Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 31-03-2021 Uruchomiony przez rozog (administrator) DESKTOP-54VN5F5 (Hewlett-Packard HP ProBook 430 G1) (01-04-2021 15:02:28) Uruchomiony z C:\Users\rozog\Downloads Załadowane profile: rozog Platform: Windows 10 Home Wersja 20H2 19042.631 (X64) Język: Polski (Polska) Domyślna przeglądarka: Edge Tryb startu: Normal ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <4> (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe (Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\rozog\AppData\Local\WebEx\ciscowebexstart.exe (Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\rozog\AppData\Local\WebEx\WebEx\Meetings\atmgr.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler64.exe (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <24> (Intel Corporation -> ) C:\Windows\System32\igfxTray.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxHK.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxTsr.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MsMpEng.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtsCM64.exe (Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeApp.exe (Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe (Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RtsCM] => C:\Windows\RTSCM64.EXE [225280 2017-03-09] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [117472 2021-04-01] (Avast Software s.r.o. -> AVAST Software) HKU\S-1-5-21-3133877547-2131094937-589419719-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\rozog\AppData\Local\WebEx\ciscowebexstart.exe [2837720 2021-03-27] (Cisco WebEx LLC -> Cisco Webex LLC) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\chrmstp.exe [2021-04-01] (Google LLC -> Google LLC) HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA ==================== Zaplanowane zadania (filtrowane) ============ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {253E3A18-D523-4446-8FA6-74E2715C1B34} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3133877547-2131094937-589419719-500 => C:\Users\rozog\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe Task: {25983196-5851-4BCD-A595-635282416CAF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [3637416 2021-04-01] (Microsoft Corporation -> Microsoft Corporation) Task: {27C74F61-AE0E-48C0-8626-4AFA12316E78} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-04-01] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {46DDD9EB-C1EF-439B-8E8E-AB00DE35884D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-04-01] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {48F3F519-15DB-4B9E-945D-F6801E7E79CE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-04-01] (Google LLC -> Google LLC) Task: {73EB1491-535D-4C57-9981-042B1AD3202E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1791712 2021-04-01] (Avast Software s.r.o. -> Avast Software) Task: {8938E1AB-F1D0-48ED-BEFB-E37C3C6287A5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-04-01] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {94F339A3-2DB8-4B7F-9936-A742056A866D} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [26312 2021-04-01] (Microsoft Corporation -> ) Task: {98D0E444-3061-4A0D-A060-C64BA3C94376} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-04-01] (Google LLC -> Google LLC) Task: {9AA35B4A-0E7F-4B5B-951E-DD580E9D4A4F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [3637416 2021-04-01] (Microsoft Corporation -> Microsoft Corporation) Task: {9B01E334-5A42-4E73-9ED0-B7ADDD357FCD} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [16930984 2017-11-02] (Microsoft Corporation -> Microsoft Corporation) Task: {BF736B0C-A9E7-44C7-8BAB-A7CC169F5F0B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [16930984 2017-11-02] (Microsoft Corporation -> Microsoft Corporation) Task: {D3064F6A-BAF6-4BC1-AAB2-A156C32603B7} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [26312 2021-04-01] (Microsoft Corporation -> ) Task: {D77465CC-2CE3-44CF-8D09-62F5756F7523} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-04-01] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {E10DC251-A887-41F6-AD60-924DE9385CA7} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4686560 2021-04-01] (Avast Software s.r.o. -> AVAST Software) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 91.236.4.253 91.233.204.78 Tcpip\..\Interfaces\{366d99d0-a1be-43fc-84bd-9ed7069d72c8}: [DhcpNameServer] 91.236.4.253 91.233.204.78 Edge: ======= Edge DefaultProfile: Default Edge Profile: C:\Users\rozog\AppData\Local\Microsoft\Edge\User Data\Default [2021-04-01] FireFox: ======== FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-04-01] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-04-01] (Microsoft Corporation -> Microsoft Corporation) Chrome: ======= CHR Profile: C:\Users\rozog\AppData\Local\Google\Chrome\User Data\Default [2021-04-01] CHR Extension: (Prezentacje) - C:\Users\rozog\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-04-01] CHR Extension: (Dokumenty) - C:\Users\rozog\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-04-01] CHR Extension: (Dysk Google) - C:\Users\rozog\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-04-01] CHR Extension: (YouTube) - C:\Users\rozog\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-04-01] CHR Extension: (Arkusze) - C:\Users\rozog\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-04-01] CHR Extension: (Dokumenty Google offline) - C:\Users\rozog\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-04-01] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\rozog\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-04-01] CHR Extension: (Gmail) - C:\Users\rozog\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-04-01] CHR Extension: (Chrome Media Router) - C:\Users\rozog\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-04-01] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [7888408 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [623216 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [353504 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56920 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8063656 2017-11-02] (Microsoft Corporation -> Microsoft Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-04-01] (Malwarebytes Inc -> Malwarebytes) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\NisSrv.exe [2483616 2021-04-01] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\MsMpEng.exe [128376 2021-04-01] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [35680 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [208552 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [365520 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [250328 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [99288 2021-04-01] (Avast Software s.r.o. -> AVAST Software) S0 aswElam; C:\Windows\System32\drivers\aswElam.sys [16832 2021-04-01] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software) R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [41304 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R1 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [177872 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R1 aswNetHub; C:\Windows\System32\drivers\aswNetHub.sys [524416 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [107808 2021-04-01] (Avast Software s.r.o. -> AVAST Software) S0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [83368 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [850120 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [466696 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [216376 2021-04-01] (Avast Software s.r.o. -> AVAST Software) R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [326976 2021-04-01] (Avast Software s.r.o. -> AVAST Software) S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Brak podpisu cyfrowego] R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [199128 2021-04-01] (Malwarebytes Inc -> Malwarebytes) R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [220616 2021-04-01] (Malwarebytes Inc -> Malwarebytes) S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2021-04-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [198248 2021-04-01] (Malwarebytes Inc -> Malwarebytes) R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [77496 2021-04-01] (Malwarebytes Inc -> Malwarebytes) R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248992 2021-04-01] (Malwarebytes Inc -> Malwarebytes) R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [155360 2021-04-01] (Malwarebytes Inc -> Malwarebytes) S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [49560 2021-04-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [420072 2021-04-01] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [72952 2021-04-01] (Microsoft Windows -> Microsoft Corporation) R3 WirelessButtonDriver64; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [34944 2018-05-11] (HP Inc. -> HP) ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2021-04-01 15:02 - 2021-04-01 15:03 - 000016727 _____ C:\Users\rozog\Downloads\FRST.txt 2021-04-01 15:01 - 2021-04-01 15:02 - 000000000 ____D C:\FRST 2021-04-01 14:59 - 2021-04-01 14:59 - 002298368 _____ (Farbar) C:\Users\rozog\Downloads\FRST64.exe 2021-04-01 14:56 - 2021-04-01 14:56 - 000000000 ____D C:\Users\rozog\AppData\LocalLow\IGDump 2021-04-01 14:29 - 2021-04-01 14:29 - 000198248 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys 2021-04-01 14:29 - 2021-04-01 14:29 - 000155360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys 2021-04-01 14:29 - 2021-04-01 14:29 - 000077496 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2021-04-01 14:29 - 2021-04-01 14:29 - 000000000 ____D C:\Users\rozog\AppData\Local\mbam 2021-04-01 14:28 - 2021-04-01 14:28 - 001965536 _____ (Malwarebytes) C:\Users\rozog\Downloads\MBSetup-80562.80562-consumer.exe 2021-04-01 14:28 - 2021-04-01 14:28 - 000248992 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys 2021-04-01 14:28 - 2021-04-01 14:28 - 000220616 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys 2021-04-01 14:28 - 2021-04-01 14:28 - 000199128 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys 2021-04-01 14:28 - 2021-04-01 14:28 - 000019912 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys 2021-04-01 14:28 - 2021-04-01 14:28 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk 2021-04-01 14:28 - 2021-04-01 14:28 - 000002021 _____ C:\ProgramData\Pulpit\Malwarebytes.lnk 2021-04-01 14:28 - 2021-04-01 14:28 - 000000000 ____D C:\ProgramData\Malwarebytes 2021-04-01 14:28 - 2021-04-01 14:28 - 000000000 ____D C:\Program Files\Malwarebytes 2021-04-01 14:08 - 2021-04-01 14:08 - 000003990 _____ C:\Windows\system32\Tasks\Avast Emergency Update 2021-04-01 14:08 - 2021-04-01 14:08 - 000002160 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk 2021-04-01 14:08 - 2021-04-01 14:08 - 000002148 _____ C:\ProgramData\Pulpit\Avast Free Antivirus.lnk 2021-04-01 14:08 - 2021-04-01 14:08 - 000000000 ____D C:\Windows\system32\Tasks\Avast Software 2021-04-01 14:08 - 2021-04-01 14:08 - 000000000 ____D C:\Users\rozog\AppData\Roaming\Avast Software 2021-04-01 14:08 - 2021-04-01 14:08 - 000000000 ____D C:\Users\rozog\AppData\Local\CEF 2021-04-01 14:08 - 2021-04-01 14:07 - 000850120 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2021-04-01 14:08 - 2021-04-01 14:07 - 000524416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetHub.sys 2021-04-01 14:08 - 2021-04-01 14:07 - 000466696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2021-04-01 14:08 - 2021-04-01 14:07 - 000365520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys 2021-04-01 14:08 - 2021-04-01 14:07 - 000339680 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2021-04-01 14:08 - 2021-04-01 14:07 - 000326976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2021-04-01 14:08 - 2021-04-01 14:07 - 000250328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys 2021-04-01 14:08 - 2021-04-01 14:07 - 000216376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2021-04-01 14:08 - 2021-04-01 14:07 - 000208552 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys 2021-04-01 14:08 - 2021-04-01 14:07 - 000177872 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2021-04-01 14:08 - 2021-04-01 14:07 - 000107808 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2021-04-01 14:08 - 2021-04-01 14:07 - 000099288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys 2021-04-01 14:08 - 2021-04-01 14:07 - 000083368 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2021-04-01 14:08 - 2021-04-01 14:07 - 000041304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2021-04-01 14:08 - 2021-04-01 14:07 - 000035680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys 2021-04-01 14:08 - 2021-04-01 14:07 - 000016832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswElam.sys 2021-04-01 14:07 - 2021-04-01 14:07 - 000000000 ____D C:\Program Files\Common Files\Avast Software 2021-04-01 14:07 - 2021-04-01 14:07 - 000000000 ____D C:\Program Files\Avast Software 2021-04-01 14:06 - 2021-04-01 14:08 - 000000000 ____D C:\ProgramData\Avast Software 2021-04-01 14:06 - 2021-04-01 14:06 - 000220784 _____ (AVAST Software) C:\Users\rozog\Downloads\avast_free_antivirus_setup_online.exe 2021-04-01 13:57 - 2021-04-01 13:57 - 000000000 ___HD C:\$WinREAgent 2021-04-01 13:54 - 2021-04-01 13:54 - 000000000 ____D C:\Users\rozog\AppData\Local\D3DSCache 2021-04-01 13:24 - 2021-04-01 13:24 - 000000000 ____D C:\Users\rozog\AppData\Roaming\webex 2021-04-01 13:23 - 2021-04-01 13:26 - 000000000 ____D C:\Users\rozog\AppData\LocalLow\WebEx 2021-04-01 13:23 - 2021-04-01 13:26 - 000000000 ____D C:\Users\rozog\AppData\Local\WebEx 2021-04-01 13:14 - 2021-04-01 13:15 - 000000000 ____D C:\Users\rozog\OneDrive\Dokumenty\FELIETONY 2021-04-01 13:02 - 2021-04-01 13:02 - 000002471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk 2021-04-01 13:02 - 2021-04-01 13:02 - 000002405 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk 2021-04-01 13:02 - 2021-04-01 13:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Narzędzia pakietu Microsoft Office 2016 2021-04-01 13:02 - 2021-04-01 13:02 - 000000000 ____D C:\Program Files\Common Files\DESIGNER 2021-04-01 13:01 - 2021-04-01 13:01 - 000000000 ____D C:\Program Files\Microsoft Office 15 2021-04-01 12:49 - 2021-04-01 12:49 - 000000000 ____D C:\Users\rozog\AppData\Roaming\Skype 2021-04-01 12:48 - 2021-04-01 12:48 - 000000000 ____D C:\Users\rozog\AppData\Local\OneDrive 2021-04-01 12:47 - 2021-04-01 13:02 - 000000000 ____D C:\Program Files\Microsoft Office 2021-04-01 12:45 - 2017-11-19 06:18 - 1807556608 _____ C:\Users\rozog\Downloads\Office_2016_16.0.8625.2127_.iso 2021-04-01 12:32 - 2021-04-01 12:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2021-04-01 12:32 - 2021-04-01 12:32 - 000000000 ____D C:\Program Files\7-Zip 2021-04-01 12:08 - 2021-04-01 12:08 - 000003568 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA 2021-04-01 12:08 - 2021-04-01 12:08 - 000003444 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore 2021-04-01 12:08 - 2021-04-01 12:08 - 000002325 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2021-04-01 12:08 - 2021-04-01 12:08 - 000002284 _____ C:\ProgramData\Pulpit\Google Chrome.lnk 2021-04-01 12:08 - 2021-04-01 12:08 - 000000000 ____D C:\Program Files\Google 2021-04-01 12:08 - 2021-04-01 12:08 - 000000000 ____D C:\Program Files (x86)\Google 2021-04-01 12:07 - 2021-04-01 12:18 - 000000000 ____D C:\Users\rozog\AppData\Local\Google 2021-04-01 12:03 - 2021-04-01 12:03 - 000000000 ____D C:\Windows\system32\Tasks\Agent Activation Runtime 2021-04-01 11:49 - 2021-04-01 11:49 - 000000000 ____D C:\Users\rozog\AppData\Roaming\WinCFG 2021-04-01 11:47 - 2021-04-01 11:47 - 000000000 ____D C:\Users\rozog\AppData\Local\Comms 2021-04-01 11:32 - 2021-04-01 13:46 - 000000000 ____D C:\Users\rozog\AppData\Local\PlaceholderTileLogoFolder 2021-04-01 11:32 - 2021-04-01 13:37 - 000000000 ___RD C:\Users\rozog\OneDrive 2021-04-01 11:32 - 2021-04-01 11:32 - 000000000 ___HD C:\OneDriveTemp 2021-04-01 11:30 - 2021-04-01 14:10 - 000000000 __SHD C:\Users\rozog\IntelGraphicsProfiles 2021-04-01 11:30 - 2021-04-01 14:00 - 000000000 ____D C:\Users\rozog\AppData\Local\Packages 2021-04-01 11:30 - 2021-04-01 11:58 - 000000000 ____D C:\Users\rozog\AppData\Local\ConnectedDevicesPlatform 2021-04-01 11:30 - 2021-04-01 11:30 - 000000000 ___RD C:\Users\rozog\3D Objects 2021-04-01 11:30 - 2021-04-01 11:30 - 000000000 ____D C:\Users\rozog\AppData\Roaming\Adobe 2021-04-01 11:30 - 2021-04-01 11:30 - 000000000 ____D C:\Users\rozog\AppData\Local\VirtualStore 2021-04-01 11:30 - 2021-04-01 11:30 - 000000000 ____D C:\Users\rozog\AppData\Local\Publishers 2021-04-01 11:16 - 2021-04-01 11:16 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2021-04-01 11:16 - 2021-04-01 11:16 - 000000000 ____D C:\Windows\SysWOW64\sda 2021-04-01 11:16 - 2021-04-01 11:16 - 000000000 ____D C:\Program Files\Synaptics 2021-04-01 11:15 - 2021-04-01 11:15 - 000000000 ____D C:\Program Files\Realtek 2021-04-01 11:15 - 2021-04-01 11:15 - 000000000 ____D C:\Program Files (x86)\Intel 2021-04-01 11:15 - 2020-06-04 18:45 - 000103744 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL 2021-04-01 11:15 - 2020-06-04 18:45 - 000099664 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL 2021-04-01 11:15 - 2017-09-06 06:09 - 000779480 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll 2021-04-01 11:15 - 2017-09-06 06:09 - 000640216 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\SynTP.sys 2021-04-01 11:15 - 2017-09-06 06:09 - 000429784 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCom.dll 2021-04-01 11:15 - 2017-09-06 06:09 - 000291040 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPCo35-02.dll 2021-04-01 11:15 - 2017-09-06 06:09 - 000278240 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll 2021-04-01 11:15 - 2017-09-06 06:09 - 000066776 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\SynRMIHID_Aux.sys 2021-04-01 11:15 - 2017-09-06 06:09 - 000051936 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel_Aux.sys 2021-04-01 11:15 - 2017-09-06 06:09 - 000051424 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_AMDASF_Aux.sys 2021-04-01 11:15 - 2017-08-16 17:49 - 000231456 _____ C:\Windows\system32\pca-manta.bin 2021-04-01 11:15 - 2017-08-16 17:49 - 000000092 _____ C:\Windows\system32\calibration.bin 2021-04-01 11:15 - 2017-03-09 15:39 - 003222016 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\rtsuvc.sys 2021-04-01 11:15 - 2017-03-09 15:39 - 002651648 _____ (Realtek Semiconductor Corp.) C:\Windows\RtCamU64.exe 2021-04-01 11:15 - 2017-03-09 15:39 - 001981952 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RsDecode.dll 2021-04-01 11:15 - 2017-03-09 15:39 - 000646656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtCamP64.dll 2021-04-01 11:15 - 2017-03-09 15:39 - 000561664 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtCamP.dll 2021-04-01 11:15 - 2017-03-09 15:39 - 000225280 _____ (Realtek Semiconductor Corp.) C:\Windows\RtsCM64.exe 2021-04-01 11:15 - 2017-03-09 15:39 - 000104448 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtCamO64.dll 2021-04-01 11:14 - 2021-04-01 14:03 - 000000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2021-04-01 11:14 - 2021-04-01 11:32 - 000000000 ____D C:\Users\rozog 2021-04-01 11:14 - 2021-04-01 11:15 - 000000000 ____D C:\Program Files\Intel 2021-04-01 11:14 - 2021-04-01 11:14 - 000000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2021-04-01 11:14 - 2021-04-01 11:14 - 000000020 ___SH C:\Users\rozog\ntuser.ini 2021-04-01 11:14 - 2021-04-01 11:14 - 000000000 _SHDL C:\Users\rozog\Ustawienia lokalne 2021-04-01 11:14 - 2021-04-01 11:14 - 000000000 _SHDL C:\Users\rozog\Szablony 2021-04-01 11:14 - 2021-04-01 11:14 - 000000000 _SHDL C:\Users\rozog\Moje dokumenty 2021-04-01 11:14 - 2021-04-01 11:14 - 000000000 _SHDL C:\Users\rozog\Menu Start 2021-04-01 11:14 - 2021-04-01 11:14 - 000000000 _SHDL C:\Users\rozog\Dane aplikacji 2021-04-01 11:14 - 2021-04-01 11:14 - 000000000 _SHDL C:\Users\rozog\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2021-04-01 11:14 - 2021-04-01 11:14 - 000000000 _SHDL C:\Users\rozog\AppData\Local\Tymczasowe pliki internetowe 2021-04-01 11:14 - 2021-04-01 11:14 - 000000000 _SHDL C:\Users\rozog\AppData\Local\Historia 2021-04-01 11:14 - 2021-04-01 11:14 - 000000000 _SHDL C:\Users\rozog\AppData\Local\Dane aplikacji 2021-04-01 11:14 - 2021-04-01 11:14 - 000000000 ____D C:\Windows\LastGood.Tmp 2021-04-01 11:14 - 2021-04-01 11:14 - 000000000 ____D C:\Intel 2021-04-01 11:14 - 2021-04-01 11:14 - 000000000 _____ C:\Windows\system32\GfxValDisplayLog.bin 2021-04-01 08:46 - 2021-04-01 13:05 - 001678234 _____ C:\Windows\system32\PerfStringBackup.INI 2021-03-31 09:11 - 2021-03-31 08:13 - 000000000 ____D C:\Windows\Panther 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\Users\Default\Ustawienia lokalne 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\Users\Default\Szablony 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\Users\Default\Moje dokumenty 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\Users\Default\Menu Start 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\Users\Default\Dane aplikacji 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\Users\Default\AppData\Local\Tymczasowe pliki internetowe 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\Users\Default\AppData\Local\Historia 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\ProgramData\Szablony 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\ProgramData\Pulpit 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\ProgramData\Menu Start 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\ProgramData\Dokumenty 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\ProgramData\Dane aplikacji 2021-03-31 08:14 - 2021-03-31 08:14 - 000000000 _SHDL C:\Documents and Settings 2021-03-31 08:12 - 2021-03-31 08:12 - 000002854 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3133877547-2131094937-589419719-500 2021-03-31 08:11 - 2021-04-01 13:00 - 000008192 ___SH C:\DumpStack.log.tmp ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2021-04-01 15:01 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2021-04-01 15:01 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF 2021-04-01 14:28 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP 2021-04-01 14:24 - 2020-11-19 01:29 - 000000000 ____D C:\Windows\system32\Drivers\wd 2021-04-01 14:23 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender 2021-04-01 14:13 - 2019-12-07 11:03 - 000032768 _____ C:\Windows\system32\config\ELAM 2021-04-01 14:00 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2021-04-01 14:00 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness 2021-04-01 13:05 - 2019-12-07 17:08 - 000748784 _____ C:\Windows\system32\perfh015.dat 2021-04-01 13:05 - 2019-12-07 17:08 - 000144494 _____ C:\Windows\system32\perfc015.dat 2021-04-01 13:02 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2021-04-01 13:00 - 2020-11-19 01:29 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2021-04-01 13:00 - 2020-11-19 00:29 - 000296096 _____ C:\Windows\system32\FNTCACHE.DAT 2021-04-01 13:00 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI 2021-04-01 11:48 - 2020-11-19 01:32 - 000000000 ____D C:\ProgramData\Packages 2021-04-01 11:34 - 2020-11-19 01:31 - 000003510 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2021-04-01 11:34 - 2020-11-19 01:31 - 000003386 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2021-04-01 09:06 - 2020-11-19 00:29 - 000000000 ____D C:\Windows\system32\SleepStudy 2021-04-01 08:45 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\USOPrivate 2021-04-01 08:44 - 2019-12-07 17:10 - 000000000 ____D C:\Windows\system32\FxsTmp 2021-03-31 09:11 - 2019-12-07 11:14 - 000028672 _____ C:\Windows\system32\config\BCD-Template 2021-03-31 08:14 - 2020-11-19 01:31 - 000002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2021-03-31 08:14 - 2020-11-19 01:31 - 000002286 _____ C:\ProgramData\Pulpit\Microsoft Edge.lnk 2021-03-31 08:14 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState 2021-03-31 08:14 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows NT 2021-03-31 08:12 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog 2021-03-31 08:12 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) ==================== Koniec FRST.txt ========================