Przeinstalowanie nic nie pomaga. Dodaje logi. Serdecznie dziękuje za jakąkolwiek pomoc :)
Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 14-02-2022 01
Uruchomiony przez Adrian (administrator) LAPTOP-DRNF6NEM (HP HP 250 G5 Notebook PC) (17-02-2022 14:26:09)
Uruchomiony z C:\Users\Adrian\Desktop
Załadowane profile: Adrian
Platform: Microsoft Windows 10 Home Wersja 21H1 19043.1526 (X64) Język: Polski (Polska)
Domyślna przeglądarka: Chrome
Tryb startu: Normal
==================== Procesy (filtrowane) =================
(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
(Advanced Micro Devices, Inc. - & gt; Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(atiesrxx.exe - & gt; ) (Advanced Micro Devices, Inc. - & gt; AMD) C:\Windows\System32\atieclxx.exe
(Brother Industries, Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe - & gt; ) (ESET, spol. s r.o. - & gt; ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe - & gt; ) (Realtek Semiconductor Corp. - & gt; Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe - & gt; ) (Synaptics Incorporated - & gt; Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(C:\Windows\SysWOW64\esif_uf.exe - & gt; ) (Intel(R) Software - & gt; Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxCUIService.exe - & gt; ) (Intel(R) pGFX - & gt; Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxEM.exe
(explorer.exe - & gt; ) (Google LLC - & gt; Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe & lt; 32 & gt;
(explorer.exe - & gt; ) (Realtek Semiconductor Corp. - & gt; Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google LLC - & gt; Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler.exe
(Google LLC - & gt; Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler64.exe
(HP Inc. - & gt; HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(HP Inc. - & gt; HP) C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe
(msiexec.exe - & gt; ) (Microsoft Windows - & gt; Microsoft Corporation) C:\Windows\System32\SrTasks.exe
(services.exe - & gt; ) (Adobe Inc. - & gt; Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe - & gt; ) (Advanced Micro Devices, Inc. - & gt; AMD) C:\Windows\System32\atiesrxx.exe
(services.exe - & gt; ) (Brother Industries, Ltd.) [Brak podpisu cyfrowego] C:\Program Files (x86)\Browny02\BrYNSvc.exe
(services.exe - & gt; ) (CyberLink Corp. - & gt; CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(services.exe - & gt; ) (ESET, spol. s r.o. - & gt; ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe - & gt; ) (HP Inc. - & gt; HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(services.exe - & gt; ) (HP Inc. - & gt; HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(services.exe - & gt; ) (HP Inc. - & gt; HP Inc.) C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe
(services.exe - & gt; ) (HP Inc. - & gt; HP Inc.) C:\Program Files\HP\HP Enabling Services\DiagsCap.exe
(services.exe - & gt; ) (HP Inc. - & gt; HP Inc.) C:\Program Files\HP\HP Enabling Services\NetworkCap.exe
(services.exe - & gt; ) (HP Inc. - & gt; HP Inc.) C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe
(services.exe - & gt; ) (HP Inc. - & gt; HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe - & gt; ) (Intel Corporation - & gt; Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
(services.exe - & gt; ) (Intel Corporation-Wireless Connectivity Solutions - & gt; Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe - & gt; ) (Intel Corporation-Wireless Connectivity Solutions - & gt; Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe - & gt; ) (Intel Corporation-Wireless Connectivity Solutions - & gt; Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe - & gt; ) (Intel(R) Embedded Subsystems and IP Blocks Group - & gt; Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_5acc9ca73ae7cf4c\jhi_service.exe
(services.exe - & gt; ) (Intel(R) pGFX - & gt; Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxCUIService.exe
(services.exe - & gt; ) (Intel(R) pGFX - & gt; Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\IntelCpHDCPSvc.exe
(services.exe - & gt; ) (Intel(R) pGFX - & gt; Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\IntelCpHeciSvc.exe
(services.exe - & gt; ) (Intel(R) Software - & gt; Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(services.exe - & gt; ) (Intel(R) Wireless Connectivity Solutions - & gt; Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe - & gt; ) (Microsoft Corporation - & gt; Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(services.exe - & gt; ) (Microsoft Corporation - & gt; Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe - & gt; ) (Microsoft Windows - & gt; Microsoft Corporation) C:\Windows\System32\msiexec.exe
(services.exe - & gt; ) (Realtek Semiconductor Corp. - & gt; Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe - & gt; ) (Synaptics Incorporated - & gt; Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(svchost.exe - & gt; ) (HP Inc. - & gt; HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(svchost.exe - & gt; ) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(svchost.exe - & gt; ) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20544.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(svchost.exe - & gt; ) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20544.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe - & gt; ) (Microsoft Windows - & gt; Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(svchost.exe - & gt; ) (Microsoft Windows - & gt; Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe - & gt; ) (Microsoft Windows - & gt; Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe - & gt; ) (Microsoft Windows - & gt; Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Synaptics Incorporated - & gt; Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
==================== Rejestr (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
HKLM\...\Run: [RTHDVCPL] = & gt; C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-04-23] (Realtek Semiconductor Corp. - & gt; Realtek Semiconductor)
HKLM\...\Run: [egui] = & gt; C:\Program Files\ESET\ESET Security\ecmds.exe [167496 2022-01-22] (ESET, spol. s r.o. - & gt; ESET)
HKLM\...\Run: [BCSSync] = & gt; C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation - & gt; Microsoft Corporation)
HKLM-x32\...\Run: [HPRadioMgr] = & gt; C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe [324488 2016-08-02] (HP Inc. - & gt; HP)
HKLM-x32\...\Run: [BrStsMon00] = & gt; C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3147264 2021-08-20] (Brother Industries, Ltd.) [Brak podpisu cyfrowego]
HKLM-x32\...\Run: [HPMessageService] = & gt; C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [709160 2018-05-22] (HP Inc. - & gt; HP Inc.)
HKU\S-1-5-21-3018063554-2676166695-2556138355-1001\...\Run: [Steam] = & gt; C:\Program Files (x86)\Steam\steam.exe [4267432 2021-12-16] (Valve Corp. - & gt; Valve Corporation)
HKU\S-1-5-21-3018063554-2676166695-2556138355-1001\...\MountPoints2: {32c07ad6-fe5f-11ea-947c-30e171ebe461} - " G:\HiSuiteDownLoader.exe "
HKU\S-1-5-21-3018063554-2676166695-2556138355-1001\...\MountPoints2: {8ed8eda4-3750-11eb-9482-84ef1803e520} - " F:\HiSuiteDownLoader.exe "
HKU\S-1-5-21-3018063554-2676166695-2556138355-1001\...\MountPoints2: {9fec98a1-0489-11eb-947d-84ef1803e51c} - " F:\HiSuiteDownLoader.exe "
HKU\S-1-5-21-3018063554-2676166695-2556138355-1002\...\RunOnce: [Delete Cached Update Binary] = & gt; C:\WINDOWS\system32\cmd.exe /q /c del /q " C:\Users\Agatka\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe "
HKU\S-1-5-21-3018063554-2676166695-2556138355-1002\...\RunOnce: [Delete Cached Standalone Update Binary] = & gt; C:\WINDOWS\system32\cmd.exe /q /c del /q " C:\Users\Agatka\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe "
HKU\S-1-5-21-3018063554-2676166695-2556138355-1002\...\RunOnce: [Uninstall 20.201.1005.0009\amd64] = & gt; C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q " C:\Users\Agatka\AppData\Local\Microsoft\OneDrive\20.201.1005.0009\amd64 "
HKU\S-1-5-21-3018063554-2676166695-2556138355-1002\...\RunOnce: [Uninstall 20.201.1005.0009] = & gt; C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q " C:\Users\Agatka\AppData\Local\Microsoft\OneDrive\20.201.1005.0009 "
HKU\S-1-5-21-3018063554-2676166695-2556138355-1002\...\RunOnce: [Uninstall 21.062.0328.0001\amd64] = & gt; C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q " C:\Users\Agatka\AppData\Local\Microsoft\OneDrive\21.062.0328.0001\amd64 "
HKU\S-1-5-21-3018063554-2676166695-2556138355-1002\...\RunOnce: [Uninstall 21.062.0328.0001] = & gt; C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q " C:\Users\Agatka\AppData\Local\Microsoft\OneDrive\21.062.0328.0001 "
HKLM\...\Windows x64\Print Processors\hpzpplhn: C:\Windows\System32\spool\prtprocs\x64\hpzpplhn.dll [109288 2018-10-12] (Microsoft Windows Hardware Compatibility Publisher - & gt; Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\LIDIL hpzlllhn: C:\WINDOWS\system32\hpzlllhn.dll [58112 2018-10-12] (Microsoft Windows Hardware Compatibility Publisher - & gt; Hewlett-Packard Company)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] - & gt; C:\Program Files (x86)\Google\Chrome\Application\98.0.4758.102\Installer\chrmstp.exe [2022-02-16] (Google LLC - & gt; Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP JumpStart Launch.lnk [2016-12-26]
ShortcutTarget: HP JumpStart Launch.lnk - & gt; c:\Windows\Installer\{B90CB0DE-2E60-41C4-9857-466EB98192BF}\HPlogo_blue.ico () [Brak podpisu cyfrowego]
==================== Zaplanowane zadania (filtrowane) ============
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
Task: {17220149-4C6E-4DE5-A04F-6F28CB868D43} - System32\Tasks\HPJumpStartProvider = & gt; C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartProvider.exe (Brak pliku)
Task: {36B9ECB9-2CA9-4BF8-ADD0-A56EF5497932} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report = & gt; C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [136368 2022-01-20] (HP Inc. - & gt; HP Inc.)
Task: {3C605FED-D981-4FA0-9AD7-274DEDB5030D} - System32\Tasks\StartCN = & gt; C:\Program Files\AMD\CNext\CNext\cncmd.exe [52104 2017-05-17] (Advanced Micro Devices, Inc. - & gt; Advanced Micro Devices, Inc.)
Task: {45AEAF57-E96E-4DBB-BF13-F2374237D0BE} - System32\Tasks\AutoKMS = & gt; C:\WINDOWS\AutoKMS\AutoKMS.exe [1923584 2020-01-07] () [Brak podpisu cyfrowego]
Task: {6D29554F-2085-4893-B270-5C293CD5DB7A} - System32\Tasks\GoogleUpdateTaskMachineCore = & gt; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-01-07] (Google LLC - & gt; Google LLC)
Task: {8360B5EE-169C-4E67-8D4A-E183E4FB0FDF} - System32\Tasks\HPEA3JOBS = & gt; C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {8E2B9742-7782-4817-8C91-B8E904A2E3BA} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3018063554-2676166695-2556138355-1002 = & gt; C:\Users\Adrian\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Brak pliku)
Task: {9A06B0B6-972E-45A7-A974-B44B9AF46F50} - System32\Tasks\GoogleUpdateTaskMachineUA = & gt; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-01-07] (Google LLC - & gt; Google LLC)
Task: {A5CD5B0D-0FFA-4A3B-A463-EABFD7322690} - System32\Tasks\HPAudioSwitch = & gt; C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1657880 2016-10-04] (HP Inc. - & gt; HP Inc.)
Task: {BECDEC5C-FE40-4F36-AEBD-6AABA1155E73} - System32\Tasks\HPGenoobeReminder = & gt; C:\Program Files (x86)\HP\HP Registration Service\HP GenOOBE\HPGenOOBE.exe CLEAR (Brak pliku)
Task: {E3CBA4B8-50A8-4A2A-8D37-FE1F7F826E7B} - System32\Tasks\BlueStacksHelper = & gt; C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe [754472 2021-04-05] (BlueStack Systems, Inc. - & gt; BlueStack Systems, Inc.)
Task: {FAC2910A-F6B4-4BD1-9C21-311F35525424} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan = & gt; C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1145440 2022-01-20] (HP Inc. - & gt; HP Inc.)
Task: {FFE69FE0-57EE-4B04-8A97-C543F2CFB5CC} - System32\Tasks\Adobe Acrobat Update Task = & gt; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. - & gt; Adobe Inc.)
(Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
Task: C:\WINDOWS\Tasks\AutoKMS.job = & gt; C:\WINDOWS\AutoKMS\AutoKMS.exe
==================== Internet (filtrowane) ====================
(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1
Tcpip\..\Interfaces\{66dad421-e5ed-45d1-af6d-f2ff5d35043b}: [DhcpNameServer] 192.168.8.1
Tcpip\..\Interfaces\{981db8b2-b7c7-4d66-bd2f-7e7f0a1008e7}: [DhcpNameServer] 192.168.8.1
Edge:
=======
Edge Extension: (Brak nazwy) - & gt; AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 = & gt; C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nie znaleziono]
Edge Extension: (Brak nazwy) - & gt; BookReader_B171F20233094AC88D05A8EF7B9763E8 = & gt; C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nie znaleziono]
Edge Extension: (Brak nazwy) - & gt; LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 = & gt; C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nie znaleziono]
Edge Extension: (Brak nazwy) - & gt; PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 = & gt; C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nie znaleziono]
FireFox:
========
FF DefaultProfile: e6q80h2i.default
FF ProfilePath: C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\e6q80h2i.default [2020-03-22]
FF ProfilePath: C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\ykddzvn3.default-release [2022-02-17]
FF HKU\S-1-5-21-3018063554-2676166695-2556138355-1001\...\Firefox\Extensions: [KVAllmytube@KeepVid.com] - C:\Program Files (x86)\Wondershare\Wondershare AllMyTube\BrowserPlugin\kvallmytube@keepvid.com_xpi = & gt; nie znaleziono
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - & gt; C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation - & gt; Microsoft Corporation)
FF Plugin: Adobe Acrobat - & gt; C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-12-24] (Adobe Inc. - & gt; Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - & gt; C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation - & gt; Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - & gt; C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation - & gt; Microsoft Corporation)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2020-01-07]
Chrome:
=======
CHR Profile: C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default [2022-02-17]
CHR Notifications: Default - & gt; hxxps://meet.google.com; hxxps://zalamo.com
CHR Extension: (Prezentacje) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-01-07]
CHR Extension: (Dokumenty) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-01-07]
CHR Extension: (Dysk Google) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-25]
CHR Extension: (YouTube) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-01-07]
CHR Extension: (Arkusze) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-01-07]
CHR Extension: (Dokumenty Google offline) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-01-24]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Profile: C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-02-17]
CHR Extension: (Prezentacje) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-08-21]
CHR Extension: (Dokumenty) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2020-08-21]
CHR Extension: (Dysk Google) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-08-21]
CHR Extension: (YouTube) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-08-21]
CHR Extension: (Arkusze) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-08-21]
CHR Extension: (Dokumenty Google offline) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-08-21]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-08-21]
CHR Extension: (Gmail) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-08-21]
CHR Extension: (Chrome Media Router) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-08-21]
CHR Profile: C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\System Profile [2022-02-17]
CHR HKU\S-1-5-21-3018063554-2676166695-2556138355-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo]
==================== Usługi (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. - & gt; Adobe Inc.)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [321536 2021-08-20] (Brother Industries, Ltd.) [Brak podpisu cyfrowego]
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [3141480 2022-01-22] (ESET, spol. s r.o. - & gt; ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [3141480 2022-01-22] (ESET, spol. s r.o. - & gt; ESET)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1327400 2017-09-05] (HP Inc. - & gt; HP Inc.)
R2 HPAppHelperCap; C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe [756216 2021-12-14] (HP Inc. - & gt; HP Inc.)
R2 HPDiagsCap; C:\Program Files\HP\HP Enabling Services\DiagsCap.exe [755192 2021-12-14] (HP Inc. - & gt; HP Inc.)
R2 HPJumpStartBridge; C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [471040 2017-05-23] (HP Inc. - & gt; HP Inc.)
R2 HPNetworkCap; C:\Program Files\HP\HP Enabling Services\NetworkCap.exe [753184 2021-12-14] (HP Inc. - & gt; HP Inc.)
R2 HPSysInfoCap; C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe [755192 2021-12-14] (HP Inc. - & gt; HP Inc.)
R2 HPWMISVC; C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-13] (HP Inc. - & gt; HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Brak podpisu cyfrowego]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2016-03-23] (CyberLink Corp. - & gt; CyberLink)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. - & gt; Samsung Electronics Co., Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher - & gt; Microsoft Corporation)
===================== Sterowniki (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R2 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv_bgp.sys [315976 2020-02-29] (Bluestack Systems, Inc - & gt; Bluestack System Inc.)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [184464 2022-01-22] (ESET, spol. s r.o. - & gt; ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [122944 2022-01-22] (ESET, spol. s r.o. - & gt; ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15824 2021-03-15] (Microsoft Windows Early Launch Anti-malware Publisher - & gt; ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [201976 2022-01-22] (ESET, spol. s r.o. - & gt; ESET)
R2 ekbdflt; C:\WINDOWS\System32\drivers\ekbdflt.sys [43904 2022-01-22] (ESET, spol. s r.o. - & gt; ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [69704 2022-01-22] (ESET, spol. s r.o. - & gt; ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [110560 2022-01-22] (ESET, spol. s r.o. - & gt; ESET)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18816 2016-11-25] (Microsoft Windows Hardware Compatibility Publisher - & gt; Huawei Technologies Co., Ltd.)
S3 HtcVCom32; C:\WINDOWS\System32\drivers\HtcVComV64.sys [121800 2010-03-09] (Sqa.com(Test) - & gt; QUALCOMM Incorporated)
S3 HWHandSet; C:\WINDOWS\System32\drivers\hw_quusbmdm.sys [223232 2016-11-25] (Microsoft Windows Hardware Compatibility Publisher - & gt; Huawei Technologies Co., Ltd.)
S3 hwusb_cdcacm; C:\WINDOWS\System32\drivers\hw_cdcacm.sys [126592 2016-11-25] (Microsoft Windows Hardware Compatibility Publisher - & gt; Huawei Technologies Co., Ltd.)
S3 hw_usbdev; C:\WINDOWS\System32\drivers\hw_usbdev.sys [116864 2016-11-25] (Microsoft Windows Hardware Compatibility Publisher - & gt; Huawei Technologies Co., Ltd.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. - & gt; Samsung Electronics Co., Ltd.)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64912 2017-05-18] (Samsung Electronics Co., Ltd. - & gt; QUALCOMM Incorporated)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. - & gt; Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher - & gt; Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows - & gt; Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows - & gt; Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [37280 2021-11-23] (HP Inc. - & gt; HP)
U3 aspnet_state; Brak ImagePath
S3 dg_ssudbus; \SystemRoot\system32\DRIVERS\ssudbus2.sys [X]
==================== NetSvcs (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
==================== Jeden miesiąc (utworzone) (filtrowane) =========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2022-02-17 13:44 - 2022-02-17 14:27 - 000024637 _____ C:\Users\Adrian\Desktop\FRST.txt
2022-02-17 13:42 - 2022-02-17 14:27 - 000000000 ____D C:\FRST
2022-02-17 13:38 - 2022-02-17 13:38 - 002312192 _____ (Farbar) C:\Users\Adrian\Desktop\FRST64.exe
2022-02-17 12:52 - 2022-02-17 13:49 - 000000000 ____D C:\Users\Adrian\Desktop\Kaczor Donald
2022-02-17 11:06 - 2022-02-17 11:07 - 027987456 _____ C:\Users\Adrian\Desktop\ChomikBox.msi
2022-02-16 16:38 - 2022-02-16 16:38 - 000068030 _____ C:\Users\Adrian\Desktop\Opieka i edukacja.odp
2022-02-16 16:35 - 2022-02-16 16:37 - 000000000 ____D C:\Users\Adrian\Desktop\KOZ sobota test
2022-02-16 16:16 - 2022-02-16 16:30 - 000000000 ____D C:\Users\Adrian\Desktop\badania naukowe
2022-02-12 19:12 - 2022-02-12 19:12 - 000011813 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-02-12 19:11 - 2022-02-12 19:11 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2022-02-12 19:09 - 2022-02-12 19:09 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2022-02-12 19:09 - 2022-02-12 19:09 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2022-02-12 19:08 - 2022-02-12 19:08 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-02-12 18:16 - 2022-02-12 18:16 - 000000000 ___HD C:\$WinREAgent
2022-02-11 14:39 - 2022-02-14 15:21 - 000000000 ____D C:\Users\Adrian\Desktop\Photos-001
2022-02-02 18:53 - 2022-02-12 22:00 - 000000000 ____D C:\Users\Adrian\Desktop\sezon 4
2022-01-30 22:33 - 2022-02-06 21:24 - 000000000 ____D C:\Users\Adrian\Desktop\2022.01 Zlecenie II TV screen Dr.Max
2022-01-29 13:13 - 2022-01-29 14:16 - 000049664 ____H C:\Users\Adrian\Desktop\~WRL0001.tmp
2022-01-23 19:58 - 2022-02-17 12:31 - 000002966 _____ C:\WINDOWS\system32\Tasks\AutoKMS
2022-01-21 10:56 - 2022-02-10 20:59 - 000000000 ____D C:\Users\Adrian\Desktop\Praca socjalna
==================== Jeden miesiąc (zmodyfikowane) ==================
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2022-02-17 14:25 - 2021-12-25 22:34 - 000000000 ____D C:\Program Files (x86)\Digiarty
2022-02-17 14:23 - 2021-12-25 22:52 - 000000000 ____D C:\Users\Adrian\AppData\Roaming\ActivePresenter
2022-02-17 14:22 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-02-17 13:59 - 2020-09-22 08:08 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-02-17 13:58 - 2020-01-07 01:17 - 000000000 ____D C:\Program Files (x86)\Google
2022-02-17 13:10 - 2020-01-07 08:01 - 000000000 ____D C:\Users\Adrian\AppData\Local\D3DSCache
2022-02-17 12:40 - 2020-01-08 13:39 - 000000000 ____D C:\Users\Adrian\AppData\Local\ChomikBox
2022-02-17 12:39 - 2020-01-08 13:39 - 000000000 ____D C:\Users\Adrian\.gstreamer-0.10
2022-02-17 12:35 - 2020-09-22 08:26 - 001836342 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-02-17 12:35 - 2019-12-07 16:08 - 000787066 _____ C:\WINDOWS\system32\perfh015.dat
2022-02-17 12:35 - 2019-12-07 16:08 - 000152910 _____ C:\WINDOWS\system32\perfc015.dat
2022-02-17 12:35 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2022-02-17 12:31 - 2020-01-07 09:29 - 000000306 _____ C:\WINDOWS\Tasks\AutoKMS.job
2022-02-17 12:28 - 2020-01-07 00:33 - 000000000 __SHD C:\Users\Adrian\IntelGraphicsProfiles
2022-02-17 12:27 - 2020-09-22 08:50 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-02-17 12:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-02-17 12:26 - 2020-09-22 08:07 - 000008192 ___SH C:\DumpStack.log.tmp
2022-02-17 12:26 - 2019-12-07 10:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2022-02-17 12:23 - 2020-01-07 00:33 - 000000000 ____D C:\Users\Adrian\AppData\Local\Packages
2022-02-17 12:23 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-02-17 12:23 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-02-17 12:14 - 2020-11-29 16:28 - 000000000 ____D C:\Program Files (x86)\Steam
2022-02-17 12:12 - 2020-09-15 04:45 - 000000000 ___DC C:\WINDOWS\Panther
2022-02-17 11:22 - 2020-01-15 15:44 - 000000000 ____D C:\Users\Adrian\AppData\Roaming\GHISLER
2022-02-17 11:22 - 2020-01-15 15:44 - 000000000 ____D C:\totalcmd
2022-02-16 15:11 - 2020-03-24 17:49 - 000000000 ____D C:\Users\Adrian\Desktop\Filmy
2022-02-16 13:23 - 2021-01-17 20:39 - 000000000 ____D C:\Users\Adrian\AppData\Local\ElevatedDiagnostics
2022-02-16 12:29 - 2020-01-07 01:19 - 000002314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-02-13 02:13 - 2020-09-22 08:07 - 000552952 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-02-13 02:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-02-13 02:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-02-13 02:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-02-13 02:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-02-13 02:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-02-13 02:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-02-13 02:06 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-02-13 02:06 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-02-13 02:06 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-02-13 02:06 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2022-02-13 02:01 - 2020-09-22 08:15 - 000000000 ____D C:\Users\Adrian
2022-02-12 20:45 - 2020-01-07 07:56 - 000000000 ___RD C:\Users\Adrian\Desktop\FAKTURY!!
2022-02-12 20:44 - 2020-03-22 14:51 - 000000000 ____D C:\Users\Adrian\AppData\Roaming\AIMP
2022-02-12 19:23 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-02-12 19:08 - 2020-09-22 08:14 - 002877440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-02-12 18:14 - 2020-01-08 00:28 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-02-12 18:07 - 2020-01-08 00:28 - 149611728 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-02-11 14:44 - 2021-03-02 16:41 - 000000000 ____D C:\Users\Adrian\Desktop\POS MEDIA
2022-02-11 14:42 - 2020-01-09 22:33 - 000000000 ____D C:\Users\Adrian\AppData\Roaming\XnViewMP
2022-02-07 05:42 - 2020-09-22 08:50 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2022-01-30 21:51 - 2021-11-20 11:53 - 000000000 ____D C:\Users\Adrian\Desktop\Kutno
2022-01-28 14:02 - 2020-01-07 07:59 - 000000000 ___RD C:\Users\Adrian\Desktop\Vlepka
2022-01-27 08:11 - 2020-01-06 21:31 - 000000000 ___HD C:\Users\Adrian\Desktop\Nowy folder
2022-01-25 15:19 - 2020-01-07 07:56 - 000000000 ___RD C:\Users\Adrian\Desktop\DOM
2022-01-22 07:46 - 2019-11-29 08:30 - 000201976 _____ (ESET) C:\WINDOWS\system32\Drivers\ehdrv.sys
2022-01-22 07:46 - 2019-11-29 08:30 - 000184464 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys
2022-01-22 07:46 - 2019-11-29 08:30 - 000122944 _____ (ESET) C:\WINDOWS\system32\Drivers\edevmon.sys
2022-01-22 07:46 - 2019-11-29 08:30 - 000110560 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwwfp.sys
2022-01-22 07:46 - 2019-11-29 08:30 - 000069704 _____ (ESET) C:\WINDOWS\system32\Drivers\epfw.sys
2022-01-22 07:46 - 2019-08-01 18:06 - 000043904 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys
2022-01-21 10:53 - 2020-09-22 08:50 - 000003570 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-01-21 10:53 - 2020-09-22 08:50 - 000003446 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
==================== SigCheck ============================
(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
==================== Koniec FRST.txt ========================