Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:20-12-2015
Uruchomiony przez USER (administrator)  ASUS (22-12-2015 23:09:53)
Uruchomiony z C:\Users\USER\Downloads
Załadowane profile: USER (Dostępne profile: USER & Kasia)
Platform: Windows 8.1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfemms.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
() C:\Program Files (x86)\ASUS\WebStorage\2.2.4.537\ASUSWSLoader.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.4.537\ASUSWSLoader.exe [63272 2015-10-12] ()
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-09-28] (Atheros Communications)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.2.4.537\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.2.4.537\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.2.4.537\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
Startup: C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk [2015-12-15]
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{32B0D01E-3FBE-4285-B6D2-174DC15FC6CA}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{EDD05F87-18A0-4F9C-89F1-2859D266F8A9}: [DhcpNameServer] 192.168.104.1

Internet Explorer:
==================
HKU\S-1-5-21-4019311948-170592249-1821093912-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-4019311948-170592249-1821093912-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-09-28] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-09-28] (McAfee, Inc.)

FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-09-28] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2015-07-04] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2012-12-12] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-09-28] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-11-23]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2015-12-14] [Brak podpisu cyfrowego]

Chrome: 
=======
CHR Profile: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-15]
CHR Extension: (Dokumenty Google) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-15]
CHR Extension: (Dysk Google) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-15]
CHR Extension: (YouTube) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-15]
CHR Extension: (Google Search) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-15]
CHR Extension: (Arkusze Google) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-15]
CHR Extension: (SiteAdvisor) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-12-15]
CHR Extension: (Dokumenty Google offline) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-15]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-15]
CHR Extension: (Gmail) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-15]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-12]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-12]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [Brak podpisu cyfrowego]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [322176 2014-09-28] (Windows (R) Win 7 DDK provider) [Brak podpisu cyfrowego]
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1037568 2014-09-18] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344976 2014-12-15] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2014-10-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [156960 2015-02-25] (Intel Corporation)
R2 McAfee SiteAdvisor Service; c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [157928 2015-12-02] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [783120 2015-09-28] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [332528 2014-03-12] (McAfee, Inc.)
R2 mcbootdelaystartsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe [1694152 2015-09-01] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [639456 2015-08-11] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232656 2015-07-31] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [376264 2015-08-10] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [254792 2015-07-31] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-10-21] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-10-21] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-09-28] (Atheros) [Brak podpisu cyfrowego]

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4221952 2014-09-09] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [73512 2015-03-18] (ASUS Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-09-28] (Qualcomm Atheros)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [80768 2015-08-10] (McAfee, Inc.)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [38720 2014-09-18] (Intel Corporation)
R3 dptf_pch; C:\Windows\System32\drivers\dptf_pch.sys [38208 2014-09-18] (Intel Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [216360 2014-09-18] (Intel Corporation)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207208 2015-05-19] (McAfee, Inc.)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [79016 2014-08-26] (Intel Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2015-02-25] (Intel Corporation)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [413432 2015-08-10] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [349096 2015-08-10] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [82072 2015-08-10] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [495856 2015-08-10] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [839376 2015-08-10] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [537408 2015-08-12] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [111256 2015-08-12] (McAfee, Inc.)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [37960 2015-12-02] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [244024 2015-08-10] (McAfee, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [35856 2014-10-21] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [257880 2014-10-21] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-10-21] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-22 23:09 - 2015-12-22 23:10 - 00017993 _____ C:\Users\USER\Downloads\FRST.txt
2015-12-22 23:09 - 2015-12-22 23:09 - 00000000 ____D C:\FRST
2015-12-22 22:56 - 2015-12-22 22:56 - 02370560 _____ (Farbar) C:\Users\USER\Downloads\FRST64.exe
2015-12-22 22:56 - 2015-12-22 22:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-12-20 16:43 - 2015-12-20 16:45 - 00000149 _____ C:\Users\Kasia\Desktop\przepisy.txt
2015-12-19 19:13 - 2015-12-19 19:14 - 00000000 ____D C:\Users\USER\Desktop\Nowy folder
2015-12-19 13:36 - 2015-12-19 13:36 - 00001142 _____ C:\Users\USER\Desktop\Witamy w rejestracji produktu ASUS.lnk
2015-12-18 20:28 - 2015-12-18 20:29 - 00000000 ____D C:\Users\Kasia\Desktop\LemON
2015-12-18 15:31 - 2015-12-18 15:31 - 00000000 ____D C:\Users\Kasia\Desktop\Camera
2015-12-18 15:24 - 2015-12-18 15:26 - 00000000 ____D C:\Users\Kasia\Desktop\Muzyka
2015-12-18 15:23 - 2015-12-18 15:23 - 00000000 ____D C:\Users\Kasia\Desktop\Messenger
2015-12-18 15:23 - 2015-12-18 15:23 - 00000000 ____D C:\Users\Kasia\Desktop\Instagram
2015-12-18 15:22 - 2015-12-18 15:22 - 00000000 ____D C:\Users\Kasia\Desktop\Tapety
2015-12-18 14:53 - 2015-12-18 14:53 - 00000000 ____D C:\Users\Kasia\Documents\Bluetooth Folder
2015-12-18 14:53 - 2015-12-18 14:53 - 00000000 ____D C:\Users\Kasia\AppData\Local\BMExplorer
2015-12-18 14:39 - 2015-12-22 11:16 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4019311948-170592249-1821093912-1004
2015-12-18 14:39 - 2015-12-18 14:39 - 00000000 ____D C:\Users\Kasia\AppData\Roaming\WebStorage
2015-12-18 14:39 - 2015-12-18 14:39 - 00000000 ____D C:\Users\Kasia\AppData\Roaming\awsRun
2015-12-18 14:34 - 2015-12-22 16:16 - 00000165 _____ C:\Users\Kasia\AppData\Roaming\sp_data.sys
2015-12-18 14:34 - 2015-12-18 14:34 - 00000000 ____D C:\Users\Kasia\AppData\Roaming\Atheros
2015-12-18 14:34 - 2015-12-18 14:34 - 00000000 ____D C:\Users\Kasia\AppData\Local\NVIDIA
2015-12-18 14:33 - 2015-12-22 11:12 - 00000000 ____D C:\Users\Kasia\AppData\Local\Packages
2015-12-18 14:33 - 2015-12-21 21:33 - 00000000 ____D C:\Users\Kasia
2015-12-18 14:33 - 2015-12-19 22:38 - 00000000 ____D C:\Users\Kasia\AppData\Local\Google
2015-12-18 14:33 - 2015-12-18 14:33 - 00001452 _____ C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-18 14:33 - 2015-12-18 14:33 - 00000020 ___SH C:\Users\Kasia\ntuser.ini
2015-12-18 14:33 - 2015-12-18 14:33 - 00000000 _SHDL C:\Users\Kasia\Ustawienia lokalne
2015-12-18 14:33 - 2015-12-18 14:33 - 00000000 _SHDL C:\Users\Kasia\Szablony
2015-12-18 14:33 - 2015-12-18 14:33 - 00000000 _SHDL C:\Users\Kasia\Moje dokumenty
2015-12-18 14:33 - 2015-12-18 14:33 - 00000000 _SHDL C:\Users\Kasia\Menu Start
2015-12-18 14:33 - 2015-12-18 14:33 - 00000000 _SHDL C:\Users\Kasia\Documents\Moje wideo
2015-12-18 14:33 - 2015-12-18 14:33 - 00000000 _SHDL C:\Users\Kasia\Documents\Moje obrazy
2015-12-18 14:33 - 2015-12-18 14:33 - 00000000 _SHDL C:\Users\Kasia\Documents\Moja muzyka
2015-12-18 14:33 - 2015-12-18 14:33 - 00000000 _SHDL C:\Users\Kasia\Dane aplikacji
2015-12-18 14:33 - 2015-12-18 14:33 - 00000000 _SHDL C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-12-18 14:33 - 2015-12-18 14:33 - 00000000 _SHDL C:\Users\Kasia\AppData\Local\Historia
2015-12-18 14:33 - 2015-12-18 14:33 - 00000000 _SHDL C:\Users\Kasia\AppData\Local\Dane aplikacji
2015-12-18 14:33 - 2015-12-18 14:33 - 00000000 __SHD C:\Users\Kasia\IntelGraphicsProfiles
2015-12-18 14:33 - 2015-12-18 14:33 - 00000000 ____D C:\Users\Kasia\AppData\Roaming\Adobe
2015-12-18 14:33 - 2015-12-18 14:33 - 00000000 ____D C:\Users\Kasia\AppData\Local\VirtualStore
2015-12-18 14:33 - 2014-03-18 16:27 - 00000369 _____ C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-12-18 14:33 - 2014-03-18 16:27 - 00000369 _____ C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-12-17 10:09 - 2015-12-17 10:09 - 00000000 ____D C:\Users\USER\Tracing
2015-12-17 10:08 - 2015-12-17 10:08 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-17 10:08 - 2015-12-17 10:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-16 09:50 - 2015-12-22 22:55 - 00000000 ___RD C:\Users\USER\OneDrive
2015-12-15 18:43 - 2015-12-15 18:47 - 00000000 ___RD C:\Users\USER\Desktop\Moje
2015-12-15 18:28 - 2015-12-15 18:28 - 00000000 ____D C:\Users\USER\AppData\Roaming\Macromedia
2015-12-15 18:01 - 2015-12-15 18:01 - 00000000 ____D C:\Users\USER\AppData\Roaming\OpenOffice.org
2015-12-15 17:26 - 2015-12-18 12:47 - 00000000 ____D C:\Users\USER\AppData\Roaming\Skype
2015-12-15 17:26 - 2015-12-17 10:08 - 00000000 ____D C:\Users\USER\AppData\Local\Skype
2015-12-14 17:38 - 2015-12-22 23:09 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4019311948-170592249-1821093912-1002
2015-12-14 17:38 - 2015-12-14 17:38 - 00000000 ____D C:\Users\USER\AppData\Roaming\WebStorage
2015-12-14 17:38 - 2015-12-14 17:38 - 00000000 ____D C:\Users\USER\AppData\Roaming\awsRun
2015-12-14 17:33 - 2015-12-14 17:33 - 00000000 ____D C:\Users\USER\AppData\Roaming\Atheros
2015-12-14 17:33 - 2015-12-14 17:33 - 00000000 ____D C:\Users\USER\AppData\Local\NVIDIA
2015-12-14 17:32 - 2015-12-22 23:08 - 00000165 _____ C:\Users\USER\AppData\Roaming\sp_data.sys
2015-12-14 17:32 - 2015-12-17 10:51 - 00000000 ____D C:\Users\USER\AppData\Local\Google
2015-12-14 17:32 - 2015-12-14 17:34 - 00000000 ____D C:\Users\USER\AppData\Local\Packages
2015-12-14 17:32 - 2015-12-14 17:32 - 00001452 _____ C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-14 17:32 - 2015-12-14 17:32 - 00000020 ___SH C:\Users\USER\ntuser.ini
2015-12-14 17:32 - 2015-12-14 17:32 - 00000000 _SHDL C:\Users\USER\Ustawienia lokalne
2015-12-14 17:32 - 2015-12-14 17:32 - 00000000 _SHDL C:\Users\USER\Szablony
2015-12-14 17:32 - 2015-12-14 17:32 - 00000000 _SHDL C:\Users\USER\Moje dokumenty
2015-12-14 17:32 - 2015-12-14 17:32 - 00000000 _SHDL C:\Users\USER\Menu Start
2015-12-14 17:32 - 2015-12-14 17:32 - 00000000 _SHDL C:\Users\USER\Documents\Moje wideo
2015-12-14 17:32 - 2015-12-14 17:32 - 00000000 _SHDL C:\Users\USER\Documents\Moje obrazy
2015-12-14 17:32 - 2015-12-14 17:32 - 00000000 _SHDL C:\Users\USER\Documents\Moja muzyka
2015-12-14 17:32 - 2015-12-14 17:32 - 00000000 _SHDL C:\Users\USER\Dane aplikacji
2015-12-14 17:32 - 2015-12-14 17:32 - 00000000 _SHDL C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-12-14 17:32 - 2015-12-14 17:32 - 00000000 _SHDL C:\Users\USER\AppData\Local\Historia
2015-12-14 17:32 - 2015-12-14 17:32 - 00000000 _SHDL C:\Users\USER\AppData\Local\Dane aplikacji
2015-12-14 17:32 - 2015-12-14 17:32 - 00000000 __SHD C:\Users\USER\IntelGraphicsProfiles
2015-12-14 17:32 - 2015-12-14 17:32 - 00000000 ____D C:\Users\USER\AppData\Roaming\Adobe
2015-12-14 17:32 - 2015-12-14 17:32 - 00000000 ____D C:\Users\USER\AppData\Local\VirtualStore
2015-12-14 17:32 - 2014-03-18 16:27 - 00000369 _____ C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-12-14 17:32 - 2014-03-18 16:27 - 00000369 _____ C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-12-14 14:56 - 2015-12-16 23:32 - 00002211 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-14 14:56 - 2015-12-14 14:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-14 14:18 - 2015-12-14 14:18 - 00001295 _____ C:\Users\Public\Desktop\WebStorage.lnk
2015-12-12 21:10 - 2015-12-14 13:34 - 00000000 ____D C:\Windows\System32\Tasks\McAfee
2015-12-12 16:49 - 2015-12-12 16:49 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2015-12-05 16:33 - 2015-05-19 13:59 - 00207208 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2015-12-04 18:30 - 2015-12-19 13:14 - 00003474 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2015-12-03 19:35 - 2015-12-03 19:35 - 00000000 ____D C:\Program Files\Common Files\AV

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2015-12-22 23:09 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2015-12-22 23:09 - 2013-08-22 14:36 - 00000000 ____D C:\Windows
2015-12-22 22:54 - 2015-07-04 23:22 - 00001062 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-22 21:31 - 2015-07-04 23:22 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-22 21:30 - 2013-08-22 16:36 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-22 16:17 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2015-12-21 18:59 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2015-12-21 18:56 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-21 18:56 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2015-12-19 13:14 - 2015-07-05 00:38 - 00003464 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2015-12-18 15:23 - 2014-10-21 12:34 - 00743998 _____ C:\Windows\system32\perfh00E.dat
2015-12-18 15:23 - 2014-10-21 12:34 - 00178070 _____ C:\Windows\system32\perfc00E.dat
2015-12-18 15:23 - 2014-10-21 12:14 - 00808596 _____ C:\Windows\system32\perfh015.dat
2015-12-18 15:23 - 2014-10-21 12:14 - 00163898 _____ C:\Windows\system32\perfc015.dat
2015-12-18 15:23 - 2014-03-18 16:26 - 02745464 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-18 14:53 - 2015-07-04 22:45 - 00000000 ____D C:\ProgramData\Atheros
2015-12-18 14:34 - 2015-07-04 23:15 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-12-18 12:36 - 2015-07-04 22:53 - 00000000 ____D C:\ProgramData\McAfee
2015-12-17 10:08 - 2014-10-21 05:29 - 00000000 ____D C:\ProgramData\Skype
2015-12-15 20:21 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache
2015-12-15 19:57 - 2013-08-22 14:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-12-15 19:43 - 2014-03-18 15:58 - 00000000 ____D C:\Windows\SysWOW64\winrm
2015-12-15 19:43 - 2014-03-18 15:58 - 00000000 ____D C:\Windows\SysWOW64\WCN
2015-12-15 19:43 - 2014-03-18 15:58 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2015-12-15 19:43 - 2014-03-18 15:58 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2015-12-15 19:43 - 2014-03-18 15:58 - 00000000 ____D C:\Windows\system32\winrm
2015-12-15 19:43 - 2014-03-18 15:58 - 00000000 ____D C:\Windows\system32\WCN
2015-12-15 19:43 - 2014-03-18 15:58 - 00000000 ____D C:\Windows\system32\slmgr
2015-12-15 19:43 - 2014-03-18 15:58 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2015-12-15 19:43 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\migwiz
2015-12-15 19:43 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-12-15 19:43 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\Help
2015-12-15 19:43 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-12-15 19:43 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-12-15 19:43 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\system32\Sysprep
2015-12-15 19:43 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\system32\oobe
2015-12-15 19:43 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\servicing
2015-12-15 19:24 - 2015-07-04 23:11 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-12-14 18:16 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2015-12-14 18:07 - 2014-03-18 16:10 - 00000000 ____D C:\Program Files\Windows Journal
2015-12-14 18:07 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2015-12-14 18:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\WinStore
2015-12-14 18:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\en-GB
2015-12-14 18:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\en-GB
2015-12-14 18:07 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-12-14 18:07 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\System
2015-12-14 18:07 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-12-14 18:07 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\SysWOW64\oobe
2015-12-14 17:56 - 2014-10-21 12:14 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2015-12-14 17:56 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\MUI
2015-12-14 17:56 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\Com
2015-12-14 17:56 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\MUI
2015-12-14 17:56 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\IME
2015-12-14 17:56 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-12-14 17:56 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\system32\Dism
2015-12-14 17:55 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\Com
2015-12-14 17:29 - 2015-07-04 23:15 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture
2015-12-14 16:50 - 2015-07-04 23:20 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4019311948-170592249-1821093912-1001
2015-12-14 15:00 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-14 14:56 - 2015-07-04 23:22 - 00000000 ____D C:\Program Files (x86)\Google
2015-12-14 14:42 - 2015-07-04 22:53 - 00000000 ____D C:\Program Files (x86)\McAfee
2015-12-14 11:08 - 2015-07-04 23:37 - 00003980 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E53902C9-09F7-40CE-821E-E07CAB97772A}
2015-12-12 21:11 - 2015-07-04 22:53 - 00000000 ____D C:\Program Files\Common Files\McAfee
2015-12-12 21:10 - 2013-08-22 16:36 - 00000000 ___HD C:\Windows\ELAMBKUP
2015-12-12 14:54 - 2013-08-22 15:44 - 00361952 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-04 18:26 - 2015-07-04 23:22 - 00004038 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-04 18:26 - 2015-07-04 23:22 - 00003802 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Pliki w katalogu głównym wybranych folderów =======

2015-12-14 17:32 - 2015-12-22 23:08 - 0000165 _____ () C:\Users\USER\AppData\Roaming\sp_data.sys
2015-07-04 22:32 - 2015-07-04 22:32 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-10-21 05:28 - 2012-09-07 12:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-10-21 05:28 - 2009-07-22 11:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-10-21 05:28 - 2012-09-07 12:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2015-07-04 21:35

==================== Koniec  FRST.txt ============================