Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 13-12-2020 Uruchomiony przez Patryśka (administrator) LENOVOZ500 (LENOVO 20202) (13-12-2020 23:54:40) Uruchomiony z C:\Users\Patryśka\Downloads Załadowane profile: Patryśka Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska) Domyślna przeglądarka: Chrome Tryb startu: Normal ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (ABBYY Production LLC -> ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\AvastBrowserCrashHandler.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\AvastBrowserCrashHandler64.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <3> (Bluestack Systems, Inc. -> BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe (Bluestack Systems, Inc. -> BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe (Ghisler Software GmbH -> Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <25> (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler64.exe (Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Hewlett-Packard Company -> HP) C:\Windows\System32\HPSIsvc.exe (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (HP) [Brak podpisu cyfrowego] C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (HUAWEI Technologies Co., Ltd. -> ) C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe (HUAWEI Technologies Co., Ltd. -> Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) [Brak podpisu cyfrowego] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) [Brak podpisu cyfrowego] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel Corporation-Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Intel® Upgrade Service -> Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Lenovo (Beijing) Limited -> Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited -> Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Malwarebytes Inc -> Malwarebytes) C:\Users\Patryśka\Downloads\adwcleaner_8.0.8.exe (Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\StikyNot.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\taskmgr.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2> (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Protexis Inc. -> Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8079408 2013-02-15] (Lenovo (Beijing) Limited -> Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [6202416 2013-02-15] (Lenovo (Beijing) Limited -> Lenovo(beijing) Limited) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [117344 2020-11-21] (Avast Software s.r.o. -> AVAST Software) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [277504 2012-07-09] (Intel Corporation) [Brak podpisu cyfrowego] HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle America, Inc. -> Oracle Corporation) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\Run: [Dropbox Update] => C:\Users\Patryśka\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-06] (Dropbox, Inc -> Dropbox, Inc.) HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\Run: [AvastBrowserAutoLaunch_12F449A4D4548DE93182FFD564F090D8] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1933408 2020-11-13] (Avast Software s.r.o. -> AVAST Software) HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\RunOnce: [Uninstall C:\Users\Patryśka\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Patryśka\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64" HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\MountPoints2: F - F:\AutoRun.exe HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\MountPoints2: {251837b7-0c86-11e4-b968-681729495a15} - F:\AutoRun.exe HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\MountPoints2: {25183b53-0c86-11e4-b968-681729495a15} - F:\AutoRun.exe HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\MountPoints2: {25183c44-0c86-11e4-b968-681729495a15} - F:\AutoRun.exe HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\MountPoints2: {25183c4f-0c86-11e4-b968-681729495a15} - F:\AutoRun.exe HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\MountPoints2: {26f715a6-658b-11e4-a613-681729495a15} - F:\AutoRun.exe HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\MountPoints2: {3b263c9c-6bcd-11e3-92a4-681729495a15} - F:\AutoRun.exe HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\MountPoints2: {3b263ca9-6bcd-11e3-92a4-681729495a15} - F:\AutoRun.exe HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\MountPoints2: {9beae754-79fe-11e3-99c2-681729495a15} - F:\AutoRun.exe HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\MountPoints2: {cb9439ab-8ec1-11e6-82a3-681729495a11} - F:\AutoRun.exe HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\MountPoints2: {cb9439ba-8ec1-11e6-82a3-681729495a11} - F:\AutoRun.exe HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\MountPoints2: {cb9439de-8ec1-11e6-82a3-208984919c12} - F:\AutoRun.exe HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\MountPoints2: {e8e99e3a-199f-11e4-ad55-681729495a15} - F:\AutoRun.exe HKU\S-1-5-21-677061836-3364183359-1661412230-1001\...\MountPoints2: {f645d382-7073-11e6-a166-806e6f6e6963} - F:\AutoRun.exe HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-10-16] (Microsoft Windows -> Microsoft Corporation) HKLM\...\Windows x64\Print Processors\Canon MG5600 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCA.DLL [30208 2014-03-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Windows x64\Print Processors\HP1100PrintProc: C:\Windows\System32\spool\prtprocs\x64\HP1100PP.DLL [74240 2012-08-31] (Microsoft Windows Hardware Compatibility Publisher -> ) HKLM\...\Print\Monitors\Advanced TCP/IP Port Monitor: C:\Windows\system32\mvtcpmon.dll [541184 2009-06-25] (Marvell Semiconductor, Inc.) [Brak podpisu cyfrowego] HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5600 series: C:\Windows\system32\CNMLMCA.DLL [406016 2014-03-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\HP C211 Status Monitor: C:\Windows\system32\hpinkstsC211LM.dll [333496 2013-01-08] (Hewlett Packard -> Hewlett-Packard Co.) HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 2540 series): C:\Windows\system32\HPDiscoPMC211.dll [763912 2014-03-06] (Hewlett Packard -> Hewlett-Packard Co.) HKLM\...\Print\Monitors\HP1100LM: C:\Windows\system32\HP1100LM.DLL [288768 2012-08-31] (Microsoft Windows Hardware Compatibility Publisher -> ) HKLM\...\Print\Monitors\pdfcmon: C:\Windows\system32\pdfcmon.dll [116224 2017-04-28] (pdfforge GmbH) [Brak podpisu cyfrowego] HKLM\...\Print\Monitors\PDFMaker Port: C:\Windows\system32\pdflocalmon.dll [29696 2013-03-27] (Copyright (c) Code Industry Ltd) [Brak podpisu cyfrowego] HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\87.0.4280.88\Installer\chrmstp.exe [2020-12-10] (Google LLC -> Google LLC) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\86.1.6960.198\Installer\chrmstp.exe [2020-11-24] (Avast Software s.r.o. -> AVAST Software) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2012-07-17] (Microsoft Corporation -> Microsoft Corp.) HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA ==================== Zaplanowane zadania (filtrowane) ============ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {03888B65-BB8B-4FC5-AA81-E124C569D152} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [972176 2020-05-12] (Microsoft Corporation -> Microsoft Corporation) Task: {082F0D79-2696-48CB-B1EC-BF7589663733} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1933408 2020-11-13] (Avast Software s.r.o. -> AVAST Software) Task: {10C8C3D9-1B1F-49C5-B839-5D5E19C7234F} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-677061836-3364183359-1661412230-1001UA => C:\Users\Patryśka\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-06] (Dropbox, Inc -> Dropbox, Inc.) Task: {18FFCB98-160D-481B-988A-033B23718E69} - System32\Tasks\HPCustParticipation HP Deskjet 2540 series => C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPCustPartic.exe [5745672 2014-03-06] (Hewlett Packard -> Hewlett-Packard Co.) Task: {2AF1CA3E-637E-4B33-9E60-53D98C45FC0D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe Task: {357FA601-7856-4EB9-AEB7-16DCE5F27EC8} - System32\Tasks\{94D323D5-27F4-403B-AD87-A0BD364C1676} => C:\Users\Patryśka\Downloads\Menadżer Żużlowy v. 3.1\zuzel.EXE Task: {35A16CEB-1871-466C-A456-25D8CFFCE990} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - resources updates => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.) Task: {36A63A09-2FD1-4DEA-9F45-ACB5CCB5C733} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe Task: {49BABBDD-8341-47A6-B344-153A4F207C54} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-677061836-3364183359-1661412230-1001Core => C:\Users\Patryśka\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-06] (Dropbox, Inc -> Dropbox, Inc.) Task: {5040AA42-7784-46BD-837A-CDD1B498CC82} - System32\Tasks\♥ => C:\Users\Patryśka\Pictures\styczeń 16, 2015.mp4 [91246748 2015-01-16] () [Brak podpisu cyfrowego] Task: {59AB6B3C-874C-474B-B5E5-A00746AF880A} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1741416 2020-09-18] (Avast Software s.r.o. -> Avast Software) Task: {665C6235-55E7-4AD6-82FB-95514C1FC95D} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1} Task: {67FC2F9B-FCB1-4B45-9B5B-EC46F7A2D603} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe Task: {6A005C4B-CA28-4067-BCE7-8D86C8049B56} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-10-26] (Avast Software s.r.o. -> AVAST Software) Task: {6BEEC002-1FF2-4973-9BCA-F10FA525BA7A} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe Task: {7293D3CA-ED14-424A-8DBA-4D95BC096091} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe Task: {7F733C2F-7398-4FD1-8DCE-E4543871EECD} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [4617832 2020-11-21] (Avast Software s.r.o. -> AVAST Software) Task: {8DF43570-2C1F-4D20-9F22-C81386A84085} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.) Task: {9FAD28F6-B595-4ACE-90E7-E7A4D16F1FE1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1349200 2020-11-03] (Adobe Inc. -> Adobe Inc.) Task: {A0DA86A4-BFA9-443F-826E-5F4D6BF46A7B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.) Task: {A354454C-697F-4AF1-A492-98BAB05CBFA6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.) Task: {AF73F250-AF56-4859-8D8C-3ED04189B774} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-10-26] (Avast Software s.r.o. -> AVAST Software) Task: {D19CBA1D-7D5E-408F-888B-5C0FDBCCCEBA} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1933408 2020-11-13] (Avast Software s.r.o. -> AVAST Software) Task: {D8AC9245-4EE0-430D-B324-D0E619272C52} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [972176 2020-05-12] (Microsoft Corporation -> Microsoft Corporation) Task: {E8C6A882-EBD2-4E01-A9F9-01FBAC946916} - System32\Tasks\AdobeAAMUpdater-1.0-LenovoZ500-Patryśka => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated -> Adobe Systems Incorporated) Task: {F1AA65FE-461D-4AB4-B965-486B49E9E32C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [135000 2020-06-22] (HP Inc. -> HP Inc.) Task: {FC3F7EF0-E9A3-40F0-91FD-71B67426233E} - System32\Tasks\{AFDA0375-888C-4A9A-ACD8-30E85E852406} => C:\Users\Patryśka\Downloads\Menadżer Żużlowy v. 3.1\zuzel.EXE Task: {FE364848-9F78-4554-9442-D63C0AA1439F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-677061836-3364183359-1661412230-1001Core.job => C:\Users\Patryśka\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-677061836-3364183359-1661412230-1001UA.job => C:\Users\Patryśka\AppData\Local\Dropbox\Update\DropboxUpdate.exe ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648 2012-07-17] (Microsoft Corporation -> Microsoft Corp.) Winsock: Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648 2012-07-17] (Microsoft Corporation -> Microsoft Corp.) Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171760 2012-07-17] (Microsoft Corporation -> Microsoft Corp.) Winsock: Catalog5-x64 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171760 2012-07-17] (Microsoft Corporation -> Microsoft Corp.) Tcpip\Parameters: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{08D1C531-F2EB-464A-9C7D-6824D54F4FCB}: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{1DD54CC6-628D-42B6-A2E6-9A85E9AACA9E}: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF DefaultProfile: 6zxfxwz9.default-1402613342367 FF ProfilePath: C:\Users\Patryśka\AppData\Roaming\Mozilla\Firefox\Profiles\6zxfxwz9.default-1402613342367 [2020-06-21] FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension => nie znaleziono FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @ganymede/GanymedeNetPlugin,version=1.0 -> C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll [2013-07-15] (Ganymede Sp. z o.o. -> ) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-01-20] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-01-20] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-10-14] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [2020-10-26] (Avast Software s.r.o. -> AVAST Software) FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [2020-10-26] (Avast Software s.r.o. -> AVAST Software) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-11-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-677061836-3364183359-1661412230-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\Patryśka\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2020-04-04] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\Patryśka\AppData\Local\Google\Chrome\User Data\Default [2020-12-13] CHR HomePage: Default -> hxxp://www.search.ask.com/?o=APN10641A&gct=hp&d=2-0&v=n10354-172&t=4 CHR StartupUrls: Default -> "hxxp://www.search.ask.com/?o=APN10641A&gct=hp&d=2-0&v=n10354-172&t=4" CHR NewTab: Default -> Not-active:"chrome-extension://oogmkbpkoblajkomflhkkdmbfggdmefd/inicio.html" CHR Extension: (Adblock Plus - darmowy adblocker) - C:\Users\Patryśka\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2020-11-17] CHR Extension: (Avast Passwords) - C:\Users\Patryśka\AppData\Local\Google\Chrome\User Data\Default\Extensions\emhginjpijfggbofeediiojmdlmlkoik [2020-04-19] CHR Extension: (Google Kalendarz) - C:\Users\Patryśka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbgaklkmjakoegficnlkhebmhkjfich [2020-06-21] CHR Extension: (Avast Online Security) - C:\Users\Patryśka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-06-30] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Patryśka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-13] CHR Extension: (new metroTab) - C:\Users\Patryśka\AppData\Local\Google\Chrome\User Data\Default\Extensions\oogmkbpkoblajkomflhkkdmbfggdmefd [2015-06-09] CHR Extension: (Chrome Media Router) - C:\Users\Patryśka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-12-13] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 ABBYY.Licensing.FineReader.Professional.12.0; C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe [925904 2014-01-23] (ABBYY Production LLC -> ABBYY Production LLC) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [170056 2020-11-03] (Adobe Inc. -> Adobe Inc.) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [8454552 2020-11-21] (Avast Software s.r.o. -> AVAST Software) S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-10-26] (Avast Software s.r.o. -> AVAST Software) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [365648 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [3096160 2020-11-21] (Avast Software s.r.o. -> AVAST Software) S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-10-26] (Avast Software s.r.o. -> AVAST Software) S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\86.1.6960.198\elevation_service.exe [1136920 2020-11-13] (Avast Software s.r.o. -> AVAST Software) S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2014-03-06] (Bluestack Systems, Inc. -> BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2014-03-06] (Bluestack Systems, Inc. -> BlueStack Systems, Inc.) R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [770832 2014-03-06] (Bluestack Systems, Inc. -> BlueStack Systems, Inc.) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3052944 2020-07-14] (Microsoft Corporation -> Microsoft Corporation) R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [136704 2009-06-24] (HP) [Brak podpisu cyfrowego] R2 HPSIService; C:\Windows\system32\HPSIsvc.exe [126880 2012-09-27] (Hewlett-Packard Company -> HP) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736 2020-08-20] (HP Inc. -> HP Inc.) S2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] (HUAWEI Technologies Co., Ltd. -> ) R2 IAStorDataMgrSvc; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [7168 2012-07-09] (Intel Corporation) [Brak podpisu cyfrowego] S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2011-06-17] (HUAWEI Technologies Co., Ltd. -> ) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-03-03] (Even Balance, Inc. -> ) S3 Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [155520 2015-06-10] (Sony Mobile Communications AB -> Avanquest Software) [Brak podpisu cyfrowego] S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Brak podpisu cyfrowego] S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation) R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292480 2012-07-17] (Microsoft Corporation -> Microsoft Corp.) ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 androidusb; C:\Windows\System32\Drivers\ssadadb.sys [36328 2011-05-13] (MCCI Internal Testing Software -> Google Inc) R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37152 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [206408 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [332368 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [247888 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [97352 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42784 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R1 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [176744 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R1 aswNetHub; C:\Windows\System32\drivers\aswNetHub.sys [521752 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [38152 2020-04-16] (AVAST Software s.r.o. -> AVAST Software) R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [109280 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84856 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [851608 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [469832 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [217336 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [326416 2020-11-21] (Avast Software s.r.o. -> AVAST Software) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [121616 2014-03-06] (Bluestack Systems, Inc. -> BlueStack Systems) R3 clwvd; C:\Windows\System32\DRIVERS\clwvd.sys [31088 2010-12-05] (CyberLink -> CyberLink Corporation) S3 ewusbmbb; C:\Windows\System32\DRIVERS\ewusbwwan.sys [451072 2012-09-14] (Huawei Technologies Co., Ltd.) [Brak podpisu cyfrowego] S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [30424 2014-12-17] (Sony Mobile Communications AB -> Sony Mobile Communications) S3 IntcDAud; C:\Windows\System32\DRIVERS\IntcDAud.sys [342528 2012-06-19] (Intel(R) Corporation) [Brak podpisu cyfrowego] S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [113280 2013-10-20] (Microsoft Windows Hardware Compatibility Publisher -> ITE) S3 nmwcdnsux64; C:\Windows\System32\drivers\nmwcdnsux64.sys [171008 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia) S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Research In Motion Limited) R3 tapnordvpn; C:\Windows\System32\DRIVERS\tapnordvpn.sys [35592 2018-06-06] (TEFINCOM S.A. -> The OpenVPN Project) S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X] S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X] S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X] S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X] S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [X] S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [X] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2020-12-13 23:56 - 2020-12-13 23:56 - 000055122 _____ C:\Users\Patryśka\Downloads\Addition.txt 2020-12-13 23:54 - 2020-12-13 23:55 - 000033947 _____ C:\Users\Patryśka\Downloads\FRST.txt 2020-12-13 23:54 - 2020-12-13 23:54 - 002286592 _____ (Farbar) C:\Users\Patryśka\Downloads\FRST64.exe 2020-12-13 23:54 - 2020-12-13 23:54 - 000000000 ____D C:\Users\Patryśka\Downloads\FRST-OlderVersion 2020-12-13 23:27 - 2020-12-13 23:27 - 001193016 _____ (Akeo Consulting) C:\Users\Patryśka\Downloads\rufus-3.9p.exe 2020-12-13 23:26 - 2020-12-13 23:27 - 003948424 _____ (Hut ) C:\Users\Patryśka\Downloads\Rufus-41921-AsystentPobierania_2637672452.exe 2020-12-13 18:00 - 2020-12-13 22:17 - 000000000 ____D C:\Users\Patryśka\AppData\LocalLow\IGDump 2020-12-13 17:55 - 2020-12-13 17:55 - 000000000 ____D C:\Users\Patryśka\AppData\Local\mbam 2020-12-13 17:54 - 2020-12-13 17:54 - 000000000 ____D C:\ProgramData\Malwarebytes 2020-12-13 17:54 - 2020-12-13 17:54 - 000000000 ____D C:\Program Files\Malwarebytes 2020-12-13 17:52 - 2020-12-13 17:53 - 194256440 _____ (Malwarebytes) C:\Users\Patryśka\Downloads\mb4-setup-consumer-4.3.0.206-1.0.1130-1.0.34127.exe 2020-12-13 17:46 - 2020-12-13 17:51 - 000229940 _____ C:\TDSSKiller.3.1.0.28_13.12.2020_17.46.34_log.txt 2020-12-13 17:46 - 2020-12-13 17:46 - 005054744 _____ (AO Kaspersky Lab) C:\Users\Patryśka\Downloads\tdsskiller.exe 2020-12-13 17:43 - 2020-12-13 17:44 - 000002236 _____ C:\Users\Patryśka\Desktop\Rkill.txt 2020-12-13 17:43 - 2020-12-13 17:43 - 008447152 _____ (Malwarebytes) C:\Users\Patryśka\Downloads\adwcleaner_8.0.8.exe 2020-12-13 17:41 - 2020-12-13 17:41 - 001802704 _____ (Bleeping Computer, LLC) C:\Users\Patryśka\Downloads\rkill.exe 2020-12-13 17:34 - 2020-12-13 17:34 - 000602112 _____ (OldTimer Tools) C:\Users\Patryśka\Downloads\OTL (1).exe 2020-12-10 20:02 - 2020-12-10 20:02 - 000000000 ____D C:\Users\Patryśka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2020-11-21 16:39 - 2020-11-21 16:38 - 000339552 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2020-11-21 16:39 - 2020-11-21 16:38 - 000217336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2020-12-13 23:55 - 2015-10-21 14:29 - 000000000 ____D C:\FRST 2020-12-13 23:48 - 2014-06-13 00:01 - 000104648 _____ C:\Users\Patryśka\Downloads\OTL.Txt 2020-12-13 23:35 - 2009-07-14 05:45 - 000015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2020-12-13 23:35 - 2009-07-14 05:45 - 000015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2020-12-13 23:27 - 2018-01-20 22:00 - 000000000 ____D C:\Users\Patryśka\AppData\Local\AVAST Software 2020-12-13 23:12 - 2015-07-17 08:55 - 000001174 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-677061836-3364183359-1661412230-1001UA.job 2020-12-13 23:05 - 2013-10-14 20:25 - 000000000 ____D C:\ProgramData\AVAST Software 2020-12-13 22:59 - 2009-07-14 18:55 - 000741386 _____ C:\Windows\system32\perfh015.dat 2020-12-13 22:59 - 2009-07-14 18:55 - 000156426 _____ C:\Windows\system32\perfc015.dat 2020-12-13 22:59 - 2009-07-14 06:13 - 001672612 _____ C:\Windows\system32\PerfStringBackup.INI 2020-12-13 22:59 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf 2020-12-13 22:54 - 2018-04-19 19:21 - 000065536 _____ C:\Windows\system32\Ikeext.etl 2020-12-13 22:53 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2020-12-13 22:50 - 2016-03-30 21:51 - 000000000 ____D C:\Users\Patryśka\AppData\Roaming\Hewlett-Packard 2020-12-13 22:50 - 2016-03-30 21:28 - 000000000 ____D C:\Users\Patryśka\AppData\Local\Hewlett-Packard 2020-12-13 22:50 - 2015-01-16 12:04 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard 2020-12-13 22:50 - 2013-10-17 15:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2020-12-13 22:49 - 2013-02-15 18:10 - 000000000 ____D C:\Program Files (x86)\Lenovo 2020-12-13 22:47 - 2015-10-21 14:29 - 000000000 ____D C:\AdwCleaner 2020-12-13 22:44 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\tracing 2020-12-13 22:40 - 2013-10-14 19:13 - 000000000 ____D C:\Windows\SysWOW64\Macromed 2020-12-13 22:40 - 2013-10-14 19:13 - 000000000 ____D C:\Windows\system32\Macromed 2020-12-13 19:12 - 2015-07-17 08:55 - 000001122 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-677061836-3364183359-1661412230-1001Core.job 2020-12-13 17:20 - 2018-07-10 16:52 - 000002998 _____ C:\Windows\system32\Tasks\{AFDA0375-888C-4A9A-ACD8-30E85E852406} 2020-12-13 17:20 - 2018-07-10 16:52 - 000002998 _____ C:\Windows\system32\Tasks\{94D323D5-27F4-403B-AD87-A0BD364C1676} 2020-12-13 17:20 - 2017-12-17 21:25 - 000004476 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task 2020-12-13 17:20 - 2015-12-06 01:46 - 000000000 ____D C:\Windows\system32\Tasks\AVAST Software 2020-12-13 17:20 - 2015-07-17 08:55 - 000004160 _____ C:\Windows\system32\Tasks\DropboxUpdateTaskUserS-1-5-21-677061836-3364183359-1661412230-1001UA 2020-12-13 17:20 - 2015-07-17 08:55 - 000003764 _____ C:\Windows\system32\Tasks\DropboxUpdateTaskUserS-1-5-21-677061836-3364183359-1661412230-1001Core 2020-12-13 17:20 - 2015-01-17 15:59 - 000003120 _____ C:\Windows\system32\Tasks\♥ 2020-12-13 17:20 - 2015-01-16 12:04 - 000003630 _____ C:\Windows\system32\Tasks\HPCustParticipation HP Deskjet 2540 series 2020-12-13 17:20 - 2013-10-28 21:05 - 000003512 _____ C:\Windows\system32\Tasks\AdobeAAMUpdater-1.0-LenovoZ500-Patryśka 2020-12-13 17:20 - 2013-10-14 19:16 - 000003482 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA 2020-12-13 17:20 - 2013-10-14 19:16 - 000003354 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore 2020-12-13 16:51 - 2014-02-17 16:44 - 000268952 _____ C:\Windows\SysWOW64\PnkBstrB.xtr 2020-12-13 16:51 - 2014-02-17 15:24 - 000268952 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2020-12-13 16:04 - 2017-02-08 09:25 - 000004168 _____ C:\Windows\system32\Tasks\Avast Emergency Update 2020-12-13 16:04 - 2014-02-17 15:24 - 000268952 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2020-12-10 21:58 - 2020-06-30 23:12 - 005231221 _____ C:\Users\Patryśka\Desktop\20200701.Patryk_Kostrzewa.CV.pptx 2020-12-10 21:29 - 2020-04-19 20:53 - 000000000 ____D C:\Users\Patryśka\Desktop\Nowy folder (3) 2020-12-10 21:28 - 2014-11-21 20:02 - 000000132 _____ C:\Users\Patryśka\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe 2020-12-10 20:15 - 2014-10-21 17:02 - 000002192 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2020-12-10 20:15 - 2014-10-21 17:02 - 000002151 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2020-12-10 20:15 - 2014-10-21 17:02 - 000002151 _____ C:\ProgramData\Desktop\Google Chrome.lnk 2020-12-10 20:02 - 2014-03-18 15:51 - 000000000 ____D C:\Users\Patryśka\AppData\Roaming\Dropbox 2020-12-03 18:26 - 2013-10-15 14:23 - 000000000 ____D C:\Users\Patryśka\AppData\Local\Adobe 2020-11-24 20:50 - 2019-04-15 19:41 - 000003732 _____ C:\Windows\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) 2020-11-24 20:50 - 2018-10-27 13:12 - 000002397 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk 2020-11-24 20:50 - 2018-10-27 13:12 - 000002354 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk 2020-11-24 20:50 - 2018-10-27 13:12 - 000002354 _____ C:\ProgramData\Desktop\Avast Secure Browser.lnk 2020-11-21 16:38 - 2020-10-15 18:11 - 000176744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2020-11-21 16:38 - 2020-04-16 15:39 - 000521752 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetHub.sys 2020-11-21 16:38 - 2019-02-01 17:47 - 000332368 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys 2020-11-21 16:38 - 2019-01-31 20:19 - 000037152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys 2020-11-21 16:38 - 2019-01-31 20:18 - 000247888 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys 2020-11-21 16:38 - 2019-01-31 20:18 - 000097352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys 2020-11-21 16:38 - 2017-11-19 15:07 - 000206408 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys 2020-11-21 16:38 - 2016-07-18 21:35 - 000042784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2020-11-21 16:38 - 2013-10-14 20:54 - 000851608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2020-11-21 16:38 - 2013-10-14 20:54 - 000469832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2020-11-21 16:38 - 2013-10-14 20:54 - 000326416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2020-11-21 16:38 - 2013-10-14 20:54 - 000109280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2020-11-21 16:38 - 2013-10-14 20:53 - 000084856 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2020-11-20 17:54 - 2013-11-05 12:03 - 000000000 ____D C:\Users\Patryśka\Documents\FIFA 14 2020-11-20 15:52 - 2013-10-14 20:39 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2020-11-20 15:50 - 2013-10-14 20:37 - 000000000 ____D C:\Program Files\Microsoft Office 15 ==================== Pliki w katalogu głównym wybranych folderów ======== 2016-03-12 12:28 - 2017-03-31 19:57 - 000000132 _____ () C:\Users\Patryśka\AppData\Roaming\Preferencje formatu GIF CS6 firmy Adobe 2014-11-21 20:02 - 2020-12-10 21:28 - 000000132 _____ () C:\Users\Patryśka\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe 2016-03-01 16:21 - 2016-03-01 16:21 - 000003184 _____ () C:\Users\Patryśka\AppData\Local\unins000.dat 2016-03-01 16:21 - 2016-03-01 16:21 - 000707672 _____ () C:\Users\Patryśka\AppData\Local\unins000.exe 2016-03-01 16:21 - 2016-03-01 16:21 - 000011761 _____ () C:\Users\Patryśka\AppData\Local\unins000.msg ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) LastRegBack: 2020-12-10 21:12 ==================== Koniec FRST.txt ========================