Witam. Mój laptop co prawda stary ale ostatnio to już przegina ze swoimi ciągłym "mieleniem" krótko po starcie. Dysk "brzęczy" non stop nawet 10 min. po uruchomieniu systemu, kiedy nie mam uruchomionego żadnego programu. Krótki plik w wordzie otwiera się minutę... Zrobiłem skany FRST, jak by był ktoś miły i mi pomógł - Załączam pliki. Był bym wdzięczny za pomoc.
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-12-2021
Ran by Adam (administrator) on ADAM-PC (SAMSUNG ELECTRONICS CO., LTD. R510/P510) (02-01-2022 14:47:02)
Running from C:\Users\Adam\Documents
Loaded Profiles: Adam
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Language: English (United States)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ActMask Group Co., Ltd - & gt; ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) C:\Windows\System32\PrintCtrl.exe
(ActMask Group Co., Ltd - & gt; ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe & lt; 2 & gt;
(AO Kaspersky Lab - & gt; AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_service.exe
(BELLSOFT - & gt; BellSoft) C:\Program Files\Podpis GOV\jre\bin\javaw.exe
(Brother Industries, Ltd.) [File not signed] C:\Program Files\Brother\Brmfcmon\BrMfcMon.exe
(Brother Industries, Ltd.) [File not signed] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
(Google LLC - & gt; Google LLC) C:\Program Files\Google\Update\1.3.36.112\GoogleCrashHandler.exe
(Kaspersky Lab JSC - & gt; AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Free 21.3\avp.exe & lt; 2 & gt;
(Kaspersky Lab JSC - & gt; AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Free 21.3\avpui.exe
(Kaspersky Lab JSC - & gt; AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky VPN 5.3\ksde.exe
(Kaspersky Lab JSC - & gt; AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky VPN 5.3\ksdeui.exe
(LENOVO - & gt; Lenovo) [File not signed] C:\Program Files\MagicPlus\MagicPlus_helper.exe
(Microsoft Dynamic Code Publisher - & gt; Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Mozilla Corporation - & gt; Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe & lt; 12 & gt;
(Nero AG - & gt; Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NVIDIA Corporation - & gt; NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation - & gt; NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation - & gt; NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation - & gt; NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation - & gt; NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation - & gt; NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation - & gt; NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation - & gt; NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation - & gt; NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe & lt; 2 & gt;
(Piriform Software Ltd - & gt; Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Realtek Semiconductor Corp - & gt; Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(The Document Foundation - & gt; The Document Foundation) C:\Program Files\LibreOffice\program\soffice.bin
(The Document Foundation - & gt; The Document Foundation) C:\Program Files\LibreOffice\program\soffice.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvBackend] = & gt; C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-11-14] (NVIDIA Corporation - & gt; NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] = & gt; C:\Windows\system32\nvspcap.dll [1377752 2016-11-14] (NVIDIA Corporation PE Sign v2016 - & gt; NVIDIA Corporation) [File not signed]
HKLM\...\Run: [RTHDVCPL] = & gt; C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12111576 2000-01-01] (Realtek Semiconductor Corp - & gt; Realtek Semiconductor)
HKLM\...\Run: [BrMfcWnd] = & gt; C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.) [File not signed]
HKLM\...\Run: [ControlCenter3] = & gt; C:\Program Files\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) [File not signed]
HKLM\...\Run: [MagicPlusHelper] = & gt; C:\Program Files\MagicPlus\MagicPlus_helper.exe [2499208 2015-08-24] (LENOVO - & gt; Lenovo) [File not signed]
HKLM\...\Run: [PrintDisp] = & gt; C:\Windows\system32\PrintDisp.exe [598736 2021-03-04] (ActMask Group Co., Ltd - & gt; ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [Podpis GOV] = & gt; C:\Program Files\Podpis GOV\podpisgov.exe [51409385 2021-09-15] () [File not signed] [File is in use]
HKU\S-1-5-21-3385214037-2074922832-2402559954-1000\...\Run: [CCleaner Smart Cleaning] = & gt; C:\Program Files\CCleaner\CCleaner.exe [29442688 2021-12-07] (Piriform Software Ltd - & gt; Piriform Software Ltd)
HKU\S-1-5-21-3385214037-2074922832-2402559954-1000\...\MountPoints2: {21179917-e126-11e8-aa0a-0013779fb7fb} - F:\Lenovo_Suite.exe
HKU\S-1-5-21-3385214037-2074922832-2402559954-1000\...\MountPoints2: {93af33d7-77ea-11e9-8546-0013779fb7fb} - F:\Lenovo_Suite.exe
HKU\S-1-5-21-3385214037-2074922832-2402559954-1000\...\MountPoints2: {ac1055c9-df8b-11e8-83fb-806e6f6e6963} - E:\pcformat.exe
HKU\S-1-5-21-3385214037-2074922832-2402559954-1000\...\MountPoints2: {b7d028cd-84c7-11ea-bee5-0013779fb7fb} - F:\Setup.exe
HKU\S-1-5-21-3385214037-2074922832-2402559954-1000\Control Panel\Desktop\\SCRNSAVE.EXE - & gt; C:\Windows\system32\ssText3d.scr [293888 2010-11-20] (Microsoft Windows - & gt; Microsoft Corporation)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE - & gt;
HKLM\...\Windows NT x86\Print Processors\ActMask: C:\Windows\System32\spool\prtprocs\W32X86\ActPrint.dll [36488 2016-04-12] (ActMask Group Co., Ltd - & gt; ActMask Group Co.,Ltd)
HKLM\...\Windows NT x86\Print Processors\ActMaskR: C:\Windows\System32\spool\prtprocs\W32X86\ActPrint.dll [36488 2016-04-12] (ActMask Group Co., Ltd - & gt; ActMask Group Co.,Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] - & gt; C:\Program Files\Google\Chrome\Application\96.0.4664.110\Installer\chrmstp.exe [2021-12-16] (Google LLC - & gt; Google LLC)
Startup: C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LibreOffice 7.0.lnk [2020-11-12]
ShortcutTarget: LibreOffice 7.0.lnk - & gt; C:\Program Files\LibreOffice\program\quickstart.exe (The Document Foundation - & gt; The Document Foundation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Przyspieszenie uruchomienia programu AutoCAD.lnk [2020-04-26]
ShortcutTarget: Przyspieszenie uruchomienia programu AutoCAD.lnk - & gt; C:\Program Files\Common Files\Autodesk Shared\acstart16.exe (Autodesk, Inc - & gt; Autodesk, Inc)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {08F25355-F78D-47BA-BB0C-C724EB051BAE} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB = & gt; C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task " 308046B0AF4A39CB "
Task: {0ACFDDDC-5E85-4904-99FC-DA2AC291F789} - System32\Tasks\GoogleUpdateTaskMachineUA = & gt; C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2018-11-03] (Google Inc - & gt; Google Inc.)
Task: {0E5233E3-B36F-4CA0-8193-A8831DAF03C3} - System32\Tasks\Opera scheduled Autoupdate 1541267716 = & gt; C:\Users\Adam\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (No File)
Task: {20FFC2EC-533F-4EFA-B1CB-8669D42FB3BB} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} = & gt; C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [743488 2021-04-21] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
Task: {865F7FD4-FD04-4D2B-884E-7AF715C8859B} - System32\Tasks\CCleaner Update = & gt; C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-12-07] (Piriform Software Ltd - & gt; Piriform)
Task: {8DB0B8DA-0547-4E94-98D5-9A055EDD75D0} - System32\Tasks\CCleanerSkipUAC - Adam = & gt; C:\Program Files\CCleaner\CCleaner.exe [29442688 2021-12-07] (Piriform Software Ltd - & gt; Piriform Software Ltd)
Task: {8ED184AD-B5F9-4F3E-89E1-408489C54CC9} - System32\Tasks\SlimDrivers Scan = & gt; C:\Program Files\SlimDrivers\SlimDrivers.exe scheduled (No File)
Task: {AF8193DA-A22A-4506-A720-7C5197D9C7C6} - System32\Tasks\lenovo mobile auto run = & gt; C:\Program Files\MagicPlus\MagicPlus_helper.exe [2499208 2015-08-24] (LENOVO - & gt; Lenovo) [File not signed]
Task: {E4C3B45A-ADEA-4062-96B1-905313A98987} - System32\Tasks\GoogleUpdateTaskMachineCore = & gt; C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2018-11-03] (Google Inc - & gt; Google Inc.)
Task: {E92BDA50-8DA0-4D38-9599-130B77F69FDC} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB = & gt; C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\SlimDrivers Scan.job = & gt; C:\Program Files\SlimDrivers\SlimDrivers.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 89.228.4.126 31.11.173.2
Tcpip\..\Interfaces\{143153DB-BD03-4342-96A2-E8D7E52485A2}: [DhcpNameServer] 10.140.131.1 100.64.40.244
Tcpip\..\Interfaces\{2CA6F60C-932A-4106-99B8-BAAB7E4600AE}: [DhcpNameServer] 89.228.4.126 31.11.173.2
FireFox:
========
FF DefaultProfile: 457k7o3u.default-1568315304990
FF ProfilePath: C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\457k7o3u.default-1568315304990 [2022-01-02]
FF Notifications: Mozilla\Firefox\Profiles\457k7o3u.default-1568315304990 - & gt; hxxps://www.filmweb.pl; hxxps://gorzyca2015-beep-pl.gravitec.net; hxxps://www.twojapogoda.pl; hxxps://businessinsider.com.pl; hxxps://www.urzadzamy.pl
FF Extension: (uBlock Origin) - C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\457k7o3u.default-1568315304990\Extensions\uBlock0@raymondhill.net.xpi [2021-12-28]
FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Free 21.3\FFExt\light_plugin_firefox\addon.xpi = & gt; not found
FF Plugin: @videolan.org/vlc,version=3.0.11 - & gt; C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN - & gt; VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 - & gt; C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN - & gt; VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 - & gt; C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN - & gt; VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 - & gt; C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN - & gt; VideoLAN)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2018-12-07] & lt; ==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2018-12-07] & lt; ==== ATTENTION
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default [2021-12-29]
CHR HomePage: Default - & gt; hxxp://www.google.pl/
CHR Extension: (Safe Torrent Scanner) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2021-10-13]
CHR Extension: (Kaspersky Protection) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2021-12-01]
CHR Extension: (Dysk Google) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-10-13]
CHR Extension: (YouTube) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-11-03]
CHR Extension: (AdBlock — najlepszy bloker reklam) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-12-01]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-12-01]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-12-01]
CHR Extension: (Gmail) - C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-10-13]
CHR HKLM\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AVP21.3; C:\Program Files\Kaspersky Lab\Kaspersky Free 21.3\avp.exe [184768 2021-06-15] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [930240 2016-11-14] (NVIDIA Corporation - & gt; NVIDIA Corporation)
R2 kpm_launch_service; C:\Program Files\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_service.exe [375440 2021-12-06] (AO Kaspersky Lab - & gt; AO Kaspersky Lab)
R2 KSDE5.3; C:\Program Files\Kaspersky Lab\Kaspersky VPN 5.3\ksde.exe [447104 2021-06-15] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6280888 2021-10-24] (Malwarebytes Inc - & gt; Malwarebytes)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-11-14] (NVIDIA Corporation - & gt; NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2904000 2016-11-14] (NVIDIA Corporation - & gt; NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016704 2016-11-14] (NVIDIA Corporation - & gt; NVIDIA Corporation)
R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [110216 2015-10-01] (ActMask Group Co., Ltd - & gt; ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Windows - & gt; Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AgereSoftModem; C:\Windows\System32\DRIVERS\AGRSM.sys [1035776 2009-07-13] (Microsoft Windows - & gt; LSI Corp)
R3 athr; C:\Windows\System32\DRIVERS\athr.sys [2239488 2012-04-19] (Microsoft Windows Hardware Compatibility Publisher - & gt; Qualcomm Atheros Communications, Inc.)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [183472 2021-02-19] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [38672 2020-04-22] (AVB Disc Soft, SIA - & gt; Disc Soft Ltd)
S3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [51680 2020-04-22] (AVB Disc Soft, SIA - & gt; Disc Soft Ltd)
R1 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [91904 2021-02-19] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [170744 2021-02-19] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R1 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [107272 2021-02-19] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R1 klflt; C:\Windows\System32\DRIVERS\klflt.sys [424720 2021-02-19] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R1 klgse; C:\Windows\System32\DRIVERS\klgse.sys [531208 2021-03-15] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [838952 2021-03-15] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [824600 2021-02-19] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R1 klim6; C:\Windows\System32\DRIVERS\klim6.sys [83704 2021-02-19] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [93960 2021-02-19] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [94736 2021-02-19] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [75008 2021-02-19] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R3 kltap; C:\Windows\System32\DRIVERS\kltap.sys [53032 2021-02-19] (AnchorFree Inc - & gt; The OpenVPN Project)
R0 klupd_klif_arkmon; C:\Windows\System32\Drivers\klupd_klif_arkmon.sys [245928 2021-11-25] (Microsoft Windows Hardware Compatibility Publisher - & gt; AO Kaspersky Lab)
R3 klupd_klif_klark; C:\Windows\System32\Drivers\klupd_klif_klark.sys [252632 2021-11-25] (Microsoft Windows Hardware Compatibility Publisher - & gt; AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\Windows\System32\Drivers\klupd_klif_klbg.sys [92680 2021-11-25] (Microsoft Windows Hardware Compatibility Publisher - & gt; AO Kaspersky Lab)
R3 klupd_klif_mark; C:\Windows\System32\Drivers\klupd_klif_mark.sys [197584 2021-11-25] (Microsoft Windows Hardware Compatibility Publisher - & gt; AO Kaspersky Lab)
S4 klwfp; C:\Windows\System32\DRIVERS\klwfp.sys [128776 2021-02-19] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R1 klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [267528 2021-02-19] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [254728 2021-02-19] (Kaspersky Lab JSC - & gt; AO Kaspersky Lab)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [174000 2021-10-24] (Microsoft Windows Hardware Compatibility Publisher - & gt; Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [213936 2021-06-27] (Malwarebytes Inc - & gt; Malwarebytes)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26048 2016-11-14] (NVIDIA Corporation - & gt; NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [50744 2016-11-14] (NVIDIA Corporation - & gt; NVIDIA Corporation)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [319264 2012-03-27] (Marvell Semiconductor - & gt; Marvell)
U3 avgbdisk; no ImagePath
S3 SWDUMon; system32\DRIVERS\SWDUMon.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-01-02 14:47 - 2022-01-02 14:49 - 000018987 _____ C:\Users\Adam\Documents\FRST.txt
2022-01-02 14:45 - 2022-01-02 14:48 - 000000000 ____D C:\FRST
2022-01-02 14:42 - 2022-01-02 14:42 - 002019328 _____ (Farbar) C:\Users\Adam\Documents\FRST.exe
2021-12-29 18:12 - 2021-12-29 18:12 - 001245038 _____ C:\Users\Adam\Documents\środowisko_2021_12_29.pdf
2021-12-29 18:03 - 2021-12-29 18:03 - 000402786 _____ C:\Users\Adam\Downloads\Ocena oddzialywania przedsiewziecia na srodowisko.pdf
2021-12-22 17:26 - 2021-12-22 16:21 - 001431198 ____N C:\Users\Adam\Documents\doc08556120211209083437.pdf
2021-12-22 17:26 - 2021-12-22 16:21 - 000001223 ____N C:\Users\Adam\Documents\Sebastian pismo kolizja .txt
2021-12-22 17:22 - 2021-12-22 17:22 - 001116714 _____ C:\Users\Adam\Documents\seba_22_12.zip
2021-12-19 18:26 - 2021-12-19 18:26 - 000290577 _____ C:\Users\Adam\Documents\AB.6740.531.2021.AFRA-ZAWIADOMIENIE.PDF
2021-12-19 17:24 - 2021-12-20 18:58 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-12-16 17:21 - 2021-12-16 17:21 - 000004052 _____ C:\Users\Adam\Documents\zswadqvge0ozoqh7j33bezyerw5bryedp8i2o9o8.xml
2021-12-15 22:00 - 2021-12-15 22:00 - 000030257 _____ C:\Users\Adam\Documents\przelew.pdf
2021-12-15 19:56 - 2021-12-15 19:56 - 000747592 _____ C:\Users\Adam\Documents\EMEA-PL-0136.pdf
2021-12-15 19:51 - 2021-12-15 19:51 - 000223858 _____ C:\Users\Adam\Documents\EMEA-PL-0124.pdf
2021-12-15 19:17 - 2021-12-15 19:17 - 000000000 ____D C:\Users\Adam\AppData\Roaming\Tracker Software
2021-12-13 19:17 - 2021-12-13 18:14 - 000021215 ____N C:\Users\Adam\Documents\OFM_Probenplan_Dez21-Apr22.odt
2021-12-13 19:15 - 2021-12-13 19:15 - 000025774 _____ C:\Users\Adam\Documents\sk.zip
2021-12-13 19:13 - 2021-12-13 19:13 - 000048306 _____ C:\Users\Adam\Downloads\Yahoo Poczta - Fwd Proben 13.12. und 20.12. unter 2G Regel möglich.pdf
2021-12-09 20:15 - 2021-12-09 20:15 - 001331844 _____ C:\Users\Adam\Documents\Kwasy_tlenowe_-_otrzymywanie_i_b.pdf
2021-12-07 18:52 - 2021-12-07 18:52 - 000893414 _____ C:\Users\Adam\Documents\druk.zip
2021-12-07 18:52 - 2021-12-07 18:52 - 000000000 ____D C:\Users\Adam\Documents\druk
2021-12-06 20:06 - 2021-12-06 20:06 - 008540344 _____ (Malwarebytes) C:\Users\Adam\Downloads\adwcleaner_8.3.1.exe
2021-12-05 20:24 - 2022-01-02 14:20 - 000000000 ____D C:\Users\Adam\.pksigner
2021-12-05 20:22 - 2021-12-05 20:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Podpis GOV
2021-12-05 20:21 - 2021-12-05 20:21 - 000000000 ____D C:\Program Files\Podpis GOV
2021-12-05 19:52 - 2021-12-05 20:12 - 294921368 _____ (Centralny Ośrodek Informatyki ) C:\Users\Adam\Desktop\PodpisGOV.exe
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-01-02 14:46 - 2018-11-03 18:37 - 000000000 ____D C:\Program Files\Google
2022-01-02 14:34 - 2019-02-14 22:22 - 000000000 ____D C:\ProgramData\Mozilla
2022-01-02 14:33 - 2018-12-01 16:24 - 000000000 ____D C:\Users\Adam\AppData\LocalLow\Mozilla
2022-01-02 14:29 - 2019-09-12 20:20 - 000000000 ____D C:\Program Files\CCleaner
2022-01-02 14:27 - 2009-07-14 05:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2022-01-02 14:20 - 2019-09-12 20:21 - 000004128 _____ C:\Windows\system32\Tasks\CCleaner Update
2022-01-02 14:17 - 2021-02-10 17:59 - 000000000 ____D C:\Program Files\Common Files\Kaspersky Lab
2022-01-01 22:49 - 2009-07-14 05:34 - 000026048 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2022-01-01 22:49 - 2009-07-14 05:34 - 000026048 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2022-01-01 18:50 - 2018-11-03 18:50 - 000000438 _____ C:\Windows\Tasks\SlimDrivers Scan.job
2022-01-01 17:05 - 2019-01-12 19:59 - 000000000 ____D C:\Windows\system32\appmgmt
2022-01-01 16:59 - 2020-12-27 01:13 - 000000000 ____D C:\Program Files\BandiMPEG1
2022-01-01 16:59 - 2019-03-10 01:48 - 000000000 ____D C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WonderFox Soft
2022-01-01 16:59 - 2019-03-10 01:48 - 000000000 ____D C:\Program Files\WonderFox Soft
2021-12-20 18:58 - 2018-12-01 16:24 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2021-12-19 17:30 - 2021-10-10 13:19 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2021-12-16 17:36 - 2018-11-03 18:42 - 000002153 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-12-16 17:36 - 2018-11-03 18:42 - 000002112 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-12-15 22:59 - 2019-11-01 14:22 - 000000000 ____D C:\Windows\system32\MRT
2021-12-15 22:36 - 2019-11-01 14:19 - 134458776 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2021-12-07 18:44 - 2019-03-01 12:58 - 000000527 _____ C:\Users\Adam\ticket1.xml
2021-12-05 20:24 - 2018-11-03 18:29 - 000000000 ____D C:\Users\Adam
==================== Files in the root of some directories ========
2019-01-23 21:25 - 2019-02-24 13:01 - 000001214 _____ () C:\Users\Adam\AppData\Roaming\downloads.json
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
LastRegBack: 2021-12-31 20:34
==================== End of FRST.txt ========================