Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 08-02-2021 01
Uruchomiony przez arehi (administrator) LAPTOP-TC00SJGQ (LENOVO 80QQ) (12-02-2021 10:29:28)
Uruchomiony z D:\Users\arehi\Documents
Załadowane profile: arehi
Platform: Windows 10 Home Wersja 1909 18363.1316 (X64) Język: Polski (Polska)
Domyślna przeglądarka: Edge
Tryb startu: Normal
==================== Procesy (filtrowane) =================
(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Don HO don.h@free.fr) [Brak podpisu cyfrowego] C:\Program Files (x86)\Notepad++\notepad++.exe
(DVJ LIMITED -> DVJ LIMITED) C:\Users\arehi\AppData\Roaming\ProductAuthenticationService\pas.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <36>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler64.exe
(Intel(R) pGFX -> ) C:\Windows\System32\igfxTray.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Ledger SAS -> Ledger Live Team) C:\Program Files\Ledger Live\Ledger Live.exe <5>
(LENOVO -> Lenovo) C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2012.21.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12011.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2011.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2011.6-0\NisSrv.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <8>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Telegram FZ-LLC -> Telegram FZ-LLC) C:\Users\arehi\AppData\Roaming\Telegram Desktop\Telegram.exe
==================== Rejestr (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [916184 2014-07-02] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323056 2015-11-04] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Brak podpisu cyfrowego]
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-3116128971-596482846-236426390-1000\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-3116128971-596482846-236426390-1001\...\Run: [ChomikBox] => C:\Program Files (x86)\ChomikBox\ChomikBox.exe [3941376 2017-02-21] () [Brak podpisu cyfrowego]
HKU\S-1-5-21-3116128971-596482846-236426390-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [365760 2020-04-26] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-3116128971-596482846-236426390-1001\...\Run: [ProductAuthenticationService] => C:\Users\arehi\AppData\Roaming\ProductAuthenticationService\pas.exe [1003024 2020-06-15] (DVJ LIMITED -> DVJ LIMITED)
HKU\S-1-5-21-3116128971-596482846-236426390-1001\...\MountPoints2: {9822cc14-8546-11ea-8434-c83dd47cc61a} - "H:\setup.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\88.0.4324.150\Installer\chrmstp.exe [2021-02-08] (Google LLC -> Google LLC)
Startup: C:\Users\arehi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Jarvee.lnk [2018-03-19]
ShortcutTarget: Jarvee.lnk -> C:\Users\arehi\AppData\Roaming\Jarvee\Jarvee.exe (Brak pliku)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA
==================== Zaplanowane zadania (filtrowane) ============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
Task: {0B750978-E2A5-4EA4-A77F-BB6E3A4E5DF7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {112DF3BA-535A-46BF-8FFD-801CBBDAC85A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {431B260D-4FA8-4957-8827-95BF36AE1670} - \Lenovo\ImController\TimeBasedEvents\231d9113-3cbb-4e2e-b3c6-3aa449fc3ca1 -> Brak pliku <==== UWAGA
Task: {5341E66E-2CA4-4DE8-B10D-0E1E30793FE0} - \Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask -> Brak pliku <==== UWAGA
Task: {546BB02F-6DC4-43F9-B5D4-9A326E989A6B} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> Brak pliku <==== UWAGA
Task: {69269118-F87C-4A40-BC5E-477199819FEB} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [677344 2021-02-08] (Mozilla Corporation -> Mozilla Foundation)
Task: {6B1292FB-1E7A-4F7C-B189-F76AD44C2ECA} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1706496 2020-04-05] () [Brak podpisu cyfrowego]
Task: {6DB0BDEC-C9C3-4C6F-9418-0208065295FD} - \Lenovo\ImController\TimeBasedEvents\ede63165-4bd0-4379-94b6-aa148fc58b6a -> Brak pliku <==== UWAGA
Task: {74CD200C-E29F-4685-B17A-C7B77C38167E} - System32\Tasks\HPCustParticipation HP Officejet 2620 series => C:\Program Files\HP\HP Officejet 2620 series\Bin\HPCustPartic.exe
Task: {75D93B94-0392-400A-AA72-1E1E0F9C6581} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115048 2021-02-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {8419D35C-1B9D-4A4A-828D-15F87FAE6222} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-09-26] (Google Inc -> Google Inc.)
Task: {89A14AB5-1DF9-4F51-ACBF-AC251B53E470} - System32\Tasks\Nvbackend_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {93682DDB-9CB1-42D9-92C2-EA9BCD1C09E1} - \Lenovo\ImController\TimeBasedEvents\8f167634-ef91-4e83-bd0f-456754925c24 -> Brak pliku <==== UWAGA
Task: {9663ADF9-FB31-4F63-A8E8-679FB0EE3DC5} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-arehiba@outlook.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {A0A27E27-DADC-42BA-BB80-FD423DECBFAB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B2BFAA75-A909-45BC-988B-46D1DBE0F9D2} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115048 2021-02-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {CBF1B1F5-3653-4D00-A821-F46A8B2195B0} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22993288 2021-02-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {CFDA2052-2D0A-43AB-9221-9EFE6E091BA0} - \Lenovo\ImController\Lenovo iM Controller Monitor -> Brak pliku <==== UWAGA
Task: {D38969F7-1B9F-4561-B37A-4C7B3AF1C89C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-09-26] (Google Inc -> Google Inc.)
Task: {E8B6812E-0C9B-42BC-94EC-F165C85B2274} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22993288 2021-02-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {F0670EA3-08F6-486C-8596-9BD3CF6FF0C0} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA
Task: {FB0A8CC5-FD47-420E-B57D-C9EB3C8730A7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-05] (Microsoft Windows Publisher -> Microsoft Corporation)
(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
==================== Internet (filtrowane) ====================
(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{9d713f7d-5e26-427c-b3e3-3fcb4ac50c1b}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{c6aa8b97-2f07-45cd-b10e-dfb95c774830}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Profile: C:\Users\arehi\AppData\Local\Microsoft\Edge\User Data\Default [2021-01-29]
FireFox:
========
FF DefaultProfile: sgy5ea84.default
FF ProfilePath: C:\Users\arehi\AppData\Roaming\Mozilla\Firefox\Profiles\sgy5ea84.default [2021-02-12]
FF Notifications: Mozilla\Firefox\Profiles\sgy5ea84.default -> hxxps://stoksoft.pushcrew.com; hxxps://meet.google.com
FF Extension: (Greasemonkey) - C:\Users\arehi\AppData\Roaming\Mozilla\Firefox\Profiles\sgy5ea84.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2018-03-17]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-02-02] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\arehi\AppData\Local\Google\Chrome\User Data\Default [2021-02-12]
CHR Notifications: Default -> hxxps://stoksoft.pushcrew.com
CHR HomePage: Default -> hxxp://www.v9.com/?utm_source=b&utm_medium=pbr&from=pbr&uid=132690_1050624_10019773_3219913727_FE920D62&ts=1343855462
CHR Extension: (Prezentacje) - C:\Users\arehi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-15]
CHR Extension: (Dokumenty) - C:\Users\arehi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-15]
CHR Extension: (Dysk Google) - C:\Users\arehi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-24]
CHR Extension: (Połączenia przez Skype) - C:\Users\arehi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2021-01-14]
CHR Extension: (YouTube) - C:\Users\arehi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-26]
CHR Extension: (Arkusze) - C:\Users\arehi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-15]
CHR Extension: (Dokumenty Google offline) - C:\Users\arehi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-11-13]
CHR Extension: (AdBlock — najlepszy bloker reklam) - C:\Users\arehi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-01-15]
CHR Extension: (Tag Assistant Legacy (by Google)) - C:\Users\arehi\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejbdjndbnbjgmefkgdddjlbokphdefk [2021-01-20]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\arehi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-11]
CHR Extension: (Gmail) - C:\Users\arehi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-24]
CHR Extension: (Chrome Media Router) - C:\Users\arehi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-02-11]
Opera:
=======
OPR Profile: C:\Users\arehi\AppData\Roaming\Opera Software\Opera Stable [2019-07-03]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.pl/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
==================== Usługi (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8902024 2021-02-02] (Microsoft Corporation -> Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4507328 2020-04-26] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [1210352 2016-03-22] (LENOVO -> Lenovo)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Brak podpisu cyfrowego]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2020-12-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2020-12-05] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [X]
S2 ImControllerService; "%SystemDrive%\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe" [X]
===================== Sterowniki (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [231936 2019-09-11] (Microsoft Corporation) [Brak podpisu cyfrowego]
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2020-04-26] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2020-04-26] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2017-10-10] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2020-12-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [429296 2020-12-05] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [70896 2020-12-05] (Microsoft Windows -> Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] (CyberLink -> "CyberLink)
==================== NetSvcs (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
==================== Jeden miesiąc (utworzone) (filtrowane) =========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2021-02-12 10:28 - 2021-02-12 10:31 - 000000000 ____D C:\FRST
2021-02-11 13:43 - 2021-02-11 13:43 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-02-08 02:03 - 2021-02-11 21:00 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-01-26 10:51 - 2021-01-26 10:51 - 000000000 ____D C:\Users\arehi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2021-01-14 19:07 - 2021-01-14 19:07 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-01-14 19:07 - 2021-01-14 19:07 - 000094720 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-01-14 19:06 - 2021-01-14 19:06 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2021-01-14 19:06 - 2021-01-14 19:06 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-01-14 19:06 - 2021-01-14 19:06 - 000455680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2021-01-14 19:06 - 2021-01-14 19:06 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2021-01-14 19:06 - 2021-01-14 19:06 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2021-01-14 19:06 - 2021-01-14 19:06 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-01-14 19:06 - 2021-01-14 19:06 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-01-14 19:06 - 2021-01-14 19:06 - 000053248 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-01-14 19:05 - 2021-01-14 19:05 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2021-01-14 19:05 - 2021-01-14 19:05 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2021-01-14 19:05 - 2021-01-14 19:05 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-01-14 19:04 - 2021-01-14 19:04 - 000696832 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2021-01-14 19:04 - 2021-01-14 19:04 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2021-01-14 19:04 - 2021-01-14 19:04 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-01-14 19:04 - 2021-01-14 19:04 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth18.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth17.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth16.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth15.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2021-01-14 19:04 - 2021-01-14 19:04 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2021-01-14 19:03 - 2021-01-14 19:03 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2021-01-14 19:02 - 2021-01-14 19:02 - 000458240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2021-01-14 19:00 - 2021-01-14 19:00 - 001101312 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-01-14 19:00 - 2021-01-14 19:00 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-01-14 19:00 - 2021-01-14 19:00 - 000331264 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2021-01-14 19:00 - 2021-01-14 19:00 - 000208384 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2021-01-14 19:00 - 2021-01-14 19:00 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2021-01-14 18:59 - 2021-01-14 18:59 - 000208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2021-01-14 18:58 - 2021-01-14 18:58 - 002590720 _____ C:\WINDOWS\system32\dwmscene.dll
2021-01-14 18:58 - 2021-01-14 18:58 - 000549888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2021-01-14 18:58 - 2021-01-14 18:58 - 000186368 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2021-01-14 18:57 - 2021-01-14 18:57 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-01-14 18:57 - 2021-01-14 18:57 - 000266752 _____ C:\WINDOWS\system32\HeatCore.dll
2021-01-14 18:56 - 2021-01-14 18:56 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-01-14 18:56 - 2021-01-14 18:56 - 000453632 _____ C:\WINDOWS\system32\ssdm.dll
2021-01-14 18:56 - 2021-01-14 18:56 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2021-01-14 18:56 - 2021-01-14 18:56 - 000164864 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-01-14 18:56 - 2021-01-14 18:56 - 000061440 _____ C:\WINDOWS\system32\rdsxvmaudio.dll
==================== Jeden miesiąc (zmodyfikowane) ==================
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2021-02-12 10:34 - 2021-01-06 15:34 - 000000000 ____D C:\Users\arehi\AppData\Roaming\Ledger Live
2021-02-12 10:24 - 2019-07-31 18:19 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-02-12 10:24 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-02-12 07:32 - 2018-09-27 10:59 - 000000000 ____D C:\Users\arehi\AppData\Local\Adobe
2021-02-11 13:58 - 2019-10-01 08:45 - 000000000 ____D C:\Users\arehi\AppData\Roaming\Telegram Desktop
2021-02-11 13:51 - 2017-12-19 21:45 - 000000021 _____ C:\Users\arehi\Desktop\xbnc.txt
2021-02-11 13:44 - 2019-02-13 00:12 - 000000000 ____D C:\ProgramData\Mozilla
2021-02-11 13:43 - 2017-11-05 15:44 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-02-11 13:43 - 2017-09-27 09:37 - 000000000 ____D C:\Users\arehi\AppData\LocalLow\Mozilla
2021-02-11 13:43 - 2017-09-27 08:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-02-11 13:20 - 2017-09-26 17:10 - 000000000 __SHD C:\Users\arehi\IntelGraphicsProfiles
2021-02-11 13:20 - 2017-09-26 16:23 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2021-02-11 13:18 - 2019-07-31 19:00 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-02-11 11:36 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-02-11 11:34 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2021-02-11 10:33 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-02-11 10:30 - 2017-09-28 15:27 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-02-11 10:24 - 2017-09-28 15:27 - 130141752 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-02-11 10:19 - 2020-06-07 23:17 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-02-11 10:19 - 2020-06-07 23:17 - 000003386 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-02-08 21:09 - 2017-09-26 17:30 - 000002314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-02-08 21:09 - 2017-09-26 17:30 - 000002273 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-02-08 16:18 - 2018-10-03 14:59 - 000000132 _____ C:\Users\arehi\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
2021-02-08 00:55 - 2019-07-31 19:00 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3116128971-596482846-236426390-1001
2021-02-08 00:55 - 2019-07-31 15:17 - 000002414 _____ C:\Users\arehi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-02-08 00:55 - 2017-09-26 17:14 - 000000000 ___RD C:\Users\arehi\OneDrive
2021-02-06 11:11 - 2020-06-07 23:18 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-02-06 11:04 - 2019-07-31 19:00 - 000003568 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-02-06 11:04 - 2019-07-31 19:00 - 000003444 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-02-04 00:33 - 2021-01-06 15:34 - 000001895 _____ C:\Users\Public\Desktop\Ledger Live.lnk
2021-02-04 00:33 - 2021-01-06 15:33 - 000000000 ____D C:\Program Files\Ledger Live
2021-02-04 00:27 - 2021-01-06 15:34 - 000000000 ____D C:\Users\arehi\AppData\Local\ledger-live-desktop-updater
2021-02-02 19:02 - 2016-11-16 11:43 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-01-27 19:41 - 2017-12-04 18:47 - 000000000 ____D C:\Users\arehi\AppData\Local\Packages
2021-01-26 10:51 - 2018-12-10 17:06 - 000000000 ____D C:\Users\arehi\AppData\Roaming\Zoom
2021-01-22 11:21 - 2017-11-26 15:19 - 000799104 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2021-01-20 13:48 - 2019-07-31 18:42 - 001770300 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-01-20 13:48 - 2019-03-19 13:23 - 000785768 _____ C:\WINDOWS\system32\perfh015.dat
2021-01-20 13:48 - 2019-03-19 13:23 - 000152530 _____ C:\WINDOWS\system32\perfc015.dat
2021-01-20 13:48 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF
2021-01-16 13:03 - 2019-07-31 15:17 - 000000000 ____D C:\Users\arehi
2021-01-15 11:10 - 2017-12-04 19:13 - 000000000 ___RD C:\Users\arehi\3D Objects
2021-01-15 11:10 - 2016-07-29 18:27 - 000000000 __RHD C:\Users\Public\AccountPictures
2021-01-15 11:02 - 2019-07-31 18:19 - 005117920 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-01-15 01:18 - 2019-03-19 05:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\system32\F12
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SystemResources
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\setup
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Com
2021-01-15 01:12 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2021-01-15 01:10 - 2019-03-19 13:25 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2021-01-15 01:10 - 2019-03-19 13:25 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2021-01-15 01:10 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-01-15 01:10 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-01-15 01:10 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-01-15 01:10 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\Provisioning
2021-01-15 01:10 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\IME
2021-01-15 01:10 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-01-15 01:10 - 2019-03-19 05:52 - 000000000 ____D C:\Program Files\Windows Defender
2021-01-14 18:55 - 2019-07-31 18:24 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2021-01-14 18:20 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2021-01-14 18:20 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Macromed
2021-01-14 18:03 - 2020-09-15 11:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2021-01-14 17:35 - 2018-06-20 12:11 - 000000000 ____D C:\Users\arehi\AppData\Local\D3DSCache
2021-01-13 21:15 - 2017-09-28 11:34 - 000000000 ____D C:\Users\arehi\AppData\Local\CrashDumps
==================== Pliki w katalogu głównym wybranych folderów ========
2018-10-03 14:59 - 2021-02-08 16:18 - 000000132 _____ () C:\Users\arehi\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
2018-05-17 19:21 - 2018-05-17 19:21 - 000000600 _____ () C:\Users\arehi\AppData\Roaming\PUTTY.RND
2018-05-17 15:52 - 2020-09-01 18:12 - 000000600 _____ () C:\Users\arehi\AppData\Local\PUTTY.RND
2017-10-08 15:32 - 2017-10-08 15:32 - 000000866 _____ () C:\Users\arehi\AppData\Local\recently-used.xbel
==================== SigCheck ============================
(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
==================== Koniec FRST.txt ========================