Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-02-2015
Ran by Tomek (administrator) on TOMEK-KOMPUTER on 09-02-2015 18:43:33
Running from C:\Users\Tomek\Downloads\Nowy folder (2)
Loaded Profiles: Tomek (Available profiles: Tomek)
Platform: Windows 7 Ultimate (X64) OS Language: Polski (Polska)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\System32\PnkBstrA.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\cfosspeed.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(Docudesk Corporation) C:\Program Files (x86)\Docudesk\deskPDF Studio X\deskPDFCreator.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [XFast LAN] => C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [1441152 2011-10-19] (cFos Software GmbH)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKU\S-1-5-21-3233527848-828038961-4074897931-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-3233527848-828038961-4074897931-1000\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2009-08-20] (Hewlett-Packard Company)
HKU\S-1-5-21-3233527848-828038961-4074897931-1000\...\Run: [Facebook Update] => C:\Users\Tomek\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-07-13] (Facebook Inc.)
HKU\S-1-5-21-3233527848-828038961-4074897931-1000\...\Run: [deskPDF Creator] => C:\Program Files (x86)\Docudesk\deskPDF Studio X\deskPDFCreator.exe [2346664 2013-11-02] (Docudesk Corporation)
HKU\S-1-5-21-3233527848-828038961-4074897931-1000\...\Run: [uTorrent] => C:\Users\Tomek\AppData\Roaming\uTorrent\uTorrent.exe [1677904 2015-02-07] (BitTorrent Inc.)
HKU\S-1-5-21-3233527848-828038961-4074897931-1000\...\MountPoints2: {aa93c238-6be4-11e3-bc52-bc5ff4d0a0cc} - J:\setup.exe /autorun

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3233527848-828038961-4074897931-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=dspp&ts=1418761835&from=exp&uid=WDCXWD7501AALS&q={searchTerms}
HKU\S-1-5-21-3233527848-828038961-4074897931-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
HKU\S-1-5-21-3233527848-828038961-4074897931-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=dspp&ts=1418761835&from=exp&uid=WDCXWD7501AALS&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3233527848-828038961-4074897931-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Tomek\AppData\Roaming\Mozilla\Firefox\Profiles\v56uhv53.default-1423503652073
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.69 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.69 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin HKU\S-1-5-21-3233527848-828038961-4074897931-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Tomek\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-3233527848-828038961-4074897931-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Tomek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [395136 2011-10-19] (cFos Software GmbH)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-08-20] (Hewlett-Packard Company) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-01-27] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-12-19] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-12-19] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [34640 2012-08-09] (ASRock Inc.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-12-23] (DT Soft Ltd)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-08-21] (Marvell Semiconductor, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-09 18:40 - 2015-02-09 18:40 - 00000000 ____D () C:\Users\Tomek\Desktop\Stare dane programu Firefox
2015-02-09 18:31 - 2015-02-09 18:31 - 00000000 ____D () C:\Windows\SysWOW64\Drivers\AVG
2015-02-09 16:52 - 2015-02-09 18:43 - 00000000 ____D () C:\FRST
2015-02-08 18:01 - 2015-02-08 18:01 - 00291368 _____ () C:\Windows\Minidump\020815-31325-01.dmp
2015-02-05 18:13 - 2015-02-09 18:43 - 00000000 ____D () C:\Users\Tomek\Downloads\Nowy folder (2)
2015-01-30 21:56 - 2015-01-30 21:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crystal Player
2015-01-27 17:41 - 2015-01-27 17:41 - 00291392 _____ () C:\Windows\Minidump\012715-29094-01.dmp
2015-01-26 23:13 - 2015-01-26 23:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-21 21:07 - 2015-01-21 21:07 - 00000000 ____D () C:\Program Files (x86)\VVaudix
2015-01-17 17:00 - 2015-01-18 08:20 - 00285184 _____ () C:\Users\Tomek\Documents\Projekt budowy placu zabaw w miejscowości Pniówek.pptx
2015-01-15 19:36 - 2015-01-15 19:36 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2015-01-15 19:34 - 2015-01-15 19:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories
2015-01-15 19:34 - 2015-01-15 19:34 - 00000000 ____D () C:\Program Files\Microsoft Xbox 360 Accessories

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-09 18:42 - 2013-12-23 14:53 - 01163184 _____ () C:\Windows\WindowsUpdate.log
2015-02-09 18:40 - 2014-01-02 10:41 - 00000000 ____D () C:\Users\Tomek\AppData\Roaming\uTorrent
2015-02-09 18:39 - 2014-02-19 08:45 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-02-09 18:39 - 2013-12-23 15:11 - 00707716 _____ () C:\Windows\PFRO.log
2015-02-09 18:39 - 2013-12-23 15:08 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-09 18:39 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-09 18:39 - 2009-07-14 05:51 - 00190181 _____ () C:\Windows\setupact.log
2015-02-09 18:37 - 2009-07-14 05:45 - 00017136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-09 18:37 - 2009-07-14 05:45 - 00017136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-09 18:37 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-02-09 18:31 - 2013-12-23 16:27 - 00000000 ____D () C:\Windows\system32\Drivers\AVG
2015-02-09 18:31 - 2013-12-23 16:22 - 00000000 ____D () C:\ProgramData\MFAData
2015-02-09 18:29 - 2013-12-23 15:09 - 00000000 ____D () C:\Users\Tomek\AppData\Local\CrashDumps
2015-02-09 18:28 - 2013-12-23 15:49 - 00000000 ____D () C:\Users\Tomek\AppData\Local\Adobe
2015-02-09 18:28 - 2013-12-23 15:00 - 00000000 ____D () C:\ProgramData\Adobe
2015-02-09 18:05 - 2014-01-28 09:16 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-09 17:02 - 2014-02-24 11:51 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2015-02-09 16:48 - 2014-12-16 13:12 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-02-09 16:48 - 2014-10-06 18:25 - 00000000 ____D () C:\ProgramData\Origin
2015-02-09 16:37 - 2014-07-13 12:32 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3233527848-828038961-4074897931-1000UA.job
2015-02-09 08:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-08 20:25 - 2014-02-24 11:51 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2015-02-08 18:01 - 2014-02-17 20:51 - 573656011 _____ () C:\Windows\MEMORY.DMP
2015-02-08 18:01 - 2014-02-17 20:51 - 00000000 ____D () C:\Windows\Minidump
2015-02-08 13:37 - 2014-07-13 12:32 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3233527848-828038961-4074897931-1000Core.job
2015-02-07 13:27 - 2014-12-31 09:19 - 00000865 _____ () C:\Users\Tomek\Desktop\µTorrent.lnk
2015-02-07 13:27 - 2014-12-31 09:19 - 00000845 _____ () C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-02-05 18:05 - 2014-01-28 09:16 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-05 18:05 - 2013-12-23 15:59 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-05 18:05 - 2013-12-23 15:59 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-05 17:31 - 2014-02-05 09:11 - 00001119 _____ () C:\Users\Tomek\Desktop\Youtube Downloader HD.lnk
2015-02-05 17:31 - 2014-02-05 09:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Youtube Downloader HD
2015-02-05 17:31 - 2014-02-05 09:11 - 00000000 ____D () C:\Program Files (x86)\Youtube Downloader HD
2015-01-31 07:54 - 2009-07-14 18:55 - 00738970 _____ () C:\Windows\system32\perfh015.dat
2015-01-31 07:54 - 2009-07-14 18:55 - 00155080 _____ () C:\Windows\system32\perfc015.dat
2015-01-31 07:54 - 2009-07-14 06:13 - 01666088 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-30 21:56 - 2014-02-18 21:19 - 00000688 _____ () C:\Users\Public\Desktop\Crystal Player.lnk
2015-01-27 13:41 - 2013-12-23 16:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-21 13:46 - 2014-12-31 15:44 - 00000000 ____D () C:\Users\Tomek\Documents\FIFA 14
2015-01-19 16:32 - 2014-11-30 21:17 - 00000000 ____D () C:\Users\Tomek\Downloads\Praca domowa
2015-01-16 22:02 - 2014-10-09 16:35 - 00000000 ____D () C:\Users\Tomek\Documents\USA
2015-01-16 16:21 - 2014-02-27 19:51 - 00000000 ____D () C:\Users\Tomek\Documents\Nowy folder
2015-01-15 19:34 - 2013-12-23 16:59 - 00161572 _____ () C:\Windows\DirectX.log
2015-01-13 16:47 - 2014-01-06 13:56 - 00000000 ____D () C:\Users\Tomek\AppData\Roaming\ipla
2015-01-13 10:19 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

==================== Files in the root of some directories =======

2014-02-03 16:41 - 2014-02-03 16:41 - 0003584 _____ () C:\Users\Tomek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-23 19:41 - 2013-12-31 18:56 - 0007598 _____ () C:\Users\Tomek\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-05 15:47

==================== End Of Log ============================