API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Nov 19th, 2015
81
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 25.95 KB | None | 0 0
raw download clone embed print report
  1. Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:18-11-2015
  2. Uruchomiony przez Asika (administrator) ASIA (19-11-2015 18:15:30)
  3. Uruchomiony z C:\Users\Asika\Downloads
  4. Załadowane profile: Asika (Dostępne profile: Asika)
  5. Platform: Windows 8.1 (X64) Język: Polski (Polska)
  6. Internet Explorer Wersja 11 (Domyślna przeglądarka: IE)
  7. Tryb startu: Normal
  8. Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Procesy (filtrowane) =================
  11.  
  12. (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
  13.  
  14. (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
  15. (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
  16. (Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
  17. (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
  18. (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
  19. (QS) C:\Program Files (x86)\QuickSurf_1.10.0.20\Service\qssvc.exe
  20. (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
  21. (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
  22. (AMD) C:\Windows\System32\atiesrxx.exe
  23. (ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
  24. (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
  25. (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
  26. (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
  27. (AMD) C:\Windows\System32\atieclxx.exe
  28. Brak dostępu do procesu -> FBAgent.exe
  29. (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
  30. (ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
  31. (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
  32. (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
  33. (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
  34. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  35. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  36. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  37. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  38. (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
  39. () C:\Program Files\AMD Quick Stream\AMDQuickStream.exe
  40. (© 2015 Microsoft Corporation) C:\Users\Asika\AppData\Local\Microsoft\BingSvc\BingSvc.exe
  41. () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
  42. () C:\Users\Asika\AppData\Roaming\Gameo\gameo.exe
  43. (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.226\SSScheduler.exe
  44. (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
  45. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  46. (ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
  47. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  48. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  49. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  50. (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
  51. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  52. () C:\Users\Asika\AppData\Roaming\Gameo\gameo.exe
  53. () C:\Users\Asika\AppData\Roaming\Gameo\gameo.exe
  54. () C:\Users\Asika\AppData\Roaming\Gameo\gameo.exe
  55. (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
  56. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
  57. (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
  58. (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
  59. (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
  60. (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
  61. (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
  62. (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
  63. (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
  64. (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
  65. (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
  66. (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
  67. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  68.  
  69.  
  70. ==================== Rejestr (filtrowane) ===========================
  71.  
  72. (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
  73.  
  74. HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
  75. HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
  76. HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-02-27] (Raptr, Inc)
  77. HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-11-28] (Atheros Communications)
  78. HKU\S-1-5-21-1640847110-3398383204-705248648-1001\...\Run: [uTorrent] => C:\Users\Asika\AppData\Roaming\uTorrent\uTorrent.exe [1742928 2015-03-04] (BitTorrent Inc.)
  79. HKU\S-1-5-21-1640847110-3398383204-705248648-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
  80. HKU\S-1-5-21-1640847110-3398383204-705248648-1001\...\Run: [AppEx Accelerator UI] => C:\Program Files\AMD Quick Stream\AMDQuickStream.exe [482528 2014-03-31] ()
  81. HKU\S-1-5-21-1640847110-3398383204-705248648-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-26] (Disc Soft Ltd)
  82. HKU\S-1-5-21-1640847110-3398383204-705248648-1001\...\Run: [BingSvc] => C:\Users\Asika\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (© 2015 Microsoft Corporation)
  83. HKU\S-1-5-21-1640847110-3398383204-705248648-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53753984 2015-07-18] (Skype Technologies S.A.)
  84. HKU\S-1-5-21-1640847110-3398383204-705248648-1001\...\Run: [Gameo] => C:\Users\Asika\AppData\Roaming\Gameo\gameo.exe [42482176 2015-07-04] ()
  85. HKU\S-1-5-21-1640847110-3398383204-705248648-1001\...\MountPoints2: {652eed24-57cd-11e5-beb1-40167e100821} - "F:\LGAutoRun.exe"
  86. HKU\S-1-5-21-1640847110-3398383204-705248648-1001\...\MountPoints2: {ddc4d53a-ce55-11e4-be97-40167e100821} - "G:\null.exe"
  87. HKU\S-1-5-21-1640847110-3398383204-705248648-1001\Control Panel\Desktop\\SCRNSAVE.EXE ->
  88. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-11-15]
  89. ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.226\SSScheduler.exe (McAfee, Inc.)
  90.  
  91. ==================== Internet (filtrowane) ====================
  92.  
  93. (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
  94.  
  95. Hosts: 0.0.0.1 mssplus.mcafee.com
  96. Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
  97. Tcpip\..\Interfaces\{780722E3-FB7C-4BBC-8285-4BB6A37B0728}: [DhcpNameServer] 192.168.0.1
  98.  
  99. Internet Explorer:
  100. ==================
  101. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
  102. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
  103. HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
  104. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
  105. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
  106. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
  107. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
  108. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
  109. HKU\S-1-5-21-1640847110-3398383204-705248648-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SK2M&ocid=SK2MDHP&osmkt=pl-pl
  110. BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
  111. BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
  112. BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
  113. BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-15] (Adobe Systems Incorporated)
  114. BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
  115. BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
  116. BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
  117. Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
  118. Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
  119.  
  120. FireFox:
  121. ========
  122. FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-11] ()
  123. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
  124. FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  125. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-11] ()
  126. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
  127. FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  128. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
  129. FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
  130. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
  131. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
  132. FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
  133. FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()
  134. FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => nie znaleziono
  135.  
  136. Chrome:
  137. =======
  138. CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=pl-pl
  139. CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms}
  140. CHR DefaultSearchKeyword: Default -> bing.com
  141. CHR Profile: C:\Users\Asika\AppData\Local\Google\Chrome\User Data\Default
  142. CHR Extension: (Prezentacje Google) - C:\Users\Asika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-11]
  143. CHR Extension: (Dokumenty Google) - C:\Users\Asika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-11]
  144. CHR Extension: (Dysk Google) - C:\Users\Asika\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
  145. CHR Extension: (YouTube) - C:\Users\Asika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
  146. CHR Extension: (Google Search) - C:\Users\Asika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
  147. CHR Extension: (Bing) - C:\Users\Asika\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2015-07-30]
  148. CHR Extension: (Arkusze Google) - C:\Users\Asika\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-11]
  149. CHR Extension: (Dokumenty Google offline) - C:\Users\Asika\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18]
  150. CHR Extension: (AdBlock) - C:\Users\Asika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-11-17]
  151. CHR Extension: (Skype Click to Call) - C:\Users\Asika\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-10-14]
  152. CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Asika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-26]
  153. CHR Extension: (Gmail) - C:\Users\Asika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-11]
  154. CHR HKU\S-1-5-21-1640847110-3398383204-705248648-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
  155. CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]
  156.  
  157. ==================== Usługi (filtrowane) ========================
  158.  
  159. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  160.  
  161. R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) [Brak podpisu cyfrowego]
  162. R3 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-08-29] (ASUS)
  163. R3 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [318592 2013-11-28] (Windows (R) Win 7 DDK provider) [Brak podpisu cyfrowego]
  164. R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
  165. R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
  166. S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-26] (Disc Soft Ltd)
  167. S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
  168. S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.226\McCHSvc.exe [289256 2015-10-30] (McAfee, Inc.)
  169. R2 qssvc_1.10.0.20; C:\Program Files (x86)\QuickSurf_1.10.0.20\Service\qssvc.exe [300120 2015-07-06] (QS)
  170. R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
  171. R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
  172. R3 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-11-28] (Atheros) [Brak podpisu cyfrowego]
  173.  
  174. ===================== Sterowniki (filtrowane) ==========================
  175.  
  176. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  177.  
  178. R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35936 2013-04-09] (Advanced Micro Devices, Inc.)
  179. R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [229056 2014-10-28] (AppEx Networks Corporation)
  180. R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [94208 2013-04-24] (Advanced Micro Devices)
  181. R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70928 2013-11-08] (ASUS Corporation)
  182. S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-11-28] (Qualcomm Atheros)
  183. S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
  184. R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-03-19] (Disc Soft Ltd)
  185. S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
  186. R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
  187. R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
  188. S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)
  189. R1 MpKsl1db6945a; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{963E8115-40AF-4563-9511-E37C68B2705F}\MpKsl1db6945a.sys [45352 2015-10-20] (Microsoft Corporation)
  190. R1 MpKsl89588624; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{963E8115-40AF-4563-9511-E37C68B2705F}\MpKsl89588624.sys [45352 2015-06-15] (Microsoft Corporation)
  191. R1 qsafd_vw_1_10_0_20; C:\Windows\System32\drivers\qsafd_vw_1_10_0_20.sys [57728 2015-07-06] (QS)
  192. S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44024 2015-02-04] (Microsoft Corporation)
  193. R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [264000 2015-02-04] (Microsoft Corporation)
  194. R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
  195.  
  196. ==================== NetSvcs (filtrowane) ===================
  197.  
  198. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
  199.  
  200.  
  201. ==================== Jeden miesiąc - utworzone pliki i foldery ========
  202.  
  203. (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
  204.  
  205. 2015-11-19 18:14 - 2015-11-19 18:14 - 00000000 ____D C:\Users\Asika\Downloads\FRST-OlderVersion
  206. 2015-11-18 23:38 - 2015-11-18 23:38 - 01518212 _____ C:\Users\Asika\Downloads\spółka-komandytowo-akcyjna.pptx
  207. 2015-11-17 13:44 - 2015-11-17 14:15 - 01114178 _____ C:\Users\Asika\Documents\spółka komandytowo akcyjna.pptx
  208. 2015-11-15 20:47 - 2015-11-15 20:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
  209. 2015-11-15 20:47 - 2015-11-15 20:47 - 00000000 ____D C:\Program Files\McAfee Security Scan
  210. 2015-11-10 00:54 - 2015-11-10 00:54 - 00000000 ____D C:\Users\Asika\Documents\AIŻ sprawka
  211. 2015-11-02 11:28 - 2015-11-02 11:28 - 00000383 _____ C:\ftconfig.ini
  212. 2015-10-27 22:00 - 2015-10-27 22:00 - 00001034 _____ C:\Users\Asika\Downloads\tabelka-Link2.html
  213. 2015-10-27 22:00 - 2015-10-27 22:00 - 00001034 _____ C:\Users\Asika\Downloads\tabela.txt
  214. 2015-10-26 18:09 - 2015-10-27 02:11 - 00020084 _____ C:\Users\Asika\Downloads\OTŻ-KOŁO.odt
  215.  
  216. ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========
  217.  
  218. (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
  219.  
  220. 2015-11-19 18:16 - 2015-05-10 23:39 - 00018629 _____ C:\Users\Asika\Downloads\FRST.txt
  221. 2015-11-19 18:15 - 2015-05-10 23:39 - 00000000 ____D C:\FRST
  222. 2015-11-19 18:14 - 2015-05-10 23:39 - 02008576 _____ (Farbar) C:\Users\Asika\Downloads\FRST64.exe
  223. 2015-11-19 18:02 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
  224. 2015-11-19 17:58 - 2014-12-11 18:21 - 01436252 _____ C:\WINDOWS\WindowsUpdate.log
  225. 2015-11-19 17:41 - 2014-10-12 17:59 - 00000074 _____ C:\Users\Asika\AppData\Roaming\sp_data.sys
  226. 2015-11-19 17:39 - 2014-12-31 11:46 - 00003968 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{18C960E6-E76D-4C83-899F-0FE42E48B1C0}
  227. 2015-11-19 17:39 - 2014-03-05 01:16 - 00003268 _____ C:\WINDOWS\System32\Tasks\AsusVibeSchedule
  228. 2015-11-19 17:39 - 2014-03-05 01:10 - 00003024 _____ C:\WINDOWS\System32\Tasks\ASUS USB Charger Plus
  229. 2015-11-19 17:39 - 2014-03-05 01:10 - 00003004 _____ C:\WINDOWS\System32\Tasks\ASUS Splendid ColorU
  230. 2015-11-19 17:39 - 2014-03-05 01:10 - 00002988 _____ C:\WINDOWS\System32\Tasks\ASUS Splendid ACMON
  231. 2015-11-19 17:39 - 2014-03-05 01:08 - 00003052 _____ C:\WINDOWS\System32\Tasks\ASUS P4G
  232. 2015-11-19 17:39 - 2014-03-05 00:58 - 00003540 _____ C:\WINDOWS\System32\Tasks\ASUS Smart Gesture Launcher
  233. 2015-11-19 17:38 - 2015-08-04 15:00 - 00000000 ____D C:\Users\Asika\AppData\Local\Gameo
  234. 2015-11-19 02:35 - 2014-12-11 18:30 - 00000000 ____D C:\Users\Asika
  235. 2015-11-19 02:33 - 2015-10-04 19:47 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
  236. 2015-11-19 02:13 - 2014-10-12 16:16 - 00001066 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
  237. 2015-11-18 22:18 - 2014-09-24 16:08 - 01825074 _____ C:\WINDOWS\system32\PerfStringBackup.INI
  238. 2015-11-18 22:18 - 2014-09-24 15:35 - 00807160 _____ C:\WINDOWS\system32\perfh015.dat
  239. 2015-11-18 22:18 - 2014-09-24 15:35 - 00163478 _____ C:\WINDOWS\system32\perfc015.dat
  240. 2015-11-18 22:05 - 2015-03-10 23:52 - 00008209 _____ C:\WINDOWS\setupact.log
  241. 2015-11-18 22:05 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
  242. 2015-11-18 01:41 - 2015-08-04 15:18 - 00000000 ____D C:\Users\Asika\Documents\Games for Windows - LIVE Demos
  243. 2015-11-15 20:54 - 2014-12-10 17:45 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1640847110-3398383204-705248648-1001
  244. 2015-11-15 20:47 - 2015-10-04 19:47 - 00001952 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
  245. 2015-11-11 22:36 - 2014-10-12 16:19 - 00002211 _____ C:\Users\Public\Desktop\Google Chrome.lnk
  246. 2015-11-11 12:33 - 2015-10-04 19:47 - 00003818 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
  247. 2015-11-10 00:55 - 2015-03-25 21:34 - 00000000 ____D C:\Users\Asika\Documents\chemia
  248. 2015-11-09 01:09 - 2015-10-04 19:55 - 00000000 ____D C:\Users\Asika\AppData\Roaming\vlc
  249. 2015-11-03 12:01 - 2015-02-10 19:51 - 00000000 ____D C:\Users\Asika\Documents\zdjęcia do wywołania
  250. 2015-11-01 21:50 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
  251. 2015-11-01 20:44 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\LiveKernelReports
  252. 2015-10-24 00:51 - 2015-05-06 14:32 - 00000000 ____D C:\Users\Asika\Documents\pytania kontrolne
  253. 2015-10-24 00:49 - 2015-04-07 20:42 - 00000000 ____D C:\Users\Asika\Documents\chemia 2
  254. 2015-10-24 00:45 - 2015-10-04 19:37 - 00000000 ____D C:\Users\Asika\Documents\Agata i Piotrek
  255. 2015-10-24 00:43 - 2015-06-09 23:21 - 00000000 ____D C:\Users\Asika\Documents\maszyny- egzamin
  256. 2015-10-24 00:43 - 2015-03-09 23:44 - 00000000 ____D C:\Users\Asika\Documents\Technologia żywności podręcznik dla technikum - Andrzej Jarczyk - Google Książki_files
  257. 2015-10-24 00:43 - 2015-01-03 22:33 - 00000000 ____D C:\Users\Asika\Documents\CyberLink
  258. 2015-10-24 00:43 - 2014-11-29 14:25 - 00000000 ____D C:\Users\Asika\Documents\raport
  259. 2015-10-24 00:40 - 2015-06-09 23:04 - 00000000 ____D C:\Users\Asika\Documents\chemia- egzamin
  260. 2015-10-20 21:27 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
  261.  
  262. ==================== Pliki w katalogu głównym wybranych folderów =======
  263.  
  264. 2015-08-04 14:45 - 2015-08-04 14:45 - 0032126 _____ () C:\Users\Asika\AppData\Roaming\ICSW_1J1F1H1E2Y2Z1P1C1B2W1L1T2ZtJ1V0O1E1P1C1T1V0I0C.txt
  265. 2014-10-12 17:59 - 2015-11-19 17:41 - 0000074 _____ () C:\Users\Asika\AppData\Roaming\sp_data.sys
  266. 2015-05-11 19:19 - 2015-05-11 19:19 - 0000000 _____ () C:\Users\Asika\AppData\Local\Temp.dat
  267. 2015-03-19 20:05 - 2015-03-19 20:05 - 0203258 _____ () C:\ProgramData\1426791739.bdinstall.bin
  268. 2015-04-14 20:44 - 2015-04-14 20:44 - 0037672 _____ () C:\ProgramData\1429040686.bdinstall.bin
  269. 2015-04-14 20:45 - 2015-04-14 20:45 - 0058890 _____ () C:\ProgramData\1429040693.bdinstall.bin
  270. 2015-04-14 20:49 - 2015-04-14 20:49 - 0037540 _____ () C:\ProgramData\1429040962.bdinstall.bin
  271. 2015-04-14 20:50 - 2015-04-14 20:50 - 0097890 _____ () C:\ProgramData\1429040969.bdinstall.bin
  272. 2014-12-11 18:20 - 2014-12-11 18:20 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
  273. 2013-05-01 12:15 - 2012-09-07 12:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
  274.  
  275. Niektóre pliki w TEMP:
  276. ====================
  277. C:\Users\Asika\AppData\Local\Temp\AutoRun.exe
  278. C:\Users\Asika\AppData\Local\Temp\AutoRunGUI.dll
  279. C:\Users\Asika\AppData\Local\Temp\BingSvc.exe
  280. C:\Users\Asika\AppData\Local\Temp\BSvcProcessor.exe
  281. C:\Users\Asika\AppData\Local\Temp\BSvcUpdater.exe
  282. C:\Users\Asika\AppData\Local\Temp\ICSW1.13_1J1F1H1E2Y2Z1P1C1B2W1L1T2Z1.13.exe
  283. C:\Users\Asika\AppData\Local\Temp\{613288EE-DE3C-443E-A382-3E97BEE0688F}-44.0.2403.130_44.0.2403.125_chrome_updater.exe
  284.  
  285.  
  286. ==================== Bamital & volsnap =================
  287.  
  288. (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
  289.  
  290. C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
  291. C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
  292. C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
  293. C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
  294. C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
  295. C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
  296. C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
  297. C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
  298. C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
  299. C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
  300. C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
  301. C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
  302. C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
  303. C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
  304. C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo
  305.  
  306.  
  307. LastRegBack: 2015-11-18 23:14
  308.  
  309. ==================== Koniec FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!