Witam, gdy loguje się na konto użytkownika w systemie windows 10 wyskakuje mi okienko c:\windows\system32> oraz czarny ekran pulpitu. Zrobiłem skanowanie FRST - Frst.txt oraz Addition.txt - logi
Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 01.12.2018 01
Uruchomiony przez jaci (administrator) DESKTOP-V7ANRGU (12-12-2018 22:47:50)
Uruchomiony z C:\Users\jaci\Desktop
Załadowane profile: jaci (Dostępne profile: jaci)
Platform: Windows 10 Home Wersja 1709 16299.431 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Edge)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Procesy (filtrowane) =================
(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\AsusWSWinService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(ASUS) C:\Program Files (x86)\ASUS\ROG MacroKey\MacroSrv.exe
(KeepSolid Inc.) C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe
(ASUSTeK COMPUTER INC.) C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingCenterService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Microsoft Corporation) C:\Windows\System32\Locator.exe
(Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
() C:\Windows\SysWOW64\UMonit64.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
() C:\Program Files\ScreenShooter5\ScreenShooter5.exe
(Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(The Chromium Authors) C:\Users\jaci\AppData\Local\chromium\Application\chrome.exe
() C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\ASUSWSLoader.exe
(KeepSolid Inc.) C:\Program Files (x86)\VPN Unlimited\vpn-unlimited.exe
(The Chromium Authors) C:\Users\jaci\AppData\Local\chromium\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(The Chromium Authors) C:\Users\jaci\AppData\Local\chromium\Application\chrome.exe
(The Chromium Authors) C:\Users\jaci\AppData\Local\chromium\Application\chrome.exe
(The Chromium Authors) C:\Users\jaci\AppData\Local\chromium\Application\chrome.exe
(The Chromium Authors) C:\Users\jaci\AppData\Local\chromium\Application\chrome.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Rejestr (filtrowane) ===========================
(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
HKLM\...\Run: [SecurityHealth] = & gt; C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [MouseDriver] = & gt; C:\Windows\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM\...\Run: [SS2UILauncher] = & gt; C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe [1153504 2015-12-15] ()
HKLM\...\Run: [UMonit] = & gt; C:\Windows\SysWOW64\UMonit64.exe [53832 2015-07-15] ()
HKLM-x32\...\Run: [WebStorage] = & gt; C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\ASUSWSLoader.exe [63272 2015-12-24] ()
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe & lt; ==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia & lt; ==== UWAGA
HKU\S-1-5-21-3938795631-1035328357-3560281598-1001\...\Run: [ScreenShooter] = & gt; C:\Program Files\ScreenShooter5\ScreenShooter5.exe [967680 2015-09-18] ()
HKU\S-1-5-21-3938795631-1035328357-3560281598-1001\...\Run: [IPLA!] = & gt; C:\Program Files (x86)\ipla\ipla.exe [18681120 2017-02-22] (Cyfrowy Polsat S.A.)
HKU\S-1-5-21-3938795631-1035328357-3560281598-1001\...\Run: [Steam] = & gt; C:\Program Files (x86)\Steam\steam.exe [3131680 2018-11-26] (Valve Corporation)
HKU\S-1-5-21-3938795631-1035328357-3560281598-1001\...\Run: [Web Companion] = & gt; C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
HKU\S-1-5-21-3938795631-1035328357-3560281598-1001\...\Run: [FreeTorrentDownload] = & gt; C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe [8705512 2017-03-22] (DVDVideoSoft Ltd.)
HKU\S-1-5-21-3938795631-1035328357-3560281598-1001\...\Run: [EpicGamesLauncher] = & gt; C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [35148688 2018-12-06] (Epic Games, Inc.)
HKU\S-1-5-21-3938795631-1035328357-3560281598-1001\...\Run: [Chromium] = & gt; c:\users\jaci\appdata\local\chromium\application\chrome.exe [829440 2017-02-15] (The Chromium Authors)
HKU\S-1-5-21-3938795631-1035328357-3560281598-1001\...\Run: [GoogleChromeAutoLaunch_073810E1EE16D02C34803C8F657B79C4] = & gt; C:\Users\jaci\AppData\Local\chromium\Application\chrome.exe [829440 2017-02-15] (The Chromium Authors)
HKU\S-1-5-21-3938795631-1035328357-3560281598-1001\...\Run: [VPN Unlimited] = & gt; C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-launcher.exe [398192 2018-10-15] (KeepSolid Inc.)
HKU\S-1-5-21-3938795631-1035328357-3560281598-1001\...\RunOnce: [Application Restart #1] = & gt; C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe --no-displaying-insecure-content --disable-devtools --disable-raf-throttling --user-data-dir= " C:\Users\jaci\AppData\Local\ASUS GIFTBOX\User Data " - (dane wartości zawierają 122 znaków więcej).
HKU\S-1-5-21-3938795631-1035328357-3560281598-1001\...\Winlogon: [Shell] C:\Windows\System32\cmd.exe [272896 2017-09-29] (Microsoft Corporation) & lt; ==== UWAGA
HKU\S-1-5-21-3938795631-1035328357-3560281598-1001\...\Command Processor: @mode 20,5 & tasklist /FI " IMAGENAME eq SoundMixer.exe " 2 & gt; NUL | find /I /N " SoundMixer.exe " & gt; NUL & & exit & if exist ( start /MIN " " & tasklist /FI " IMAGENAME eq explorer.exe " 2 & gt; NUL | find /I /N " explorer.exe " & gt; NUL & & exit & explorer.exe & exit ) else ( tasklist /FI " IMAGENAME eq explorer.exe " 2 & gt; NUL | find /I /N " explorer.exe " & gt; NUL & & exit & explorer.exe & exit ) & lt; ==== UWAGA
GroupPolicy\User: Ograniczenia ? & lt; ==== UWAGA
==================== Internet (filtrowane) ====================
(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 91.233.115.2
Tcpip\..\Interfaces\{9cc9dfa7-c69d-40ef-b075-7abf74105d55}: [DhcpNameServer] 192.168.1.1 91.233.115.2
Tcpip\..\Interfaces\{a92d388a-0e90-416a-8752-7e175cf50136}: [DhcpNameServer] 192.168.1.1 91.233.112.2
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3938795631-1035328357-3560281598-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nav-pl.com/
HKU\S-1-5-21-3938795631-1035328357-3560281598-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus15.msn.com/?pc=ASTE
SearchScopes: HKU\S-1-5-21-3938795631-1035328357-3560281598-1001 - & gt; DefaultScope {087B6495-B8CF-4677-907C-4ED6A2664202} URL = hxxp://www.nav-pl.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3938795631-1035328357-3560281598-1001 - & gt; {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3938795631-1035328357-3560281598-1001 - & gt; {087B6495-B8CF-4677-907C-4ED6A2664202} URL = hxxp://www.nav-pl.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3938795631-1035328357-3560281598-1001 - & gt; {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://pl.search.yahoo.com/yhs/search?hspart=lvs & hsimp=yhs-awc & type=lvs__webcompa__1_0__ya__ch_WCYID10454__180511__yaie & p={searchTerms}
BHO-x32: Skype for Business Browser Helper - & gt; {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - & gt; C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2018-11-13] (Microsoft Corporation)
BHO-x32: Evernote extension - & gt; {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - & gt; C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-09-03] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-11-13] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-11-13] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-11-13] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-11-13] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-11-13] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-11-13] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-11-13] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-11-13] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll Brak pliku
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-3938795631-1035328357-3560281598-1001 - & gt; hxxp://www.nav-pl.com/
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 - & gt; C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-09-27] (Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf - & gt; C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-07-10] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf - & gt; C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-07-10] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp - & gt; C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-07-10] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf - & gt; C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-07-10] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 - & gt; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - & gt; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - & gt; C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2018-09-27] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - & gt; C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - & gt; C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - & gt; C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2015-12-22] ()
Chrome:
=======
CHR HomePage: Default - & gt; hxxp://www.nav-pl.com/
CHR StartupUrls: Default - & gt; " hxxp://www.nav-pl.com/ "
CHR NewTab: Default - & gt; Active: " chrome-extension://knmhcfocgkhpdpdhepdgafamhkgkmkpo/newtab.html " , Not-active: " chrome-extension://ijmpokfkjcejmgmiogncemnjcdbnncll/product.html "
CHR DefaultSearchURL: Default - & gt; hxxp://www.nav-pl.com/search?q={searchTerms}
CHR DefaultSearchKeyword: Default - & gt; szukaj
CHR Profile: C:\Users\jaci\AppData\Local\Google\Chrome\User Data\Default [2018-12-06]
CHR Extension: (Dokumenty) - C:\Users\jaci\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
CHR Extension: (Dysk Google) - C:\Users\jaci\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-19]
CHR Extension: (YouTube) - C:\Users\jaci\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-22]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\jaci\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2018-11-27]
CHR Extension: (Dokumenty Google offline) - C:\Users\jaci\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-23]
CHR Extension: (Avast Online Security) - C:\Users\jaci\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-10-19]
CHR Extension: (Screen Addict) - C:\Users\jaci\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijmpokfkjcejmgmiogncemnjcdbnncll [2018-04-22]
CHR Extension: (The Predator New Tab) - C:\Users\jaci\AppData\Local\Google\Chrome\User Data\Default\Extensions\knmhcfocgkhpdpdhepdgafamhkgkmkpo [2018-11-12]
CHR Extension: (Adaware Secure) - C:\Users\jaci\AppData\Local\Google\Chrome\User Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj [2018-11-09]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\jaci\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
CHR Extension: (Gmail) - C:\Users\jaci\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-22]
CHR Extension: (Chrome Media Router) - C:\Users\jaci\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-10-28]
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj] - hxxps://clients2.google.com/service/update2/crx
==================== Usługi (filtrowane) ====================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R2 AsHidService; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [110264 2016-03-29] (ASUSTek Computer Inc.)
R2 ASUS Rog Macro Key; C:\Program Files (x86)\ASUS\ROG MacroKey\MacroSrv.exe [492344 2015-07-02] (ASUS)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\AsusWSWinService.exe [75264 2015-12-24] (ASUS Cloud Corporation) [Brak podpisu cyfrowego]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9667872 2018-10-24] (Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-01-21] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-01-21] (Dropbox, Inc.)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-03-22] (Digital Wave Ltd.)
R2 esifsvc; C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe [1890320 2018-08-03] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-12-22] (WildTangent)
R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [184064 2016-12-12] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Brak podpisu cyfrowego]
R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Brak podpisu cyfrowego]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-09-19] (Intel Corporation)
S2 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsupdatesvr.exe [133480 2016-04-03] (Zhuhai Kingsoft Office Software Co.,Ltd)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-11-29] ()
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519288 2017-11-16] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519288 2017-11-16] (NVIDIA Corporation)
R2 ROGGamingCenterService; C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingCenterService.exe [49704 2016-03-14] (ASUSTeK COMPUTER INC.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-17] (TeamViewer GmbH)
S3 ThunderboltService; C:\Program Files (x86)\Intel\Thunderbolt Software\tbtsvc.exe [1831064 2015-11-04] (Intel Corporation)
R2 VPNUnlimitedService; C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe [57200 2018-10-15] (KeepSolid Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [19192 2015-09-30] (Intel(R) Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3732896 2016-11-29] (Intel® Corporation)
S4 mccspsvc; " C:\Program Files\Common Files\McAfee\CSP\2.3.322.0\\McCSPServiceHost.exe " [X]
R2 NVDisplay.ContainerLocalSystem; " C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe " -s NVDisplay.ContainerLocalSystem -f " C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log " -l 3 -d " C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem " -r -p 30000
S2 NvTelemetryContainer; " C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe " -s NvTelemetryContainer -f " C:\ProgramData\NVIDIA\NvTelemetryContainer.log " -l 3 -d " C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins " -r
===================== Sterowniki (filtrowane) ======================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
R3 AsusSGDrv; C:\WINDOWS\system32\DRIVERS\AsusSGDrv.sys [141304 2015-12-18] (ASUS Corporation)
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [78688 2018-08-03] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [75104 2018-08-03] (Intel Corporation)
R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [401248 2018-08-03] (Intel Corporation)
R3 ETDSMBus; C:\WINDOWS\system32\DRIVERS\ETDSMBus.sys [32344 2016-08-29] (ELAN Microelectronic Corp.)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [31144 2017-11-23] (ASUS)
R3 iaLPSS2_GPIO2; C:\WINDOWS\System32\drivers\iaLPSS2_GPIO2.sys [98864 2018-06-11] (Intel Corporation)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [207384 2018-07-07] (Intel Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [30224 2015-05-28] (Intel Corporation)
R1 netfilter2; C:\WINDOWS\System32\drivers\netfilter2.sys [51904 2015-01-14] (Titan ARC Corp.)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [8709656 2018-07-06] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_24fa95e729ecaade\nvlddmkm.sys [20605496 2018-10-03] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-11-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [50808 2017-11-16] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-12-16] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1122200 2018-08-30] (Realtek )
R3 t_mouse.sys; C:\WINDOWS\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] ()
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation)
==================== NetSvcs (filtrowane) ===================
(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
==================== Jeden miesiąc - utworzone pliki i foldery ========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2018-12-12 22:47 - 2018-12-12 22:48 - 000024084 _____ C:\Users\jaci\Desktop\FRST.txt
2018-12-12 22:47 - 2018-12-12 22:47 - 000000000 ____D C:\FRST
2018-12-12 22:46 - 2018-12-08 01:15 - 002417152 _____ (Farbar) C:\Users\jaci\Desktop\FRST64.exe
2018-12-09 01:35 - 2018-12-09 01:35 - 000000266 __RSH C:\Users\jaci\ntuser.pol
2018-12-09 01:28 - 2018-12-09 01:28 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2018-12-09 01:00 - 2018-12-09 01:00 - 000000000 ____D C:\$Windows.~BT
2018-12-09 00:54 - 2018-12-09 01:12 - 000000000 ___HD C:\$SysReset
2018-12-09 00:46 - 2018-12-09 00:46 - 000000000 ____D C:\WINDOWS\system32\config\Backup
2018-12-09 00:05 - 2018-12-09 00:05 - 000003654 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2018-12-09 00:00 - 2018-12-09 00:00 - 000000000 _____ C:\WINDOWS\system32\sfc
2018-12-07 20:39 - 2018-12-09 01:33 - 000347542 _____ C:\WINDOWS\ntbtlog.txt
2018-12-07 16:08 - 2018-12-07 16:08 - 000000017 _____ C:\Users\jaci\AppData\Local\resmon.resmoncfg
2018-12-05 19:32 - 2018-12-05 19:32 - 000000000 ____D C:\Users\jaci\AppData\Local\BattlEye
2018-12-05 19:19 - 2018-12-05 19:19 - 000001032 _____ C:\Users\jaci\AppData\Roaming\Microsoft\Windows\Start Menu\The Crew 2 Digital Deluxe.lnk
2018-12-05 16:27 - 2018-12-06 10:28 - 000000000 ____D C:\Users\jaci\AppData\LocalLow\uTorrent
2018-12-03 09:08 - 2018-12-03 09:36 - 000000000 ____D C:\Users\jaci\Documents\FIFA 19
2018-12-03 09:06 - 2018-12-03 09:06 - 000000382 _____ C:\Users\jaci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Crack.lnk
2018-11-12 21:50 - 2018-11-12 21:50 - 000002102 _____ C:\Users\Public\Desktop\Assassins Creed Odyssey.lnk
2018-11-12 21:50 - 2018-11-12 21:50 - 000000000 ____D C:\Users\jaci\Documents\Assassin's Creed Odyssey
2018-11-12 21:50 - 2018-11-12 21:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Assassins Creed Odyssey
2018-11-12 21:24 - 2018-11-26 18:16 - 000000000 ____D C:\Program Files (x86)\Assassins Creed Odyssey
==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========
(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
2018-12-12 22:44 - 2017-06-19 05:38 - 000000000 ____D C:\ProgramData\NVIDIA
2018-12-12 22:41 - 2017-12-25 17:34 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-12-12 22:41 - 2017-12-25 17:11 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-12-09 01:35 - 2017-12-25 17:15 - 000000000 ____D C:\Users\jaci
2018-12-09 01:34 - 2017-09-29 09:45 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2018-12-09 01:31 - 2015-10-30 08:24 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2018-12-08 23:59 - 2017-12-25 17:34 - 000003550 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2018-12-08 23:59 - 2017-12-25 17:34 - 000003540 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2018-12-07 19:56 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-12-07 19:52 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-12-07 19:41 - 2017-02-02 16:15 - 000000000 ____D C:\Users\jaci\AppData\Roaming\uTorrent
2018-12-07 19:20 - 2017-12-25 17:34 - 000000000 ____D C:\WINDOWS\System32\Tasks\ASUS
2018-12-07 19:20 - 2016-04-03 05:33 - 000000000 ____D C:\Program Files (x86)\ASUS
2018-12-07 17:50 - 2018-07-15 20:25 - 000000000 ____D C:\Users\jaci\AppData\Local\AVAST Software
2018-12-07 17:50 - 2017-01-24 10:07 - 000000000 ____D C:\ProgramData\AVAST Software
2018-12-07 17:48 - 2016-04-03 05:33 - 000000000 ____D C:\ProgramData\Package Cache
2018-12-07 17:45 - 2017-03-14 08:50 - 000000000 ____D C:\ProgramData\Origin
2018-12-07 17:33 - 2017-12-25 18:12 - 000003176 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-12-07 17:33 - 2017-12-25 18:12 - 000002914 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-12-07 17:33 - 2017-12-25 17:34 - 000003496 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-12-07 17:33 - 2017-12-25 17:34 - 000003398 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-12-07 17:33 - 2017-12-25 17:34 - 000003272 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-12-07 17:33 - 2017-12-25 17:34 - 000002984 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-12-07 17:33 - 2017-12-25 17:34 - 000002956 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-12-07 17:33 - 2017-12-25 17:34 - 000002860 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3938795631-1035328357-3560281598-1001
2018-12-07 17:33 - 2017-12-25 17:34 - 000002838 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-12-07 17:33 - 2017-12-25 17:34 - 000002786 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-12-07 17:33 - 2017-12-25 17:34 - 000002744 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-12-07 17:33 - 2017-12-25 17:34 - 000002346 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_ListenToDevice
2018-12-07 17:33 - 2017-12-25 17:34 - 000002282 _____ C:\WINDOWS\System32\Tasks\RTKCPL
2018-12-07 17:33 - 2017-12-25 17:34 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2018-12-07 17:32 - 2016-04-03 13:12 - 000000000 ____D C:\WINDOWS\Log
2018-12-07 17:22 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-12-07 16:51 - 2017-01-22 19:13 - 000000000 ____D C:\Users\jaci\AppData\Local\CrashDumps
2018-12-07 16:08 - 2017-09-29 14:46 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2018-12-06 21:31 - 2017-12-25 17:34 - 000004226 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C0FC0911-388A-4A4E-AA63-C81E8DDE68CD}
2018-12-06 14:32 - 2018-01-22 00:52 - 000000000 ____D C:\Program Files (x86)\Steam
2018-12-06 10:14 - 2017-12-11 16:28 - 000000000 ____D C:\Users\jaci\AppData\Roaming\ipla
2018-12-06 08:34 - 2017-12-21 15:09 - 000000000 ___DC C:\WINDOWS\Panther
2018-12-03 09:06 - 2017-12-24 21:27 - 000000000 ___HD C:\Program Files\Common Files\EAInstaller
2018-11-30 09:08 - 2017-01-21 16:13 - 000002410 _____ C:\Users\jaci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-11-30 09:08 - 2017-01-21 16:13 - 000000000 ___RD C:\Users\jaci\OneDrive
2018-11-28 08:53 - 2017-01-22 19:12 - 000000000 ____D C:\Users\jaci\AppData\Local\Adobe
2018-11-28 08:52 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-11-27 20:23 - 2017-09-29 09:45 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2018-11-27 20:11 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Registration
2018-11-27 20:09 - 2017-12-25 17:33 - 000040428 _____ C:\WINDOWS\diagwrn.xml
2018-11-27 20:09 - 2017-12-25 17:33 - 000034132 _____ C:\WINDOWS\diagerr.xml
2018-11-27 13:39 - 2017-01-22 19:13 - 000002309 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-11-26 19:20 - 2017-12-25 17:34 - 000004652 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-11-26 19:20 - 2017-12-25 17:34 - 000004488 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2018-11-26 19:20 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-11-15 14:02 - 2017-06-26 10:33 - 000000000 ____D C:\Users\jaci\AppData\Local\ElevatedDiagnostics
2018-11-15 07:50 - 2017-12-25 17:33 - 002376526 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-11-15 07:50 - 2017-09-30 15:29 - 001084228 _____ C:\WINDOWS\system32\perfh015.dat
2018-11-15 07:50 - 2017-09-30 15:29 - 000236578 _____ C:\WINDOWS\system32\perfc015.dat
2018-11-14 19:00 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps
2018-11-14 17:40 - 2018-07-14 12:38 - 000000000 ____D C:\Program Files\rempl
2018-11-14 12:00 - 2018-06-28 10:46 - 000000204 _____ C:\Users\jaci\AppData\Roaming\WB.CFG
2018-11-13 22:21 - 2017-12-25 17:16 - 000000000 ____D C:\Users\jaci\AppData\Local\Packages
2018-11-13 19:00 - 2017-10-19 08:37 - 000059890 _____ C:\WINDOWS\SysWOW64\stub.json
2018-11-13 18:11 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-11-13 18:11 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-11-13 18:10 - 2017-01-16 16:36 - 000000000 ____D C:\Program Files\Microsoft Office
==================== Pliki w katalogu głównym wybranych folderów =======
2017-01-21 16:09 - 2017-10-12 18:52 - 000000166 _____ () C:\Users\jaci\AppData\Roaming\sp_data.sys
2018-06-28 10:46 - 2018-11-14 12:00 - 000000204 _____ () C:\Users\jaci\AppData\Roaming\WB.CFG
2018-12-07 16:08 - 2018-12-07 16:08 - 000000017 _____ () C:\Users\jaci\AppData\Local\resmon.resmoncfg
2018-05-25 19:49 - 2018-05-25 19:49 - 000000000 _____ () C:\Users\jaci\AppData\Local\{43562BD8-6010-44E6-9681-843D548BA874}
2018-07-20 20:38 - 2018-07-20 20:38 - 000000153 _____ () C:\Users\jaci\AppData\Local\{6270983B-881B-4E4E-97FE-D6E3AA92076C}
2018-08-06 20:38 - 2018-08-06 20:38 - 000000153 _____ () C:\Users\jaci\AppData\Local\{739DF5D6-B002-43AB-89C7-61D15440F42C}
2018-08-13 20:38 - 2018-08-13 20:38 - 000000153 _____ () C:\Users\jaci\AppData\Local\{A0D98533-0D1C-4A9E-8CFB-AE46C6B16A8D}
2018-09-10 20:38 - 2018-09-10 20:38 - 000000153 _____ () C:\Users\jaci\AppData\Local\{D2CD6129-4F4C-4748-9EB0-2E239C4A2F21}
2018-07-21 20:38 - 2018-07-21 20:38 - 000000153 _____ () C:\Users\jaci\AppData\Local\{E61B671E-2091-4C58-B41F-83ACDFD7C2E4}
2018-08-31 20:38 - 2018-08-31 20:38 - 000000153 _____ () C:\Users\jaci\AppData\Local\{EA387B22-E263-41FF-8634-3AF588CA9B99}
==================== Bamital & volsnap ======================
(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
C:\WINDOWS\system32\winlogon.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll = & gt; Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys = & gt; Plik podpisany cyfrowo
LastRegBack: 2018-12-07 17:13
==================== Koniec FRST.txt ============================