Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:10-01-2015 01
Uruchomiony przez Gibbon (administrator)  GS_G580 (15-01-2016 14:08:14)
Uruchomiony z C:\Users\pomyk_000\Desktop
Załadowane profile: Gibbon (Dostępne profile: Gibbon)
Platform: Windows 10 Pro (X64) Język: Polski (Polska)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(Bitdefender) C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(BlackBerry Limited) C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(BlackBerry Limited) C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
(Comodo) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(Bitdefender) C:\Program Files\Bitdefender\Antivirus Free Edition\gziface.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Users\pomyk_000\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Akamai Technologies, Inc.) C:\Users\pomyk_000\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\pomyk_000\AppData\Local\Akamai\netsession_win.exe
(Flux Software LLC) C:\Users\pomyk_000\AppData\Local\FluxSoftware\Flux\flux.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(BlackBerry Limited) C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17079376 2014-03-29] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191568 2014-03-29] (Lenovo(beijing) Limited)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2654512 2015-10-04] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [14601160 2015-07-02] (Logitech Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-06-03] (Synaptics Incorporated)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [561672 2015-06-12] (Vimicro)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [377368 2014-03-11] (Power Software Ltd)
HKLM-x32\...\Run: [RIMBBLaunchAgent.exe] => C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [443640 2014-10-31] (BlackBerry Limited)
HKLM-x32\...\Run: [RIM PeerManager] => C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe [4861688 2015-03-19] (BlackBerry Limited)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-13] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\...\Run: [Akamai NetSession Interface] => C:\Users\pomyk_000\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\...\Run: [f.lux] => C:\Users\pomyk_000\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC)
HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3013712 2015-12-14] (Valve Corporation)
HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\...\RunOnce: [Uninstall C:\Users\pomyk_000\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\pomyk_000\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64"
HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\...\RunOnce: [Uninstall C:\Users\pomyk_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\pomyk_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64"
HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\...\MountPoints2: {9cd38f58-42fc-11e5-82c7-201a0694bb1c} - "D:\HTC_Sync_Manager_PC.exe" 
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [176904 2015-08-25] (NVIDIA Corporation)
AppInit_DLLs: , C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [176904 2015-08-25] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [155976 2015-08-25] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Brak pliku
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  Brak pliku
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  Brak pliku
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  Brak pliku
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  Brak pliku
InternetURL: C:\Users\pomyk_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\dfgbvweer.eu.url -> file:///C:\ProgramData\ererwerr\dfgbvweer.exe
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 217.113.224.134 217.113.224.35
Tcpip\..\Interfaces\{179b6c8e-bc63-4aff-a0ce-b142aa7198db}: [DhcpNameServer] 217.113.224.134 217.113.224.35
Tcpip\..\Interfaces\{e0e50b59-9146-4bee-aa5b-898a27c8a139}: [DhcpNameServer] 217.113.224.36 217.113.224.134

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-2329799690-3783243740-1929443932-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-08-12] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-08-12] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-03-12] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\pomyk_000\AppData\Roaming\Mozilla\Firefox\Profiles\4zy9m59s.default
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll [2015-03-19] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-12-17] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2329799690-3783243740-1929443932-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [Brak pliku]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-12-17] (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.pl/
CHR StartupUrls: Default -> "hxxp://widzewtomy.net/"
CHR NewTab: Default -> "chrome-extension://laookkfknpbbblfpciffpaejjkokdgca/dashboard.html"
CHR Session Restore: Default -> [funkcja włączona]
CHR Profile: C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Przelewy24) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiicmmpkicnndkhlnnloilpgncbpkbjj [2015-10-03]
CHR Extension: (YouTube) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-26]
CHR Extension: (Ban Checker for Steam) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\canbadmphamemnmdfngmcabnjmjgaiki [2015-12-07]
CHR Extension: (Steam inventory helper) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2016-01-11]
CHR Extension: (Google Search) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Stylish) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2015-12-21]
CHR Extension: (LoungeDestroyer) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2015-12-23]
CHR Extension: (Dokumenty Google offline) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18]
CHR Extension: (YouTube To MP3!) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgdohmjplligggendhbmghhmpphabopi [2016-01-07]
CHR Extension: (Awesome Screenshot: Screen capture, Annotate) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlipoenfbbikpbjkfpfillcgkoblgpmj [2015-12-14]
CHR Extension: (Twitch Now) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2016-01-13]
CHR Extension: (Hover Zoom+) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pccckmaobkjjboncdfnnofkonhgpceea [2016-01-14]
CHR Extension: (Gmail) - C:\Users\pomyk_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.)
R3 BlackBerry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [588024 2014-10-31] (BlackBerry Limited)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2056376 2015-11-20] (Comodo)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155376 2015-10-04] (NVIDIA Corporation)
R2 gzserv; C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe [69368 2013-10-23] (Bitdefender)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [328608 2015-07-30] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-10-16] ()
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-10-04] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568816 2015-10-04] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-12-09] (Electronic Arts)
R2 RIM MDNS; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [396024 2015-03-19] (Apple Inc.)
R2 RIM Tunnel Service; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [1354488 2015-03-19] (BlackBerry Limited)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [21536 2015-11-11] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [249032 2015-06-03] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [718840 2013-04-17] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [593144 2013-04-17] (BitDefender)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [173312 2015-03-27] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7593176 2015-07-10] (Broadcom Corporation)
S1 bdfwfpf; C:\Program Files\Bitdefender\Antivirus Free Edition\bdfwfpf.sys [121928 2013-07-02] (Bitdefender SRL)
S3 blackberryncm; C:\Windows\System32\drivers\blackberryncm6_AMD64.sys [25088 2014-09-08] (BlackBerry)
R1 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [148696 2013-04-22] (BitDefender LLC)
R3 i8042HDR; C:\Windows\system32\DRIVERS\i8042HDR.sys [15920 2009-08-14] (Windows (R) Codename Longhorn DDK provider)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.)
S3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
S3 LGSUsbFilt; C:\Windows\system32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-10-04] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-10-03] (NVIDIA Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [79872 2014-05-06] (BlackBerry Limited)
R3 rimvndis; C:\Windows\System32\Drivers\rimvndis6_AMD64.sys [18432 2015-03-19] (BlackBerry Limited)
R3 RimVSerPort; C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd)
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402960 2015-05-14] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-06-03] (Synaptics Incorporated)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [382536 2013-05-28] (BitDefender S.R.L.)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [802312 2015-06-12] (Vimicro Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 CnxtHdAudService; \SystemRoot\system32\drivers\CHDRT64.sys [X]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-15 14:08 - 2016-01-15 14:08 - 00022686 _____ C:\Users\pomyk_000\Desktop\FRST.txt
2016-01-15 14:07 - 2016-01-15 14:08 - 00000000 ____D C:\FRST
2016-01-15 14:06 - 2016-01-15 14:07 - 02370560 _____ (Farbar) C:\Users\pomyk_000\Desktop\FRST64.exe
2016-01-15 14:04 - 2016-01-15 14:04 - 00016148 _____ C:\WINDOWS\system32\GS_G580_Gibbon_HistoryPrediction.bin
2016-01-15 14:02 - 2016-01-15 14:02 - 00000000 _____ C:\Users\pomyk_000\defogger_reenable
2016-01-15 14:01 - 2016-01-15 14:01 - 00050477 _____ C:\Users\pomyk_000\Desktop\Defogger.exe
2016-01-02 20:47 - 2016-01-02 20:47 - 00001762 _____ C:\Users\pomyk_000\AppData\Local\recently-used.xbel
2015-12-29 03:33 - 2015-12-29 03:33 - 00007568 _____ C:\Users\pomyk_000\Desktop\bot.xml
2015-12-28 21:37 - 2015-12-28 21:51 - 00000000 ____D C:\Program Files (x86)\WindBot
2015-12-28 21:37 - 2015-12-28 21:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WindBot
2015-12-28 21:13 - 2015-12-28 21:21 - 00000000 ____D C:\Users\pomyk_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tibia Auto
2015-12-28 21:09 - 2015-12-28 21:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 2.4
2015-12-28 21:09 - 2015-12-28 21:09 - 00000000 ____D C:\Program Files (x86)\Python
2015-12-28 21:01 - 2015-12-28 21:07 - 00000000 ____D C:\Users\pomyk_000\AppData\Local\Package Cache
2015-12-28 20:59 - 2015-12-28 21:21 - 00000000 ____D C:\Program Files (x86)\Tibia Auto
2015-12-28 20:06 - 2015-12-28 20:06 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-28 20:05 - 2015-12-28 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-12-28 20:05 - 2015-12-28 20:05 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-28 20:05 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-12-28 20:05 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-12-28 20:05 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-28 19:51 - 2015-12-28 19:51 - 00000000 ____D C:\ProgramData\ererwerr
2015-12-27 22:49 - 2015-12-27 23:12 - 00000000 ____D C:\Users\pomyk_000\AppData\Roaming\Tibia
2015-12-27 22:48 - 2015-12-28 21:21 - 00000000 ____D C:\Program Files (x86)\Tibia
2015-12-27 22:48 - 2015-12-27 22:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tibia
2015-12-18 00:11 - 2016-01-14 00:59 - 01427282 _____ C:\WINDOWS\ProcessedPackets.KTL
2015-12-18 00:11 - 2016-01-14 00:59 - 00576090 _____ C:\WINDOWS\Packet.KTL
2015-12-18 00:11 - 2016-01-14 00:59 - 00288103 _____ C:\WINDOWS\SentOSPackets.KTL
2015-12-18 00:11 - 2016-01-14 00:59 - 00000739 _____ C:\WINDOWS\NGIControl.KTL

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-01-15 14:08 - 2015-07-31 14:19 - 01836310 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-15 14:08 - 2015-07-10 17:30 - 00813762 _____ C:\WINDOWS\system32\perfh015.dat
2016-01-15 14:08 - 2015-07-10 17:30 - 00156260 _____ C:\WINDOWS\system32\perfc015.dat
2016-01-15 14:08 - 2015-07-10 12:02 - 00000000 ____D C:\WINDOWS\INF
2016-01-15 14:07 - 2015-07-10 10:05 - 00000000 ____D C:\Windows
2016-01-15 14:05 - 2014-12-22 18:53 - 00000000 ____D C:\Program Files (x86)\Steam
2016-01-15 14:04 - 2015-08-04 17:13 - 00000436 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2016-01-15 14:04 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-15 14:04 - 2015-07-10 12:04 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-01-15 14:04 - 2015-07-10 10:05 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
2016-01-15 14:04 - 2014-10-19 22:10 - 00001068 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cfebe112891a2b.job
2016-01-15 14:04 - 2014-03-29 19:36 - 00000000 ____D C:\WINDOWS\Downloaded Installations
2016-01-15 14:02 - 2015-07-31 14:13 - 00000000 ____D C:\Users\pomyk_000
2016-01-15 13:32 - 2014-10-19 22:10 - 00001072 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cfebe113b6ce75.job
2016-01-15 10:30 - 2014-03-28 23:55 - 00004218 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5FBE86C3-CC31-4744-A711-F97DE2494D1D}
2016-01-15 01:17 - 2014-04-11 16:15 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2016-01-15 01:15 - 2015-05-20 03:45 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-01-14 00:59 - 2015-08-04 23:52 - 00220372 _____ C:\WINDOWS\Control.KTL
2016-01-07 19:50 - 2014-12-09 23:55 - 00000000 ____D C:\Program Files\KMSpico
2016-01-07 19:22 - 2014-07-30 19:14 - 00000000 ____D C:\Users\pomyk_000\AppData\Roaming\Audacity
2016-01-07 19:16 - 2014-04-02 17:46 - 00000000 ____D C:\Users\pomyk_000\AppData\Roaming\Mp3tag
2016-01-07 03:30 - 2014-03-29 23:43 - 00000000 ____D C:\Users\pomyk_000\AppData\Roaming\BitTorrent
2016-01-06 00:46 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-01-03 03:03 - 2014-07-02 18:09 - 00000000 ____D C:\Users\pomyk_000\AppData\Roaming\TS3Client
2016-01-02 20:54 - 2014-04-09 19:11 - 00000000 ____D C:\Users\pomyk_000\.gimp-2.8
2016-01-02 20:47 - 2014-04-09 19:22 - 00000000 ____D C:\Users\pomyk_000\AppData\Local\gtk-2.0
2015-12-28 21:12 - 2014-08-19 01:33 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-28 20:32 - 2015-08-13 01:05 - 00000000 ____D C:\ProgramData\{e537c070-aab8-b1d9-e537-7c070aab01c2}
2015-12-28 20:19 - 2015-08-03 19:08 - 00000000 ____D C:\Program Files (x86)\CutThePriece
2015-12-28 20:19 - 2015-08-03 19:05 - 00000000 ____D C:\ProgramData\{8d5315de-b038-456d-8d53-315deb03577a}

==================== Pliki w katalogu głównym wybranych folderów =======

2014-03-31 13:13 - 2012-07-04 18:43 - 24084840 _____ () C:\Program Files\ubisoftlauncher.exe
2014-06-02 19:33 - 2014-05-23 10:21 - 0000224 _____ () C:\Program Files\update-watchdogs.bat
2014-06-02 19:33 - 2013-10-12 19:47 - 0000732 _____ () C:\Program Files\visit-www.nosteam.ro.html
2013-02-26 07:28 - 2013-02-26 07:28 - 0027762 _____ () C:\Program Files (x86)\changes.txt
2013-02-26 07:56 - 2013-02-26 07:56 - 2391736 _____ (Beepa P/L) C:\Program Files (x86)\fraps.exe
2013-02-26 07:34 - 2013-02-26 07:34 - 0234168 _____ (Beepa P/L) C:\Program Files (x86)\fraps32.dll
2013-02-26 07:56 - 2013-02-26 07:56 - 0068792 _____ (Beepa P/L) C:\Program Files (x86)\fraps64.dat
2013-02-26 07:34 - 2013-02-26 07:34 - 0186552 _____ (Beepa P/L) C:\Program Files (x86)\fraps64.dll
2013-02-26 07:54 - 2013-02-26 07:54 - 0139776 _____ (Beepa P/L) C:\Program Files (x86)\frapslcd.dll
2015-09-03 03:47 - 2015-09-03 03:47 - 0000189 _____ () C:\Program Files (x86)\FRAPSLOG.TXT
2013-02-26 07:27 - 2013-02-26 07:27 - 0001894 _____ () C:\Program Files (x86)\README.HTM
2015-09-03 03:46 - 2015-09-03 03:46 - 0036079 _____ (Beepa Pty Ltd) C:\Program Files (x86)\uninstall.exe
2014-11-20 23:09 - 2014-11-20 23:09 - 0000385 _____ () C:\Program Files\Common Files\TrackerSoftwareInstallerPDFT4.log
2014-05-23 17:25 - 2014-05-23 17:25 - 0000001 _____ () C:\Users\pomyk_000\AppData\Local\llftool.4.30.agreement
2014-04-13 23:25 - 2014-04-13 23:25 - 0000001 _____ () C:\Users\pomyk_000\AppData\Local\llftool.4.40.agreement
2016-01-02 20:47 - 2016-01-02 20:47 - 0001762 _____ () C:\Users\pomyk_000\AppData\Local\recently-used.xbel
2014-03-29 02:19 - 2014-03-31 03:13 - 0007600 _____ () C:\Users\pomyk_000\AppData\Local\resmon.resmoncfg
2014-10-23 20:54 - 2014-10-23 20:54 - 0017408 _____ () C:\Users\pomyk_000\AppData\Local\WebpageIcons.db
2014-06-28 21:38 - 2014-06-28 21:38 - 0048082 _____ () C:\ProgramData\1403987877.bdinstall.bin
2014-06-28 21:46 - 2014-06-28 21:46 - 0103487 _____ () C:\ProgramData\1403988339.bdinstall.bin
2014-06-28 21:49 - 2014-06-28 21:49 - 0107163 _____ () C:\ProgramData\1403988517.bdinstall.bin
2014-06-28 21:55 - 2014-06-28 21:55 - 0202561 _____ () C:\ProgramData\1403988883.bdinstall.bin
2014-11-16 01:34 - 2014-11-16 01:34 - 0037479 _____ () C:\ProgramData\1416098052.bdinstall.bin
2014-11-16 01:35 - 2014-11-16 01:35 - 0178577 _____ () C:\ProgramData\1416098053.bdinstall.bin
2015-07-31 14:09 - 2015-07-31 14:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-03-30 01:32 - 2014-03-30 01:43 - 0427840 _____ (ForensiT Limited) C:\ProgramData\UserProfileMigrationService.exe

Pliki do przeniesienia lub usunięcia:
====================
C:\ProgramData\UserProfileMigrationService.exe


Niektóre pliki w TEMP:
====================
C:\Users\pomyk_000\AppData\Local\Temp\KUIU.EXE


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\WINDOWS\system32\winlogon.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\wininit.exe => Plik podpisany cyfrowo
C:\WINDOWS\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\services.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\WINDOWS\system32\rpcss.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\WINDOWS\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-01-05 20:08

==================== Koniec  FRST.txt ============================