Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 20-08-2017
Uruchomiony przez Marcin (administrator)  MARCIN-KOMPUTER (08-09-2017 23:31:41)
Uruchomiony z C:\
Załadowane profile: Marcin (Dostępne profile: Marcin & Grzegorz & Bogusia & eyik & yyyy)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Język: Polski (Polska)
Internet Explorer Wersja 9 (Domyślna przeglądarka: FF)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(Realtek) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
() C:\Windows\DAODx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Rejestr (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor)
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2629632 2012-09-25] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2015-07-27] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Communicator] => C:\Program Files (x86)\Microsoft Lync\communicator.exe [11937552 2010-11-03] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKU\S-1-5-21-1244533767-2505366996-2244784048-1000\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2015-07-27] (Samsung Electronics Co., Ltd.)
HKU\S-1-5-21-1244533767-2505366996-2244784048-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3071776 2017-09-07] (Valve Corporation)
HKU\S-1-5-21-1244533767-2505366996-2244784048-1000\...\MountPoints2: {6ad6bb04-79ae-11e5-9af3-806e6f6e6963} - F:\.\Bin\ASSETUP.exe

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{21D0E7A4-DF32-4055-96E6-47BFE3BE4BC8}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{4E489BE4-91C2-4C8C-B7CC-3FD860DDF796}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1244533767-2505366996-2244784048-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Lync\OCHelper.dll [2010-11-03] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-04-29] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-04-29] (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF DefaultProfile: j8rtymsh.default-1462393119099-1504406013505
FF ProfilePath: C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\j8rtymsh.default-1462393119099-1504406013505 [2017-09-08]
FF Homepage: Mozilla\Firefox\Profiles\j8rtymsh.default-1462393119099-1504406013505 -> hxxp://www.google.pl/
FF Extension: (DownThemAll!) - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\j8rtymsh.default-1462393119099-1504406013505\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2017-09-03]
FF Extension: (Firefox Screenshots) - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\j8rtymsh.default-1462393119099-1504406013505\features\{ebe45682-bd8a-478d-9795-4f1af6153e32}\screenshots@mozilla.org.xpi [2017-09-03]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-09] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-04-29] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-04-29] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-11] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-11] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)

==================== Usługi (filtrowane) ====================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-08-05] (Apple Inc.)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [Brak podpisu cyfrowego]
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2015-11-02] (Macrovision Europe Ltd.) [Brak podpisu cyfrowego]
S3 NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [774144 2007-01-05] (Nero AG) [Brak podpisu cyfrowego]
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [262144 2006-12-23] (Nero AG) [Brak podpisu cyfrowego]
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [459832 2016-12-11] (NVIDIA Corporation)
R2 Realtek11nSU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [40960 2009-12-07] (Realtek) [Brak podpisu cyfrowego]
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ======================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [20568 2010-05-25] (Devguru Co., Ltd)
S3 dgderdrv; C:\Windows\SysWOW64\drivers\dgderdrv.sys [18136 2010-05-25] (Devguru Co., Ltd)
S3 FocusriteUSB; C:\Windows\System32\DRIVERS\FocusriteUSB.sys [87056 2016-11-30] (Focusrite Audio Engineering Ltd.)
S3 FocusriteUSBAudio; C:\Windows\System32\drivers\FocusriteUSBAudio.sys [45072 2016-11-30] (Focusrite Audio Engineering Ltd.)
R3 FocusriteUSBSwRoot; C:\Windows\System32\DRIVERS\FocusriteUSBSwRoot.sys [92688 2016-11-30] (Focusrite Audio Engineering Ltd.)
R3 hidusbf; C:\Windows\System32\DRIVERS\hidusbf.sys [7808 2016-02-22] (SweetLow)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46016 2016-12-12] (NVIDIA Corporation)

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-09-08 23:31 - 2017-09-08 23:31 - 000010010 _____ C:\FRST.txt
2017-09-08 23:25 - 2017-09-08 23:29 - 066347240 _____ (Malwarebytes ) C:\Users\Marcin\Downloads\mb3-setup-consumer-3.2.2.2018.exe
2017-09-08 23:21 - 2017-09-08 23:22 - 000005659 _____ C:\Fixlog.txt
2017-09-06 16:07 - 2017-09-06 16:08 - 000166403 _____ C:\Users\Marcin\Downloads\1504706865-1001-40814.pdf
2017-09-03 13:04 - 2017-09-03 13:15 - 000091493 _____ C:\Shortcut.txt
2017-09-03 13:01 - 2017-09-03 13:01 - 002395648 _____ (Farbar) C:\FRST64.exe
2017-09-02 21:21 - 2017-09-08 23:23 - 000000000 ____D C:\Program Files (x86)\Steam
2017-08-24 00:45 - 2017-08-24 00:46 - 019607440 _____ (Rockstar Games.) C:\Users\Marcin\Desktop\GTA_V_Launcher_1_0_877_1.exe
2017-08-23 02:29 - 2017-08-23 02:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2017-08-22 20:32 - 2017-08-22 20:32 - 000000967 _____ C:\Users\Public\Desktop\Steam.lnk
2017-08-22 20:32 - 2017-08-22 20:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-08-21 18:59 - 2017-08-21 18:59 - 000000551 _____ C:\Users\Marcin\Desktop\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251.exe.htm
2017-08-20 23:48 - 2017-08-20 23:48 - 000000000 ____D C:\Users\Marcin\AppData\Local\UnrealEngine
2017-08-20 23:48 - 2017-08-20 23:48 - 000000000 ____D C:\Users\Marcin\AppData\Local\TheObserver
2017-08-20 23:47 - 2017-08-20 23:47 - 000000000 ____D C:\ProgramData\GOG.com
2017-08-20 23:46 - 2017-08-20 23:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2017-08-19 00:34 - 2017-08-19 00:34 - 000000000 ____D C:\Users\Marcin\Documents\OpenIV
2017-08-19 00:33 - 2017-08-19 00:33 - 000001282 _____ C:\Users\Marcin\AppData\Roaming\Microsoft\Windows\Start Menu\OpenIV.lnk
2017-08-19 00:33 - 2017-08-19 00:33 - 000000000 ____D C:\Users\Marcin\AppData\Local\New Technology Studio
2017-08-19 00:31 - 2017-08-19 00:32 - 004608512 _____ (New Technology Studio) C:\Users\Marcin\Desktop\ovisetup.exe
2017-08-19 00:26 - 2017-08-19 00:26 - 000147851 _____ C:\Users\Marcin\Desktop\GTAV Heavy Traffic 1.0.1103.2.rar
2017-08-19 00:23 - 2017-08-19 00:23 - 000168629 _____ C:\Users\Marcin\Desktop\1a72c7-Lupin's More pedestrians and traffic + lunchxbles' Crouch Mod Patch V6.zip
2017-08-19 00:23 - 2017-08-19 00:23 - 000000000 ____D C:\Users\Marcin\Desktop\1a72c7-Lupin's More pedestrians and traffic + lunchxbles' Crouch Mod Patch V6
2017-08-19 00:21 - 2017-08-19 00:21 - 000016414 _____ C:\Users\Marcin\Desktop\More%20Peds%20and%20Traffic_%20v2.0.0.zip
2017-08-19 00:21 - 2017-08-19 00:21 - 000000000 ____D C:\Users\Marcin\Desktop\More%20Peds%20and%20Traffic_%20v2.0.0
2017-08-19 00:16 - 2017-08-19 00:16 - 000000000 ____D C:\Users\Marcin\Desktop\1431155616_More pedestrians and traffic
2017-08-19 00:15 - 2017-08-19 00:15 - 000013428 _____ C:\Users\Marcin\Desktop\1431155616_More pedestrians and traffic.zip
2017-08-09 01:15 - 2017-08-09 01:15 - 005763072 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2017-09-08 23:31 - 2016-03-25 01:44 - 000000000 ____D C:\FRST
2017-09-08 23:30 - 2009-07-14 06:45 - 000021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-09-08 23:30 - 2009-07-14 06:45 - 000021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-09-08 23:24 - 2016-11-16 01:50 - 000000000 ____D C:\Users\Marcin\AppData\LocalLow\Mozilla
2017-09-08 23:23 - 2015-10-23 20:44 - 000000000 ____D C:\ProgramData\NVIDIA
2017-09-08 23:23 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-09-08 23:21 - 2016-11-15 22:38 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-09-07 16:16 - 2016-11-18 17:13 - 000000000 ____D C:\Users\Bogusia\AppData\LocalLow\Mozilla
2017-09-05 00:33 - 2015-11-08 03:11 - 000000000 ____D C:\Users\Marcin\AppData\Roaming\BitComet
2017-09-03 04:33 - 2016-03-21 03:31 - 000000000 ____D C:\Users\Marcin\Desktop\Stare dane programu Firefox
2017-09-03 04:08 - 2016-11-16 09:48 - 000000000 ____D C:\Users\Grzegorz\AppData\LocalLow\Mozilla
2017-08-30 22:58 - 2015-12-31 04:52 - 000000000 ____D C:\Program Files\Rockstar Games
2017-08-30 22:58 - 2015-12-31 04:52 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
2017-08-30 15:48 - 2015-11-10 21:31 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-23 02:44 - 2015-12-31 04:35 - 000000000 ____D C:\Users\Marcin\AppData\Local\Rockstar Games
2017-08-23 02:33 - 2015-12-31 04:35 - 000000000 ____D C:\Users\Marcin\Documents\Rockstar Games
2017-08-23 01:00 - 2015-10-23 20:03 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-08-21 00:28 - 2017-01-19 02:32 - 000000000 ____D C:\Users\Marcin\AppData\Local\CrashDumps
2017-08-20 23:46 - 2015-10-23 20:59 - 000000000 ____D C:\ProgramData\Package Cache
2017-08-18 15:24 - 2009-07-14 07:08 - 000032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-08-09 19:08 - 2015-11-10 21:32 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-08-09 01:15 - 2016-01-25 17:32 - 000004412 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-08-09 01:15 - 2015-10-23 21:07 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-08-09 01:15 - 2015-10-23 21:07 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-08-09 01:15 - 2015-10-23 21:07 - 000000000 ____D C:\Windows\system32\Macromed
2017-08-09 01:15 - 2015-10-23 20:06 - 000000000 ____D C:\Windows\SysWOW64\Macromed

==================== Pliki w katalogu głównym wybranych folderów =======

2017-05-12 00:43 - 2017-05-12 00:55 - 000000016 _____ () C:\ProgramData\autobk.inc
2015-10-23 20:40 - 2015-10-23 20:40 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap ======================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


testsigning: ==> Ustawiony "Tryb testu". Sprawdź obecność niepodpisanego sterownika <==== UWAGA

LastRegBack: 2017-09-01 01:29

==================== Koniec  FRST.txt ============================