Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02.08.2018
Ran by Szymon (administrator) on DESKTOP-60TQ4UI (16-08-2018 22:34:58)
Running from C:\Users\Szymon\Desktop
Loaded Profiles: Szymon (Available Profiles: Szymon)
Platform: Windows 10 Home Version 1511 10586.494 (X64) Language: Angielski (Stany Zjednoczone)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
(ESET) C:\Program Files\ESET\ESET Security\egui.exe
(Mozilla Corporation) E:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) E:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) E:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) E:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) E:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) E:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) E:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.1040_none_366d2a34ce5cd854\TiWorker.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323056 2015-11-04] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8842496 2016-08-07] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [178504 2018-07-25] (ESET)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKU\S-1-5-21-2231754314-4281560237-746509812-1001\...\Run: [CCleaner Monitoring] => E:\Program Files\CCleaner\CCleaner64.exe [8461224 2015-09-16] (Piriform Ltd)
HKU\S-1-5-21-2231754314-4281560237-746509812-1001\...\Run: [Steam] => G:\Program Files (x86)\Steam\steam.exe [3206432 2018-08-09] (Valve Corporation)
HKU\S-1-5-21-2231754314-4281560237-746509812-1001\...\Run: [ALLUpdate] => E:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [3670472 2015-07-28] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-2231754314-4281560237-746509812-1001\...\Run: [DAEMON Tools Lite Automount] => E:\Program Files\DAEMON Tools Lite\DTAgent.exe [4299968 2016-06-22] (Disc Soft Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2016-09-28]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{fe50405d-1dd6-49ed-b005-1b1e3a5e4e50}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-2231754314-4281560237-746509812-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gazeta.pl/0,0.html?p=190
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-06-02] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-06-02] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: zm8xyilx.default
FF ProfilePath: C:\Users\Szymon\AppData\Roaming\Mozilla\Firefox\Profiles\zm8xyilx.default [2018-08-16]
FF Homepage: Mozilla\Firefox\Profiles\zm8xyilx.default -> hxxp://www.gazeta.pl/0,0.html?p=190
FF Session Restore: Mozilla\Firefox\Profiles\zm8xyilx.default -> is enabled.
FF Extension: (AdBlocker Ultimate) - C:\Users\Szymon\AppData\Roaming\Mozilla\Firefox\Profiles\zm8xyilx.default\Extensions\adblockultimate@adblockultimate.net.xpi [2017-12-13]
FF Extension: (TrafficLight) - C:\Users\Szymon\AppData\Roaming\Mozilla\Firefox\Profiles\zm8xyilx.default\Extensions\trafficlight@bitdefender.com.xpi [2018-03-07]
FF Extension: (Adblock Plus) - C:\Users\Szymon\AppData\Roaming\Mozilla\Firefox\Profiles\zm8xyilx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-07-18]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_126.dll [2018-01-03] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_126.dll [2018-01-03] ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-06-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-06-02] (Oracle Corporation)
StartMenuInternet: FIREFOX.EXE - E:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [7212480 2018-08-08] ()
S3 Disc Soft Lite Bus Service; e:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-06-22] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [777856 2018-06-22] (EasyAntiCheat Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2330224 2018-07-25] (ESET)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [19440 2015-11-04] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)
S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [File not signed]
R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-05-25] (Intel Corporation)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-04-22] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-04-22] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [520672 2018-05-07] (NVIDIA Corporation)
S3 Origin Client Service; G:\Program Files (x86)\Origin\OriginClientService.exe [2212672 2018-08-16] (Electronic Arts)
S2 Origin Web Helper Service; G:\Program Files (x86)\Origin\OriginWebHelperService.exe [3083080 2018-08-16] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-08-11] ()
R2 sedsvc; C:\Program Files\rempl\sedsvc.exe [294912 2018-08-03] (Microsoft Corporation)
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [985280 2015-07-22] (@ByELDI) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation)
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 cpuz140; E:\temp\cpuz140\cpuz140_x64.sys [45888 2018-08-16] (CPUID)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-08-25] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-08-25] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [143624 2018-07-25] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [109920 2018-07-25] (ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15872 2018-02-27] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [196112 2018-07-25] (ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [50144 2018-07-25] (ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [82816 2018-07-25] (ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [110376 2018-07-25] (ESET)
R3 iaLPSS2_GPIO2; C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys [84280 2016-05-16] (Intel Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [59240 2017-12-15] (NVIDIA Corporation)
S3 RtlWlanu; C:\Windows\System32\drivers\rtwlanu.sys [3764736 2015-10-30] (Realtek Semiconductor Corporation )
S3 rzdaendpt; C:\Windows\System32\drivers\rzdaendpt.sys [43720 2015-08-13] (Razer Inc)
S3 rzvkeyboard; C:\Windows\System32\drivers\rzvkeyboard.sys [44232 2015-08-13] (Razer Inc)
R3 ssdevfactory; C:\Windows\System32\drivers\ssdevfactory.sys [40568 2016-06-15] (SteelSeries ApS)
R3 sshid; C:\Windows\System32\drivers\sshid.sys [45928 2017-01-10] (SteelSeries ApS)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-08-16 22:27 - 2018-08-16 22:28 - 000005340 _____ C:\Users\Szymon\Desktop\Fixlog.txt
2018-08-16 20:27 - 2018-08-16 22:35 - 000012163 _____ C:\Users\Szymon\Desktop\FRST.txt
2018-08-16 20:25 - 2018-08-16 20:25 - 002412544 _____ (Farbar) C:\Users\Szymon\Desktop\FRST64.exe
2018-08-14 09:54 - 2018-08-16 20:08 - 000000000 ____D C:\Users\Szymon\AppData\Roaming\Origin
2018-08-07 07:52 - 2018-08-14 08:27 - 000000795 _____ C:\Users\Szymon\Desktop\Asystent aktualizacji do systemu Windows 10.lnk
2018-08-05 20:14 - 2018-08-05 20:14 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2018-08-05 20:03 - 2018-08-05 22:40 - 000000000 ____D C:\Program Files\Common Files\Adobe
2018-08-05 00:00 - 2018-08-05 00:12 - 000049196 _____ C:\Windows\diagwrn.xml
2018-08-05 00:00 - 2018-08-05 00:12 - 000013338 _____ C:\Windows\diagerr.xml
2018-08-02 23:45 - 2018-08-02 23:45 - 000000000 ____D C:\Windows\UpdateAssistant
2018-07-26 23:53 - 2018-07-26 23:53 - 000000102 _____ C:\Users\Szymon\Desktop\unbindEnterLoL.ahk
2018-07-23 16:12 - 2018-07-23 16:12 - 000139930 _____ C:\Users\Szymon\Desktop\SS rekrutacja.pdf
2018-07-23 14:31 - 2018-07-24 23:53 - 000000000 ____D C:\Program Files\Common Files\AV
2018-07-23 14:30 - 2018-07-23 15:21 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2018-07-23 14:07 - 2018-08-14 08:27 - 000000000 ____D C:\Windows10Upgrade
2018-07-23 13:55 - 2018-07-23 13:55 - 000000000 ____D C:\AdwCleaner
2018-07-23 13:11 - 2018-08-16 22:34 - 000000000 ____D C:\FRST

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-08-16 22:31 - 2016-11-18 09:52 - 000000000 ____D C:\Users\Szymon\AppData\LocalLow\Mozilla
2018-08-16 22:30 - 2018-04-25 18:47 - 000000000 ____D C:\ProgramData\NVIDIA
2018-08-16 22:29 - 2016-08-24 23:24 - 000000008 __RSH C:\ProgramData\ntuser.pol
2018-08-16 22:29 - 2016-04-27 08:32 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-08-16 22:29 - 2015-10-30 08:28 - 001310720 ___SH C:\Windows\system32\config\BBI
2018-08-16 22:28 - 2016-08-07 20:13 - 000000000 ____D C:\Users\Szymon
2018-08-16 22:27 - 2015-10-30 09:24 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2018-08-16 22:27 - 2015-10-30 09:24 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2018-08-16 20:09 - 2016-08-07 15:37 - 000000000 ____D C:\ProgramData\Origin
2018-08-16 17:12 - 2015-10-30 09:11 - 000000000 ____D C:\Windows\CbsTemp
2018-08-15 11:17 - 2016-10-21 15:08 - 000000894 _____ C:\Users\Public\Desktop\Battlefield 1.lnk
2018-08-15 09:05 - 2016-08-08 23:15 - 000000000 ____D C:\Windows\system32\MRT
2018-08-15 09:01 - 2016-08-08 23:15 - 137343192 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-08-15 08:55 - 2015-10-30 09:24 - 000000000 ____D C:\Windows\AppReadiness
2018-08-15 01:33 - 2017-12-14 15:33 - 000001009 _____ C:\Users\Public\Desktop\STAR WARS Battlefront II.lnk
2018-08-14 18:55 - 2017-04-06 11:49 - 000000000 ____D C:\Windows\Minidump
2018-08-14 08:30 - 2015-10-30 09:24 - 000000000 ___HD C:\Program Files\WindowsApps
2018-08-14 08:27 - 2018-03-04 20:02 - 000000807 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asystent aktualizacji do systemu Windows 10.lnk
2018-08-13 21:02 - 2018-01-11 14:39 - 000000000 ____D C:\Program Files (x86)\Origin Games
2018-08-11 00:43 - 2016-08-24 23:07 - 000000000 ____D C:\Users\Szymon\AppData\Roaming\uTorrent
2018-08-10 11:05 - 2018-02-21 15:08 - 000000000 ____D C:\Program Files\rempl
2018-08-05 22:41 - 2018-06-11 15:43 - 000000000 ____D C:\Users\Szymon\AppData\Roaming\Adobe
2018-08-05 22:41 - 2018-05-19 19:06 - 000000000 ____D C:\ProgramData\Adobe
2018-08-05 00:12 - 2016-08-08 05:57 - 000000000 ____D C:\Windows\Panther
2018-08-02 23:37 - 2016-08-07 20:16 - 001851760 _____ C:\Windows\system32\PerfStringBackup.INI
2018-08-02 23:37 - 2016-08-07 14:49 - 000818970 _____ C:\Windows\system32\perfh015.dat
2018-08-02 23:37 - 2016-08-07 14:49 - 000158638 _____ C:\Windows\system32\perfc015.dat
2018-08-02 23:37 - 2015-10-30 09:21 - 000000000 ____D C:\Windows\INF
2018-07-26 21:45 - 2018-02-21 15:51 - 000000000 ____D C:\Program Files\UNP
2018-07-25 09:21 - 2018-01-19 16:32 - 000110376 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2018-07-25 09:21 - 2018-01-19 16:31 - 000109920 _____ (ESET) C:\Windows\system32\Drivers\edevmon.sys
2018-07-25 09:21 - 2017-03-09 21:55 - 000082816 _____ (ESET) C:\Windows\system32\Drivers\epfw.sys
2018-07-25 09:21 - 2017-03-09 21:55 - 000050144 _____ (ESET) C:\Windows\system32\Drivers\ekbdflt.sys
2018-07-25 09:21 - 2016-06-28 17:30 - 000196112 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2018-07-25 09:21 - 2016-06-28 17:30 - 000143624 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2018-07-23 15:21 - 2015-10-30 09:24 - 000000000 ___HD C:\Windows\ELAMBKUP
2018-07-23 15:20 - 2015-10-30 08:28 - 000032768 ___SH C:\Windows\system32\config\ELAM
2018-07-23 13:45 - 2016-08-07 14:32 - 000000000 ____D C:\Users\Szymon\Desktop\Programy
2018-07-23 11:26 - 2016-09-30 00:29 - 000000210 _____ C:\Users\Szymon\Desktop\Nowy dokument tekstowy.txt

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-08-07 19:58

==================== End of FRST.txt ============================