTrackSvc.exe [5779160 2023-01-31] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2023-01-31] (Avast Software s.r.o. -> AVAST Software)
S4 Backupper Service; C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.1.2\ABService.exe [1095112 2022-08-31] (AOMEI International Network Limited -> AOMEI International Network Limited)
R2 CleanupPSvc; C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe [17396632 2023-04-25] (Avast Software s.r.o. -> AVAST Software)
S3 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3054520 2022-04-28] (Microsoft Corporation -> Microsoft Corporation)
S4 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [347408 2022-10-03] (Underwriters Laboratories Inc. -> Futuremark)
S3 HFGService; C:\Windows\System32\HFGService.dll [535552 2009-12-21] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc)
S4 Origin Client Service; G:\Program Files (x86)\Origin_\Origin\OriginClientService.exe [2579264 2022-11-09] (Electronic Arts, Inc. -> Electronic Arts)
S4 Origin Web Helper Service; G:\Program Files (x86)\Origin_\Origin\OriginWebHelperService.exe [3497800 2022-11-09] (Electronic Arts, Inc. -> Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2018-01-24] (Even Balance, Inc. -> )
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
R2 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [9639320 2023-01-31] (Avast Software s.r.o. -> AVAST Software)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
S4 aspnet_state; Brak ImagePath
S3 MagicianSVC; "C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe" [X]

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 61883; C:\Windows\System32\DRIVERS\61883.sys [60288 2009-07-14] (Microsoft Windows -> Microsoft Corporation)
R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [51120 2019-05-14] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 AmdTools64; C:\Windows\System32\DRIVERS\AmdTools64.sys [63392 2020-06-16] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [171952 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 ampa; C:\Windows\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [38320 2019-05-14] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 AsrDrv101; C:\Windows\SysWOW64\Drivers\AsrDrv101.sys [22280 2018-10-15] (ASROCK Incorporation -> ASRock Incorporation)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [229208 2023-01-31] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [391272 2023-01-31] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [297832 2023-01-31] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [95960 2023-01-31] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [39648 2023-01-31] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [267888 2023-01-31] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswNetHub; C:\Windows\System32\drivers\aswNetHub.sys [555560 2023-01-31] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [38152 2023-01-31] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [105248 2023-01-31] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [80376 2023-01-31] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [852000 2023-01-31] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [695504 2023-02-01] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [212632 2023-01-31] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [318456 2023-01-31] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R3 aswWintun; C:\Windows\System32\DRIVERS\aswWintun.sys [41472 2022-12-06] (Avast Software s.r.o. -> AVAST Software)
S3 aswWireGuard; C:\Windows\System32\DRIVERS\aswWireguard.sys [184544 2023-01-31] (Avast Software s.r.o. -> Avast Software)
S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [42888 2018-02-08] (IVT SOFTWARE TECHNOLOGY Inc. -> IVT Corporation.)
S3 BthAudioHF; C:\Windows\System32\DRIVERS\BthAudioHF.sys [52224 2009-12-21] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc)
S3 cpuz149; C:\Windows\temp\cpuz149\cpuz149_x64.sys [35368 2022-02-23] (CPUID S.A.R.L.U. -> CPUID)
S3 csr_a2dp; C:\Windows\System32\drivers\bthav.sys [78848 2009-12-21] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc)
S3 cthda; C:\Windows\System32\drivers\cthda.sys [1067304 2017-12-16] (Creative Technology Ltd -> Creative Technology Ltd)
R1 CTIIO; C:\Windows\system32\drivers\CtiIo64.sys [32296 2022-10-26] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
S3 ddmdrv; C:\Windows\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> )
S4 EneTechIo; C:\Windows\system32\drivers\ene.sys [19968 2019-10-17] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 gdrv; C:\Windows\gdrv.sys [26792 2019-05-16] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 gdrv3; C:\Windows\System32\drivers\gdrv3.sys [45248 2022-10-26] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [32384 2018-03-14] (Sony Mobile Communications AB -> Sony Mobile Communications)
R2 inpoutx64; C:\Windows\System32\Drivers\inpoutx64.sys [15008 2018-10-13] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [17424 2022-10-28] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R1 netfilter2; C:\Windows\System32\drivers\netfilter2.sys [124952 2023-01-31] (Avast Software s.r.o. -> Windows (R) Win 7 DDK provider)
R3 NVHDA; C:\Windows\System32\drivers\nvhda64v.sys [129960 2021-09-14] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
R3 nvlddmkm; C:\Windows\System32\DRIVERS\nvlddmkm.sys [36865432 2021-09-16] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
S3 phantomtap; C:\Windows\System32\DRIVERS\phantomtap.sys [35664 2020-05-08] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
R3 ROCKEYNT; C:\Windows\System32\DRIVERS\Rockey4.sys [36904 2020-01-16] (Feitian Technologies Co., Ltd. -> Feitian Technologies Co., Ltd.)
S3 rspLLL; C:\Windows\System32\DRIVERS\rspLLL64.sys [26368 2015-07-13] (Daniel Terhell -> Resplendence Software Projects Sp.)
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [748648 2010-08-12] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
R0 SdFilter; C:\Windows\System32\DRIVERS\SdFilter.sys [13760 2017-12-14] (Lite-On Technology Corporation -> PLEXTOR) [Brak podpisu cyfrowego]
R0 SdFilterUp; C:\Windows\System32\DRIVERS\SdFilterUp.sys [33216 2017-12-14] (Lite-On Technology Corporation -> PLEXTOR) [Brak podpisu cyfrowego]
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [163644 2019-06-18] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Brak podpisu cyfrowego]
R0 secnvme; C:\Windows\System32\DRIVERS\secnvme.sys [90704 2021-07-12] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R0 secnvmeF; C:\Windows\System32\DRIVERS\secnvmeF.sys [30512 2021-07-12] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R2 SSGDIO; C:\Windows\SysWOW64\DRIVERS\ssgdio64.sys [14608 2018-02-21] (ATI Technologies, Inc -> ATI Technologies Inc.)
S3 sssmbus; C:\Windows\System32\DRIVERS\sssmbus.sys [32520 2017-12-16] (SteelSeries ApS -> SteelSeries ApS)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 V0260VID; C:\Windows\System32\DRIVERS\V0260Vid.sys [189664 2007-07-18] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.)
U5 vsock; C:\Windows\System32\Drivers\vsock.sys [93576 2019-04-27] (VMware, Inc. -> VMware, Inc.)
R1 wdfsconnect2017; C:\Windows\system32\drivers\wdfsconnect2017.sys [468096 2017-11-21] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
R3 wdvpnpbus; C:\Windows\System32\DRIVERS\wdvpnpbus.sys [20608 2017-11-21] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
S3 HWiNFO_162; \??\C:\Users\Henry\AppData\Local\Temp\HWiNFO64A_162.SYS [X] <==== UWAGA
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2023-04-25 17:32 - 2023-04-25 17:32 - 000027446 _____ C:\Users\Henry\Desktop\FRST.txt
2023-04-25 17:30 - 2023-04-25 17:32 - 000000000 ____D C:\FRST
2023-04-25 17:29 - 2023-04-25 17:31 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-04-25 17:24 - 2023-04-25 17:24 - 002382336 _____ (Farbar) C:\Users\Henry\Desktop\FRST64.exe

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2023-04-25 18:16 - 2021-09-18 15:13 - 000003466 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-04-25 18:16 - 2021-09-18 15:13 - 000003338 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-04-25 18:16 - 2021-06-03 16:33 - 000000000 ____D C:\Users\Henry\AppData\LocalLow\Mozilla
2023-04-25 18:15 - 2019-02-13 11:24 - 000000624 _____ C:\Windows\SysWOW64\AbBakConfig.dat
2023-04-25 18:15 - 2017-11-25 12:38 - 000000432 _____ C:\Windows\SysWOW64\winsevr.dat
2023-04-25 17:31 - 2023-02-03 17:06 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2023-04-25 17:31 - 2023-02-03 17:06 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-04-25 17:31 - 2023-02-03 17:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-04-25 17:30 - 2023-01-31 16:24 - 000040344 _____ (Avast Software) C:\Windows\system32\icarus_rvrt.exe
2023-04-25 17:30 - 2009-07-14 06:45 - 000030704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2023-04-25 17:30 - 2009-07-14 06:45 - 000030704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2023-04-25 17:27 - 2011-04-12 15:21 - 000754256 _____ C:\Windows\system32\perfh015.dat
2023-04-25 17:27 - 2011-04-12 15:21 - 000163232 _____ C:\Windows\system32\perfc015.dat
2023-04-25 17:27 - 2009-07-14 07:13 - 001710750 _____ C:\Windows\system32\PerfStringBackup.INI
2023-04-25 17:27 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2023-04-25 17:24 - 2023-02-14 15:36 - 000114554 _____ C:\Windows\ntbtlog.txt
2023-04-25 17:22 - 2023-01-31 16:24 - 000003938 _____ C:\Windows\system32\Tasks\Avast SecureLine VPN Update
2023-04-25 17:22 - 2023-01-31 16:24 - 000000000 ____D C:\ProgramData\Avast Software
2023-04-25 17:22 - 2022-10-26 13:24 - 000000000 ____D C:\ProgramData\NVIDIA
2023-04-25 17:22 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2023-04-25 17:19 - 2017-11-18 01:13 - 000000000 ____D C:\Users\Henry\AppData\Roaming\Microsoft\MMC

==================== Pliki w katalogu głównym wybranych folderów ========

2017-11-19 14:28 - 2017-11-19 14:28 - 000000908 _____ () C:\Users\Henry\Workaround.vbs
2023-02-07 13:55 - 2011-08-23 19:34 - 000465264 _____ (Corel) C:\Program Files (x86)\Common Files\AppFramework.dll
2014-07-10 08:16 - 2014-07-10 08:16 - 002174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
2023-02-07 13:55 - 2011-08-23 17:42 - 000148177 _____ () C:\Program Files (x86)\Common Files\BookViewer.xap
2023-02-07 13:55 - 2011-08-23 19:35 - 000402800 _____ () C:\Program Files (x86)\Common Files\facebook.dll
2023-02-07 13:55 - 2011-08-23 19:35 - 000033136 _____ (Corel-V1E) C:\Program Files (x86)\Common Files\FlickrProvider.dll
2023-02-07 13:55 - 2011-08-23 19:42 - 000332144 _____ (Corel) C:\Program Files (x86)\Common Files\MediaOrganizer.dll
2023-02-07 13:55 - 2011-08-23 19:35 - 000130416 _____ () C:\Program Files (x86)\Common Files\PluginCommon.dll
2022-10-10 09:23 - 2022-10-10 09:23 - 000000012 _____ () C:\Users\Henry\AppData\Roaming\2457fe3357cbf1220231e8917326f70f
2017-11-18 22:52 - 2022-10-27 17:14 - 000024542 _____ () C:\Users\Henry\AppData\Roaming\Wartości oddzielone przecinkami.ADR
2022-10-27 17:09 - 2022-10-27 17:09 - 000008658 _____ () C:\Users\Henry\AppData\Roaming\Wartości oddzielone przecinkami.EML
2020-10-01 21:12 - 2023-01-20 14:02 - 002128896 _____ () C:\Users\Henry\AppData\Local\file__0.localstorage
2023-02-08 18:49 - 2023-02-08 18:49 - 000000093 _____ () C:\Users\Henry\AppData\Local\fusioncache.dat
2020-04-08 12:39 - 2020-04-08 12:39 - 000000000 _____ () C:\Users\Henry\AppData\Local\oobelibMkey.log
2018-10-10 09:44 - 2022-11-04 08:56 - 000007671 _____ () C:\Users\Henry\AppData\Local\Resmon.ResmonCfg
2018-10-02 22:26 - 2018-10-02 22:26 - 000000138 _____ () C:\Users\Henry\AppData\Local\uts.ini

==================== FCheck ================================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

FCheck: C:\Windows\SysWOW64\version_IObitDel.dll [2023-01-19] <==== UWAGA (zerobajtowy plik/folder)

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)


LastRegBack: 2023-02-14 16:04
==================== Koniec  FRST.txt ========================