Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 17-03-2021
Uruchomiony przez BM (administrator)  BM-KOMPUTER (20-03-2021 21:10:23)
Uruchomiony z C:\Users\BM\Desktop
Załadowane profile: BM
Platform: Windows 7 Home Premium Service Pack 1 (X64) Język: Polski (Polska)
Domyślna przeglądarka: Chrome
Tryb startu: Normal

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

() [Brak podpisu cyfrowego] C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
() [Brak podpisu cyfrowego] C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Anvsoft Inc. -> ) C:\Program Files (x86)\Anvsoft\Syncios\adb.exe
(Anvsoft Inc. -> ) C:\Program Files (x86)\Anvsoft\Syncios\androidnotifier.exe
(Anvsoft Inc. -> ) C:\Program Files (x86)\Anvsoft\Syncios\SynciosDeviceService.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\AvastBrowserCrashHandler.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\AvastBrowserCrashHandler64.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <3>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler64.exe
(Macrovision) [Brak podpisu cyfrowego] C:\Program Files (x86)\MonitorSoftware\monitor.exe
(Macrovision) [Brak podpisu cyfrowego] C:\Program Files (x86)\MonitorSoftware\UPSMS.exe
(Macrovision) [Brak podpisu cyfrowego] C:\Program Files (x86)\MonitorSoftware\wpRMI.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <6>
(Nero AG -> Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\MonitorSoftware\jre\bin\javaw.exe <3>
(Photodex Corporation -> ) C:\Program Files (x86)\Photodex\ProShowGold\scsiaccess.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Samsung Electronics CO., LTD. -> ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Samsung Electronics CO., LTD. -> ) C:\Windows\SysWOW64\SecUPDUtilSvc.exe
(Samsung Electronics CO., LTD. -> ) C:\Windows\SysWOW64\spdsvc.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11101800 2010-07-28] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [116960 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] (Samsung Electronics CO., LTD. -> )
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Brak podpisu cyfrowego]
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
HKLM-x32\...\Run: [UPSMS] => C:\Program Files (x86)\MonitorSoftware\UPSMS.exe [114688 2014-01-28] (Macrovision) [Brak podpisu cyfrowego]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Syncios device service] => C:\Program Files (x86)\Anvsoft\Syncios\SynciosDeviceService.exe [2443384 2018-06-29] (Anvsoft Inc. -> )
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-2949551511-373755211-1111318044-1000\...\Run: [OscarEditor] => C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [3340288 2012-03-20] () [Brak podpisu cyfrowego]
HKU\S-1-5-21-2949551511-373755211-1111318044-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run
HKU\S-1-5-21-2949551511-373755211-1111318044-1000\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [53646904 2019-07-18] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-2949551511-373755211-1111318044-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2949551511-373755211-1111318044-1000\...\MountPoints2: {18a23915-d22c-11e1-a183-002522a435c0} - M:\NokiaPCIA_Autorun.exe
HKU\S-1-5-21-2949551511-373755211-1111318044-1000\...\MountPoints2: {20fba72b-3e8e-11e6-b5bd-002522a435c0} - I:\LG_PC_Programs.exe
HKU\S-1-5-21-2949551511-373755211-1111318044-501\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
HKLM\...\Windows x64\Print Processors\hpzppWN7: C:\Windows\System32\spool\prtprocs\x64\hpzppWN7.dll [101376 2009-07-14] (Microsoft Windows -> Hewlett-Packard Corporation)
HKLM\...\Windows x64\Print Processors\us005PC: C:\Windows\System32\spool\prtprocs\x64\us005pc.dll [43520 2017-06-14] (Windows (R) Codename Longhorn DDK provider) [Brak podpisu cyfrowego]
HKLM\...\Windows x64\Print Processors\us013PC: C:\Windows\System32\spool\prtprocs\x64\us013pc.dll [43520 2015-08-20] (Windows (R) Codename Longhorn DDK provider) [Brak podpisu cyfrowego]
HKLM\...\Windows x64\Print Processors\XRXS1PC: C:\Windows\System32\spool\prtprocs\x64\xrxs1pc.dll [33792 2010-02-16] (Windows (R) Server 2003 DDK provider) [Brak podpisu cyfrowego]
HKLM\...\Print\Monitors\Bullzip PDF Print Monitor: C:\Program Files\Common Files\Bullzip\PDF Printer\Ports\BULLZIP\bzpdf.dll [218112 2016-08-29] (Bullzip) [Brak podpisu cyfrowego]
HKLM\...\Print\Monitors\pdfcmon: C:\Windows\system32\pdfcmon.dll [116736 2018-11-10] (pdfforge GmbH) [Brak podpisu cyfrowego]
HKLM\...\Print\Monitors\us005 Langmon: C:\Windows\system32\us005lm.dll [22528 2017-06-14] () [Brak podpisu cyfrowego]
HKLM\...\Print\Monitors\us013 Langmon: C:\Windows\system32\us013lm.dll [22528 2015-03-12] () [Brak podpisu cyfrowego]
HKLM\...\Print\Monitors\XRXS1 Langmon: C:\Windows\system32\xrxs1l6.dll [34304 2012-11-09] () [Brak podpisu cyfrowego]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\89.0.8689.90\Installer\chrmstp.exe [2021-03-19] (Avast Software s.r.o. -> AVAST Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\89.0.4389.90\Installer\chrmstp.exe [2021-03-19] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\87.0.7478.88\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2021-02-15] (Adobe Inc. -> Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageBrowser EX Agent.lnk [2013-05-09]
ShortcutTarget: ImageBrowser EX Agent.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe () [Brak podpisu cyfrowego]
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA

==================== Zaplanowane zadania (filtrowane) ============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {02211717-A6F8-4B66-A75F-E639E8E6B88D} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2256960 2021-03-14] (Avast Software s.r.o. -> AVAST Software)
Task: {10993EC2-50A2-453D-B5F4-901CF7F29BD4} - System32\Tasks\AdobeAAMUpdater-1.0-BM-Komputer-BM => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {10D74290-48CD-47E5-B19B-2C0E20D66592} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {11FA8116-A135-4F34-84AF-7590835A0905} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {123E2A75-4B15-4819-88C7-BD62AB772FEA} - System32\Tasks\{AEF5E459-AA1A-493C-B191-2821CBB53151} => "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" https://ui.skype.com/ui/0/7.33.0.104/pl/abandoninstall?source=lightinstaller&page=tsMain
Task: {16DDD911-8A2F-488C-8CEF-3C0C76C7A109} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [4682976 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
Task: {6889DD79-1D62-4AE5-83DD-6DC31B80060E} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-10-27] (Avast Software s.r.o. -> AVAST Software)
Task: {862D4007-EA4F-46C6-A3E7-027D9062DA23} - System32\Tasks\{91B671DD-8AD6-44D8-B52F-3A1EF73273A7} => C:\Windows\system32\pcalua.exe -a D:\Downloads\KrukBook_setup.exe -d D:\Downloads
Task: {8D471B7B-D35F-4B2D-87FC-0C9E5892081B} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle America, Inc. -> Oracle Corporation)
Task: {8F8E0E8B-D236-41AC-8992-CB06CC4F3852} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {BE87A1D0-1E5B-473D-BFB4-4ADC4D9DA7DB} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2256960 2021-03-14] (Avast Software s.r.o. -> AVAST Software)
Task: {D4FEC410-DB5B-44CF-AA80-85DD1B6DB61C} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {D85BE515-0F19-4E4F-8E1E-8E6FC5EFF3F3} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-10-27] (Avast Software s.r.o. -> AVAST Software)
Task: {E90AB849-70F6-47A9-8C21-4E72B9D24EEF} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1791712 2021-02-23] (Avast Software s.r.o. -> Avast Software)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)


==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{291CA82D-6BDE-4711-8478-83EFDB1FCAAC}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{88C5A1CA-B2A5-4072-8CC2-22C047474FC2}: [DhcpNameServer] 217.172.224.160 89.231.1.206

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\BM\AppData\Local\Microsoft\Edge\User Data\Default [2021-03-20]

FireFox:
========
FF DefaultProfile: k50v1bar.default-1455218085122
FF ProfilePath: C:\Users\BM\AppData\Roaming\Mozilla\Firefox\Profiles\k50v1bar.default-1455218085122 [2021-03-20]
FF Homepage: Mozilla\Firefox\Profiles\k50v1bar.default-1455218085122 -> hxxps://www.google.pl/
FF Extension: (Video Downloader professional) - C:\Users\BM\AppData\Roaming\Mozilla\Firefox\Profiles\k50v1bar.default-1455218085122\Extensions\ffext_basicvideoext@startpage24.xpi [2021-03-20]
FF Extension: (Keybinder) - C:\Users\BM\AppData\Roaming\Mozilla\Firefox\Profiles\k50v1bar.default-1455218085122\Extensions\keybinder@fail.cl.xpi [2017-04-22] [Przestarzałe]
FF Extension: (Avast SafePrice | Porównania, promocje, kupony) - C:\Users\BM\AppData\Roaming\Mozilla\Firefox\Profiles\k50v1bar.default-1455218085122\Extensions\sp@avast.com.xpi [2021-03-20]
FF Extension: (Avast Online Security) - C:\Users\BM\AppData\Roaming\Mozilla\Firefox\Profiles\k50v1bar.default-1455218085122\Extensions\wrc@avast.com.xpi [2021-03-20]
FF Extension: (Adblock Plus - darmowy adblocker) - C:\Users\BM\AppData\Roaming\Mozilla\Firefox\Profiles\k50v1bar.default-1455218085122\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-03-20]
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @java.com/DTPlugin,version=11.172.2 -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\dtplugin\npDeployJava1.dll [2018-05-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.172.2 -> C:\Program Files (x86)\Java\jre1.8.0_172\bin\plugin2\npjp2.dll [2018-05-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @photodex.com/PhotodexPresenter -> C:\Program Files (x86)\Photodex Presenter\npPxPlay.dll [2013-04-10] () [Brak podpisu cyfrowego]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [2020-10-27] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [2020-10-27] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-03-06] (Adobe Inc. -> Adobe Systems Inc.)

Chrome: 
=======
CHR Profile: C:\Users\BM\AppData\Local\Google\Chrome\User Data\Default [2021-03-20]
CHR Extension: (Adobe Acrobat) - C:\Users\BM\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-03-19]
CHR Extension: (Avast SafePrice | Porównania, promocje, kupony) - C:\Users\BM\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2021-03-19]
CHR Extension: (Avast Online Security) - C:\Users\BM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2021-03-19]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\BM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-19]
CHR Extension: (Chrome Media Router) - C:\Users\BM\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-19]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [7878680 2021-03-19] (Avast Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-10-27] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [621608 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [352480 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-10-27] (Avast Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\89.0.8689.90\elevation_service.exe [1504864 2021-03-14] (Avast Software s.r.o. -> AVAST Software)
S3 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] (Canon Inc. -> )
R2 RapiMgr; C:\Windows\WindowsMobile\rapimgr.dll [225672 2007-05-31] (Microsoft Corporation -> Microsoft Corporation)
R2 Samsung Printer Dianostics Service; C:\Windows\SysWOW64\\spdsvc.exe [507184 2018-01-09] (Samsung Electronics CO., LTD. -> )
R2 SamsungUPDUtilSvc; C:\Windows\SysWOW64\SecUPDUtilSvc.exe [143664 2018-01-09] (Samsung Electronics CO., LTD. -> )
R2 ScsiAccess; C:\Program Files (x86)\Photodex\ProShowGold\ScsiAccess.exe [186760 2013-04-10] (Photodex Corporation -> )
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Brak podpisu cyfrowego]
R2 UPSmonitor; C:\Program Files (x86)\MonitorSoftware\monitor.exe [114688 2014-01-28] (Macrovision) [Brak podpisu cyfrowego]
R3 UPSRMI; C:\Program Files (x86)\MonitorSoftware\wpRMI.exe [114688 2014-01-28] (Macrovision) [Brak podpisu cyfrowego]
R2 WcesComm; C:\Windows\WindowsMobile\wcescomm.dll [443784 2007-05-31] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
S2 PDF Architect 5 Creator; "C:\Program Files\PDF Architect 5\creator\common\creator-ws.exe" [X]
S2 RTLDHCPService; C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe [X]

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2014-05-27] (Microsoft Windows Hardware Compatibility Publisher -> Google Inc)
S3 AndnetBus; C:\Windows\System32\DRIVERS\lgandnetbus.sys [20992 2017-11-08] (Anvsoft Inc. -> LG Electronics Inc.)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2014-07-07] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2014-07-07] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [15368 2010-06-11] (ASROCK Incorporation -> Windows (R) Win 7 DDK provider)
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [35648 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [208024 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [357320 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [249304 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [98760 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [41272 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [175248 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\Windows\System32\drivers\aswNetHub.sys [521336 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [38152 2020-04-15] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [107784 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [83360 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [850112 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [465160 2021-03-19] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [215328 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [326976 2021-02-24] (Avast Software s.r.o. -> AVAST Software)
S3 athur; C:\Windows\System32\DRIVERS\athurx.sys [1930240 2014-05-23] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-03-20] () [Brak podpisu cyfrowego]
R0 mv91xx; C:\Windows\System32\DRIVERS\mv91xx.sys [302120 2010-10-01] (Marvell Semiconductor -> Marvell Semiconductor, Inc.)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [166760 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64.sys [23200 2015-04-29] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies)
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

Błąd podczas odczytu pliku: "C:\Windows\system32\Tasks\Program aktualizacji online firmy Adobe."
2021-03-20 21:07 - 2021-03-20 21:07 - 002300928 _____ (Farbar) C:\Users\BM\Desktop\FRST64.exe
2021-03-19 13:59 - 2021-03-19 13:59 - 000002211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-03-19 13:59 - 2021-03-19 13:59 - 000002170 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-03-19 13:59 - 2021-03-19 13:59 - 000002170 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2021-03-13 08:50 - 2021-03-13 08:50 - 000314706 _____ C:\Users\BM\Documents\FV _ 4 _ 03 _ 2021 - Oryginał.PDF
2021-03-12 09:43 - 2021-03-12 10:06 - 000330707 _____ C:\Users\BM\Documents\FV _ 3 _ 03 _ 2021 - Oryginał.PDF
2021-03-12 09:05 - 2021-03-12 09:05 - 000313145 _____ C:\Users\BM\Documents\FV _ 2 _ 03 _ 2021 - Oryginał.PDF
2021-03-09 23:41 - 2021-03-10 21:13 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2021-03-08 00:20 - 2021-03-08 00:33 - 000000000 ____D C:\Users\BM\Desktop\olx
2021-03-04 23:24 - 2021-03-04 23:24 - 000310987 _____ C:\Users\BM\Documents\FV _ 1 _ 03 _ 2021 - Oryginał.PDF
2021-02-26 23:37 - 2021-02-26 23:37 - 000322391 _____ C:\Users\BM\Documents\FV _ 8 _ 02 _ 2021 - Oryginał.PDF
2021-02-24 23:07 - 2021-02-24 23:07 - 000339680 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2021-02-24 23:07 - 2021-02-24 23:07 - 000215328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2021-02-23 23:12 - 2021-02-23 23:12 - 000342120 _____ C:\Users\BM\Documents\FV _ 7 _ 02 _ 2021 - Oryginał.PDF
2021-02-23 22:52 - 2021-02-23 22:52 - 000311390 _____ C:\Users\BM\Documents\FV _ 6 _ 02 _ 2021 - Oryginał.PDF

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2021-03-20 21:10 - 2020-12-13 22:02 - 000024119 _____ C:\Users\BM\Desktop\FRST.txt
2021-03-20 21:10 - 2020-12-13 22:00 - 000000000 ____D C:\FRST
2021-03-20 21:10 - 2012-04-16 22:12 - 000000000 ____D C:\ProgramData\AVAST Software
2021-03-20 21:07 - 2019-08-11 22:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2021-03-20 21:07 - 2016-11-16 22:09 - 000000000 ____D C:\Users\BM\AppData\LocalLow\Mozilla
2021-03-20 21:07 - 2016-02-11 20:11 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-03-20 21:06 - 2009-07-14 06:13 - 000006214 _____ C:\Windows\system32\PerfStringBackup.INI
2021-03-20 21:06 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2021-03-20 21:02 - 2012-04-18 07:30 - 000000000 ____D C:\Users\BM\AppData\Local\CrashDumps
2021-03-20 21:02 - 2012-04-16 22:35 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2021-03-20 21:02 - 2012-04-16 22:35 - 000000000 ____D C:\Windows\system32\Macromed
2021-03-20 20:59 - 2015-01-18 00:04 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-03-19 16:45 - 2009-07-14 05:45 - 000027104 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2021-03-19 16:45 - 2009-07-14 05:45 - 000027104 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2021-03-19 13:59 - 2016-03-25 21:32 - 000000000 ____D C:\Program Files\Google
2021-03-19 13:59 - 2012-04-16 22:13 - 000000000 ____D C:\Users\BM\AppData\Local\Google
2021-03-19 08:18 - 2018-03-25 19:13 - 000000000 ____D C:\Users\BM\AppData\Local\AVAST Software
2021-03-19 08:02 - 2020-12-26 14:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design
2021-03-19 08:02 - 2020-12-26 13:17 - 000000000 ____D C:\Program Files\Lightworks
2021-03-19 08:02 - 2015-06-16 08:21 - 000000000 ____D C:\Users\BM\AppData\Local\Dropbox
2021-03-19 08:02 - 2013-11-21 01:40 - 000000000 ____D C:\Users\BM\AppData\Roaming\Dropbox
2021-03-19 08:00 - 2019-04-17 20:51 - 000003732 _____ C:\Windows\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2021-03-19 08:00 - 2018-03-25 19:13 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2021-03-19 07:50 - 2012-04-16 22:13 - 000465160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2021-03-15 23:22 - 2013-01-15 17:01 - 000000000 ____D C:\Users\BM\Desktop\slub_of
2021-03-15 22:13 - 2020-07-14 15:13 - 000002236 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-03-15 22:13 - 2020-07-14 15:13 - 000002195 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-03-15 22:13 - 2020-07-14 15:13 - 000002195 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk
2021-03-12 14:56 - 2020-07-14 15:12 - 000003410 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-03-12 14:56 - 2020-07-14 15:12 - 000003282 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-03-12 14:56 - 2016-01-05 23:36 - 000004476 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2021-03-12 14:56 - 2012-04-16 22:13 - 000003482 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2021-03-12 14:56 - 2012-04-16 22:13 - 000003354 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2021-03-12 14:50 - 2015-12-04 09:48 - 000000000 ____D C:\Windows\system32\Tasks\AVAST Software
2021-03-12 08:26 - 2017-02-12 10:09 - 000004168 _____ C:\Windows\system32\Tasks\Avast Emergency Update
2021-03-10 23:56 - 2016-01-05 23:36 - 000002062 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-03-10 23:47 - 2020-12-28 15:46 - 000000000 ____D C:\Users\BM\Desktop\baklony_wyslester
2021-03-09 23:46 - 2013-07-18 09:15 - 000000000 ____D C:\Windows\system32\MRT
2021-03-09 23:42 - 2012-04-18 13:05 - 131005360 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2021-03-09 23:41 - 2012-04-18 11:08 - 000000000 ____D C:\Users\BM\AppData\Roaming\FileZilla
2021-03-08 00:10 - 2020-11-30 11:52 - 000000000 ____D C:\Users\BM\Desktop\bar
2021-03-06 09:11 - 2020-11-07 00:21 - 000000000 ____D C:\Users\BM\AppData\Local\WEB2Print
2021-03-06 09:03 - 2014-01-28 13:33 - 000000000 ____D C:\Program Files (x86)\MonitorSoftware
2021-03-06 08:59 - 2018-11-05 00:10 - 000000000 ____D C:\Users\BM\AppData\Roaming\Syncios
2021-03-01 08:53 - 2009-07-14 06:08 - 000032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2021-02-28 00:43 - 2014-11-19 18:35 - 000000000 ____D C:\Users\BM\AppData\Roaming\vlc
2021-02-24 23:07 - 2020-10-20 07:33 - 000175248 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2021-02-24 23:07 - 2020-04-15 06:50 - 000521336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetHub.sys
2021-02-24 23:07 - 2019-01-14 14:50 - 000357320 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2021-02-24 23:07 - 2019-01-06 22:50 - 000249304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2021-02-24 23:07 - 2019-01-06 22:50 - 000098760 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2021-02-24 23:07 - 2019-01-06 22:50 - 000035648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys
2021-02-24 23:07 - 2018-10-21 19:20 - 000041272 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2021-02-24 23:07 - 2017-11-16 13:57 - 000208024 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2021-02-24 23:07 - 2013-03-30 19:56 - 000326976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2021-02-24 23:07 - 2013-03-30 19:56 - 000083360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2021-02-24 23:07 - 2012-04-16 22:13 - 000107784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2021-02-24 23:07 - 2012-04-16 22:12 - 000850112 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2021-02-22 23:23 - 2020-04-16 22:12 - 000319427 _____ C:\Users\BM\Documents\FV _ 14 _ 02 _ 2020.PDF
2021-02-19 20:56 - 2016-02-11 00:09 - 000000000 ____D C:\Users\Gość

==================== Pliki w katalogu głównym wybranych folderów ========

2015-06-30 00:04 - 2015-06-30 00:04 - 000000132 _____ () C:\Users\BM\AppData\Roaming\Adobe BMP Format CS5 Prefs
2013-02-08 03:44 - 2015-02-07 22:29 - 000000132 _____ () C:\Users\BM\AppData\Roaming\Adobe PNG Format CS5 Prefs
2012-04-25 21:34 - 2019-04-23 23:51 - 000000126 _____ () C:\Users\BM\AppData\Roaming\default.rss
2012-05-28 11:16 - 2012-05-28 11:16 - 000000000 _____ () C:\Users\BM\AppData\Roaming\downloads.m3u
2014-11-07 17:33 - 2014-11-07 17:33 - 000001456 _____ () C:\Users\BM\AppData\Local\Adobe Save for Web 12.0 Prefs
2015-03-06 20:49 - 2017-12-18 17:35 - 000024064 _____ () C:\Users\BM\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-02-22 00:03 - 2016-02-22 00:03 - 000000600 _____ () C:\Users\BM\AppData\Local\PUTTY.RND
2013-10-28 00:45 - 2013-10-28 00:45 - 000007607 _____ () C:\Users\BM\AppData\Local\Resmon.ResmonCfg
2018-11-28 00:06 - 2018-11-28 00:06 - 000000000 _____ () C:\Users\BM\AppData\Local\{12A7BE1F-39B4-4838-B01F-74B57B7F8FB5}
2018-11-28 00:06 - 2018-11-28 00:06 - 000000000 _____ () C:\Users\BM\AppData\Local\{3EC7B9C2-467B-4686-8755-0364D56D2780}

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)


LastRegBack: 2021-03-16 08:35
==================== Koniec  FRST.txt ========================