Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 3-07-2019 Uruchomiony przez spejson023 (administrator) MATI123 (Acer Aspire E5-571G) (07-07-2019 15:37:41) Uruchomiony z C:\Users\spejson023\Downloads Załadowane profile: spejson023 (Dostępne profile: spejson023) Platform: Windows 8.1 (Update) (X64) Język: Polski (Polska) Domyślna przeglądarka: Opera Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) () [Brak podpisu cyfrowego] C:\Users\spejson023\zeebei.exe (Acer Incorporated -> Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe (Acer Incorporated -> Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe (Acer Incorporated -> Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe (Acer Incorporated -> Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe (Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe (Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe (Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (CyberLink -> ) C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\Win64\UnrealCEFSubProcess.exe (Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe (Fortemedia Inc -> ) C:\Program Files\Realtek\Audio\HDA\FMAPP.exe (Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler.exe (Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler64.exe (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxTray.exe (Intel(R) Corporation) [Brak podpisu cyfrowego] C:\Program Files\Intel\iCLS Client\HeciServer.exe (McAfee, LLC -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\servicehost.exe (McAfee, LLC -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\uihost.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) [Brak podpisu cyfrowego] C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.22013_x64__8wekyb3d8bbwe\livecomm.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Opera Software AS -> Opera Software) C:\Users\spejson023\AppData\Local\Programs\Opera\60.0.3255.170\opera.exe (Opera Software AS -> Opera Software) C:\Users\spejson023\AppData\Local\Programs\Opera\60.0.3255.170\opera.exe (Opera Software AS -> Opera Software) C:\Users\spejson023\AppData\Local\Programs\Opera\60.0.3255.170\opera.exe (Opera Software AS -> Opera Software) C:\Users\spejson023\AppData\Local\Programs\Opera\60.0.3255.170\opera.exe (Opera Software AS -> Opera Software) C:\Users\spejson023\AppData\Local\Programs\Opera\60.0.3255.170\opera.exe (Opera Software AS -> Opera Software) C:\Users\spejson023\AppData\Local\Programs\Opera\60.0.3255.170\opera.exe (Opera Software AS -> Opera Software) C:\Users\spejson023\AppData\Local\Programs\Opera\60.0.3255.170\opera.exe (Opera Software AS -> Opera Software) C:\Users\spejson023\AppData\Local\Programs\Opera\60.0.3255.170\opera.exe (Opera Software AS -> Opera Software) C:\Users\spejson023\AppData\Local\Programs\Opera\60.0.3255.170\opera.exe (Opera Software AS -> Opera Software) C:\Users\spejson023\AppData\Local\Programs\Opera\60.0.3255.170\opera.exe (Opera Software AS -> Opera Software) C:\Users\spejson023\AppData\Local\Programs\Opera\60.0.3255.170\opera.exe (Opera Software AS -> Opera Software) C:\Users\spejson023\AppData\Local\Programs\Opera\60.0.3255.170\opera.exe (Opera Software AS -> Opera Software) C:\Users\spejson023\AppData\Local\Programs\Opera\60.0.3255.170\opera_crashreporter.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Pokki -> Pokki) C:\Users\spejson023\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe (Pokki -> Pokki) C:\Users\spejson023\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe (Pokki -> Pokki) C:\Users\spejson023\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe (Pokki -> Pokki) C:\Users\spejson023\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Spotify AB -> Spotify Ltd) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-18] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe******************************************************************** [53504 2014-06-27] () [Brak podpisu cyfrowego] HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [645456 2019-04-01] (Oracle America, Inc. -> Oracle Corporation) HKU\S-1-5-21-4291272340-2643005322-3467024192-1002\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [35519888 2019-06-22] (Epic Games Inc. -> Epic Games, Inc.) HKU\S-1-5-21-4291272340-2643005322-3467024192-1002\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [735336 2019-03-14] (AVB Disc Soft, SIA -> Disc Soft Ltd) HKU\S-1-5-21-4291272340-2643005322-3467024192-1002\...\Run: [zeebei] => C:\Users\spejson023\zeebei.exe [61440 2019-04-09] () [Brak podpisu cyfrowego] HKU\S-1-5-21-4291272340-2643005322-3467024192-1002\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1168896 2014-09-20] (Spotify AB -> Spotify Ltd) HKU\S-1-5-21-4291272340-2643005322-3467024192-1002\...\Run: [Discord] => C:\Users\spejson023\AppData\Local\Discord\app-0.0.305\Discord.exe [81780056 2019-03-07] (Discord Inc. -> Discord Inc.) HKU\S-1-5-21-4291272340-2643005322-3467024192-1002\...\Run: [Wargaming.net Game Center] => "C:\ProgramData\Wargaming.net\GameCenter\wgc.exe" --background '' HKU\S-1-5-21-4291272340-2643005322-3467024192-1002\...\Run: [NoxDaemon] => C:\Users\spejson023\AppData\Roaming\NoxSrv\NoxSrv.exe [115712 2019-06-23] () [Brak podpisu cyfrowego] HKU\S-1-5-21-4291272340-2643005322-3467024192-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3148576 2019-06-18] (Valve -> Valve Corporation) HKU\S-1-5-21-4291272340-2643005322-3467024192-1002\...\RunOnce: [Application Restart #0] => C:\Users\spejson023\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe [8992976 2019-04-09] (Pokki -> Pokki) HKU\S-1-5-21-4291272340-2643005322-3467024192-1002\...\RunOnce: [FlashPlayerUpdate] => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_171_pepper.exe [1452600 2019-04-13] (Adobe Inc. -> Adobe) HKU\S-1-5-21-4291272340-2643005322-3467024192-1002\...\MountPoints2: {1e9a398c-4678-11e9-8261-f0761c2c864a} - "E:\autorun.exe" HKU\S-1-5-21-4291272340-2643005322-3467024192-1002\...\MountPoints2: {1e9a3d05-4678-11e9-8261-f0761c2c864a} - "E:\autorun.exe" HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\75.0.3770.100\Installer\chrmstp.exe [2019-06-20] (Google LLC -> Google LLC) HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\WIDCOMM\Bluetooth Software\\BtwCP.dll [2014-02-19] (Broadcom Corporation -> Broadcom Corporation.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2014-09-20] ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {0C3FCC09-81F0-443B-896C-0415C6DC0B63} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_171_pepper.exe [1452600 2019-04-13] (Adobe Inc. -> Adobe) Task: {1E3C38E6-1B7E-4D34-9103-85850D63CF4E} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [324328 2014-06-26] (Acer Incorporated -> Acer Incorporate) Task: {2CF2BA68-88FF-4F8E-AAE0-E483D3841798} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2281944 2019-06-04] (AVAST Software s.r.o. -> AVAST Software) Task: {36544E88-7725-4F77-8888-5D0C9BA322E7} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3724680 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) Task: {3B8E751E-C4DB-41EC-9F89-D8B73111BE13} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [324328 2014-06-26] (Acer Incorporated -> Acer Incorporate) Task: {4C0D8F9A-0B45-4945-B087-49AC87AD34A6} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [384232 2014-06-12] (Acer Incorporated -> Acer Incorporated) Task: {4C65D968-AE2F-4239-8C84-9AED32FE69FC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-03-15] (Google Inc -> Google Inc.) Task: {4E4224F8-26C5-48D3-AAD7-9FC19F89E06B} - System32\Tasks\CareCenter\AvastUI.exe_Reg_HKLMWow6432Run => C:\Program Files\AVAST Software\Avast\AvLaunch.exe Task: {4FCA1F3A-21F7-464F-B13C-E6A549E552FA} - System32\Tasks\ACCBackgroundApplication => C:\Program Files (x86)\Acer\Care Center\ACCStd.exe [4696880 2018-05-28] (Acer Incorporated -> ) Task: {64C35D30-135E-49BC-BF12-F9F39791D059} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-03-15] (Google Inc -> Google Inc.) Task: {6ACEB247-7A01-49CA-BBF3-C463E14D105B} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [439016 2014-06-10] (Acer Incorporated -> Acer Incorporate) Task: {73A54A5C-5197-497E-854F-E005E1347D4B} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [790920 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) Task: {78E60126-9F9D-4052-A2D3-8003D5DCE437} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [841096 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) Task: {7B33C2A4-7AB2-4573-8EC3-2712DEE7B77D} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2920752 2018-05-28] (Acer Incorporated -> ) Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [490728 2014-06-17] (Acer Incorporated -> Acer Incorporated) Task: {98EC7540-92EC-4FB7-B350-2FDBBC45ECF7} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [702856 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) Task: {9CC685E1-C319-4A6F-AC46-095CAC2BFF54} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877448 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) Task: {A673C7F6-821D-434F-9895-EA2660452E24} - System32\Tasks\SweetLabs App Platform => C:\Users\spejson023\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe [7561424 2019-04-09] (Pokki -> Pokki) Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [473904 2018-05-28] (Acer Incorporated -> Acer Incorporated) Task: {C504722D-122E-40EC-A95D-4A572D2A7144} - System32\Tasks\CareCenter\DAEMON Tools Lite Automount_Reg_HKCURun_S-1-5-21-4291272340-2643005322-3467024192-1002 => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [735336 2019-03-14] (AVB Disc Soft, SIA -> Disc Soft Ltd) Task: {C59203F8-8B53-4C97-B97B-4FBEA8FDBF55} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877448 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) Task: {CC3976E8-4061-4BC1-A718-4D1A3DB92BBD} - System32\Tasks\Opera scheduled Autoupdate 1552314485 => C:\Users\spejson023\AppData\Local\Programs\Opera\launcher.exe [1493592 2019-06-14] (Opera Software AS -> Opera Software) Task: {CDB03AD6-081C-4A95-9995-630FC041069B} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [41264 2018-05-28] (Acer Incorporated -> ) Task: {D0CC5D90-D4D3-4C10-9C38-D3DFAF42167F} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [572808 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) Task: {D650A8DA-AB2D-47A3-B92C-E9675EC2D134} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877448 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) Task: {D73B1E43-25ED-42C6-956B-2DBE412C5D00} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877448 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) Task: {DF2C9AC7-0200-4BBF-941D-754C69B29AD2} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [790920 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) Task: {F755230F-C227-4F17-8539-8168B8570140} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2524416 2014-07-01] (Acer Incorporated -> ) Task: {FA2E2A59-3922-45BA-8052-F3A45867C810} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [841096 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.10.20 Tcpip\..\Interfaces\{01E441DB-7B0B-429F-8CE3-90149E4ED12C}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{7D3A3724-B0C6-417B-AE9E-7EEE43EA9AD3}: [DhcpNameServer] 192.168.10.20 Internet Explorer: ================== HKU\S-1-5-21-4291272340-2643005322-3467024192-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com/?pc=ACJB HKU\S-1-5-21-4291272340-2643005322-3467024192-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-4291272340-2643005322-3467024192-1002 -> DefaultScope {190F4328-8D6B-41D2-8484-E1CF966F3E60} URL = SearchScopes: HKU\S-1-5-21-4291272340-2643005322-3467024192-1002 -> {190F4328-8D6B-41D2-8484-E1CF966F3E60} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_211\bin\ssv.dll [2019-05-10] (Oracle America, Inc. -> Oracle Corporation) BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2019-06-28] (McAfee, LLC -> McAfee, Inc.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_211\bin\jp2ssv.dll [2019-05-10] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2019-06-28] (McAfee, LLC -> McAfee, Inc.) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll Brak pliku Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll Brak pliku FireFox: ======== FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2019-06-28] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi FF Plugin: @java.com/DTPlugin,version=11.211.2 -> C:\Program Files\Java\jre1.8.0_211\bin\dtplugin\npDeployJava1.dll [2019-05-10] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.211.2 -> C:\Program Files\Java\jre1.8.0_211\bin\plugin2\npjp2.dll [2019-05-10] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] (Foxit Corporation -> ) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] (Foxit Corporation -> ) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC) Chrome: ======= CHR Profile: C:\Users\spejson023\AppData\Local\Google\Chrome\User Data\Default [2019-07-05] CHR Extension: (Prezentacje) - C:\Users\spejson023\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-03-15] CHR Extension: (Dokumenty) - C:\Users\spejson023\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-03-15] CHR Extension: (Dysk Google) - C:\Users\spejson023\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-03-15] CHR Extension: (YouTube) - C:\Users\spejson023\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-03-15] CHR Extension: (Avast SafePrice | Porównania, promocje, kupony) - C:\Users\spejson023\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2019-03-15] CHR Extension: (Arkusze) - C:\Users\spejson023\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-03-15] CHR Extension: (McAfee® WebAdvisor) - C:\Users\spejson023\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2019-05-24] CHR Extension: (Dokumenty Google offline) - C:\Users\spejson023\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-03-15] CHR Extension: (Avast Online Security) - C:\Users\spejson023\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-05-15] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\spejson023\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-03-15] CHR Extension: (Gmail) - C:\Users\spejson023\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-15] CHR Extension: (Chrome Media Router) - C:\Users\spejson023\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-05-27] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx ==================== Usługi (filtrowane) ==================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8473200 2019-03-27] (BattlEye Innovations e.K. -> ) R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [3053312 2014-06-27] (Acer Incorporated -> Acer Incorporated) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4131944 2019-03-14] (AVB Disc Soft, SIA -> Disc Soft Ltd) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [802432 2019-03-13] (EasyAntiCheat Oy -> EasyAntiCheat Ltd) R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated -> Acer Incorporated) R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation - Software and Firmware Products -> Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel® Trusted Connect Service -> Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) S2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2014-06-10] (Acer Incorporated -> Acer Incorporate) S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes) R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [899264 2019-06-28] (McAfee, LLC -> McAfee, Inc.) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [790920 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [790920 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation) R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporated -> Acer Incorporate) R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] (CyberLink -> ) R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporated -> Acer Incorporate) S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (Acer Incorporated -> acer) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" R2 NvTelemetryContainer; "C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvTelemetry\plugins" -r ===================== Sterowniki (filtrowane) ====================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) S3 bcmfn2; C:\WINDOWS\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Broadcom Corporation -> Windows (R) Win 7 DDK provider) R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2019-03-14] (AVB Disc Soft, SIA -> Disc Soft Ltd) R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2019-03-14] (AVB Disc Soft, SIA -> Disc Soft Ltd) R3 ETDI2C; C:\WINDOWS\system32\DRIVERS\ETDI2C.sys [173384 2014-04-09] (ELAN Microelectronics Corporation -> ELAN Microelectronic Corp.) R3 iaLPSS_I2C; C:\WINDOWS\System32\drivers\iaLPSS_I2C.sys [120312 2014-06-03] (Intel Corporation - Software and Firmware Products -> Intel Corporation) R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [21360 2013-07-18] (Acer Incorporated -> Acer Incorporated) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-01-16] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [70024 2018-10-01] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [66792 2018-10-03] (NVIDIA Corporation -> NVIDIA Corporation) R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [14680 2013-07-18] (Acer Incorporated -> Acer Incorporated) R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [506072 2019-03-17] (Realtek Semiconductor Corp -> Realsil Semiconductor Corporation) R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [393880 2019-03-14] (Disc Soft Ltd -> Duplex Secure Ltd.) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation) R1 YSDrv; C:\Program Files (x86)\Bignox\BigNoxVM\RT\YSDrv.sys [310536 2019-06-23] (Beijing Duodian Online Science and Technology Co.,Ltd -> BigNox Corporation) S5 EasyAntiCheatSys; <==== UWAGA: Zablokowana usługa ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-07-07 15:37 - 2019-07-07 15:38 - 000030454 _____ C:\Users\spejson023\Downloads\FRST.txt 2019-07-07 15:37 - 2019-07-07 15:37 - 000000000 ____D C:\FRST 2019-07-07 15:32 - 2019-07-07 15:37 - 002420224 _____ (Farbar) C:\Users\spejson023\Downloads\FRST64.exe 2019-07-07 13:30 - 2019-07-07 13:32 - 036514017 _____ C:\Users\spejson023\Downloads\blazingpack_1.8.8 (2).zip 2019-06-30 16:21 - 2019-06-30 16:26 - 036510523 _____ C:\Users\spejson023\Downloads\blazingpack_1.8.8 (1).zip 2019-06-30 13:14 - 2019-06-30 13:15 - 000388360 _____ C:\WINDOWS\Minidump\063019-23218-01.dmp 2019-06-29 13:16 - 2019-06-29 13:16 - 000388752 _____ C:\WINDOWS\Minidump\062919-26921-01.dmp 2019-06-29 12:23 - 2019-06-29 12:23 - 000000000 ____D C:\Users\spejson023\AppData\Local\NoxPopup 2019-06-26 16:28 - 2019-06-30 13:14 - 602245343 _____ C:\WINDOWS\MEMORY.DMP 2019-06-26 16:28 - 2019-06-30 13:14 - 000000000 ____D C:\WINDOWS\Minidump 2019-06-26 16:28 - 2019-06-26 16:28 - 000411984 _____ C:\WINDOWS\Minidump\062619-27843-01.dmp 2019-06-26 16:14 - 2019-06-26 16:14 - 000019680 _____ (EasyAntiCheat Oy) C:\WINDOWS\system32\eac_usermode_24388574404982.dll 2019-06-24 16:32 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll 2019-06-24 16:32 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll 2019-06-24 16:32 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll 2019-06-24 16:32 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll 2019-06-24 16:32 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll 2019-06-24 16:32 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll 2019-06-24 16:32 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll 2019-06-24 16:32 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll 2019-06-24 16:32 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll 2019-06-24 16:32 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll 2019-06-24 16:32 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll 2019-06-24 16:32 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll 2019-06-24 16:32 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll 2019-06-24 16:32 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll 2019-06-24 16:32 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll 2019-06-24 16:32 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll 2019-06-24 16:32 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll 2019-06-23 17:00 - 2019-06-23 17:00 - 000000219 _____ C:\Users\spejson023\Desktop\Counter-Strike Global Offensive.url 2019-06-23 17:00 - 2019-06-23 17:00 - 000000000 ____D C:\Users\spejson023\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2019-06-23 15:00 - 2019-06-23 15:27 - 000000000 ____D C:\Users\spejson023\AppData\Local\Steam 2019-06-23 14:40 - 2019-06-26 18:16 - 000000000 ____D C:\Program Files (x86)\Steam 2019-06-23 14:40 - 2019-06-23 14:40 - 000000943 _____ C:\Users\Public\Desktop\Steam.lnk 2019-06-23 14:40 - 2019-06-23 14:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2019-06-23 13:53 - 2019-06-30 13:22 - 000000295 _____ C:\Users\spejson023\d4ac4633ebd6440fa397b84f1bc94a3c.7z 2019-06-23 13:39 - 2019-06-30 13:20 - 000000000 ____D C:\Users\spejson023\.android 2019-06-23 13:38 - 2019-06-30 13:20 - 000000000 ____D C:\Users\spejson023\AppData\Local\NoxSrv 2019-06-23 13:38 - 2019-06-23 13:38 - 000000066 _____ C:\Users\spejson023\inittk.ini 2019-06-23 13:38 - 2019-06-23 13:38 - 000000053 _____ C:\Users\spejson023\useruid.ini 2019-06-23 13:38 - 2019-06-23 13:38 - 000000045 _____ C:\Users\spejson023\nuuid.ini 2019-06-23 13:38 - 2019-06-23 13:38 - 000000041 _____ C:\Users\spejson023\inst.ini 2019-06-23 13:38 - 2019-06-23 13:38 - 000000000 ____D C:\Users\spejson023\Nox_share 2019-06-23 13:30 - 2019-06-30 13:20 - 000000000 ____D C:\Users\spejson023\vmlogs 2019-06-23 13:30 - 2019-06-30 13:20 - 000000000 ____D C:\Users\spejson023\.BigNox 2019-06-23 13:30 - 2019-06-23 13:30 - 000000947 _____ C:\Users\spejson023\Desktop\Nox.lnk 2019-06-23 13:30 - 2019-06-23 13:30 - 000000000 ____D C:\Users\spejson023\AppData\Roaming\NoxSrv 2019-06-23 13:30 - 2019-06-23 13:30 - 000000000 ____D C:\Users\spejson023\AppData\Roaming\Microsoft\Windows\Start Menu\Nox 2019-06-23 13:29 - 2019-06-23 13:29 - 000000000 ____D C:\Program Files (x86)\Bignox 2019-06-23 13:28 - 2019-06-30 13:22 - 000000000 ____D C:\Users\spejson023\AppData\Local\Nox 2019-06-23 13:28 - 2019-06-23 13:28 - 000000000 ____D C:\Program Files (x86)\Nox 2019-06-23 12:56 - 2019-06-23 12:56 - 001573568 _____ C:\Users\spejson023\Desktop\SteamSetup.exe 2019-06-23 09:14 - 2019-06-23 09:51 - 000000000 ____D C:\Users\spejson023\AppData\Local\BlueStacksSetup 2019-06-23 09:14 - 2019-06-23 09:17 - 000000000 ____D C:\Users\Public\BlueStacks 2019-06-23 09:14 - 2019-06-23 09:14 - 000000000 ____D C:\Users\spejson023\AppData\Local\BlueStacks 2019-06-20 19:18 - 2019-06-20 19:18 - 000000000 ____D C:\Users\spejson023\AppData\Roaming\Foxit Software ==================== Jeden miesiąc (zmodyfikowane) ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2019-07-07 14:25 - 2019-03-10 22:48 - 000004000 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{CB9628BF-FF80-4EFD-BB8A-61C13CFBC8D8} 2019-07-07 13:57 - 2019-03-30 21:03 - 000000000 ____D C:\ProgramData\NVIDIA 2019-07-07 13:46 - 2019-05-10 16:07 - 000000000 ____D C:\Users\spejson023\AppData\Roaming\.minecraft 2019-07-07 13:38 - 2019-05-10 18:26 - 000000000 ____D C:\Users\spejson023\AppData\Roaming\.blazingpack 2019-07-07 13:35 - 2019-03-11 15:53 - 000000000 ____D C:\Users\spejson023\AppData\Local\CrashDumps 2019-07-07 13:22 - 2019-03-14 20:55 - 000386560 ___SH C:\Users\spejson023\Desktop\Thumbs.db 2019-07-07 11:30 - 2019-03-10 22:37 - 000000000 ____D C:\Users\spejson023\AppData\Local\SweetLabs App Platform 2019-07-04 11:01 - 2019-03-11 16:36 - 000000000 ____D C:\Users\spejson023\OneDrive 2019-07-01 18:11 - 2013-08-22 16:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2019-07-01 18:11 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI 2019-06-30 18:13 - 2019-03-10 22:44 - 000003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4291272340-2643005322-3467024192-1002 2019-06-30 16:41 - 2019-05-10 16:07 - 000000000 ____D C:\Program Files (x86)\Minecraft Launcher 2019-06-30 13:22 - 2019-03-10 22:37 - 000000000 ____D C:\Users\spejson023 2019-06-24 19:21 - 2019-05-01 15:26 - 000000000 ____D C:\Users\spejson023\AppData\Roaming\Discord 2019-06-24 16:48 - 2019-05-12 14:52 - 000000000 ____D C:\Users\spejson023\AppData\Roaming\TS3Client 2019-06-23 19:06 - 2019-04-06 13:49 - 000000087 _____ C:\Users\spejson023\Desktop\Nowy dokument tekstowy.txt 2019-06-23 14:11 - 2013-08-22 15:36 - 000000000 ____D C:\WINDOWS\Inf 2019-06-23 13:29 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\Registration 2019-06-20 19:00 - 2019-05-12 16:10 - 000000000 ____D C:\Users\spejson023\AppData\Roaming\Wargaming.net 2019-06-20 19:00 - 2019-05-12 16:10 - 000000000 ____D C:\Games 2019-06-20 18:55 - 2019-04-20 11:25 - 000000000 ____D C:\Users\spejson023\AppData\Local\WarThunder 2019-06-20 09:15 - 2019-03-15 08:33 - 000002214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-06-20 09:15 - 2019-03-15 08:33 - 000002173 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2019-06-18 13:59 - 2019-03-11 16:28 - 000004130 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1552314485 2019-06-18 13:59 - 2019-03-11 16:28 - 000001462 _____ C:\Users\spejson023\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Przeglądarka Opera.lnk 2019-06-15 13:03 - 2019-03-17 12:53 - 000000000 ____D C:\Users\spejson023\AppData\Roaming\CareCenter 2019-06-10 19:28 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\NDF ==================== Pliki w katalogu głównym wybranych folderów ================ 2019-04-09 17:54 - 2019-04-09 17:54 - 000061440 __RSH () C:\Users\spejson023\zeebei.exe ==================== SigCheck =============================== (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) LastRegBack: 2019-07-05 18:58 ==================== Koniec FRST.txt ============================