Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 09-01-2021 Uruchomiony przez Kinga (administrator) LENOVO-PC (LENOVO 80G0) (10-01-2021 18:11:41) Uruchomiony z C:\Users\Kinga\Downloads Załadowane profile: Kinga Platform: Windows 8.1 Connected (Update) (X64) Język: Polski (Polska) Domyślna przeglądarka: Chrome Tryb startu: Normal ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) () [Brak podpisu cyfrowego] C:\Program Files\Lenovo PhoneCompanion\adb.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Inc. -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2> (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Atheros) [Brak podpisu cyfrowego] C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\aswEngSrv.exe (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\aswidsagent.exe (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\avgToolsSvc.exe (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe <3> (Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe (CyberLink -> ) C:\Program Files\CyberLink\Shared files\RichVideo64.exe (CyberLink Corp. -> CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (CyberLink Corp. -> CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe (Fortemedia Inc -> ) C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <22> (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxTray.exe (Intel(R) Corporation) [Brak podpisu cyfrowego] C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe (JRD COMMUNICATION (SHENZHEN) LTD -> ) C:\Program Files\T-Mobile\InternetManager_A\IK40\BackgroundService\ModemListener.exe (JRD COMMUNICATION (SHENZHEN) LTD -> ) C:\Program Files\T-Mobile\InternetManager_A\IK40\BackgroundService\ServiceManager.exe (Lenovo (Beijing) Limited -> ) C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe (Lenovo (Beijing) Limited -> Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe (Lenovo (Beijing) Limited -> Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe (Lenovo (Beijing) Limited -> Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe (Lenovo (Beijing) Limited -> Lenovo(beijing) Limited) C:\Windows\System32\LenovoWiFiHotspotSvr.exe (Lenovo (Beijing) Limited -> Lenovo) C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe (Lenovo (Beijing) Limited -> Lenovo) C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe (LENOVO -> LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe (LENOVO -> Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe (Maxthon (Asia) Limited. -> Maxthon) C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe (Microsoft Corporation -> © 2015 Microsoft Corporation) C:\Users\Kinga\AppData\Local\Microsoft\BingSvc\BingSvc.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation -> Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.EXE (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.19750_none_fa39f32f9b2d0928\TiWorker.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Qualcomm Atheros -> ) [Brak podpisu cyfrowego] C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (Qualcomm Atheros -> Atheros Communications) [Brak podpisu cyfrowego] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [Brak podpisu cyfrowego] C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Realtek Semiconductor Corp -> Realtek semiconductor) C:\Windows\RTFTrack.exe (ZTE CORPORATION -> ) C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\db_daemon.exe (ZTE CORPORATION -> ) C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\dbus-daemon.exe (ZTE CORPORATION -> ZTE) C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\mcserver.exe ==================== Rejestr (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-04] (Conexant Systems, Inc. -> Conexant Systems, Inc.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] (Fortemedia Inc -> ) HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.) [Brak podpisu cyfrowego] HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3276104 2014-05-22] (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) HKLM\...\Run: [RtsFT] => C:\WINDOWS\RTFTrack.exe [6340312 2014-01-21] (Realtek Semiconductor Corp -> Realtek semiconductor) HKLM\...\Run: [PhoneCompanion] => C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe [836592 2014-12-17] (Lenovo (Beijing) Limited -> Lenovo) HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [16094704 2014-12-17] (Lenovo (Beijing) Limited -> Lenovo(beijing) Limited) HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [10841584 2014-12-17] (Lenovo (Beijing) Limited -> Lenovo(beijing) Limited) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated) HKLM\...\Run: [AVGUI.exe] => C:\Program Files (x86)\AVG\Antivirus\AvLaunch.exe [165000 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3402832 2020-09-23] (Adobe Inc. -> Adobe Systems, Incorporated) HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [110344 2014-09-09] (CyberLink Corp. -> CyberLink) HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [492808 2014-09-09] (CyberLink Corp. -> CyberLink Corp.) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [5866032 2020-12-07] (Adobe Inc. -> Adobe Systems Inc.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc. -> Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.) [Brak podpisu cyfrowego] HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle America, Inc. -> Oracle Corporation) HKLM-x32\...\Run: [Aimersoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2138272 2016-10-08] (Shenzhen Jia Xing Investment Co., Ltd. -> AimerSoft) HKLM-x32\...\Run: [DT_Group KEY40 ModemListener] => C:\Program Files\T-Mobile\InternetManager_A\IK40\BackgroundService\ModemListener.exe [172840 2016-07-01] (JRD COMMUNICATION (SHENZHEN) LTD -> ) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-10-29] (Qualcomm Atheros -> Atheros Communications) [Brak podpisu cyfrowego] HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA HKU\S-1-5-21-3074636978-2418565961-1654846339-1001\...\Run: [BingSvc] => C:\Users\Kinga\AppData\Local\Microsoft\BingSvc\BingSvc.exe [146312 2020-08-15] (Microsoft Corporation -> © 2015 Microsoft Corporation) HKU\S-1-5-21-3074636978-2418565961-1654846339-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [5491248 2020-12-07] (Adobe Inc. -> Adobe Systems Incorporated) HKU\S-1-5-21-3074636978-2418565961-1654846339-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [83523944 2019-08-15] (Skype Software Sarl -> Skype Technologies S.A.) HKU\S-1-5-21-3074636978-2418565961-1654846339-1001\...\MountPoints2: {1ac24e78-c3a4-11e5-827b-d0534904f46e} - "F:\Startme.exe" HKU\S-1-5-21-3074636978-2418565961-1654846339-1001\...\MountPoints2: {5e17970d-f79b-11e6-82a2-d0534904f46e} - "F:\Lenovo_Suite.exe" HKU\S-1-5-21-3074636978-2418565961-1654846339-1001\...\MountPoints2: {5f1f1549-3c02-11e9-832c-d0534904f46e} - "G:\autorun.exe" HKU\S-1-5-21-3074636978-2418565961-1654846339-1001\...\MountPoints2: {63dc8654-a044-11e5-826e-d0534904f46e} - "F:\LaunchU3.exe" -a HKU\S-1-5-21-3074636978-2418565961-1654846339-1001\...\MountPoints2: {8f8a8421-13e1-11e7-82ac-d0534904f46e} - "F:\AutoRun.exe" HKU\S-1-5-21-3074636978-2418565961-1654846339-1001\...\MountPoints2: {a91aac31-5b69-11e7-82bb-d0534904f46e} - "F:\Startme.exe" HKU\S-1-5-21-3074636978-2418565961-1654846339-1001\...\MountPoints2: {e1a427b2-ef88-11e5-8289-d0534904f46e} - "F:\windows\Install\Install.exe" HKLM\...\Windows x64\Print Processors\Canon iP7200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBA.DLL [30208 2012-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Windows x64\Print Processors\hpcpp170: C:\Windows\System32\spool\prtprocs\x64\hpcpp170.dll [610080 2014-06-17] (Hewlett-Packard Company -> Hewlett-Packard Corporation) HKLM\...\Windows x64\Print Processors\hpzppw71: C:\Windows\System32\spool\prtprocs\x64\hpzppw71.dll [230400 2009-07-14] (Microsoft Windows -> Hewlett-Packard Corporation) HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [65496 2020-10-22] (Adobe Inc. -> Adobe Systems Inc) HKLM\...\Print\Monitors\Canon BJ Language Monitor iP7200 series: C:\WINDOWS\system32\CNMLMBA.DLL [389120 2012-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\HP Universal Print Monitor: C:\WINDOWS\system32\HPMPW081.DLL [74016 2014-06-17] (Hewlett-Packard Company -> Hewlett-Packard) HKLM\...\Print\Monitors\HPMLM135: C:\WINDOWS\system32\hpmlm135.dll [237344 2014-06-17] (Hewlett-Packard Company -> Hewlett-Packard Company) HKLM\...\Print\Monitors\PCL hpz3lw71: C:\WINDOWS\system32\hpz3lw71.dll [46080 2009-07-14] (Microsoft Windows -> Hewlett-Packard Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\87.0.4280.141\Installer\chrmstp.exe [2021-01-07] (Google LLC -> Google LLC) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{AC76BA86-0000-0000-7760-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat DC\Esl\Aiod.dll [2020-05-04] (Adobe Inc. -> Adobe Systems, Inc.) HKLM\Software\...\Authentication\Credential Providers: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2013-10-29] (Qualcomm Atheros -> Qualcomm®Atheros®) [Brak podpisu cyfrowego] HKLM\Software\...\Authentication\Credential Providers: [{d0869df6-64b0-4289-b483-9bff61394420}] -> C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfCredProv.dll [2014-12-17] (Lenovo (Beijing) Limited -> ) HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2013-10-29] (Qualcomm Atheros -> Qualcomm®Atheros®) [Brak podpisu cyfrowego] Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-11-04] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\mcserver.lnk [2016-03-30] ShortcutTarget: mcserver.lnk -> C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\mcserver.exe (ZTE CORPORATION -> ZTE) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2015-10-31] ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation) [Brak podpisu cyfrowego] HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA ==================== Zaplanowane zadania (filtrowane) ============ (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {000FD3C1-C809-4FF1-A84F-DB7157D0AEF0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1349200 2020-11-03] (Adobe Inc. -> Adobe Inc.) Task: {009AFF6A-9AB0-4A34-AEAF-7DB1E7C998AE} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe Task: {06472FC0-D04F-492A-877E-8E45B0C9293F} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [35584 2014-07-30] (LENOVO -> ) Task: {07D9A9D8-CB42-47C7-AD73-F8DCA01C3AFA} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [270208 2014-09-03] (LENOVO -> Lenovo) Task: {0DBC4DB6-3EB2-4DE2-AEDA-7D790C2AC0B0} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [1773192 2020-09-17] (AVG Technologies USA, LLC -> AVG Technologies) Task: {0F0A64ED-0665-4513-90E2-78657661A40F} - System32\Tasks\bookingDesktopAppUpdateTaskMachineUA => C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe [102400 2020-10-06] (bookingDesktopApp.) [Brak podpisu cyfrowego] Task: {15C2ED66-5F8C-480B-B583-0703D5C3045B} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [693216 2021-01-07] (Mozilla Corporation -> Mozilla Foundation) Task: {2523293B-8EC0-4E2D-A3FB-F1C6FBDA2E65} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-08] (Adobe Inc. -> Adobe) Task: {27FDF2B5-58A9-4F34-802D-C29AD2A75C50} - System32\Tasks\Antivirus Emergency Update => C:\Program Files (x86)\AVG\Antivirus\AvEmUpdate.exe [4669576 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) Task: {35C815C0-7A45-44DD-A2F8-24B7E955A19B} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe [265640 2015-10-27] (Maxthon (Asia) Limited. -> Maxthon International ltd.) Task: {37955567-3827-4DC4-A6FB-CA0E10B6EED1} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [16832 2015-07-08] (LENOVO -> Lenovo) Task: {3B547567-C368-46FB-A406-231D9636BF1C} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [16672 2014-09-03] (LENOVO -> Lenovo) Task: {61B874E2-D7B9-4EE2-8A61-7DB853B069E2} - System32\Tasks\Lenovo\REACHit Agent Update => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [674760 2016-02-22] (LENOVO -> Lenovo) Task: {67FCF81E-A050-4F6D-8CFB-5A010166BB18} - System32\Tasks\AVG EUpdate Task => C:\Program Files (x86)\AVG\Setup\avgsetupx.exe [4072504 2018-06-23] (AVG Netherlands B.V. -> AVG Technologies CZ, s.r.o.) Task: {6CB8993D-E9DD-48BF-B656-35616539A48A} - System32\Tasks\bookingDesktopAppUpdateTaskMachineCore => C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe [102400 2020-10-06] (bookingDesktopApp.) [Brak podpisu cyfrowego] Task: {8A3B75C2-175A-475E-BFE9-B4A78E84F7C1} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)" Task: {95772AA7-AA2A-45CA-B567-64F00525ECCD} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_Plugin.exe [1504312 2020-12-08] (Adobe Inc. -> Adobe) Task: {9CFBE55F-3930-44A4-9C1D-7D147C73C0D1} - System32\Tasks\{584C4397-9485-40E9-BC15-8CF62E190185} => C:\WINDOWS\system32\pcalua.exe -a "c:\program files\bytefence\ByteFence.exe" -c /uninstall Task: {9D636A0E-199F-4118-92CB-A5EC3959DC02} - System32\Tasks\Lenovo\REACHit Agent Startup => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [674760 2016-02-22] (LENOVO -> Lenovo) Task: {AB8D8651-EA46-4F8E-A237-81EEF88A666A} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [148768 2014-09-03] (LENOVO -> ) Task: {C4783416-0889-4214-9DF0-1D0D9BD6F1FD} - System32\Tasks\Opera scheduled Autoupdate 1500236537 => C:\Users\Kinga\AppData\Local\Programs\Opera\launcher.exe Task: {DA2DA9DF-D533-4DC5-9EF6-196A9C1BD522} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [148768 2014-09-03] (LENOVO -> ) Task: {DB1B8B98-6BD6-4D0E-8823-07294EE4B1A6} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [852768 2014-09-03] (LENOVO -> Lenovo) Task: {E53694AC-A8E1-4FA8-A418-F92899C9EAF8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-11-05] (Google Inc -> Google Inc.) Task: {E819DAE8-BBB0-4100-812A-63FF29C75E12} - System32\Tasks\Java Platform SE Auto Updater => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle America, Inc. -> Oracle Corporation) Task: {EC76F6E6-38D0-4425-B81C-2523611AC010} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-11-05] (Google Inc -> Google Inc.) Task: {F6CF2BA9-986E-4534-A768-953EDAA110C1} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3402832 2020-09-23] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {FE74F6B0-41A0-42E4-AB34-0C549DBF0292} - System32\Tasks\PDVDServ Task => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE [95192 2013-03-08] (CyberLink Corp. -> CyberLink Corp.) (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.10.10 192.168.1.1 Tcpip\..\Interfaces\{297C7A39-0304-474E-BE1D-56037EAD3AFB}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{5B992D92-8491-40CE-8CA0-D38F9F034476}: [DhcpNameServer] 192.168.1.1 192.168.2.1 Tcpip\..\Interfaces\{A6024219-026A-4ADF-8E59-FE9C13FB1433}: [DhcpNameServer] 192.168.10.10 192.168.1.1 Tcpip\..\Interfaces\{C9F15921-1D3F-4E4B-A989-C1C083642832}: [NameServer] 213.158.199.1 213.158.199.5 Edge: ====== Edge DefaultProfile: Default Edge Profile: C:\Users\Kinga\AppData\Local\Microsoft\Edge\User Data\Default [2021-01-08] FireFox: ======== FF DefaultProfile: 3rv5dspa.default FF ProfilePath: C:\Users\Kinga\AppData\Roaming\Mozilla\Firefox\Profiles\3rv5dspa.default [2021-01-10] FF Homepage: Mozilla\Firefox\Profiles\3rv5dspa.default -> hxxps://www.google.pl/ FF NewTab: Mozilla\Firefox\Profiles\3rv5dspa.default -> about:newtab FF Notifications: Mozilla\Firefox\Profiles\3rv5dspa.default -> hxxps://poczta.onet.pl; hxxps://pl.pinterest.com; hxxps://chodnikliteracki.pl; hxxps://agnesonthecloud.pushcrew.com; hxxps://durszlak.pl; hxxps://ukutabs.com; hxxps://mail.google.com; hxxps://chat.google.com; hxxps://www.turek.net.pl; hxxps://lubimyczytac.pl; hxxps://pysznosci.pl; hxxps://www.pkobp.pl; hxxps://johndog.pl FF Extension: (Bing Search) - C:\Users\Kinga\AppData\Roaming\Mozilla\Firefox\Profiles\3rv5dspa.default\Extensions\bingsearch.full@microsoft.com.xpi [2015-12-27] [Przestarzałe] FF Extension: (Adblock Plus - darmowy adblocker) - C:\Users\Kinga\AppData\Roaming\Mozilla\Firefox\Profiles\3rv5dspa.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-12-16] FF Extension: (Brak nazwy) - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi [nie znaleziono] FF SearchPlugin: C:\Users\Kinga\AppData\Roaming\Mozilla\Firefox\Profiles\3rv5dspa.default\searchplugins\bing-.xml [2015-12-28] FF SearchPlugin: C:\Users\Kinga\AppData\Roaming\Mozilla\Firefox\Profiles\3rv5dspa.default\searchplugins\google-avast.xml [2015-11-05] FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2019-05-02] FF HKLM-x32\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\Kinga\AppData\Roaming\Mozilla\Firefox\Profiles\3rv5dspa.default\extensions\defsearchp@gmail.com => nie znaleziono FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Kinga\AppData\Roaming\Mozilla\Firefox\Profiles\3rv5dspa.default\extensions\deskCutv2@gmail.com => nie znaleziono FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\addon FF Extension: (Bytemobile Optimization Client) - C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\addon [2010-04-01] [Przestarzałe] [Brak podpisu cyfrowego] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF HKU\S-1-5-21-3074636978-2418565961-1654846339-1001\...\Firefox\Extensions: [KVAllmytube@KeepVid.com] - C:\Program Files (x86)\Keepvid\KeepVid Pro (Desktop)\BrowserPlugin\kvallmytube@keepvid.com_xpi => nie znaleziono FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_465.dll [2020-12-08] (Adobe Inc. -> ) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_465.dll [2020-12-08] (Adobe Inc. -> ) FF Plugin-x32: @bookingdesktopapp.com/bookingDesktopApp Update;version=3 -> C:\Program Files (x86)\bookingDesktopApp\Update\1.3.99.0\npbookingDesktopAppUpdate3.dll [2020-10-06] (bookingDesktopApp.) [Brak podpisu cyfrowego] FF Plugin-x32: @bookingdesktopapp.com/bookingDesktopApp Update;version=9 -> C:\Program Files (x86)\bookingDesktopApp\Update\1.3.99.0\npbookingDesktopAppUpdate3.dll [2020-10-06] (bookingDesktopApp.) [Brak podpisu cyfrowego] FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-12-15] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-12-15] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2020-12-07] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-12-07] (Adobe Inc. -> Adobe Systems Inc.) Chrome: ======= CHR Profile: C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default [2021-01-10] CHR Notifications: Default -> hxxps://calendar.google.com; hxxps://drive.google.com; hxxps://mail.google.com; hxxps://meet.google.com; hxxps://www-vulcan-edu-pl-02.salesmanagopush.com; hxxps://www.facebook.com; hxxps://www.mediaexpert.pl; hxxps://www.wsip.pl; hxxps://www.youtube.com CHR HomePage: Default -> hxxps://startpage-home.com/?s=lenovo&m=home CHR StartupUrls: Default -> "hxxp://www.google.pl/" CHR Extension: (Dokumenty) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-01-17] CHR Extension: (Dysk Google) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-23] CHR Extension: (Bitmoji) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfgdeiadkckfbkeigkoncpdieiiefpig [2020-11-07] CHR Extension: (YouTube) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-06] CHR Extension: (Cursor style - niestandardowy kursor dla przeglądarki) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmjmipppabdlpjccanalncobmbacckjn [2020-11-07] CHR Extension: (Google Search) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-06] CHR Extension: (Tampermonkey) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2020-10-27] CHR Extension: (Adobe Acrobat) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-12-17] CHR Extension: (Obecność na Google Meet ™) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdnipcdebaagjpicpbkildmcefflobhn [2020-12-17] CHR Extension: (Dokumenty Google offline) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-11-11] CHR Extension: (Google Meet Breakout Rooms by Robert Hudek) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\kogfdlbehkaeoafmgaecphlnhohpabig [2020-12-14] CHR Extension: (Siatka Zobacz Google Meet) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgbmfbimbcffegjaagiolbjpfbepjogk [2020-11-07] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-11-05] CHR Extension: (Gmail) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-24] CHR Extension: (Chrome Media Router) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-12-09] CHR Profile: C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\System Profile [2021-01-08] CHR HKU\S-1-5-21-3074636978-2418565961-1654846339-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] CHR HKU\S-1-5-21-3074636978-2418565961-1654846339-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] ==================== Usługi (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [170056 2020-11-03] (Adobe Inc. -> Adobe Inc.) S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-08] (Adobe Inc. -> Adobe) R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3739728 2020-09-23] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3511376 2020-09-23] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [317568 2013-10-29] (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [Brak podpisu cyfrowego] R2 AVG Antivirus; C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe [622312 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R2 AVG Tools; C:\Program Files (x86)\AVG\Antivirus\avgToolsSvc.exe [352392 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R3 avgbIDSAgent; C:\Program Files (x86)\AVG\Antivirus\aswidsagent.exe [8524736 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) S2 bookingdesktopapp; C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe [102400 2020-10-06] (bookingDesktopApp.) [Brak podpisu cyfrowego] S3 bookingdesktopappm; C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe [102400 2020-10-06] (bookingDesktopApp.) [Brak podpisu cyfrowego] S2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [592880 2014-07-09] (Lenovo (Beijing) Limited -> ) R2 DT_Group KEY40 Modem Device Helper; C:\Program Files\T-Mobile\InternetManager_A\IK40\BackgroundService\ServiceManager.exe [78120 2016-06-17] (JRD COMMUNICATION (SHENZHEN) LTD -> ) R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [Brak podpisu cyfrowego] R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Brak podpisu cyfrowego] R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584960 2014-07-30] (LENOVO -> LENOVO INCORPORATED.) R2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192 2014-12-17] (Lenovo (Beijing) Limited -> Lenovo(beijing) Limited) S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-09-03] (LENOVO -> ) R2 LUService; C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe [38896 2014-02-17] (Lenovo (Beijing) Limited -> Lenovo(beijing) Limited) R2 MaxthonUpdateSvc; C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe [1880864 2018-02-16] (Maxthon (Asia) Limited. -> Maxthon) S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2014-04-28] (Hewlett-Packard) [Brak podpisu cyfrowego] R2 PhoneCompanionPusher; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe [288240 2014-12-17] (Lenovo (Beijing) Limited -> Lenovo) S3 PhoneCompanionVap; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe [305136 2014-12-17] (Lenovo (Beijing) Limited -> Lenovo) R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2014-04-28] (Hewlett-Packard) [Brak podpisu cyfrowego] R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] (CyberLink -> ) S3 ShareItSvc; C:\Program Files (x86)\Lenovo\SHAREit\Shareit.Service.exe [31704 2016-03-31] (LENOVO -> SHAREit Technologies Co.Ltd) R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe [67856 2014-12-17] (Lenovo (Beijing) Limited -> ) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-10-29] (Atheros) [Brak podpisu cyfrowego] ===================== Sterowniki (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 athr; C:\WINDOWS\system32\DRIVERS\athwbx.sys [3903488 2014-07-11] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros Communications, Inc.) R0 avgArDisk; C:\WINDOWS\System32\drivers\avgArDisk.sys [36936 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R1 avgArPot; C:\WINDOWS\System32\drivers\avgArPot.sys [208808 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R1 avgbidsdriver; C:\WINDOWS\System32\drivers\avgbidsdriver.sys [332944 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R0 avgbidsh; C:\WINDOWS\System32\drivers\avgbidsh.sys [247952 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R0 avgbuniv; C:\WINDOWS\System32\drivers\avgbuniv.sys [97424 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R1 avgKbd; C:\WINDOWS\System32\drivers\avgKbd.sys [42568 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R1 avgMonFlt; C:\WINDOWS\System32\drivers\avgMonFlt.sys [176528 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R1 avgNetHub; C:\WINDOWS\System32\drivers\avgNetHub.sys [522616 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R1 avgRdr; C:\WINDOWS\System32\drivers\avgRdr2.sys [109064 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R0 avgRvrt; C:\WINDOWS\System32\drivers\avgRvrt.sys [84640 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R1 avgSnx; C:\WINDOWS\System32\drivers\avgSnx.sys [851392 2021-01-06] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R1 avgSP; C:\WINDOWS\System32\drivers\avgSP.sys [469040 2021-01-08] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R2 avgStm; C:\WINDOWS\System32\drivers\avgStm.sys [214936 2021-01-08] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R0 avgVmm; C:\WINDOWS\System32\drivers\avgVmm.sys [325056 2021-01-08] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) R0 BMLoad; C:\WINDOWS\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile Inc. -> Bytemobile, Inc.) [Brak podpisu cyfrowego] R0 BMLoad; C:\Windows\SysWOW64\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile Inc. -> Bytemobile, Inc.) [Brak podpisu cyfrowego] R3 MarvinBus; C:\WINDOWS\System32\drivers\MarvinBus64.sys [261120 2005-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Pinnacle Systems GmbH) S3 massfilter; C:\WINDOWS\System32\drivers\massfilter.sys [11776 2012-05-11] (Microsoft Windows Hardware Compatibility Publisher -> MBB Incorporated) S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [80920 2015-07-02] (Microsoft Windows Early Launch Anti-malware Publisher -> McAfee, Inc.) S3 mfencbdc; C:\WINDOWS\System32\DRIVERS\mfencbdc.sys [529080 2015-06-28] (McAfee, Inc. -> McAfee, Inc.) S3 mfencrk; C:\WINDOWS\System32\DRIVERS\mfencrk.sys [109728 2015-06-28] (McAfee, Inc. -> McAfee, Inc.) S3 SMARTMouseFilterx64; C:\WINDOWS\System32\drivers\SMARTMouseFilterx64.sys [18952 2018-06-01] (Microsoft Windows Hardware Compatibility Publisher -> SMART Technologies) S3 SMARTVHidMiniVistaAmd64; C:\WINDOWS\System32\drivers\SMARTVHidMiniVistaAmd64.sys [28168 2018-06-01] (Microsoft Windows Hardware Compatibility Publisher -> SMART Technologies) S3 SMARTVTabletPCx64; C:\WINDOWS\System32\drivers\SMARTVTabletPCx64.sys [30312 2019-10-01] (Microsoft Windows Hardware Compatibility Publisher -> SMART Technologies ULC) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166760 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) R1 tcpipBM; C:\WINDOWS\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile Inc. -> Bytemobile, Inc.) [Brak podpisu cyfrowego] S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation) S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] (CyberLink -> "CyberLink) S3 ZTEusbnet; C:\WINDOWS\system32\DRIVERS\ZTEusbnet.sys [158720 2012-05-11] (Microsoft Windows Hardware Compatibility Publisher -> ZTE Corporation) S3 ZTEusbnmea; C:\WINDOWS\system32\DRIVERS\ZTEusbnmea.sys [123392 2012-05-11] (Microsoft Windows Hardware Compatibility Publisher -> ZTE Incorporated) S3 ZTEusbser6k; C:\WINDOWS\system32\DRIVERS\ZTEusbser6k.sys [123392 2012-05-11] (Microsoft Windows Hardware Compatibility Publisher -> ZTE Incorporated) S3 zte_cdc_acm; C:\WINDOWS\system32\DRIVERS\zte_cdc_acm.sys [79872 2011-08-10] (Microsoft Windows Hardware Compatibility Publisher -> ZTE) S3 zte_cpo; C:\WINDOWS\system32\DRIVERS\zte_cpo.sys [14336 2011-08-10] (Microsoft Windows Hardware Compatibility Publisher -> ZTE) S1 wfdrvr_vw_1_10_0_28; system32\drivers\wfdrvr_vw_1_10_0_28.sys [X] ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc (utworzone) (Wszystkie) ========= (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2021-01-10 18:11 - 2021-01-10 18:12 - 000040536 _____ C:\Users\Kinga\Downloads\FRST.txt 2021-01-10 18:10 - 2021-01-10 18:12 - 000000000 ___DC C:\FRST 2021-01-10 18:07 - 2021-01-10 18:07 - 002281472 _____ (Farbar) C:\Users\Kinga\Downloads\FRST64.exe 2021-01-10 17:54 - 2021-01-10 17:56 - 194256440 _____ (Malwarebytes) C:\Users\Kinga\Downloads\mb4-setup-consumer-4.3.0.206-1.0.1130-1.0.34127.exe 2021-01-08 20:55 - 2021-01-08 20:57 - 000000000 ___DC C:\AdwCleaner 2021-01-08 20:54 - 2021-01-08 20:54 - 008447152 _____ (Malwarebytes) C:\Users\Kinga\Downloads\adwcleaner_8.0.8.exe 2021-01-08 20:29 - 2021-01-08 20:29 - 000000000 ____D C:\WINDOWS\pss 2021-01-08 20:01 - 2021-01-08 20:02 - 030536752 _____ (Piriform Software Ltd) C:\Users\Kinga\Downloads\ccsetup575.exe 2021-01-07 21:59 - 2021-01-07 21:59 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla 2021-01-07 11:30 - 2021-01-08 13:22 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2021-01-06 15:05 - 2021-01-08 09:50 - 000214936 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgStm.sys 2021-01-06 15:05 - 2021-01-06 15:05 - 000341128 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\avgBoot.exe 2021-01-05 21:05 - 2021-01-05 21:05 - 001186538 _____ C:\Users\Kinga\Downloads\A. Tansman-Walc wiedeński.pdf 2021-01-05 15:38 - 2021-01-05 15:38 - 000181067 _____ C:\Users\Kinga\Downloads\JUz__ZGASlO__SlOnCE__NAD__HORYZONTEM_561049_1.pdf 2021-01-05 15:38 - 2021-01-05 15:38 - 000181067 _____ C:\Users\Kinga\Downloads\JUz__ZGASlO__SlOnCE__NAD__HORYZONTEM_561049_1(1).pdf 2021-01-05 15:30 - 2021-01-05 15:30 - 000020670 _____ C:\Users\Kinga\Downloads\Racz_wiekuiste_177513_1.pdf 2021-01-05 13:36 - 2021-01-05 13:36 - 000344787 _____ C:\Users\Kinga\Downloads\Zimowa lista przeżyć.pdf 2021-01-05 13:33 - 2021-01-05 13:33 - 000778052 _____ C:\Users\Kinga\Downloads\FitBelfer 2021 - GRA.pdf 2021-01-04 16:07 - 2021-01-04 16:07 - 000437630 _____ C:\Users\Kinga\Downloads\ferie_po_krolewski_plany.pdf 2020-12-26 10:40 - 2020-12-26 10:40 - 003004417 _____ C:\Users\Kinga\Downloads\zdalnie-ebook-nws2020.pdf 2020-12-22 12:26 - 2020-12-22 12:26 - 000034014 _____ C:\Users\Kinga\Downloads\FVS 3830_12_2020_E-BOK.pdf 2020-12-21 13:46 - 2020-12-21 13:46 - 002800428 _____ C:\Users\Kinga\Downloads\F. Chopin - _Lulajże Jezuniu_.pdf 2020-12-21 13:45 - 2020-12-21 13:45 - 003819029 _____ C:\Users\Kinga\Downloads\L. Cohen - _Hallelujah_.pdf 2020-12-21 13:45 - 2020-12-21 13:45 - 003134561 _____ C:\Users\Kinga\Downloads\E. John - _Can you feel the love tonight_.pdf 2020-12-18 12:56 - 2020-12-18 12:56 - 020770980 _____ C:\Users\Kinga\Downloads\prace2.zip ==================== Jeden miesiąc (zmodyfikowane) ================== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2021-01-10 18:09 - 2016-11-28 20:19 - 004578304 ___SH C:\Users\Kinga\Downloads\Thumbs.db 2021-01-10 17:58 - 2013-08-22 16:36 - 000000000 ____D C:\WINDOWS\AppReadiness 2021-01-10 17:57 - 2019-10-06 16:50 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData 2021-01-10 17:57 - 2019-10-06 16:50 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData 2021-01-10 17:56 - 2014-12-17 03:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\Lenovo 2021-01-10 17:47 - 2015-10-30 17:38 - 000003598 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3074636978-2418565961-1654846339-1001 2021-01-10 17:42 - 2020-03-13 22:00 - 000000000 __RDO C:\Users\Kinga\OneDrive 2021-01-08 21:15 - 2019-01-30 16:48 - 000000000 ____D C:\ProgramData\Mozilla 2021-01-08 21:15 - 2016-11-19 20:56 - 000000000 ____D C:\Users\Kinga\AppData\LocalLow\Mozilla 2021-01-08 21:08 - 2015-10-30 17:43 - 000001283 _____ C:\Users\Kinga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wi-FiHotspotChgToast.lnk 2021-01-08 21:08 - 2014-12-17 03:34 - 000000000 ____D C:\ProgramData\LU 2021-01-08 21:03 - 2014-12-17 03:07 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2021-01-08 21:03 - 2013-08-22 16:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2021-01-08 20:59 - 2017-07-17 20:05 - 000000000 ____D C:\ProgramData\Avg 2021-01-08 20:58 - 2017-05-09 19:46 - 000065536 _____ C:\WINDOWS\system32\Ikeext.etl 2021-01-08 20:58 - 2013-08-22 15:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2021-01-08 20:57 - 2014-12-17 03:23 - 000014848 _____ C:\WINDOWS\system32\VfService.trf 2021-01-08 20:31 - 2013-08-22 14:36 - 000000000 ____D C:\WINDOWS\Inf 2021-01-08 20:30 - 2013-08-22 16:36 - 000000000 ____D C:\WINDOWS\tracing 2021-01-08 20:24 - 2017-07-17 20:08 - 000000000 ____D C:\Program Files (x86)\AVG 2021-01-08 20:24 - 2017-07-17 20:05 - 000000000 ____D C:\Users\Kinga\AppData\Local\AvgSetupLog 2021-01-08 20:06 - 2015-11-03 19:03 - 000000000 ____D C:\Users\Kinga\AppData\Local\CrashDumps 2021-01-08 15:55 - 2015-10-30 17:33 - 000000000 ____D C:\Users\Kinga 2021-01-08 15:50 - 2013-08-22 16:36 - 000000000 ____D C:\WINDOWS\system32\NDF 2021-01-08 15:47 - 2019-10-16 18:23 - 000004174 _____ C:\WINDOWS\system32\Tasks\Antivirus Emergency Update 2021-01-08 13:35 - 2019-10-17 09:32 - 000469040 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSP.sys 2021-01-08 13:35 - 2014-12-17 10:50 - 000801022 _____ C:\WINDOWS\system32\perfh015.dat 2021-01-08 13:35 - 2014-12-17 10:50 - 000160728 _____ C:\WINDOWS\system32\perfc015.dat 2021-01-08 13:35 - 2014-03-18 10:53 - 001817498 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2021-01-08 13:23 - 2013-08-22 14:25 - 000524288 ___SH C:\WINDOWS\system32\config\BBI 2021-01-08 13:22 - 2015-10-31 18:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2021-01-08 09:50 - 2019-10-17 09:32 - 000325056 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgVmm.sys 2021-01-08 00:09 - 2020-10-06 18:21 - 000003440 _____ C:\WINDOWS\system32\Tasks\bookingDesktopAppUpdateTaskMachineUA 2021-01-08 00:09 - 2020-10-06 18:21 - 000003312 _____ C:\WINDOWS\system32\Tasks\bookingDesktopAppUpdateTaskMachineCore 2021-01-08 00:09 - 2020-08-22 21:08 - 000003108 _____ C:\WINDOWS\system32\Tasks\{584C4397-9485-40E9-BC15-8CF62E190185} 2021-01-08 00:09 - 2020-07-07 06:12 - 000003410 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2021-01-08 00:09 - 2020-07-07 06:12 - 000003282 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2021-01-08 00:09 - 2019-10-06 16:50 - 000003450 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0 2021-01-08 00:09 - 2018-10-01 13:45 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software 2021-01-08 00:09 - 2018-03-14 08:43 - 000004564 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier 2021-01-08 00:09 - 2018-02-08 19:21 - 000003704 _____ C:\WINDOWS\system32\Tasks\Java Platform SE Auto Updater 2021-01-08 00:09 - 2017-07-16 21:22 - 000004106 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1500236537 2021-01-08 00:09 - 2016-01-14 17:05 - 000004388 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player Updater 2021-01-08 00:09 - 2015-11-05 20:11 - 000003482 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2021-01-08 00:09 - 2015-11-05 20:11 - 000003354 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2021-01-08 00:09 - 2015-11-04 20:00 - 000004476 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2021-01-08 00:09 - 2014-12-17 03:22 - 000003056 _____ C:\WINDOWS\system32\Tasks\PDVDServ Task 2021-01-07 21:59 - 2015-10-31 18:33 - 000001162 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2021-01-07 21:37 - 2015-11-05 20:13 - 000002261 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2021-01-07 20:04 - 2017-07-17 20:08 - 000003600 _____ C:\WINDOWS\system32\Tasks\AVG EUpdate Task 2021-01-06 15:05 - 2020-10-27 07:26 - 000176528 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys 2021-01-06 15:05 - 2020-06-16 15:02 - 000522616 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgNetHub.sys 2021-01-06 15:05 - 2019-10-17 09:32 - 000851392 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSnx.sys 2021-01-06 15:05 - 2019-10-17 09:32 - 000332944 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsdriver.sys 2021-01-06 15:05 - 2019-10-17 09:32 - 000247952 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsh.sys 2021-01-06 15:05 - 2019-10-17 09:32 - 000208808 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgArPot.sys 2021-01-06 15:05 - 2019-10-17 09:32 - 000109064 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRdr2.sys 2021-01-06 15:05 - 2019-10-17 09:32 - 000097424 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbuniv.sys 2021-01-06 15:05 - 2019-10-17 09:32 - 000084640 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRvrt.sys 2021-01-06 15:05 - 2019-10-17 09:32 - 000042568 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgKbd.sys 2021-01-06 15:05 - 2019-10-17 09:32 - 000036936 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgArDisk.sys 2020-12-28 23:06 - 2017-03-28 11:48 - 000000000 ____D C:\Users\Kinga\AppData\Local\ElevatedDiagnostics 2020-12-17 10:34 - 2017-04-25 14:48 - 000017920 _____ C:\Users\Kinga\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2020-12-13 12:13 - 2017-12-29 17:53 - 000002090 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2020-12-12 20:36 - 2016-01-26 09:48 - 000002068 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk 2020-12-12 20:36 - 2016-01-26 09:48 - 000002057 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk 2020-12-11 11:52 - 2013-08-22 16:36 - 000000000 ____D C:\WINDOWS\rescache ==================== Pliki w katalogu głównym wybranych folderów ======== 2017-04-25 14:48 - 2020-12-17 10:34 - 000017920 _____ () C:\Users\Kinga\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2018-09-28 09:10 - 2018-09-28 09:10 - 000000000 _____ () C:\Users\Kinga\AppData\Local\oobelibMkey.log 2019-10-24 07:07 - 2019-10-24 07:07 - 000011009 _____ () C:\Users\Kinga\AppData\Local\recently-used.xbel 2017-06-27 13:57 - 2017-06-27 13:57 - 000000000 _____ () C:\Users\Kinga\AppData\Local\{AEFBFE06-2D94-48EE-A97F-F0EA457AE9AF} ==================== SigCheck ============================ (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) LastRegBack: 2020-12-28 23:07 ==================== Koniec FRST.txt ========================