Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 10.03.2018
Uruchomiony przez AB (administrator)  LAPTOP-8QUQOUIS (10-03-2018 20:58:36)
Uruchomiony z C:\Users\AB\Downloads
Załadowane profile: AB (Dostępne profile: AB)
Platform: Windows 10 Home Wersja 1703 15063.250 (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe
(HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.15063.0_none_1a733a82001933cc\TiWorker.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\commonbuild\McCBEntAndInstru.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(HP) C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\avp.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\x64\wmi64.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\avpui.exe

==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8899592 2016-08-22] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3349720 2017-04-24] (ELAN Microelectronics Corp.)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [1062392 2017-03-15] (HP Inc.)
HKLM-x32\...\Run: [HPRadioMgr] => C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe [324488 2016-08-02] (HP)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{dfe3889c-9234-4229-baff-43c07941d673}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-3985948470-233654401-1505939636-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-3985948470-233654401-1505939636-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKLM -> {9F1DB92E-2E33-422A-9028-376104367884} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {9F1DB92E-2E33-422A-9028-376104367884} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-3985948470-233654401-1505939636-1001 -> {9F1DB92E-2E33-422A-9028-376104367884} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-06-10] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-06-10] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-12-06] (HP Inc.)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-12-06] (HP Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-10] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-10] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-10] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-10] (Microsoft Corporation)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [light_plugin_448EC0843447455C9DA355B3C2811D6A@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\FFExt\light_plugin_firefox\addon.xpi [2018-03-10]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_448EC0843447455C9DA355B3C2811D6A@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\TXE Components\IPT\npIntelWebAPIIPT.dll [2014-07-01] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\TXE Components\IPT\npIntelWebAPIUpdater.dll [2014-07-01] (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-06-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-03-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-03-10] (Google Inc.)

Chrome: 
=======
CHR Profile: C:\Users\AB\AppData\Local\Google\Chrome\User Data\Default [2018-03-10]
CHR Extension: (Prezentacje) - C:\Users\AB\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-03-10]
CHR Extension: (Dokumenty) - C:\Users\AB\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-03-10]
CHR Extension: (Dysk Google) - C:\Users\AB\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-03-10]
CHR Extension: (YouTube) - C:\Users\AB\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-03-10]
CHR Extension: (uBlock Origin) - C:\Users\AB\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2018-03-10]
CHR Extension: (Arkusze) - C:\Users\AB\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-03-10]
CHR Extension: (Dokumenty Google offline) - C:\Users\AB\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-03-10]
CHR Extension: (Kaspersky Protection) - C:\Users\AB\AppData\Local\Google\Chrome\User Data\Default\Extensions\mchjnmdbdlkdbfliogedbnpnanfjnolk [2018-03-10]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\AB\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-03-10]
CHR Extension: (Gmail) - C:\Users\AB\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-03-10]
CHR Extension: (Chrome Media Router) - C:\Users\AB\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-03-10]
CHR HKLM\...\Chrome\Extension: [mchjnmdbdlkdbfliogedbnpnanfjnolk] - hxxps://chrome.google.com/webstore/detail/mchjnmdbdlkdbfliogedbnpnanfjnolk
CHR HKLM-x32\...\Chrome\Extension: [mchjnmdbdlkdbfliogedbnpnanfjnolk] - hxxps://chrome.google.com/webstore/detail/mchjnmdbdlkdbfliogedbnpnanfjnolk

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S2 0091671520690099mcinstcleanup; C:\windows\TEMP\009167~1.EXE [1027864 2017-02-10] (McAfee, Inc.)
R2 AVP18.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\avp.exe [354672 2017-01-24] (AO Kaspersky Lab)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3699912 2017-01-31] (Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-03-10] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-03-10] (Dropbox, Inc.)
R2 esifsvc; C:\windows\SysWOW64\esif_uf.exe [1419424 2017-01-11] (Intel Corporation)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [144600 2017-04-24] (ELAN Microelectronics Corp.)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1309184 2016-10-07] (HP Inc.) [Brak podpisu cyfrowego]
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [471040 2017-04-03] (HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [630776 2017-02-06] (HP Inc.)
R2 ibtsiva; C:\windows\system32\ibtsiva.exe [515752 2017-02-27] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\windows\system32\igfxCUIService.exe [356352 2017-04-12] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [887784 2015-09-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe [174368 2015-04-21] (Intel Corporation)
S3 klvssbridge64_18.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\x64\vssbridge64.exe [426416 2018-03-10] (AO Kaspersky Lab)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [314624 2016-08-22] (Realtek Semiconductor)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)
S4 mfefire; "C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe" [X]
S2 mfemms; "C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe" [X]
S3 mfevtp; "C:\windows\system32\mfevtps.exe" [X]

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 AX88772; C:\windows\System32\drivers\ax88772.sys [111616 2017-03-18] (ASIX Electronics Corp.)
R0 cm_km; C:\windows\System32\DRIVERS\cm_km.sys [247008 2016-12-26] (AO Kaspersky Lab)
R3 dptf_acpi; C:\windows\System32\drivers\dptf_acpi.sys [55792 2017-01-11] (Intel Corporation)
R3 dptf_cpu; C:\windows\System32\drivers\dptf_cpu.sys [52208 2017-01-11] (Intel Corporation)
R3 esif_lf; C:\windows\system32\DRIVERS\esif_lf.sys [260080 2017-01-11] (Intel Corporation)
R3 ETDSMBus; C:\windows\System32\drivers\ETDSMBus.sys [32848 2017-04-24] (ELAN Microelectronic Corp.)
R3 ibtusb; C:\windows\system32\DRIVERS\ibtusb.sys [242680 2017-02-27] (Intel Corporation)
R3 igfxLP; C:\windows\system32\DRIVERS\igdkmd64lp.sys [7407064 2017-04-12] (Intel Corporation)
R0 kl1; C:\windows\System32\DRIVERS\kl1.sys [554408 2016-10-01] (AO Kaspersky Lab)
S0 klbackupdisk; C:\windows\System32\DRIVERS\klbackupdisk.sys [70880 2018-03-10] (AO Kaspersky Lab)
S1 klbackupflt; C:\windows\System32\DRIVERS\klbackupflt.sys [120008 2018-03-10] (AO Kaspersky Lab)
R2 kldisk; C:\windows\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\windows\System32\DRIVERS\klelam.sys [29816 2016-10-14] (AO Kaspersky Lab)
R3 klflt; C:\windows\system32\DRIVERS\klflt.sys [207576 2018-03-10] (AO Kaspersky Lab)
R1 klhk; C:\windows\System32\drivers\klhk.sys [594144 2018-03-10] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP18.0.0\Bases\klids.sys [180984 2018-03-10] (AO Kaspersky Lab)
R1 KLIF; C:\windows\System32\DRIVERS\klif.sys [1055944 2018-03-10] (AO Kaspersky Lab)
R1 KLIM6; C:\windows\system32\DRIVERS\klim6.sys [57032 2018-03-10] (AO Kaspersky Lab)
S3 klkbdflt; C:\windows\system32\DRIVERS\klkbdflt.sys [57056 2016-12-23] (AO Kaspersky Lab)
R4 klkbdflt2; C:\windows\system32\DRIVERS\klkbdflt2.sys [48352 2016-12-21] (AO Kaspersky Lab)
S3 klmouflt; C:\windows\system32\DRIVERS\klmouflt.sys [58592 2016-12-07] (AO Kaspersky Lab)
R1 klpd; C:\windows\System32\DRIVERS\klpd.sys [50672 2017-10-15] (AO Kaspersky Lab)
S3 klpnpflt; C:\windows\system32\DRIVERS\klpnpflt.sys [44768 2017-01-20] (AO Kaspersky Lab)
U0 klupd_klif_arkmon; C:\windows\System32\Drivers\klupd_klif_arkmon.sys [231312 2018-03-10] (AO Kaspersky Lab)
U3 klupd_klif_arkmon_097D7222; C:\ProgramData\Kaspersky Lab\AVP18.0.0\temp\097D722294B9C1FA6E514A088F2E6B6E\klupd_klif_arkmon.sys [229288 2018-03-10] (AO Kaspersky Lab)
U3 klupd_klif_arkmon_5DF80B8E; C:\ProgramData\Kaspersky Lab\AVP18.0.0\temp\5DF80B8ED56F8865D0AD904F3199F08D\klupd_klif_arkmon.sys [231312 2018-03-10] (AO Kaspersky Lab)
U3 klupd_klif_kimul; C:\windows\System32\Drivers\klupd_klif_kimul.sys [87584 2018-03-10] (AO Kaspersky Lab)
U3 klupd_klif_klark; C:\windows\System32\Drivers\klupd_klif_klark.sys [252600 2018-03-10] (AO Kaspersky Lab)
U0 klupd_klif_klbg; C:\windows\System32\Drivers\klupd_klif_klbg.sys [107656 2018-03-10] (AO Kaspersky Lab)
U3 klupd_klif_mark; C:\windows\System32\Drivers\klupd_klif_mark.sys [173144 2018-03-10] (AO Kaspersky Lab)
U3 klupd_klif_mark_F31EC261; C:\ProgramData\Kaspersky Lab\AVP18.0.0\temp\F31EC261ECC09DB51EE6EDC03A415140\klupd_klif_mark.sys [174664 2018-03-10] (AO Kaspersky Lab)
R1 klwfp; C:\windows\system32\DRIVERS\klwfp.sys [93888 2018-03-10] (AO Kaspersky Lab)
R1 Klwtp; C:\windows\system32\DRIVERS\klwtp.sys [135904 2018-03-10] (AO Kaspersky Lab)
R1 kneps; C:\windows\system32\DRIVERS\kneps.sys [199392 2018-03-10] (AO Kaspersky Lab)
R3 Netwtw04; C:\windows\System32\drivers\Netwtw04.sys [7630080 2017-04-15] (Intel Corporation)
R3 RSP2STOR; C:\windows\system32\DRIVERS\RtsP2Stor.sys [329184 2017-04-24] (Realtek Semiconductor Corp.)
S3 SDFRd; C:\windows\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
R3 TXEIx64; C:\windows\System32\drivers\TXEIx64.sys [146200 2015-10-14] (Intel Corporation)
S3 WdBoot; C:\windows\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\windows\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\windows\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\windows\system32\DRIVERS\WirelessButtonDriver64.sys [32832 2016-07-31] (HP)
S0 cfwids; system32\drivers\cfwids.sys [X]
R0 mfeaack; system32\drivers\mfeaack.sys [X]
R0 mfeavfk; system32\drivers\mfeavfk.sys [X]
S0 mfeelamk; system32\drivers\mfeelamk.sys [X]
S0 mfefirek; system32\drivers\mfefirek.sys [X]
R0 mfehidk; system32\drivers\mfehidk.sys [X]
R0 mfeplk; system32\drivers\mfeplk.sys [X]
R0 mfewfpk; system32\drivers\mfewfpk.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-03-10 20:58 - 2018-03-10 20:59 - 000019593 _____ C:\Users\AB\Downloads\FRST.txt
2018-03-10 20:58 - 2018-03-10 20:58 - 000000000 ____D C:\FRST
2018-03-10 20:56 - 2018-03-10 20:56 - 002403328 _____ (Farbar) C:\Users\AB\Downloads\FRST64.exe
2018-03-10 18:29 - 2018-03-10 18:29 - 000001109 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2018-03-10 18:29 - 2018-03-10 18:29 - 000001097 _____ C:\Users\Public\Desktop\paint.net.lnk
2018-03-10 18:28 - 2018-03-10 18:29 - 000000000 ____D C:\Program Files\paint.net
2018-03-10 18:28 - 2018-03-10 18:28 - 000000000 ____D C:\Users\AB\AppData\Local\paint.net
2018-03-10 18:27 - 2018-03-10 18:27 - 000000944 _____ C:\Users\Public\Desktop\Honeyview.lnk
2018-03-10 18:27 - 2018-03-10 18:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Honeyview
2018-03-10 18:27 - 2018-03-10 18:27 - 000000000 ____D C:\Program Files\Honeyview
2018-03-10 18:24 - 2018-03-10 18:25 - 007879432 _____ C:\Users\AB\Downloads\HONEYVIEW-SETUP.EXE
2018-03-10 18:19 - 2018-03-10 18:19 - 000001778 _____ C:\Users\Public\Desktop\MPC-BE x64.lnk
2018-03-10 18:19 - 2018-03-10 18:19 - 000000000 ____D C:\ProgramData\MPC-BE
2018-03-10 18:19 - 2018-03-10 18:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-BE x64
2018-03-10 18:19 - 2018-03-10 18:19 - 000000000 ____D C:\Program Files\MPC-BE x64
2018-03-10 18:17 - 2018-03-10 18:17 - 000002346 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-03-10 18:17 - 2018-03-10 18:17 - 000002305 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-03-10 18:16 - 2018-03-10 18:16 - 000252600 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klupd_klif_klark.sys
2018-03-10 18:16 - 2018-03-10 18:16 - 000003566 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-03-10 18:16 - 2018-03-10 18:16 - 000003442 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2018-03-10 18:16 - 2018-03-10 18:16 - 000000000 ____D C:\Program Files (x86)\Google
2018-03-10 18:15 - 2018-03-10 18:17 - 000000000 ____D C:\Users\AB\AppData\Local\Google
2018-03-10 18:15 - 2018-03-10 18:15 - 000231312 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klupd_klif_arkmon.sys
2018-03-10 18:15 - 2018-03-10 18:15 - 000107656 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klupd_klif_klbg.sys
2018-03-10 17:00 - 2018-03-10 17:00 - 000173144 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klupd_klif_mark.sys
2018-03-10 17:00 - 2018-03-10 17:00 - 000087584 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klupd_klif_kimul.sys
2018-03-10 17:00 - 2018-03-10 17:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security
2018-03-10 17:00 - 2018-03-10 16:59 - 000002209 _____ C:\Users\Public\Desktop\Bezpieczne pieniądze.lnk
2018-03-10 17:00 - 2018-03-10 16:59 - 000002159 _____ C:\Users\Public\Desktop\Kaspersky Total Security.lnk
2018-03-10 16:59 - 2018-03-10 20:57 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2018-03-10 16:59 - 2018-03-10 18:14 - 001055944 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klif.sys
2018-03-10 16:59 - 2018-03-10 17:04 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2018-03-10 16:59 - 2018-03-10 16:59 - 000594144 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klhk.sys
2018-03-10 16:59 - 2018-03-10 16:59 - 000207576 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klflt.sys
2018-03-10 16:59 - 2018-03-10 16:59 - 000149304 _____ (AO Kaspersky Lab) C:\windows\system32\klhkum.dll
2018-03-10 16:59 - 2013-05-06 08:13 - 000110176 _____ (Kaspersky Lab ZAO) C:\windows\system32\klfphc.dll
2018-03-10 16:58 - 2018-03-10 17:02 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2018-03-10 16:58 - 2018-03-10 16:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2018-03-10 16:58 - 2018-03-10 16:58 - 000000000 ____D C:\Program Files\7-Zip
2018-03-10 15:54 - 2018-03-10 15:54 - 000000000 ____D C:\Users\AB\AppData\Local\Comms
2018-03-10 14:58 - 2018-03-10 14:58 - 000000000 ____D C:\Users\AB\AppData\Local\MicrosoftEdge
2018-03-10 14:55 - 2018-03-10 14:55 - 000000000 ____D C:\Users\AB\AppData\Roaming\Macromedia
2018-03-10 14:51 - 2018-03-10 14:54 - 000000000 ___RD C:\Users\AB\OneDrive
2018-03-10 14:51 - 2018-03-10 14:51 - 000000000 ____D C:\Users\AB\AppData\Roaming\Hewlett-Packard
2018-03-10 14:51 - 2018-03-10 14:51 - 000000000 ____D C:\Users\AB\AppData\Local\DBG
2018-03-10 14:48 - 2018-03-10 14:49 - 000000000 ____D C:\Users\AB\AppData\Roaming\HP
2018-03-10 14:48 - 2018-03-10 14:48 - 000000000 ____D C:\Users\AB\AppData\Roaming\DropboxOEM
2018-03-10 14:48 - 2018-03-10 14:48 - 000000000 ____D C:\Users\AB\AppData\Local\DropboxOEM
2018-03-10 14:48 - 2018-03-10 14:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Narzędzia pakietu Microsoft Office 2016
2018-03-10 14:47 - 2018-03-10 20:53 - 000000000 __SHD C:\Users\AB\IntelGraphicsProfiles
2018-03-10 14:47 - 2018-03-10 16:56 - 000000000 ____D C:\Users\AB\AppData\Local\Packages
2018-03-10 14:47 - 2018-03-10 16:47 - 000000000 ____D C:\Users\AB\AppData\Local\VirtualStore
2018-03-10 14:47 - 2018-03-10 14:47 - 000000000 ____D C:\Users\AB\AppData\Roaming\Adobe
2018-03-10 14:47 - 2018-03-10 14:47 - 000000000 ____D C:\Users\AB\AppData\Local\TileDataLayer
2018-03-10 14:47 - 2018-03-10 14:47 - 000000000 ____D C:\Users\AB\AppData\Local\Publishers
2018-03-10 14:47 - 2018-03-10 14:47 - 000000000 ____D C:\Users\AB\AppData\Local\ConnectedDevicesPlatform
2018-03-10 14:45 - 2018-03-10 14:51 - 000000000 ____D C:\Users\AB
2018-03-10 14:45 - 2018-03-10 14:45 - 000000020 ___SH C:\Users\AB\ntuser.ini
2018-03-10 14:45 - 2018-03-10 14:45 - 000000000 _SHDL C:\Users\AB\Ustawienia lokalne
2018-03-10 14:45 - 2018-03-10 14:45 - 000000000 _SHDL C:\Users\AB\Szablony
2018-03-10 14:45 - 2018-03-10 14:45 - 000000000 _SHDL C:\Users\AB\Moje dokumenty
2018-03-10 14:45 - 2018-03-10 14:45 - 000000000 _SHDL C:\Users\AB\Menu Start
2018-03-10 14:45 - 2018-03-10 14:45 - 000000000 _SHDL C:\Users\AB\Documents\Moje wideo
2018-03-10 14:45 - 2018-03-10 14:45 - 000000000 _SHDL C:\Users\AB\Documents\Moje obrazy
2018-03-10 14:45 - 2018-03-10 14:45 - 000000000 _SHDL C:\Users\AB\Documents\Moja muzyka
2018-03-10 14:45 - 2018-03-10 14:45 - 000000000 _SHDL C:\Users\AB\Dane aplikacji
2018-03-10 14:45 - 2018-03-10 14:45 - 000000000 _SHDL C:\Users\AB\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2018-03-10 14:45 - 2018-03-10 14:45 - 000000000 _SHDL C:\Users\AB\AppData\Local\Historia
2018-03-10 14:45 - 2018-03-10 14:45 - 000000000 _SHDL C:\Users\AB\AppData\Local\Dane aplikacji
2018-03-10 14:45 - 2017-06-10 05:24 - 000000000 ___HD C:\Users\AB\Documents\hp.system.package.metadata
2018-03-10 14:45 - 2017-06-10 05:24 - 000000000 ___HD C:\Users\AB\Documents\hp.applications.package.appdata
2018-03-10 14:42 - 2017-07-12 05:39 - 000942592 _____ (Microsoft Corporation) C:\windows\system32\wbiosrvc.dll
2018-03-10 12:37 - 2018-03-10 20:53 - 000000180 _____ C:\windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Public\Documents\Moje wideo
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Public\Documents\Moje obrazy
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Public\Documents\Moja muzyka
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default\Ustawienia lokalne
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default\Szablony
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default\Moje dokumenty
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default\Menu Start
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default\Documents\Moje wideo
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default\Documents\Moje obrazy
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default\Documents\Moja muzyka
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default\Dane aplikacji
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default\AppData\Local\Historia
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default User\Documents\Moje wideo
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default User\Documents\Moje obrazy
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default User\Documents\Moja muzyka
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Historia
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\ProgramData\Szablony
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\ProgramData\Pulpit
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\ProgramData\Menu Start
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\ProgramData\Dokumenty
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\ProgramData\Dane aplikacji
2018-03-10 12:36 - 2018-03-10 12:36 - 000000000 _SHDL C:\Documents and Settings

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2018-03-10 18:19 - 2017-03-18 21:51 - 000000000 ____D C:\windows\CbsTemp
2018-03-10 18:14 - 2017-10-15 15:04 - 000199392 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\kneps.sys
2018-03-10 18:14 - 2017-10-15 15:04 - 000135904 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klwtp.sys
2018-03-10 18:14 - 2017-10-15 15:04 - 000120008 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klbackupflt.sys
2018-03-10 18:14 - 2017-10-15 15:04 - 000070880 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\SETD29.tmp
2018-03-10 18:14 - 2016-12-20 17:51 - 000093888 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klwfp.sys
2018-03-10 18:14 - 2016-10-12 12:29 - 000057032 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klim6.sys
2018-03-10 18:13 - 2017-10-15 15:04 - 000070880 _____ (AO Kaspersky Lab) C:\windows\system32\Drivers\klbackupdisk.sys
2018-03-10 17:04 - 2017-03-18 22:01 - 000000000 ____D C:\windows\INF
2018-03-10 17:00 - 2017-09-23 02:06 - 000000000 ____D C:\Program Files\Common Files\av
2018-03-10 16:59 - 2017-03-18 22:03 - 000000000 ___HD C:\windows\ELAMBKUP
2018-03-10 16:56 - 2017-03-18 22:03 - 000000000 ____D C:\windows\AppReadiness
2018-03-10 16:48 - 2017-03-18 12:40 - 000032768 _____ C:\windows\system32\config\ELAM
2018-03-10 16:46 - 2017-09-23 02:08 - 000000000 ____D C:\ProgramData\Intel Security
2018-03-10 16:46 - 2017-09-23 02:06 - 000000000 ____D C:\ProgramData\mcafee
2018-03-10 15:54 - 2017-03-18 22:03 - 000000000 ___HD C:\Program Files\WindowsApps
2018-03-10 14:57 - 2017-06-10 05:32 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-03-10 14:54 - 2017-09-23 02:06 - 000000000 ____D C:\Program Files (x86)\McAfee
2018-03-10 14:48 - 2017-06-10 05:33 - 000002480 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2018-03-10 14:48 - 2017-06-10 05:33 - 000002468 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2018-03-10 14:48 - 2017-06-10 05:33 - 000002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2018-03-10 14:48 - 2017-06-10 05:33 - 000002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2018-03-10 14:48 - 2017-06-10 05:33 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2018-03-10 14:48 - 2017-06-10 05:33 - 000002414 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2018-03-10 14:48 - 2017-06-10 05:33 - 000002404 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2018-03-10 14:48 - 2017-05-22 16:49 - 000000000 ___HD C:\system.sav
2018-03-10 14:47 - 2017-03-18 04:53 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-03-10 14:42 - 2017-06-10 14:09 - 000983292 _____ C:\windows\system32\perfh015.dat
2018-03-10 14:42 - 2017-06-10 14:09 - 000213790 _____ C:\windows\system32\perfc015.dat
2018-03-10 14:42 - 2017-04-01 06:38 - 002259792 _____ C:\windows\system32\PerfStringBackup.INI
2018-03-10 14:41 - 2017-06-10 05:30 - 000004252 _____ C:\windows\System32\Tasks\DropboxUpdateTaskMachineUA
2018-03-10 14:41 - 2017-06-10 05:30 - 000004020 _____ C:\windows\System32\Tasks\DropboxUpdateTaskMachineCore
2018-03-10 14:41 - 2017-06-10 05:30 - 000001192 _____ C:\windows\Tasks\DropboxUpdateTaskMachineUA.job
2018-03-10 14:41 - 2017-06-10 05:30 - 000001188 _____ C:\windows\Tasks\DropboxUpdateTaskMachineCore.job
2018-03-10 14:41 - 2017-06-10 05:25 - 000000000 ____D C:\windows\System32\Tasks\Hewlett-Packard
2018-03-10 14:41 - 2017-06-10 05:25 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2018-03-10 12:38 - 2017-03-18 22:03 - 000000000 ____D C:\windows\rescache
2018-03-10 12:37 - 2017-03-18 22:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-03-10 12:36 - 2017-09-23 02:02 - 000002856 _____ C:\windows\System32\Tasks\HPJumpStartLaunch
2018-03-10 12:36 - 2017-06-10 05:30 - 000002318 _____ C:\windows\System32\Tasks\DropboxOEM
2018-03-10 12:36 - 2017-06-10 05:28 - 000002440 _____ C:\windows\System32\Tasks\HPAudioSwitch
2018-03-10 12:36 - 2017-06-10 05:26 - 000002500 _____ C:\windows\System32\Tasks\HPEA3JOBS
2018-03-10 12:36 - 2017-03-18 22:03 - 000000000 ____D C:\Program Files\Windows NT
2018-03-10 12:36 - 2017-03-18 05:46 - 000000000 ____D C:\windows\Panther
2018-03-10 12:36 - 2017-03-18 04:54 - 000002768 _____ C:\windows\System32\Tasks\OneDrive Standalone Update Task v2
2018-03-10 12:36 - 2017-03-18 04:52 - 000000006 ____H C:\windows\Tasks\SA.DAT

Niektóre pliki w TEMP:
====================
2017-02-28 10:10 - 2017-02-28 10:10 - 000244264 _____ (McAfee, Inc.) C:\Users\AB\AppData\Local\Temp\McCSPInstall.dll
2018-03-10 16:48 - 2017-02-28 10:10 - 000209688 _____ (McAfee Inc.) C:\Users\AB\AppData\Local\Temp\mccspuninstall.exe

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\windows\explorer.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\windows\system32\services.exe => Plik podpisany cyfrowo
C:\windows\system32\User32.dll => Plik podpisany cyfrowo
C:\windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo

LastRegBack: 2017-03-18 04:52

==================== Koniec  FRST.txt ============================