Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 14-04-2023
Uruchomiony przez Henry (administrator)  HOME (Gigabyte Technology Co., Ltd. Z370 AORUS Gaming 7) (17-04-2023 09:53:00)
Uruchomiony z C:\Users\Henry\Desktop\FRST64.exe
Załadowane profile: Henry
Platforma: Microsoft Windows 7 Ultimate  Service Pack 1 (X64) Język: Polski (Polska)
Domyślna przeglądarka: FF
Tryb startu: Normal

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(explorer.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\afwServ.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(taskeng.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe

==================== Rejestr (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [MouseDriver] => c:\windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Microsoft Windows Hardware Compatibility Publisher -> Pixart Imaging Inc)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [220056 2023-04-13] (Avast Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: c:\windows\system32\AdobePDF.dll [65488 2020-05-30] (Adobe Inc. -> Adobe Systems Inc)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{AC76BA86-0000-0000-7760-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat DC\Esl\Aiod.dll [2020-05-30] (Adobe Inc. -> Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2023-04-16]
BootExecute: 
GroupPolicy: Ograniczenia ? <==== UWAGA
Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA

==================== Zaplanowane zadania (filtrowane) ============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

Task: {15D3277A-236F-43CC-BFAF-31C18EBB6F3E} - System32\Tasks\Process Explorer-Home-Henry => C:\USERS\HENRY\DOWNLOADS\SOFT\PROCEXP\PROCEXP64.EXE [1452200 2017-02-02] (Microsoft Corporation -> Sysinternals - www.sysinternals.com)
Task: {1BE07783-DFE9-4B52-B870-D1C4B9122C87} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [973744 2022-04-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {21712054-41DC-4080-A0AB-C46174B13A28} - System32\Tasks\MSISW_Host => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
Task: {3209153C-39FF-4F26-8411-1F3E4627F57A} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [718752 2023-04-12] (Mozilla Corporation -> Mozilla Foundation)
Task: {421E6AD2-FC07-4332-A5A5-A1F2B6194522} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3827728 2022-10-21] (Corel Corporation -> Corel Corporation)
Task: {62F4914B-1C70-4012-80E3-906159472BDD} - System32\Tasks\CorelUpdateHelperTask-07486706BFCEFB239FDD114D1DA2ECAA => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3827728 2022-10-21] (Corel Corporation -> Corel Corporation)
Task: {64BFDFFA-F304-4FC0-A6EB-348F2F0F520D} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [677280 2023-04-12] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {77B18188-6441-4128-9112-8C7605DE016B} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {93527AA0-24D9-4721-9192-F40CE035BE8C} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [7092120 2023-03-28] (Avast Software s.r.o. -> Avast Software)
Task: {9A40C05C-005F-413A-ADD7-F13054E421EF} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4885912 2023-04-13] (Avast Software s.r.o. -> AVAST Software)
Task: {A94A512C-1B5E-4B8C-AB99-155EBC6C44B9} - System32\Tasks\Avast Software\Avast Cleanup Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe [6788312 2023-01-04] (Avast Software s.r.o. -> Avast Software)
Task: {B33E9CC7-FA49-4B48-8CBB-1665E34C18BA} - System32\Tasks\WD Discovery Service Task henry => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [79640 2023-02-15] (Western Digital Technologies, Inc. -> )
Task: {C0B93D88-2DA0-4521-AA5F-75B1D3DCF62D} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [5030808 2023-03-30] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\Avast Software\SecureLine VPN\log" --guid aee533be-7676-473a-a391-cd68b43fb766
Task: {D43ACA84-FB0C-44A8-8039-4A2F6D6ADBA4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-09] (Adobe Inc. -> Adobe)
Task: {D6C9BBD1-08A1-42B6-88EC-32A3A1E7CFB8} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [973744 2022-04-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {D9DCE1B5-7EF6-4DB3-8C92-EE2FAB2B2B35} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2113024 2023-03-20] () [Brak podpisu cyfrowego]
Task: {E050100B-C2EC-4FD8-91EA-A93E71CA38E7} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2135448 2023-04-14] (Avast Software s.r.o. -> Avast Software)
Task: {E559107E-5A52-481E-AD38-05CA934F1912} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)
Task: {E575550A-7D15-4CE9-AECA-C8DAAC76F4D8} - System32\Tasks\WD Device Agent Task henry => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [724760 2023-02-15] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
Task: {EE2AA6DB-3ECD-44E4-B373-4BFF41B2B40B} - System32\Tasks\Avast Software\Avast Cleanup BugReport => C:\Program Files\Avast Software\Cleanup\AvBugReport.exe [4664216 2023-01-31] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 62 --programpath "C:\Program Files\Avast Software\Cleanup\Setup\.." --configpath "C:\Program Files\Avast Software\Cleanup\Setup" --path "C:\ProgramData\Avast Software\Cleanup\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\Avast Software\Cleanup\log" --guid 22580e01-8aee-4293-869d-8d226585ebfe
Task: {F17B08B9-2054-4372-97F2-DF3956A6B4FF} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe [1243544 2023-03-30] (Avast Software s.r.o. -> AVAST Software)

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)


==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-31] (Apple Inc. -> Apple Inc.)
Hosts: W pliku Hosts jest więcej niż jedno wejście. Sprawdź sekcję Hosts w Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2233DDD8-A6A4-40BB-83E4-3760C3413D90}: [NameServer] 100.120.159.1
Tcpip\..\Interfaces\{93EC1225-3178-47CC-92E4-B7136C7FD239}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{FC06721B-91B5-4CBF-BBCD-A4E29A60ED7D}: [DhcpNameServer] 192.168.1.1

Edge: 
=======
Edge Profile: C:\Users\Henry\AppData\Local\Microsoft\Edge\User Data\Default [2023-04-15]

FireFox:
========
FF DefaultProfile: aai6eyhx.default
FF ProfilePath: C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\aai6eyhx.default [2023-02-16]
FF ProfilePath: C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\e2eb5ul7.default-release [2023-04-17]
FF DownloadDir: G:\INSTALKI\z sieci\Firefox
FF Homepage: Mozilla\Firefox\Profiles\e2eb5ul7.default-release -> chrome://browser/content/blanktab.html
FF Extension: (AdBlocker Ultimate) - C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\e2eb5ul7.default-release\Extensions\adblockultimate@adblockultimate.net.xpi [2023-02-17]
FF Extension: (Enhancer for YouTube™) - C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\e2eb5ul7.default-release\Extensions\enhancerforyoutube@maximerf.addons.mozilla.org.xpi [2023-02-16]
FF Extension: (Galaxy Space Theme) - C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\e2eb5ul7.default-release\Extensions\{5eae7880-dab2-4337-bc53-e4b58db7aec4}.xpi [2023-02-16]
FF Extension: (Video DownloadHelper) - C:\Users\Henry\AppData\Roaming\Mozilla\Firefox\Profiles\e2eb5ul7.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2023-02-16]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2020-05-29]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Brak pliku]
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (Electronic Sports Network i Sverige AB -> ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB) [Brak podpisu cyfrowego]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Brak pliku]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Brak pliku]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2017-11-21] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2020-05-30] (Adobe Inc. -> Adobe Systems Inc.)

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ofoeigeaodhbjogdigckajfhjbonaofg]

==================== Usługi (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [88648 2020-02-25] (Adobe Inc. -> Adobe Systems)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-09] (Adobe Inc. -> Adobe)
S3 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
S3 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8808344 2023-04-13] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [583064 2023-04-13] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2079128 2023-04-13] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [584088 2023-04-13] (Avast Software s.r.o. -> AVAST Software)
S3 AvastAntiTrackSvc; C:\Program Files (x86)\Avast Software\AvastAntiTrackPremium\AntiTrackSvc.exe [5779160 2023-01-31] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2023-01-31] (Avast Software s.r.o. -> AVAST Software)
S4 Backupper Service; C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.1.2\ABService.exe [1095112 2022-08-31] (AOMEI International Network Limited -> AOMEI International Network Limited)
S3 CleanupPSvc; C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe [15615384 2023-01-31] (Avast Software s.r.o. -> AVAST Software)
S3 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3054520 2022-04-28] (Microsoft Corporation -> Microsoft Corporation)
S4 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [347408 2022-10-03] (Underwriters Laboratories Inc. -> Futuremark)
S3 HFGService; C:\Windows\System32\HFGService.dll [535552 2009-12-21] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc)
S4 Origin Client Service; G:\Program Files (x86)\Origin_\Origin\OriginClientService.exe [2579264 2022-11-09] (Electronic Arts, Inc. -> Electronic Arts)
S4 Origin Web Helper Service; G:\Program Files (x86)\Origin_\Origin\OriginWebHelperService.exe [3497800 2022-11-09] (Electronic Arts, Inc. -> Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2018-01-24] (Even Balance, Inc. -> )
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
S3 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [10043288 2023-03-30] (Avast Software s.r.o. -> AVAST Software)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
S4 aspnet_state; Brak ImagePath

===================== Sterowniki (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 61883; C:\Windows\System32\DRIVERS\61883.sys [60288 2009-07-14] (Microsoft Windows -> Microsoft Corporation)
R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [51120 2019-05-14] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 AmdTools64; C:\Windows\System32\DRIVERS\AmdTools64.sys [63392 2020-06-16] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [171952 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 ampa; C:\Windows\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [38320 2019-05-14] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 AsrDrv101; C:\Windows\SysWOW64\Drivers\AsrDrv101.sys [22280 2018-10-15] (ASROCK Incorporation -> ASRock Incorporation)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [235424 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [391808 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [297840 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [95960 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [39608 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [269464 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswNetHub; C:\Windows\System32\drivers\aswNetHub.sys [557096 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [23472 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [105208 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [80376 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [942952 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [702784 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [212640 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [319568 2023-04-13] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R3 aswWintun; C:\Windows\System32\DRIVERS\aswWintun.sys [41472 2022-12-06] (Avast Software s.r.o. -> AVAST Software)
S3 aswWireGuard; C:\Windows\System32\DRIVERS\aswWireguard.sys [184544 2023-01-31] (Avast Software s.r.o. -> Avast Software)
S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [42888 2018-02-08] (IVT SOFTWARE TECHNOLOGY Inc. -> IVT Corporation.)
S3 BthAudioHF; C:\Windows\System32\DRIVERS\BthAudioHF.sys [52224 2009-12-21] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc)
S3 cpuz149; C:\Windows\temp\cpuz149\cpuz149_x64.sys [35368 2022-02-23] (CPUID S.A.R.L.U. -> CPUID)
S3 csr_a2dp; C:\Windows\System32\drivers\bthav.sys [78848 2009-12-21] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc)
S3 cthda; C:\Windows\System32\drivers\cthda.sys [1067304 2017-12-16] (Creative Technology Ltd -> Creative Technology Ltd)
R1 CTIIO; C:\Windows\system32\drivers\CtiIo64.sys [32296 2022-10-26] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
S3 ddmdrv; C:\Windows\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> )
S4 EneTechIo; C:\Windows\system32\drivers\ene.sys [19968 2019-10-17] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 gdrv; C:\Windows\gdrv.sys [26792 2019-05-16] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 gdrv3; C:\Windows\System32\drivers\gdrv3.sys [45248 2022-10-26] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [32384 2018-03-14] (Sony Mobile Communications AB -> Sony Mobile Communications)
R2 inpoutx64; C:\Windows\System32\Drivers\inpoutx64.sys [15008 2018-10-13] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [17424 2022-10-28] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R1 netfilter2; C:\Windows\System32\drivers\netfilter2.sys [124952 2023-01-31] (Avast Software s.r.o. -> Windows (R) Win 7 DDK provider)
R3 NVHDA; C:\Windows\System32\drivers\nvhda64v.sys [129960 2021-09-14] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
R3 nvlddmkm; C:\Windows\System32\DRIVERS\nvlddmkm.sys [36865432 2021-09-16] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
S3 phantomtap; C:\Windows\System32\DRIVERS\phantomtap.sys [35664 2020-05-08] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
R3 ROCKEYNT; C:\Windows\System32\DRIVERS\Rockey4.sys [36904 2020-01-16] (Feitian Technologies Co., Ltd. -> Feitian Technologies Co., Ltd.)
S3 rspLLL; C:\Windows\System32\DRIVERS\rspLLL64.sys [26368 2015-07-13] (Daniel Terhell -> Resplendence Software Projects Sp.)
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [748648 2010-08-12] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
R0 SdFilter; C:\Windows\System32\DRIVERS\SdFilter.sys [13760 2017-12-14] (Lite-On Technology Corporation -> PLEXTOR) [Brak podpisu cyfrowego]
R0 SdFilterUp; C:\Windows\System32\DRIVERS\SdFilterUp.sys [33216 2017-12-14] (Lite-On Technology Corporation -> PLEXTOR) [Brak podpisu cyfrowego]
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [163644 2019-06-18] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Brak podpisu cyfrowego]
R0 secnvme; C:\Windows\System32\DRIVERS\secnvme.sys [90704 2021-07-12] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R0 secnvmeF; C:\Windows\System32\DRIVERS\secnvmeF.sys [30512 2021-07-12] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R2 SSGDIO; C:\Windows\SysWOW64\DRIVERS\ssgdio64.sys [14608 2018-02-21] (ATI Technologies, Inc -> ATI Technologies Inc.)
S3 sssmbus; C:\Windows\System32\DRIVERS\sssmbus.sys [32520 2017-12-16] (SteelSeries ApS -> SteelSeries ApS)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 V0260VID; C:\Windows\System32\DRIVERS\V0260Vid.sys [189664 2007-07-18] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.)
U5 vsock; C:\Windows\System32\Drivers\vsock.sys [93576 2019-04-27] (VMware, Inc. -> VMware, Inc.)
R1 wdfsconnect2017; C:\Windows\system32\drivers\wdfsconnect2017.sys [468096 2017-11-21] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
R3 wdvpnpbus; C:\Windows\System32\DRIVERS\wdvpnpbus.sys [20608 2017-11-21] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc (utworzone) (filtrowane) =========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2023-04-17 09:47 - 2023-04-17 09:53 - 000025295 _____ C:\Users\Henry\Desktop\FRST.txt
2023-04-17 09:46 - 2023-04-17 09:53 - 000000000 ____D C:\FRST
2023-04-17 09:46 - 2023-04-17 09:46 - 002380288 _____ (Farbar) C:\Users\Henry\Desktop\FRST64.exe
2023-04-16 19:26 - 2023-04-13 11:36 - 000313240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2023-04-15 18:44 - 2023-04-15 18:44 - 000345392 _____ C:\Windows\system32\FNTCACHE.DAT
2023-04-15 18:07 - 2023-04-16 19:33 - 000003230 _____ C:\Windows\system32\Tasks\Process Explorer-Home-Henry
2023-04-15 14:54 - 2023-04-17 09:45 - 000134272 _____ C:\Windows\ntbtlog.txt
2023-04-12 09:09 - 2023-04-12 10:54 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-04-11 22:18 - 2023-04-11 22:18 - 000000000 ____D C:\Windows\SysWOW64\vcq
2023-04-11 22:18 - 2023-04-11 22:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Clip QuickTool
2023-04-11 22:18 - 2023-04-11 22:18 - 000000000 ____D C:\Program Files (x86)\Video Clip QuickTool
2023-03-18 19:14 - 2023-03-18 19:14 - 000548734 _____ C:\Users\Henry\Downloads\Crysis 2 Ramstead.xlsx

==================== Jeden miesiąc (zmodyfikowane) ==================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2023-04-17 09:52 - 2023-02-16 17:32 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-04-17 09:48 - 2011-04-12 15:21 - 000717370 _____ C:\Windows\system32\perfh015.dat
2023-04-17 09:48 - 2011-04-12 15:21 - 000147534 _____ C:\Windows\system32\perfc015.dat
2023-04-17 09:48 - 2009-07-14 07:13 - 001608060 _____ C:\Windows\system32\PerfStringBackup.INI
2023-04-17 09:48 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2023-04-17 09:43 - 2023-01-31 16:24 - 000000000 ____D C:\ProgramData\Avast Software
2023-04-17 09:43 - 2022-10-26 13:24 - 000000000 ____D C:\ProgramData\NVIDIA
2023-04-17 09:43 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2023-04-16 22:44 - 2009-07-14 06:45 - 000030704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2023-04-16 22:44 - 2009-07-14 06:45 - 000030704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2023-04-16 22:38 - 2023-02-17 09:06 - 000003466 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-04-16 22:38 - 2023-02-17 09:06 - 000003338 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-04-16 22:38 - 2023-02-09 15:58 - 000003128 _____ C:\Windows\system32\Tasks\CorelUpdateHelperTask-07486706BFCEFB239FDD114D1DA2ECAA
2023-04-16 22:38 - 2022-06-06 21:04 - 000003242 _____ C:\Windows\system32\Tasks\klcp_update
2023-04-16 22:38 - 2022-03-10 20:03 - 000003002 _____ C:\Windows\system32\Tasks\MSISW_Host
2023-04-16 22:38 - 2020-06-29 09:53 - 000004476 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2023-04-16 22:38 - 2019-11-23 14:17 - 000003308 _____ C:\Windows\system32\Tasks\CorelUpdateHelperTaskCore
2023-04-16 22:38 - 2019-05-16 14:59 - 000004382 _____ C:\Windows\system32\Tasks\Adobe Flash Player Updater
2023-04-16 20:38 - 2023-01-31 16:24 - 000000000 ____D C:\Windows\system32\Tasks\Avast Software
2023-04-16 19:27 - 2023-01-31 16:24 - 000003938 _____ C:\Windows\system32\Tasks\Avast SecureLine VPN Update
2023-04-16 19:26 - 2023-01-31 16:29 - 000003910 _____ C:\Windows\system32\Tasks\Avast Emergency Update
2023-04-15 19:42 - 2017-11-24 16:54 - 000000408 __RSH C:\ProgramData\ntuser.pol
2023-04-15 17:50 - 2023-01-22 09:58 - 000000000 ____D C:\Windows\system32\Tasks\Intel
2023-04-15 14:48 - 2023-02-07 13:41 - 000000000 ____D C:\Users\Henry\AppData\Local\Corel
2023-04-15 14:48 - 2022-06-06 21:05 - 000000000 ____D C:\Users\Henry\AppData\Roaming\MPC-HC
2023-04-15 14:48 - 2020-07-08 17:06 - 000000000 ____D C:\ProgramData\AomeiBR
2023-04-15 14:48 - 2017-11-29 23:31 - 000000000 ____D C:\Program Files\Defraggler
2023-04-15 14:48 - 2017-11-19 09:21 - 000000000 ____D C:\Users\Henry\AppData\Local\CrashDumps
2023-04-15 14:46 - 2023-01-31 16:30 - 000000000 ____D C:\Users\Henry\AppData\Local\Avast Software
2023-04-15 13:12 - 2018-08-11 22:13 - 000000000 ____D C:\Windows\pss
2023-04-14 22:42 - 2021-10-20 06:14 - 000000000 ____D C:\Users\Henry\AppData\Roaming\AVI ReComp
2023-04-13 13:41 - 2023-02-07 13:41 - 000000000 ____D C:\Users\Henry\Documents\My PSP Files
2023-04-13 13:41 - 2017-11-19 01:14 - 000003764 ___SH C:\ProgramData\KGyGaAvL.sys
2023-04-13 11:36 - 2023-01-31 16:29 - 000942952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2023-04-13 11:36 - 2023-01-31 16:29 - 000702784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2023-04-13 11:36 - 2023-01-31 16:29 - 000557096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetHub.sys
2023-04-13 11:36 - 2023-01-31 16:29 - 000391808 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2023-04-13 11:36 - 2023-01-31 16:29 - 000319568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2023-04-13 11:36 - 2023-01-31 16:29 - 000297840 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2023-04-13 11:36 - 2023-01-31 16:29 - 000269464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2023-04-13 11:36 - 2023-01-31 16:29 - 000235424 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2023-04-13 11:36 - 2023-01-31 16:29 - 000105208 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2023-04-13 11:36 - 2023-01-31 16:29 - 000095960 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2023-04-13 11:36 - 2023-01-31 16:29 - 000080376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2023-04-13 11:36 - 2023-01-31 16:29 - 000039608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2023-04-13 11:36 - 2023-01-31 16:29 - 000023472 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetNd6.sys
2023-04-12 10:54 - 2023-02-16 17:32 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-04-12 09:12 - 2023-02-16 17:32 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2023-04-12 09:12 - 2023-02-16 17:32 - 000000000 ____D C:\Users\Henry\AppData\LocalLow\Mozilla
2023-04-12 09:07 - 2017-11-18 02:50 - 000000000 ____D C:\Windows\system32\MRT
2023-04-12 09:06 - 2017-11-18 02:50 - 156112424 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2023-04-11 14:30 - 2023-02-07 12:43 - 000000088 __RSH C:\ProgramData\A3C1E1E7BA.sys
2023-04-05 16:10 - 2020-03-03 01:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64
2023-04-05 16:10 - 2020-03-03 01:23 - 000000000 ____D C:\Program Files\HWiNFO64
2023-04-02 14:27 - 2017-11-18 01:54 - 000000000 ____D C:\ProgramData\Package Cache
2023-03-30 21:52 - 2022-11-22 13:41 - 000000000 ____D C:\Program Files\ATOMI
2023-03-30 21:47 - 2018-10-10 09:44 - 000007671 _____ C:\Users\Henry\AppData\Local\Resmon.ResmonCfg
2023-03-30 18:21 - 2023-01-31 16:24 - 000040344 _____ (Avast Software) C:\Windows\system32\icarus_rvrt.exe
2023-03-28 00:12 - 2023-01-19 20:34 - 000000000 ____D C:\Program Files (x86)\AOMEI Partition Assistant
2023-03-28 00:12 - 2019-06-16 13:19 - 000001024 ____H C:\AMTAG.BIN
2023-03-24 10:56 - 2023-02-17 09:06 - 000002235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-03-22 07:30 - 2018-01-19 00:01 - 000000000 ____D C:\symbols
2023-03-22 07:29 - 2018-01-08 20:43 - 000000000 ____D C:\Program Files\Debugging Tools for Windows (x64)
2023-03-21 09:02 - 2017-11-18 20:48 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-03-21 09:01 - 2017-11-18 20:44 - 000000000 ____D C:\Program Files\Microsoft Office 15
2023-03-20 18:17 - 2009-07-14 07:08 - 000032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT

==================== Pliki w katalogu głównym wybranych folderów ========

2017-11-19 14:28 - 2017-11-19 14:28 - 000000908 _____ () C:\Users\Henry\Workaround.vbs
2023-02-07 13:55 - 2011-08-23 19:34 - 000465264 _____ (Corel) C:\Program Files (x86)\Common Files\AppFramework.dll
2014-07-10 08:16 - 2014-07-10 08:16 - 002174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
2023-02-07 13:55 - 2011-08-23 17:42 - 000148177 _____ () C:\Program Files (x86)\Common Files\BookViewer.xap
2023-02-07 13:55 - 2011-08-23 19:35 - 000402800 _____ () C:\Program Files (x86)\Common Files\facebook.dll
2023-02-07 13:55 - 2011-08-23 19:35 - 000033136 _____ (Corel-V1E) C:\Program Files (x86)\Common Files\FlickrProvider.dll
2023-02-07 13:55 - 2011-08-23 19:42 - 000332144 _____ (Corel) C:\Program Files (x86)\Common Files\MediaOrganizer.dll
2023-02-07 13:55 - 2011-08-23 19:35 - 000130416 _____ () C:\Program Files (x86)\Common Files\PluginCommon.dll
2022-10-10 09:23 - 2022-10-10 09:23 - 000000012 _____ () C:\Users\Henry\AppData\Roaming\2457fe3357cbf1220231e8917326f70f
2017-11-18 22:52 - 2022-10-27 17:14 - 000024542 _____ () C:\Users\Henry\AppData\Roaming\Wartości oddzielone przecinkami.ADR
2022-10-27 17:09 - 2022-10-27 17:09 - 000008658 _____ () C:\Users\Henry\AppData\Roaming\Wartości oddzielone przecinkami.EML
2020-10-01 21:12 - 2023-01-20 14:02 - 002128896 _____ () C:\Users\Henry\AppData\Local\file__0.localstorage
2023-02-08 18:49 - 2023-02-08 18:49 - 000000093 _____ () C:\Users\Henry\AppData\Local\fusioncache.dat
2020-04-08 12:39 - 2020-04-08 12:39 - 000000000 _____ () C:\Users\Henry\AppData\Local\oobelibMkey.log
2018-10-10 09:44 - 2023-03-30 21:47 - 000007671 _____ () C:\Users\Henry\AppData\Local\Resmon.ResmonCfg
2018-10-02 22:26 - 2018-10-02 22:26 - 000000138 _____ () C:\Users\Henry\AppData\Local\uts.ini

==================== FCheck ================================

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

FCheck: C:\Windows\SysWOW64\version_IObitDel.dll [2023-01-19] <==== UWAGA (zerobajtowy plik/folder)

==================== SigCheck ============================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)


LastRegBack: 2023-04-13 12:19
==================== Koniec  FRST.txt ========================