Prosze o Analize OTL

[Adrian126pk 0]

Witam prosze o analize logów OTL

ponieważ nie działają mi niektóre opcje pasku startu

[Gość]

Jak już to zrób logi z FRST.

[Adrian126pk 0]

Dzięki

w załączniku plik skanu FRST

Edytowane 2 Marca 2020 przez Adrian126pk

[filutka78 11]

Dzięki

w załączniku plik skanu FRST

ja tu nie widzę żadnych logów

[Adrian126pk 0]

w załączniku dodaje logi, nie wiem dlaczego się nie wyświetlają

 

Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 23-02-2020

Uruchomiony przez adi (administrator) ADI (CLEVO P15xEMx) (25-02-2020 20:40:06)

Uruchomiony z C:\Users\adi\Desktop

Załadowane profile: adi (Dostępne profile: adi)

Platform: Windows 10 Pro Wersja 1511 (X64) Język: Polski (Polska)

Domyślna przeglądarka: Chrome

Tryb startu: Normal

Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

 

==================== Procesy (filtrowane) =================

 

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

 

(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe

(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe

(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe

(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler64.exe

(Guangxi Nanning Qiwang Co. Ltd. -> QW Computer) C:\Program Files (x86)\Advanced Defrag\AdvancedDefrag.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\syswow64\IntelCpHeciSvc.exe

(Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\SkypeHost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LockAppHost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe

(Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\syswow64\svchost.exe

(Nalpeiron LTD -> Nalpeiron Ltd.) [brak podpisu cyfrowego] C:\Windows\syswow64\nlssrv32.exe

(StarWind Software) [brak podpisu cyfrowego] C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

(Wargaming.net Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\dlls\wgc_renderer.exe

(Wargaming.net Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\dlls\wgc_renderer.exe

(Wargaming.net Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\dlls\wgc_renderer.exe

(Wargaming.net Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\wargamingerrormonitor.exe

(Wargaming.net Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe

 

==================== Rejestr (filtrowane) ===================

 

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

 

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-10-03] (Apple Inc. -> Apple Inc.)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [AdvancedDefrag.exe] => C:\Program Files (x86)\Advanced Defrag\AdvancedDefrag.exe [1970120 2012-08-27] (Guangxi Nanning Qiwang Co. Ltd. -> QW Computer)

HKLM\...\Winlogon: [shell] explorer.exe,

HKU\S-1-5-21-1138524905-2977288383-2598870260-1001\...\Run: [Opera Browser Assistant] => C:\Users\adi\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [2785304 2020-02-19] (Opera Software AS -> Opera Software)

HKU\S-1-5-21-1138524905-2977288383-2598870260-1001\...\Run: [Wargaming.net Game Center] => C:\ProgramData\Wargaming.net\GameCenter\wgc.exe [2415480 2020-02-25] (Wargaming.net Limited -> Wargaming.net)

HKU\S-1-5-21-1138524905-2977288383-2598870260-1001\...\MountPoints2: {00fd598e-2030-11ea-9559-0090f5d9f832} - "E:\Setup.exe"

HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.122\Installer\chrmstp.exe [2020-02-25] (Google LLC -> Google LLC)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2019-08-20]

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)

 

==================== Zaplanowane zadania (filtrowane) ============

 

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

 

Task: {1471BD53-DB46-48FC-AD5B-813445D271D6} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [57736 2018-12-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

Task: {1B0FE889-94B6-41F3-A8F4-CD329DAEA3F3} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)

Task: {487F68DE-ED32-488D-9912-040971CD77D9} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [468992 2018-12-18] (Advanced Micro Devices, Inc.) [brak podpisu cyfrowego]

Task: {4A202DC4-A93F-4A25-95D6-47FE84B6F162} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-04-06] (Google Inc -> Google LLC)

Task: {57139B79-BC02-4192-9368-CC70CAA7C6D5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)

Task: {5D946658-0901-475A-B092-E9F222B016E6} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\dvrcmd.exe

Task: {6B5F625A-8AA6-4B76-ABE2-C6706293C56E} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-02-11] (Adobe Inc. -> Adobe)

Task: {6FCBDFC1-A8E3-4B52-B72C-A284B4AA5A04} - System32\Tasks\Opera scheduled assistant Autoupdate 1557409565 => C:\Users\adi\AppData\Local\Programs\Opera\launcher.exe [1532952 2020-02-18] (Opera Software AS -> Opera Software)

Task: {760E2898-3E0D-4292-9811-58DC1AE589A5} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [468992 2018-12-18] (Advanced Micro Devices, Inc.) [brak podpisu cyfrowego]

Task: {813B44FD-29EF-46C5-9178-4593593F368B} - System32\Tasks\StartCNBM => C:\Program Files\AMD\CNext\CNext\cncmd.exe [57736 2018-12-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

Task: {9C3E4CC5-44C9-4964-8465-0C7C00B81F6B} - System32\Tasks\Microsoft\Windows\ErrorDetails\ErrorDetailsUpdate => {9CDA66BE-3271-4723-8D35-DD834C58AD92} C:\Windows\System32\ErrorDetailsUpdate.dll [39936 2015-10-30] (Microsoft Windows -> Microsoft Corporation)

Task: {A1BEC6F9-3081-4164-AC16-ADCAB3AD7CCE} - System32\Tasks\Opera GX scheduled Autoupdate 1570339478 => C:\Users\adi\AppData\Local\Programs\Opera GX\launcher.exe [1473048 2020-02-20] (Opera Software AS -> Opera Software)

Task: {B9D39A0B-F4AC-4F9F-9726-929570623C6E} - System32\Tasks\Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate => {FE285C8C-5360-41C1-A700-045501C740DE} C:\Windows\System32\ErrorDetailsUpdate.dll [39936 2015-10-30] (Microsoft Windows -> Microsoft Corporation)

Task: {BFC854FB-05CF-4335-81B3-D4293C132593} - System32\Tasks\Opera scheduled Autoupdate 1557076734 => C:\Users\adi\AppData\Local\Programs\Opera\launcher.exe [1532952 2020-02-18] (Opera Software AS -> Opera Software)

Task: {D3B71CEE-A9C8-478D-A54D-68E8CD824609} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)

Task: {D8D1482D-45E1-46E2-AA18-D43AF9ED0693} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)

Task: {E1764051-26EE-44F4-8F3D-E62C830D7AD4} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [67896 2019-10-01] (Apple Inc. -> Apple Inc.)

Task: {EA996AF7-8572-4ADF-9DC5-C6C43FE0D3A4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-04-06] (Google Inc -> Google LLC)

Task: {FEA54B0D-FECA-434F-902A-612C576F0A30} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_330_pepper.exe [1453624 2020-02-11] (Adobe Inc. -> Adobe)

 

(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)

 

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

 

==================== Internet (filtrowane) ====================

 

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

 

Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)

Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.8.1

Tcpip\..\Interfaces\{c555f530-781c-4312-a5d9-ebeb9edd6a45}: [NameServer] 8.8.8.8,8.8.4.4

Tcpip\..\Interfaces\{c555f530-781c-4312-a5d9-ebeb9edd6a45}: [DhcpNameServer] 192.168.8.1

Tcpip\..\Interfaces\{f2f1172e-d9be-4ac3-91e4-e2b78c4e3b57}: [DhcpNameServer] 192.168.8.1

 

Internet Explorer:

==================

HKU\S-1-5-21-1138524905-2977288383-2598870260-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp

 

FireFox:

========

FF HKU\S-1-5-21-1138524905-2977288383-2598870260-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\adi\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi

FF Extension: (Ace Script) - C:\Users\adi\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi [2018-11-26]

FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google Inc -> Google, Inc.)

 

Chrome:

=======

CHR Profile: C:\Users\adi\AppData\Local\Google\Chrome\User Data\Default [2020-02-18]

CHR Notifications: Default -> hxxps://dogry.pl; hxxps://vod.pl; hxxps://www.facebook.com; hxxps://www.ipla.tv

CHR Extension: (Prezentacje) - C:\Users\adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-04-06]

CHR Extension: (Dokumenty) - C:\Users\adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-04-06]

CHR Extension: (Dysk Google) - C:\Users\adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-04-06]

CHR Extension: (YouTube) - C:\Users\adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-04-06]

CHR Extension: (Arkusze) - C:\Users\adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-04-06]

CHR Extension: (Zakładki iCloud) - C:\Users\adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2019-10-13]

CHR Extension: (Dokumenty Google offline) - C:\Users\adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-29]

CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2019-06-02]

CHR Extension: (Ace Script) - C:\Users\adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2019-06-01]

CHR Extension: (Facebook Screen Sharing) - C:\Users\adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncfpggehkhmjpdjpefomjchjafhmbnai [2019-05-25]

CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-06]

CHR Extension: (Gmail) - C:\Users\adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-06]

CHR Extension: (Chrome Media Router) - C:\Users\adi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-02-10]

CHR Profile: C:\Users\adi\AppData\Local\Google\Chrome\User Data\System Profile [2019-11-15]

CHR HKU\S-1-5-21-1138524905-2977288383-2598870260-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]

CHR HKU\S-1-5-21-1138524905-2977288383-2598870260-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo]

 

Opera:

=======

OPR Notifications: hxxps://inpost.pl; hxxps://www.o2.pl

OPR Extension: (Alitools shopping assistant) - C:\Users\adi\AppData\Roaming\Opera Software\Opera Stable\Extensions\nkekkheibgkgeepapinkalkongndfajn [2020-02-25]

 

==================== Usługi (filtrowane) ===================

 

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

 

R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3147344 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2914896 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2019-08-26] (Apple Inc. -> Apple Inc.)

S2 AUEPLauncher; C:\Program Files\AMD\Performance Profile Client\AUEPLauncher.exe [43008 2018-12-17] (AMD) [brak podpisu cyfrowego]

S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft -> Alcohol Soft Development Team)

S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (Shanghai Comet Network Technology -> www.BitComet.com)

R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4451944 2019-06-03] (AVB Disc Soft, SIA -> Disc Soft Ltd)

R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel® pGFX -> Intel Corporation)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation -> Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation -> Malwarebytes Corporation)

S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [brak podpisu cyfrowego]

R2 nlsX86cc; C:\WINDOWS\SysWOW64\nlssrv32.exe [66560 2012-01-31] (Nalpeiron LTD -> Nalpeiron Ltd.) [brak podpisu cyfrowego]

S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [brak podpisu cyfrowego]

R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [brak podpisu cyfrowego]

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2019-04-06] (Microsoft Corporation -> Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2019-04-06] (Microsoft Corporation -> Microsoft Corporation)

 

===================== Sterowniki (filtrowane) ===================

 

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

 

S3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [52749408 2018-12-19] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

S3 amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [590432 2018-12-19] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

S3 AMTFLASH; C:\WINDOWS\system32\drivers\AmtFlash.sys [74528 2011-09-07] (Amt-Cartech Ltd -> Amt Cartech Ltd)

S3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [107400 2018-10-03] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)

S3 bcmfn; C:\WINDOWS\System32\drivers\bcmfn.sys [9728 2015-10-30] (Microsoft Windows -> Windows ® Win 7 DDK provider)

S3 CH341SER_A64; C:\WINDOWS\System32\Drivers\CH341S64.SYS [58368 2011-11-04] (Microsoft Windows Hardware Compatibility Publisher -> www.winchiphead.com)

S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2012-09-25] (Hewlett-Packard Company -> Windows ® Win 7 DDK provider)

S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2012-09-25] (Hewlett-Packard Company -> Windows ® Win 7 DDK provider)

S3 dot4usb; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [49056 2012-09-25] (Hewlett-Packard Company -> Microsoft Corporation)

R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2019-06-03] (AVB Disc Soft, SIA -> Disc Soft Ltd)

R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2019-06-03] (AVB Disc Soft, SIA -> Disc Soft Ltd)

S2 Hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [314368 2006-12-04] (Microsoft Windows Hardware Compatibility Publisher -> Aladdin Knowledge Systems Ltd.)

R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation -> Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [122584 2020-02-25] (Malwarebytes Corporation -> Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation -> Malwarebytes Corporation)

R1 MpKslDrv; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{688BE12B-54EF-4753-88E1-E6C7FC09D2A5}\MpKslDrv.sys [43232 2020-02-17] (Microsoft Windows -> Microsoft Corporation)

R3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2015-10-30] (Microsoft Windows -> Intel Corporation)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2015-10-30] (Microsoft Windows -> Realtek )

S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-11-05] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)

S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Windows -> Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Windows -> Microsoft Corporation)

 

==================== NetSvcs (filtrowane) ===================

 

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

 

 

==================== Jeden miesiąc (utworzone) ===================

 

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

 

2020-02-25 20:39 - 2020-02-25 20:39 - 000000000 ____D C:\Users\adi\Desktop\FRST-OlderVersion

2020-02-25 20:38 - 2020-02-25 20:38 - 000000000 ____D C:\Users\adi\Doctor Web

2020-02-25 20:38 - 2020-02-25 20:38 - 000000000 ____D C:\ProgramData\Doctor Web

2020-02-25 19:53 - 2020-02-25 20:40 - 000020999 _____ C:\Users\adi\Desktop\FRST.txt

2020-02-25 19:53 - 2020-02-25 19:53 - 000048533 _____ C:\Users\adi\Desktop\Addition.txt

2020-02-25 19:51 - 2020-02-25 20:39 - 002279424 _____ (Farbar) C:\Users\adi\Desktop\FRST64.exe

2020-02-25 08:50 - 2020-02-25 19:55 - 000101042 _____ C:\Users\adi\Desktop\Extras.Txt

2020-02-25 08:50 - 2020-02-25 19:54 - 000252866 _____ C:\Users\adi\Desktop\OTL.Txt

2020-02-25 08:38 - 2020-02-25 08:38 - 000602112 _____ (OldTimer Tools) C:\Users\adi\Desktop\OTL.exe

2020-02-25 08:37 - 2020-02-25 19:48 - 000000000 ____D C:\Program Files (x86)\Advanced Defrag

2020-02-25 08:37 - 2020-02-25 09:32 - 000000000 ____D C:\Users\adi\AppData\Roaming\Advanced Defrag

2020-02-25 08:37 - 2020-02-25 08:37 - 002741986 _____ C:\Users\adi\Downloads\AdvancedDefrag 6.6.0.1 FULL.rar

2020-02-25 08:37 - 2020-02-25 08:37 - 000001159 _____ C:\Users\adi\Desktop\Advanced Defrag.lnk

2020-02-25 08:37 - 2020-02-25 08:37 - 000000056 ____S C:\WINDOWS\SysWOW64\AdvancedDefrag.lie

2020-02-25 08:37 - 2020-02-25 08:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Defrag

2020-02-17 17:56 - 2020-02-17 17:56 - 000152522 _____ C:\Users\adi\Desktop\olx3.jpeg

2020-02-17 17:54 - 2020-02-17 17:54 - 000124681 _____ C:\Users\adi\Desktop\olx2.jpeg

2020-02-17 17:52 - 2020-02-17 17:52 - 000191273 _____ C:\Users\adi\Desktop\olx.jpeg

2020-02-13 21:53 - 2020-02-13 21:53 - 000159829 _____ C:\Users\adi\Downloads\biletyna-bilet-wstepu.pdf

2020-02-11 19:31 - 2020-02-11 19:31 - 000017642 _____ C:\Users\adi\Downloads\Bliźniak Gemini Man [2019] [480p] [bRRip] [XViD] [AC3 MORS] [Lektor PL].torrent

2020-02-11 19:21 - 2020-02-11 19:21 - 000015572 _____ C:\Users\adi\Downloads\Jay i Cichy Bob powracają Jay and Silent Bob Reboot [2019] [bDRip] [XviD] [MPEG KiT] [Lektor PL] [H 1].torrent

2020-02-11 12:05 - 2020-02-11 12:56 - 000001183 _____ C:\Users\adi\Desktop\MPPS 13.02.lnk

2020-02-11 12:04 - 2020-02-11 12:18 - 000000000 ____D C:\MPPS

2020-02-11 12:04 - 2015-08-04 08:47 - 026998784 _____ C:\Users\adi\Downloads\MPPS V13 V12.iso

2020-02-11 11:31 - 2011-09-07 16:21 - 000074528 _____ (Amt Cartech Ltd) C:\WINDOWS\system32\Drivers\AmtFlash.sys

2020-02-11 11:28 - 2020-02-11 11:32 - 026301745 _____ C:\Users\adi\Downloads\MPPS V13 V12.rar

2020-02-10 17:57 - 2020-02-10 17:57 - 022561384 _____ C:\Users\adi\Downloads\AUDI (1).rar

2020-02-10 17:57 - 2020-02-10 17:57 - 016564306 _____ C:\Users\adi\Downloads\Volkswagen.rar

2020-02-10 17:45 - 2020-02-11 20:31 - 000004256 _____ C:\Users\adi\AppData\Local\SymbolViewLayout.xml

2020-02-10 17:43 - 2020-02-10 17:43 - 000000000 ____D C:\Users\adi\Documents\VAGEDCSuite

2020-02-10 17:43 - 2020-02-10 17:43 - 000000000 ____D C:\Users\adi\AppData\Roaming\Dilemma

2020-02-10 17:42 - 2020-02-10 17:42 - 000003069 _____ C:\Users\adi\Desktop\VAG EDC15P+ Suite.lnk

2020-02-10 17:42 - 2020-02-10 17:42 - 000000000 ____D C:\Program Files (x86)\Dilemma

2020-02-10 17:41 - 2020-02-10 17:41 - 033257573 _____ C:\Users\adi\Downloads\VAGEDCSuite.rar

2020-02-10 17:21 - 2020-02-10 17:21 - 000524288 _____ C:\Users\adi\Downloads\AudiA4TDI138.mod

2020-02-10 16:53 - 2020-02-10 16:53 - 022561384 _____ C:\Users\adi\Downloads\AUDI.rar

2020-02-05 16:08 - 2020-02-05 16:11 - 174365304 _____ C:\Users\adi\Desktop\Portable Dr.WEB CureIt! 11.1.2 (07.07.2018).exe

2020-02-05 11:41 - 2020-02-05 11:41 - 000007601 _____ C:\Users\adi\AppData\Local\Resmon.ResmonCfg

2020-02-05 07:45 - 2020-02-05 07:46 - 000000000 ____D C:\Users\adi\AppData\Roaming\AVG

2020-02-05 07:45 - 2020-02-05 07:45 - 000000000 ____D C:\ProgramData\TEMP

2020-02-05 07:43 - 2020-02-05 07:43 - 000001254 _____ C:\Users\adi\Desktop\AVG PC Tuneup 2011.lnk

2020-02-05 07:43 - 2020-02-05 07:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC Tuneup 2011

2020-02-05 07:43 - 2020-02-05 07:43 - 000000000 ____D C:\Program Files (x86)\AVG

2020-02-05 07:42 - 2020-02-05 07:42 - 000000000 ____D C:\Users\adi\Downloads\AVG PC Tuneup 2011 v10.0.0.20 PL SERIAL

2020-02-05 07:37 - 2020-02-05 07:37 - 000001082 _____ C:\Users\adi\Downloads\OPIS PL - OTL 3.2.69.0.txt

2020-02-05 07:30 - 2020-02-05 11:28 - 000122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\48230029.sys

2020-02-05 07:30 - 2020-02-05 07:30 - 000001175 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2020-02-05 07:30 - 2020-02-05 07:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2020-02-05 07:30 - 2020-02-05 07:30 - 000000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2020-02-05 07:30 - 2014-05-28 17:18 - 000000000 ____D C:\Users\adi\Downloads\Malwarebytes Anti-Malware Premium 2.0.2.1012 + Key

2020-02-05 07:30 - 2014-05-12 07:26 - 000091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2020-02-05 07:30 - 2014-05-12 07:26 - 000064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys

2020-02-05 07:30 - 2014-05-12 07:25 - 000025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2020-02-04 08:24 - 2020-02-04 08:24 - 000083738 _____ C:\Users\adi\Downloads\Dokument.pdf

2020-02-04 07:40 - 2020-02-04 07:40 - 000000000 _____ C:\Users\adi\Desktop\Nowy dokument tekstowy (3).txt

2020-01-30 17:17 - 2020-01-30 17:17 - 000068226 _____ C:\Users\adi\Downloads\7737933307_FES_00002.pdf

2020-01-29 10:46 - 2020-02-25 07:22 - 000003084 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate

2020-01-27 19:17 - 2020-02-04 07:39 - 000000000 ____D C:\Users\adi\AppData\Roaming\TS3Client

2020-01-27 19:17 - 2020-01-27 19:17 - 000000000 ____D C:\Users\adi\AppData\Local\TeamSpeak 3

2020-01-27 19:16 - 2020-01-27 19:16 - 000000970 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk

2020-01-27 19:16 - 2020-01-27 19:16 - 000000000 ____D C:\Program Files\TeamSpeak 3 Client

 

==================== Jeden miesiąc (zmodyfikowane) ==================

 

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

 

2020-02-25 20:40 - 2019-10-04 21:02 - 000000000 ____D C:\FRST

2020-02-25 20:40 - 2019-04-06 19:53 - 000000173 _____ C:\WINDOWS\win.ini

2020-02-25 20:38 - 2019-04-06 19:02 - 000000000 ____D C:\Users\adi

2020-02-25 20:36 - 2020-01-17 08:28 - 000122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2020-02-25 07:33 - 2019-04-06 19:12 - 000002307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2020-02-24 07:23 - 2019-02-19 15:27 - 000000000 __SHD C:\Users\adi\IntelGraphicsProfiles

2020-02-24 06:25 - 2019-05-27 22:07 - 000004198 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{D33AB807-C2AA-4D0B-823D-6BC3689DB5B6}

2020-02-23 08:10 - 2019-10-14 19:09 - 000000000 ____D C:\Users\adi\Downloads\opera autoupdate

2020-02-22 07:19 - 2019-10-06 10:57 - 000000000 ____D C:\Users\adi\opera autoupdate

2020-02-21 07:38 - 2019-05-05 18:19 - 000004164 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1557076734

2020-02-21 07:38 - 2019-05-05 18:18 - 000001397 _____ C:\Users\adi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Przeglądarka Opera.lnk

2020-02-21 07:35 - 2019-10-06 06:24 - 000004172 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1570339478

2020-02-21 07:35 - 2019-10-06 06:24 - 000001426 _____ C:\Users\adi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Przeglądarka Opera GX.lnk

2020-02-19 19:07 - 2019-04-06 19:56 - 000818302 _____ C:\WINDOWS\system32\perfh015.dat

2020-02-19 19:07 - 2019-04-06 19:56 - 000157970 _____ C:\WINDOWS\system32\perfc015.dat

2020-02-19 19:07 - 2019-04-06 19:52 - 000000000 ____D C:\WINDOWS\INF

2020-02-19 19:07 - 2019-04-06 19:14 - 001845594 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2020-02-19 19:02 - 2019-04-06 19:03 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2020-02-19 15:05 - 2019-05-09 14:46 - 000004372 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1557409565

2020-02-14 07:46 - 2019-04-06 19:53 - 000000000 ____D C:\WINDOWS\SKB

2020-02-13 22:05 - 2019-04-06 19:46 - 000262144 ___SH C:\WINDOWS\system32\config\BBI

2020-02-11 21:46 - 2019-05-05 20:50 - 000004630 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player PPAPI Notifier

2020-02-11 21:46 - 2019-04-06 19:53 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

2020-02-11 21:46 - 2019-04-06 19:53 - 000000000 ____D C:\WINDOWS\system32\Macromed

2020-02-11 12:19 - 2019-11-15 21:18 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update

2020-02-11 11:32 - 2019-05-27 17:57 - 000000000 ____D C:\Users\adi\AppData\Roaming\vlc

2020-02-10 21:26 - 2019-05-05 18:17 - 000000000 ____D C:\Users\adi\AppData\Roaming\BitComet

2020-02-10 18:07 - 2019-04-06 19:10 - 000003352 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1138524905-2977288383-2598870260-1001

2020-02-10 18:07 - 2019-04-06 19:05 - 000002405 _____ C:\Users\adi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2020-02-10 18:07 - 2019-02-18 20:25 - 000000000 ___RD C:\Users\adi\OneDrive

2020-02-05 16:02 - 2019-06-01 20:09 - 000000000 ____D C:\Users\adi\AppData\Roaming\.ACEStream

2020-02-05 16:02 - 2019-06-01 20:08 - 000000000 ____D C:\Users\adi\AppData\Roaming\ACEStream

2020-02-05 07:34 - 2019-04-06 19:12 - 000003570 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA

2020-02-05 07:34 - 2019-04-06 19:12 - 000003446 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore

2020-02-05 07:30 - 2019-05-31 15:39 - 000000000 ____D C:\ProgramData\Malwarebytes

2020-02-05 07:29 - 2019-04-06 19:53 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2020-02-05 07:25 - 2019-10-13 18:57 - 000003476 _____ C:\WINDOWS\system32\Tasks\Apple Diagnostics

2020-02-05 07:23 - 2019-10-13 11:31 - 000000000 ____D C:\Users\adi\Desktop\wiktor

2020-02-04 07:34 - 2019-11-15 21:18 - 000000000 ____D C:\Program Files\CCleaner

 

==================== Pliki w katalogu głównym wybranych folderów ========

 

2019-08-18 15:15 - 2019-08-18 15:15 - 000000112 _____ () C:\Users\adi\AppData\Roaming\Preferencje wtyczki JP2K CS6

2019-07-08 21:24 - 2019-07-08 21:24 - 000000000 _____ () C:\Users\adi\AppData\Local\oobelibMkey.log

2020-02-05 11:41 - 2020-02-05 11:41 - 000007601 _____ () C:\Users\adi\AppData\Local\Resmon.ResmonCfg

2020-02-10 17:45 - 2020-02-11 20:31 - 000004256 _____ () C:\Users\adi\AppData\Local\SymbolViewLayout.xml

2019-04-06 19:18 - 2019-04-06 19:18 - 000000000 _____ () C:\Users\adi\AppData\Local\{DD223C6D-B58D-4B5E-9271-94028B279416}

 

==================== SigCheck ============================

 

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

 

 

LastRegBack: 2020-02-23 08:29

==================== Koniec FRST.txt ========================

Edytowane 2 Marca 2020 przez Adrian126pk

[Gość]

Uruchom FRST a następnie (poprzez skrót klawiszowy CTRL + Y) otwórz notatnik systemowy. Wklej w nim poniższą zawartość:

 

HKLM-x32\...\Run: [] => [X]

HKLM\...\Winlogon: [shell] explorer.exe,

HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

2020-02-25 20:39 - 2020-02-25 20:39 - 000000000 ____D C:\Users\adi\Desktop\FRST-OlderVersion

2020-02-25 08:50 - 2020-02-25 19:55 - 000101042 _____ C:\Users\adi\Desktop\Extras.Txt

2020-02-25 08:50 - 2020-02-25 19:54 - 000252866 _____ C:\Users\adi\Desktop\OTL.Txt

2020-02-25 08:38 - 2020-02-25 08:38 - 000602112 _____ (OldTimer Tools) C:\Users\adi\Desktop\OTL.exe

EmptyTemp:

Poprzez skrót klawiszowy CTRL + S (albo przez Plik -> Zapisz) zapisz zmiany w notatniku a następnie w FRST kliknij na Napraw. Na zakończenie naprawy FRST poprosi o restart systemu. Jeśli po restarcie problem nie ustąpi, odinstaluj AVG PC Tuneup 2011.

 

Dlaczego korzystasz ze starej wersji windows 10?

 

Platform: Windows 10 Pro Wersja 1511 (X64) Język: Polski (Polska)

Ta wersja miała wsparcie do października 2017.

Edytowane 2 Marca 2020 przez Gość