JustPaste.it

Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 22-04-2022
Uruchomiony przez ricardo (administrator)  LAPTOP-LSEPDIRG (HP HP Laptop 14s-dq2xxx) (25-04-2022 10:02:29)
Uruchomiony z C:\Users\rene5\Downloads
Załadowane profile: ricardo
Platform: Microsoft Windows 11 Home Wersja 21H2 22000.613 (X64) Język: Polski (Polska)
Domyślna przeglądarka: Edge
Tryb startu: Normal

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (SurfRight B.V. -> SurfRight B.V.) C:\Users\rene5\Downloads\HitmanPro_x64.exe
(C:\Program Files\WindowsApps\MicrosoftTeams_22082.402.1279.2578_x64__8wekyb3d8bbwe\msteams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\100.0.1185.50\msedgewebview2.exe <12>
(DriverStore\FileRepository\cui_dch.inf_amd64_231b3c70239bd54f\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_231b3c70239bd54f\igfxEMN.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.2.15.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <28>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_54a828a51f6769c8\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_86d9ab8950580d2e\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_86d9ab8950580d2e\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_86d9ab8950580d2e\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_86d9ab8950580d2e\x64\SysInfoCap.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_231b3c70239bd54f\igfxCUIServiceN.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_897ea327b3fe52f7\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_a5ea1b1d8db1527e\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_d11b96206a0caf0c\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_9dbfad2c6843c394\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_625d5a9ea859462f\AS\IAS\IntelAudioService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_844e1459fc4a4c84\RtkAudUService64.exe <3>
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(services.exe ->) (SurfRight B.V. -> SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(sihost.exe ->) (HP Inc.) C:\Program Files\WindowsApps\AD2F1837.myHP_1.10.53228.0_x64__v10z8vjag6ke6\win32\HPBackgroundProcess.exe
(sihost.exe ->) (INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3408.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(svchost.exe ->) (HP Inc.) C:\Program Files\WindowsApps\AD2F1837.myHP_1.10.53228.0_x64__v10z8vjag6ke6\HP.myHP.exe
(svchost.exe ->) (INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3408.0_x64__8j3eq9eme6ctt\IGCC.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\22.065.0412.0004\FileCoAuth.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2203.4603.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_421.20070.95.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_844e1459fc4a4c84\RtkAudUService64.exe [1363560 2021-10-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [168064 2022-03-29] (ESET, spol. s r.o. -> ESET)
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2630552 2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2630552 2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2027925086-1981343495-2514134964-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2630552 2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2027925086-1981343495-2514134964-1001\...\Run: [MicrosoftEdgeAutoLaunch_58F5DFEDE5E2E439BA3F99A9E0BA4702] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3540408 2022-04-21] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2027925086-1981343495-2514134964-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [36705520 2022-04-07] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\...\Print\Monitors\HP 8911 Status Monitor: C:\WINDOWS\system32\hpinksts8911LM.dll [332176 2012-09-12] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\100.0.4896.127\Installer\chrmstp.exe [2022-04-19] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 

==================== Zaplanowane zadania (filtrowane) ============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {08E6C016-A2BC-4E88-B973-3E76884F1E56} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2027925086-1981343495-2514134964-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4200848 2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {112D2703-96EF-41C5-9D85-AA345397A3ED} - System32\Tasks\MicrosoftEdgeShadowStackRollbackTask => C:\Program Files (x86)\Microsoft\Edge\Application\100.0.1185.50\Installer\setup.exe [3211712 2022-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {1537CB07-A14A-4ECD-A0C0-F659D5851C07} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {1553ECA4-E1A7-448F-A21A-C1BA2C73BF36} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4200848 2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {20D4B4D1-8C44-4C40-A891-92D5E48D452A} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138672 2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {35924E78-7B93-49D6-9243-DBA5048DA309} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [61336 2022-04-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {373090AE-BDED-4F47-8095-0080FFC175C9} - System32\Tasks\CCleanerSkipUAC - ricardo => C:\Program Files\CCleaner\CCleaner.exe [30836464 2022-04-07] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {5405EB58-F2A1-4CDC-ABC2-EAEAEB758128} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1145944 2022-03-28] (HP Inc. -> HP Inc.)
Task: {5580433D-679D-4F65-82F3-98DC0EE64279} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154456 2021-07-07] (Google LLC -> Google LLC)
Task: {57985A74-B011-44AD-B7FA-30AA686ECED1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1145944 2022-03-28] (HP Inc. -> HP Inc.)
Task: {586F10FD-A452-4CD3-8858-E1A71DCAD3F6} - System32\Tasks\HP\Consent Manager Launcher => sc start hptouchpointanalyticsservice
Task: {AB6F138D-B4ED-4DAF-8783-F775D63906CF} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-04-07] (Piriform Software Ltd -> Piriform)
Task: {AF16EBD5-10D2-4569-9E42-F73A623A44D5} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {AF552A73-03F7-4FB3-A4EC-1C6BF1C842B3} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22866856 2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {C7F5617C-F670-426F-BAFC-0A475E3063DF} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138672 2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {CC3D7F23-9FEB-427C-9FF4-9226FCA71862} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154456 2021-07-07] (Google LLC -> Google LLC)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (Brak pliku)
Task: {CD0B4301-8719-4ECA-B58A-F742721F6B3D} - System32\Tasks\HPCustParticipation HP Deskjet 1050 J410 series => C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPCustPartic.exe [4119200 2021-12-07] (HP Inc. -> Hewlett-Packard Co.)
Task: {E9F25A92-A134-4448-8F02-352C1D4D3662} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22866856 2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {EDFC19D0-15E8-4BF1-9D59-818ABC5B3E2F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2022-03-28] (HP Inc. -> HP Inc.)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)


==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 31.11.173.2 89.228.4.126
Tcpip\..\Interfaces\{7d5e878e-5a4f-4694-8080-19bb4022c90c}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{b91d5f56-df62-4830-9b3e-6749f408216f}: [DhcpNameServer] 31.11.173.2 89.228.4.126
Tcpip\..\Interfaces\{d499be69-f48b-4008-9d7e-9f2ccbd289c0}: [DhcpNameServer] 40.23.1.12

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\rene5\AppData\Local\Microsoft\Edge\User Data\Default [2022-04-25]
Edge Extension: (Tampermonkey) - C:\Users\rene5\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\iikmkjmpaadaobahmlepeloendndfphd [2022-04-16]
Edge Extension: (MeddleMonkey) - C:\Users\rene5\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jjhhlfimgcpiimapmpfdhlmfjaffngmh [2021-07-13]
Edge Extension: (uBlock Origin) - C:\Users\rene5\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\odfafepnkmbhccpbejgmiehpchacaeak [2022-04-08]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

FireFox:
========
FF DefaultProfile: zv24ye8o.default
FF ProfilePath: C:\Users\rene5\AppData\Roaming\Mozilla\Firefox\Profiles\zv24ye8o.default [2021-11-15]
FF ProfilePath: C:\Users\rene5\AppData\Roaming\Mozilla\Firefox\Profiles\o3pft74y.default-release-1650620346457 [2022-04-25]
FF Extension: (Disconnect) - C:\Users\rene5\AppData\Roaming\Mozilla\Firefox\Profiles\o3pft74y.default-release-1650620346457\Extensions\2.0@disconnect.me.xpi [2022-04-22]
FF Extension: (Tampermonkey) - C:\Users\rene5\AppData\Roaming\Mozilla\Firefox\Profiles\o3pft74y.default-release-1650620346457\Extensions\firefox@tampermonkey.net.xpi [2022-04-22]
FF Extension: (I don't care about cookies) - C:\Users\rene5\AppData\Roaming\Mozilla\Firefox\Profiles\o3pft74y.default-release-1650620346457\Extensions\jid1-KKzOGWgsW3Ao4Q@jetpack.xpi [2022-04-22]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-04-07] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-03-05] (Microsoft Corporation -> Microsoft Corporation)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2022-04-25]

Chrome: 
=======
CHR Profile: C:\Users\rene5\AppData\Local\Google\Chrome\User Data\Default [2022-04-25]
CHR Extension: (uBlock Origin) - C:\Users\rene5\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2022-04-11]
CHR Extension: (Tampermonkey) - C:\Users\rene5\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2022-04-18]
CHR Extension: (I don't care about cookies) - C:\Users\rene5\AppData\Local\Google\Chrome\User Data\Default\Extensions\fihnjjcciajhdojfnbdddfaoknhalnja [2022-03-22]
CHR Extension: (Dokumenty Google offline) - C:\Users\rene5\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-04-23]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\rene5\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-07-07]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11666384 2022-04-07] (Microsoft Corporation -> Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [3210720 2022-03-29] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [3210720 2022-03-29] (ESET, spol. s r.o. -> ESET)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.065.0412.0004\FileSyncHelper.exe [3395992 2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [151496 2022-04-25] (SurfRight B.V. -> SurfRight B.V.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_86d9ab8950580d2e\x64\AppHelperCap.exe [762888 2022-02-27] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_86d9ab8950580d2e\x64\DiagsCap.exe [760312 2022-02-27] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_86d9ab8950580d2e\x64\NetworkCap.exe [758280 2022-02-27] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [218272 2022-03-22] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_86d9ab8950580d2e\x64\SysInfoCap.exe [761376 2022-02-27] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_54a828a51f6769c8\x64\TouchpointAnalyticsClientService.exe [494672 2021-11-22] (HP Inc. -> HP Inc.)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_625d5a9ea859462f\\AS\\IAS\\IntelAudioService.exe [532648 2021-11-30] (Intel Corporation -> Intel)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.065.0412.0004\OneDriveUpdaterService.exe [3868568 2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\NisSrv.exe [2644776 2021-07-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MsMpEng.exe [136656 2021-07-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [135296 2020-07-16] (Alcorlink Corp. -> )
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [180224 2021-06-05] (Microsoft Corporation) [Brak podpisu cyfrowego]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [183888 2022-03-29] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15824 2021-06-21] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [226264 2022-03-29] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [111624 2022-03-29] (ESET, spol. s r.o. -> ESET)
S3 GSCAuxDriver; C:\WINDOWS\System32\DriverStore\FileRepository\gscauxdriver.inf_amd64_fe9355c6b52fb409\GSCAuxDriverx64.sys [71432 2020-11-16] (Intel(R) pGFX 2020 -> Intel Corporation)
S3 GSCx64; C:\WINDOWS\System32\DriverStore\FileRepository\gscheci.inf_amd64_e0a6bd87d5543f55\TeeDriverGSCW8x64.sys [243976 2020-11-16] (Intel(R) pGFX 2020 -> Intel Corporation)
R3 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [40976 2022-04-25] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [25592 2021-09-16] (HP Inc. -> HP Inc.)
S3 Hsp; C:\WINDOWS\System32\drivers\Hsp.sys [110904 2022-02-09] (Microsoft Windows -> Microsoft Corporation)
R3 iaLPSS2_GPIO2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_tgl.inf_amd64_2546dafe2183e972\iaLPSS2_GPIO2_TGL.sys [131224 2021-07-19] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_tgl.inf_amd64_1308f85f1b0adf27\iaLPSS2_I2C_TGL.sys [204440 2021-07-19] (Intel Corporation -> Intel Corporation)
R0 iaStorVD; C:\WINDOWS\System32\drivers\iaStorVD.sys [1544912 2021-08-26] (Intel Corporation -> Intel Corporation)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_2f4c83f014ffdaee\IntcUSB.sys [882848 2021-11-30] (Intel Corporation -> Intel(R) Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_19ceb7ce67a7cf8b\gna.sys [87200 2022-01-11] (Intel Corporation -> Intel Corporation)
S3 ManyCam; C:\WINDOWS\system32\DRIVERS\mcvidrv.sys [66952 2018-07-30] (ManyCam (VISICOM MÉDIA INC.) -> Visicom Media Inc.)
S3 mcaudrv_simple; C:\WINDOWS\system32\drivers\mcaudrv_x64.sys [35960 2014-12-29] (ManyCam -> Visicom Media Inc.)
S3 scsiscan; C:\WINDOWS\system32\DRIVERS\scsiscan.sys [53248 2021-06-05] (Microsoft Windows -> Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49568 2021-07-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [425184 2021-07-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [76000 2021-07-07] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [37280 2021-11-23] (HP Inc. -> HP)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2022-04-25 10:01 - 2022-04-25 10:02 - 000033180 _____ C:\Users\rene5\Downloads\Addition.txt
2022-04-25 10:00 - 2022-04-25 10:02 - 000023298 _____ C:\Users\rene5\Downloads\FRST.txt
2022-04-25 10:00 - 2022-04-25 10:02 - 000000000 ____D C:\FRST
2022-04-25 09:59 - 2022-04-25 09:59 - 002366976 _____ (Farbar) C:\Users\rene5\Downloads\FRST64.exe
2022-04-25 09:53 - 2022-04-25 09:53 - 000040976 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys
2022-04-25 09:53 - 2022-04-25 09:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2022-04-25 09:53 - 2022-04-25 09:53 - 000000000 ____D C:\ProgramData\HitmanPro
2022-04-25 09:53 - 2022-04-25 09:53 - 000000000 ____D C:\Program Files\HitmanPro
2022-04-25 09:52 - 2022-04-25 09:52 - 014239168 _____ (SurfRight B.V.) C:\Users\rene5\Downloads\HitmanPro_x64.exe
2022-04-25 08:02 - 2022-04-25 08:03 - 000000000 ____D C:\Users\rene5\OneDrive\Dokumenty\vectra
2022-04-24 13:54 - 2022-04-24 13:54 - 000000000 ____D C:\Intel
2022-04-21 18:14 - 2022-04-21 18:15 - 000000000 ____D C:\Users\rene5\OneDrive\Dokumenty\zdjecia czajka
2022-04-21 18:12 - 2022-04-25 08:02 - 000000000 ____D C:\Users\rene5\OneDrive\Dokumenty\zdjecia 21.04.22. bus
2022-04-21 18:11 - 2022-04-21 18:12 - 000000000 ____D C:\Users\rene5\OneDrive\Dokumenty\zdjecia z babka i dzieciństwa
2022-04-21 17:10 - 2022-02-15 00:59 - 000512184 _____ (Intel) C:\WINDOWS\system32\libvpl.dll
2022-04-21 17:10 - 2022-02-15 00:59 - 000444416 _____ (Intel) C:\WINDOWS\SysWOW64\libvpl.dll
2022-04-21 17:10 - 2022-02-15 00:58 - 000960320 _____ (Intel Corporation) C:\WINDOWS\system32\libmfxhw64.dll
2022-04-21 17:10 - 2022-02-15 00:58 - 000719048 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\libmfxhw32.dll
2022-04-21 17:10 - 2022-02-15 00:58 - 000049152 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2022-04-21 17:10 - 2022-02-15 00:58 - 000046488 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2022-04-21 17:10 - 2022-02-15 00:56 - 027897712 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll
2022-04-21 17:10 - 2022-02-15 00:56 - 020640136 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll
2022-04-21 17:10 - 2022-02-15 00:56 - 001871424 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2022-04-21 17:10 - 2022-02-15 00:56 - 001871424 _____ C:\WINDOWS\system32\vulkaninfo.exe
2022-04-21 17:10 - 2022-02-15 00:56 - 001451064 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2022-04-21 17:10 - 2022-02-15 00:56 - 001451064 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2022-04-21 17:10 - 2022-02-15 00:56 - 001116752 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2022-04-21 17:10 - 2022-02-15 00:56 - 001116752 _____ C:\WINDOWS\system32\vulkan-1.dll
2022-04-21 17:10 - 2022-02-15 00:56 - 000970320 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2022-04-21 17:10 - 2022-02-15 00:56 - 000970320 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2022-04-21 17:10 - 2022-02-15 00:56 - 000460152 _____ C:\WINDOWS\system32\ze_tracing_layer.dll
2022-04-21 17:10 - 2022-02-15 00:56 - 000379216 _____ C:\WINDOWS\system32\ze_loader.dll
2022-04-21 17:10 - 2022-02-15 00:56 - 000149856 _____ C:\WINDOWS\system32\ze_validation_layer.dll
2022-04-21 17:10 - 2022-02-15 00:55 - 000316592 _____ C:\WINDOWS\system32\ControlLib.dll
2022-04-13 16:12 - 2022-04-13 16:12 - 000015192 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-04-13 16:10 - 2022-04-13 16:10 - 000000000 ___HD C:\$WinREAgent
2022-04-13 09:23 - 2022-04-13 17:00 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-03-29 09:54 - 2022-03-29 09:54 - 002550832 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2022-03-29 09:54 - 2022-03-29 09:54 - 002080992 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2022-03-29 09:54 - 2022-03-29 09:54 - 000372736 _____ C:\WINDOWS\system32\hwreqchk.dll
2022-03-29 09:54 - 2022-03-29 09:54 - 000069632 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2022-03-29 09:54 - 2022-03-29 09:54 - 000032768 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2022-04-25 09:53 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2022-04-25 08:44 - 2021-06-05 14:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-04-25 08:15 - 2021-07-07 16:18 - 000000000 ____D C:\Program Files\CCleaner
2022-04-25 08:13 - 2021-02-23 23:42 - 000000000 ____D C:\Users\rene5\AppData\Local\D3DSCache
2022-04-25 07:59 - 2022-02-08 16:54 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-04-25 07:58 - 2021-07-07 15:36 - 000000000 ____D C:\Users\rene5\AppData\LocalLow\Mozilla
2022-04-25 07:41 - 2021-10-21 09:11 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-04-25 06:33 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-04-25 06:29 - 2021-10-21 09:14 - 000004230 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{55DE80A0-7A7B-4E92-9922-972CA8F1405A}
2022-04-25 06:23 - 2021-07-07 14:13 - 000000000 ___RD C:\Users\rene5\OneDrive
2022-04-24 14:01 - 2021-10-21 09:13 - 001813646 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-04-24 14:01 - 2021-06-05 19:35 - 000800144 _____ C:\WINDOWS\system32\perfh015.dat
2022-04-24 14:01 - 2021-06-05 19:35 - 000169186 _____ C:\WINDOWS\system32\perfc015.dat
2022-04-24 14:01 - 2021-06-05 14:09 - 000000000 ____D C:\WINDOWS\INF
2022-04-24 13:54 - 2021-10-21 09:14 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-04-24 13:54 - 2021-06-05 14:10 - 000000000 ___HD C:\Program Files\WindowsApps
2022-04-24 13:54 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\ServiceState
2022-04-24 13:54 - 2021-06-05 14:01 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-04-24 13:54 - 2020-05-06 10:58 - 000012288 ___SH C:\DumpStack.log.tmp
2022-04-24 11:43 - 2021-07-13 14:50 - 000000000 ____D C:\ProgramData\Glarysoft
2022-04-24 11:43 - 2021-07-13 14:49 - 000000000 ____D C:\Users\rene5\AppData\Roaming\GlarySoft
2022-04-24 09:17 - 2021-07-11 13:13 - 000000000 ____D C:\Users\rene5\OneDrive\Dokumenty\jakies pismo
2022-04-24 09:14 - 2022-02-09 09:57 - 000000000 ____D C:\Users\rene5\OneDrive\Dokumenty\wszystkie dokumenty
2022-04-23 07:49 - 2021-02-23 23:42 - 000000000 ____D C:\Users\rene5\AppData\Local\Packages
2022-04-23 07:49 - 2021-02-23 22:54 - 000000000 ____D C:\ProgramData\Packages
2022-04-23 06:44 - 2021-10-21 09:14 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-04-22 16:59 - 2022-02-06 08:51 - 000000000 ____D C:\Users\rene5\OneDrive\Dokumenty\wojsko
2022-04-22 11:39 - 2021-10-21 09:14 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-04-22 07:03 - 2021-11-20 08:40 - 000004784 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeShadowStackRollbackTask
2022-04-22 07:03 - 2020-12-01 07:35 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-04-21 18:15 - 2021-11-07 10:22 - 000000000 ____D C:\Users\rene5\OneDrive\Dokumenty\zdjecia n-k
2022-04-19 16:33 - 2021-09-04 12:35 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-04-19 14:59 - 2021-12-12 08:30 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2027925086-1981343495-2514134964-1001
2022-04-19 14:59 - 2021-10-21 09:14 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-04-19 14:59 - 2021-09-04 12:35 - 000002183 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-04-19 12:20 - 2020-12-01 07:43 - 000000000 ____D C:\Program Files\Microsoft Office
2022-04-19 11:46 - 2021-07-07 15:45 - 000002260 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-04-13 17:00 - 2021-10-21 09:11 - 000625184 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-04-13 17:00 - 2021-07-07 15:36 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-04-13 16:59 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SystemResources
2022-04-13 16:59 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-04-13 16:14 - 2021-07-07 16:38 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-04-13 16:13 - 2021-07-07 16:38 - 143823848 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-04-13 16:13 - 2021-06-05 14:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-04-13 16:12 - 2021-10-21 09:13 - 003102208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-04-13 09:24 - 2021-07-07 15:36 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-04-10 16:59 - 2021-08-15 08:46 - 000000000 ____D C:\Users\rene5\AppData\Local\CrashDumps
2022-04-08 06:10 - 2021-10-21 09:14 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2022-04-06 07:57 - 2021-11-17 09:06 - 000003416 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d7c64aed957ad8
2022-04-06 07:57 - 2021-10-21 09:14 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-04-05 08:56 - 2021-07-07 16:39 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-04-02 15:27 - 2021-07-08 12:43 - 000000000 ____D C:\Users\rene5\AppData\Roaming\Hewlett-Packard
2022-04-02 13:35 - 2021-06-05 14:10 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-03-30 17:41 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\NDF
2022-03-29 15:46 - 2021-06-25 13:01 - 000226264 _____ (ESET) C:\WINDOWS\system32\Drivers\ehdrv.sys
2022-03-29 15:46 - 2021-06-25 13:01 - 000183888 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys
2022-03-29 15:46 - 2021-06-25 13:01 - 000111624 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwwfp.sys
2022-03-29 10:02 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2022-03-29 10:02 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2022-03-29 10:01 - 2021-06-05 14:10 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-03-29 10:01 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2022-03-29 10:01 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-03-29 10:01 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2022-03-29 10:01 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-03-29 10:01 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-03-29 10:01 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\DiagTrack

==================== Pliki w katalogu głównym wybranych folderów ========

2022-02-21 17:18 - 2022-02-25 10:19 - 000007602 _____ () C:\Users\rene5\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

==================== Koniec  FRST.txt ========================