Witam mam identyczny problem jak kolega powyżej, mógłbym poprosić o rozwiązanie?
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by xyz (administrator) on XYZ-KOMPUTER on 19-09-2014 16:04:28
Running from F:\
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart Plus B210 series\Bin\ScanToPCActivationApp.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Dropbox, Inc.) C:\Users\xyz\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Energy Management] = & gt; C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9745312 2013-10-30] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] = & gt; C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5374880 2013-10-30] (Lenovo(beijing) Limited)
HKLM\...\Run: [Nvtmru] = & gt; " C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe "
HKLM\...\Run: [IAStorIcon] = & gt; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-30] (Intel Corporation)
HKLM\...\Run: [ShadowPlay] = & gt; C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [SynTPEnh] = & gt; C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2866960 2011-12-16] (Synaptics Incorporated)
HKLM\...\Run: [SynLenovoGestureMgr] = & gt; C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [410896 2011-12-16] (Synaptics)
HKLM\...\Run: [XboxStat] = & gt; C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] = & gt; C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403288 2014-08-09] (NVIDIA Corporation)
HKLM-x32\...\Run: [Driver Genius] = & gt; [X]
HKLM-x32\...\Run: [AVG_UI] = & gt; C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5188112 2014-08-25] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [] = & gt; [X]
HKLM-x32\...\Run: [Razer Synapse] = & gt; C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [585560 2014-06-23] (Razer Inc.)
HKLM-x32\...\Run: [Adobe] = & gt; C:\Program Files\Java\Adobe Acrobat Update Service.exe [61730 2013-11-13] (Java Runtime Environment (JRE))
HKLM-x32\...\Run: [Adobe ARM] = & gt; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] = & gt; C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKLM-x32\...\Run: [NCUpdateHelper] = & gt; C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] = & gt; C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2024800 2014-06-04] (Wondershare)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2988416822-3325066153-579693233-1000\...\Run: [DAEMON Tools Lite] = & gt; C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-2988416822-3325066153-579693233-1000\...\Run: [HP Photosmart Plus B210 series (NET)] = & gt; C:\Program Files\HP\HP Photosmart Plus B210 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-2988416822-3325066153-579693233-1000\...\Run: [AVG-Secure-Search-Update_1213b] = & gt; C:\Users\xyz\AppData\Roaming\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe /PROMPT /mid=e240a4aa775e47d380721f7399c1ce75-2fa7d8bb4d4dd20906eff5744a0f9a8417b6c298 /CMPID=1213b
HKU\S-1-5-21-2988416822-3325066153-579693233-1000\...\Run: [ALLUpdate] = & gt; " C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe " " sleep "
HKU\S-1-5-21-2988416822-3325066153-579693233-1000\...\Run: [AVG-Secure-Search-Update_0214c] = & gt; C:\Users\xyz\AppData\Roaming\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=e240a4aa775e47d380721f7399c1ce75-2fa7d8bb4d4dd20906eff5744a0f9a8417b6c298 /CMPID=0214c
HKU\S-1-5-21-2988416822-3325066153-579693233-1000\...\Run: [Unified Remote v2] = & gt; C:\Program Files (x86)\Unified Remote\RemoteServer.exe
HKU\S-1-5-21-2988416822-3325066153-579693233-1000\...\Run: [Skype] = & gt; C:\Program Files (x86)\Skype\Phone\Skype.exe [21648480 2014-07-02] (Skype Technologies S.A.)
HKU\S-1-5-21-2988416822-3325066153-579693233-1000\...\Run: [CMD] = & gt; cmd.exe /c start http://extendedunlimited.org & & exit & lt; ===== ATTENTION
HKU\S-1-5-21-2988416822-3325066153-579693233-1000\...\MountPoints2: {fe4af0c7-4200-11e3-9c44-dc0ea1f3e669} - H:\setup.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll = & gt; C:\Windows\system32\nvinitx.dll [166568 2014-07-02] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll = & gt; C:\Windows\SysWOW64\nvinit.dll [146480 2014-07-02] (NVIDIA Corporation)
Startup: C:\Users\xyz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk - & gt; C:\Users\xyz\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/
BHO-x32: Java(tm) Plug-In SSV Helper - & gt; {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - & gt; C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - & gt; {DBC80044-A445-435b-BC74-9C25C1C588A9} - & gt; C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: IplexToALLPlayer - & gt; {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - & gt; C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 194.168.4.100 194.168.8.100
FireFox:
========
FF ProfilePath: C:\Users\xyz\AppData\Roaming\Mozilla\Firefox\Profiles\g62pdffc.default
FF Homepage: hxxp://google.pl/
FF Keyword.URL: user_pref( " keyword.URL " , " " );
FF Plugin: @adobe.com/FlashPlayer - & gt; C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @microsoft.com/GENUINE - & gt; disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - & gt; C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - & gt; C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - & gt; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - & gt; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - & gt; C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - & gt; C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - & gt; disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - & gt; C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - & gt; C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - & gt; C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - & gt; C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\xyz\AppData\Roaming\Mozilla\Firefox\Profiles\g62pdffc.default\searchplugins\wyszukiwarka-filmw-w-youtube.xml
FF Extension: British English Dictionary (Updated) - C:\Users\xyz\AppData\Roaming\Mozilla\Firefox\Profiles\g62pdffc.default\Extensions\en-gb@flyingtophat.co.uk [2014-07-30]
FF Extension: Hola Better Internet - C:\Users\xyz\AppData\Roaming\Mozilla\Firefox\Profiles\g62pdffc.default\Extensions\jid1-4P0kohSJxU1qGg@jetpack [2014-09-13]
FF Extension: Hide My Ass Proxy Extension - C:\Users\xyz\AppData\Roaming\Mozilla\Firefox\Profiles\g62pdffc.default\Extensions\extension@hidemyass.com.xpi [2014-03-10]
FF Extension: Iplex to ALLPlayer - C:\Users\xyz\AppData\Roaming\Mozilla\Firefox\Profiles\g62pdffc.default\Extensions\IplextoALL@ALLPlayer.org.xpi [2013-12-31]
FF Extension: Diablo 3 profile + - C:\Users\xyz\AppData\Roaming\Mozilla\Firefox\Profiles\g62pdffc.default\Extensions\jid1-M4HE20OYnEIt5A@jetpack.xpi [2014-05-25]
FF Extension: English (GB) Language Pack - C:\Users\xyz\AppData\Roaming\Mozilla\Firefox\Profiles\g62pdffc.default\Extensions\langpack-en-GB@firefox.mozilla.org.xpi [2013-11-13]
FF Extension: Adblock Plus - C:\Users\xyz\AppData\Roaming\Mozilla\Firefox\Profiles\g62pdffc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-30]
Chrome:
=======
CHR HomePage: Default - & gt; F9D0A4E937FD49F72AE26481C509B9B389F60E5DA92E9C647CE348771F51EA90
CHR DefaultSearchKeyword: Default - & gt; 2B723C651680B0F9124677073E74C8874686991C0679FB851B9DF3D42343DD8D
CHR DefaultSearchProvider: Default - & gt; E01CD8B290F30F479855CBF0B72C810D92E5E0714774CEC393B447CB1416680D
CHR DefaultSearchURL: Default - & gt; 63CDEA88B796A018BC76DAA858421271E9BB0DF696EF0A905A655D923EDA8320
CHR Profile: C:\Users\xyz\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs) - C:\Users\xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-30]
CHR Extension: (Google Drive) - C:\Users\xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-30]
CHR Extension: (YouTube) - C:\Users\xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-30]
CHR Extension: (Google Search) - C:\Users\xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-30]
CHR Extension: (Diablo 3 profile +) - C:\Users\xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncoghbpbhlmmoajjnhienleaanmaagaj [2014-05-24]
CHR Extension: (Google Wallet) - C:\Users\xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-30]
CHR Extension: (Gmail) - C:\Users\xyz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-30]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3242000 2014-08-25] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [289328 2014-08-25] (AVG Technologies CZ, s.r.o.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-30] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-28] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720792 2014-08-09] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18973144 2014-08-09] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-06-20] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [189248 2014-06-20] ()
S3 WatAdminSvc; C:\Windows\system32\Wat\WatAdminSvc.exe [1255736 2013-10-30] () [File not signed]
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)
S2 vToolbarUpdater18.1.9; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [152344 2014-06-30] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [244504 2014-07-21] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [235800 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [328984 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-08-06] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [269080 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-11] (AVG Technologies)
S3 BioNTDrv; C:\Program Files (x86)\Paragon Software\Migrate OS to SSD\program\BioNTDrv.SYS [19024 2011-03-01] (Paragon Software GmbH)
S3 bpenum; C:\Windows\System32\DRIVERS\bpenum.sys [84480 2011-11-30] (Intel Corporation) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-10-31] (Disc Soft Ltd)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-30] (Intel Corporation)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-08-28] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20440 2014-08-09] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 rzdaendpt; C:\Windows\System32\DRIVERS\rzdaendpt.sys [33448 2014-05-19] (Razer Inc)
R3 rzvkeyboard; C:\Windows\System32\DRIVERS\rzvkeyboard.sys [31400 2014-05-19] (Razer Inc)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-19 16:04 - 2014-09-19 16:04 - 00000000 ____D () C:\FRST
2014-09-19 14:19 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-19 14:17 - 2014-09-19 15:12 - 00000000 ____D () C:\AdwCleaner
2014-09-19 14:17 - 2014-09-19 14:17 - 01373475 _____ () C:\Users\xyz\Desktop\adwcleaner_3.310.exe
2014-09-19 14:15 - 2014-09-19 14:15 - 00003221 _____ () C:\Users\xyz\Desktop\Sophos Virus Removal Tool.lnk
2014-09-19 14:15 - 2014-09-19 14:15 - 00000000 ____D () C:\Users\xyz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos
2014-09-19 14:15 - 2014-09-19 14:15 - 00000000 ____D () C:\ProgramData\Sophos
2014-09-19 14:13 - 2014-09-19 14:14 - 97417800 _____ (Sophos Limited) C:\Users\xyz\Desktop\Sophos Virus Removal Tool.exe
2014-09-19 13:44 - 2014-09-19 13:44 - 00000133 _____ () C:\Users\xyz\Desktop\fix.reg
2014-09-19 13:28 - 2014-09-19 13:28 - 00000466 _____ () C:\Users\xyz\Desktop\Programy (F).lnk
2014-09-19 13:19 - 2014-09-19 13:19 - 00001154 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-09-19 13:19 - 2014-09-19 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-09-19 13:19 - 2014-09-19 13:19 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-09-19 13:12 - 2014-09-19 13:12 - 00000000 ____D () C:\Diablo 3
2014-09-19 13:07 - 2014-09-19 13:07 - 00000000 ____D () C:\Users\xyz\AppData\Local\Abelssoft
2014-09-19 13:06 - 2014-09-19 13:08 - 00000695 _____ () C:\Users\Public\Desktop\SSD Fresh.lnk
2014-09-19 13:06 - 2014-09-19 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SSD Fresh
2014-09-19 11:36 - 2014-09-19 11:36 - 00000000 ____D () C:\ProgramData\Paragon
2014-09-19 11:29 - 2014-09-19 11:29 - 00000000 ____D () C:\ProgramData\migrateos
2014-09-19 11:28 - 2014-09-19 11:28 - 00002338 _____ () C:\Users\Public\Desktop\Paragon Migrate OS to SSD™.lnk
2014-09-19 11:28 - 2014-09-19 11:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Migrate OS to SSD™
2014-09-19 11:28 - 2014-09-19 11:28 - 00000000 ____D () C:\Program Files (x86)\Paragon Software
2014-09-19 11:22 - 2014-09-19 11:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-17 16:37 - 2014-09-17 16:40 - 00000000 ____D () C:\Program Files (x86)\ipla
2014-09-17 16:37 - 2014-09-17 16:38 - 00000000 ____D () C:\Users\xyz\AppData\Roaming\ipla
2014-09-17 16:37 - 2014-09-17 16:38 - 00000000 ____D () C:\ProgramData\RDRM
2014-09-17 16:37 - 2014-09-17 16:37 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2014-09-17 16:37 - 2014-09-17 16:37 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2014-09-17 16:37 - 2014-09-17 16:37 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2014-09-16 13:44 - 2014-09-19 13:21 - 00000000 ____D () C:\Program Files\Wondershare
2014-09-16 13:44 - 2014-09-16 13:45 - 00000000 ____D () C:\Users\xyz\AppData\Roaming\Wondershare
2014-09-16 13:44 - 2014-09-16 13:44 - 00000000 ____D () C:\Users\xyz\AppData\Local\Wondershare
2014-09-16 13:43 - 2014-09-16 13:44 - 00000000 ____D () C:\Users\Public\Documents\Wondershare
2014-09-12 10:39 - 2014-09-12 10:39 - 00001471 _____ () C:\Users\xyz\Desktop\Invoice wrzesień.xls — skrót.lnk
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-19 16:04 - 2014-09-19 16:04 - 00000000 ____D () C:\FRST
2014-09-19 15:58 - 2013-10-30 13:55 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-19 15:16 - 2013-10-30 10:07 - 01069715 _____ () C:\Windows\WindowsUpdate.log
2014-09-19 15:14 - 2013-11-12 20:15 - 00000000 ____D () C:\Users\xyz\AppData\Local\Battle.net
2014-09-19 15:13 - 2013-11-03 16:00 - 00000000 ____D () C:\Users\xyz\AppData\Roaming\Dropbox
2014-09-19 15:13 - 2013-10-30 13:55 - 00001038 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-19 15:13 - 2013-10-30 13:51 - 00000000 ____D () C:\Users\xyz\AppData\Roaming\Skype
2014-09-19 15:13 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-19 15:13 - 2009-07-14 05:51 - 00101648 _____ () C:\Windows\setupact.log
2014-09-19 15:12 - 2014-09-19 14:17 - 00000000 ____D () C:\AdwCleaner
2014-09-19 15:12 - 2014-06-08 18:25 - 00000000 ____D () C:\Users\xyz\AppData\Local\AVG SafeGuard toolbar
2014-09-19 15:12 - 2010-11-21 04:47 - 00024298 _____ () C:\Windows\PFRO.log
2014-09-19 14:17 - 2014-09-19 14:17 - 01373475 _____ () C:\Users\xyz\Desktop\adwcleaner_3.310.exe
2014-09-19 14:15 - 2014-09-19 14:15 - 00003221 _____ () C:\Users\xyz\Desktop\Sophos Virus Removal Tool.lnk
2014-09-19 14:15 - 2014-09-19 14:15 - 00000000 ____D () C:\Users\xyz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sophos
2014-09-19 14:15 - 2014-09-19 14:15 - 00000000 ____D () C:\ProgramData\Sophos
2014-09-19 14:14 - 2014-09-19 14:13 - 97417800 _____ (Sophos Limited) C:\Users\xyz\Desktop\Sophos Virus Removal Tool.exe
2014-09-19 13:44 - 2014-09-19 13:44 - 00000133 _____ () C:\Users\xyz\Desktop\fix.reg
2014-09-19 13:36 - 2009-07-14 05:45 - 00016640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-19 13:36 - 2009-07-14 05:45 - 00016640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-19 13:28 - 2014-09-19 13:28 - 00000466 _____ () C:\Users\xyz\Desktop\Programy (F).lnk
2014-09-19 13:26 - 2014-02-06 10:49 - 00000646 _____ () C:\Users\xyz\Desktop\Dropbox.lnk
2014-09-19 13:21 - 2014-09-16 13:44 - 00000000 ____D () C:\Program Files\Wondershare
2014-09-19 13:19 - 2014-09-19 13:19 - 00001154 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-09-19 13:19 - 2014-09-19 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-09-19 13:19 - 2014-09-19 13:19 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-09-19 13:12 - 2014-09-19 13:12 - 00000000 ____D () C:\Diablo 3
2014-09-19 13:08 - 2014-09-19 13:06 - 00000695 _____ () C:\Users\Public\Desktop\SSD Fresh.lnk
2014-09-19 13:08 - 2014-09-19 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SSD Fresh
2014-09-19 13:07 - 2014-09-19 13:07 - 00000000 ____D () C:\Users\xyz\AppData\Local\Abelssoft
2014-09-19 12:50 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-09-19 12:39 - 2013-11-14 22:11 - 00000000 ____D () C:\Users\Administrator
2014-09-19 12:39 - 2013-10-30 10:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-19 12:39 - 2013-10-30 10:10 - 00000000 ____D () C:\Users\xyz
2014-09-19 12:39 - 2011-04-12 14:32 - 00000000 ____D () C:\Windows\CSC
2014-09-19 12:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-09-19 12:01 - 2013-10-31 17:00 - 00000000 ____D () C:\Users\xyz\AppData\Roaming\uTorrent
2014-09-19 11:36 - 2014-09-19 11:36 - 00000000 ____D () C:\ProgramData\Paragon
2014-09-19 11:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-09-19 11:33 - 2014-06-15 14:22 - 00000000 ____D () C:\Users\xyz\AppData\Local\CrashDumps
2014-09-19 11:29 - 2014-09-19 11:29 - 00000000 ____D () C:\ProgramData\migrateos
2014-09-19 11:28 - 2014-09-19 11:28 - 00002338 _____ () C:\Users\Public\Desktop\Paragon Migrate OS to SSD™.lnk
2014-09-19 11:28 - 2014-09-19 11:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Migrate OS to SSD™
2014-09-19 11:28 - 2014-09-19 11:28 - 00000000 ____D () C:\Program Files (x86)\Paragon Software
2014-09-19 11:22 - 2014-09-19 11:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-19 11:09 - 2011-04-12 14:21 - 00739230 _____ () C:\Windows\system32\perfh015.dat
2014-09-19 11:09 - 2011-04-12 14:21 - 00155384 _____ () C:\Windows\system32\perfc015.dat
2014-09-19 11:09 - 2009-07-14 06:13 - 01666834 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-19 10:45 - 2013-10-30 10:14 - 00000000 ____D () C:\ProgramData\MFAData
2014-09-18 11:12 - 2013-11-03 16:02 - 00000000 ____D () C:\Users\xyz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-09-18 11:11 - 2013-11-26 00:41 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-17 16:40 - 2014-09-17 16:37 - 00000000 ____D () C:\Program Files (x86)\ipla
2014-09-17 16:38 - 2014-09-17 16:37 - 00000000 ____D () C:\Users\xyz\AppData\Roaming\ipla
2014-09-17 16:38 - 2014-09-17 16:37 - 00000000 ____D () C:\ProgramData\RDRM
2014-09-17 16:37 - 2014-09-17 16:37 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2014-09-17 16:37 - 2014-09-17 16:37 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2014-09-17 16:37 - 2014-09-17 16:37 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2014-09-17 14:25 - 2013-11-08 22:25 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-09-17 13:14 - 2013-11-08 22:25 - 00000000 ____D () C:\ProgramData\Origin
2014-09-16 13:45 - 2014-09-16 13:44 - 00000000 ____D () C:\Users\xyz\AppData\Roaming\Wondershare
2014-09-16 13:44 - 2014-09-16 13:44 - 00000000 ____D () C:\Users\xyz\AppData\Local\Wondershare
2014-09-16 13:44 - 2014-09-16 13:43 - 00000000 ____D () C:\Users\Public\Documents\Wondershare
2014-09-12 10:39 - 2014-09-12 10:39 - 00001471 _____ () C:\Users\xyz\Desktop\Invoice wrzesień.xls — skrót.lnk
2014-09-12 09:09 - 2014-03-31 09:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-09-11 19:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-08-24 17:12 - 2013-10-30 13:49 - 00000000 ____D () C:\Users\xyz\Documents\my games
2014-08-24 17:11 - 2013-10-30 13:47 - 00202155 _____ () C:\Windows\DirectX.log
Some content of TEMP:
====================
C:\Users\xyz\AppData\Local\Temp\abelssoft.setup.exe
C:\Users\xyz\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp2pi_a1.dll
C:\Users\xyz\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe = & gt; File is digitally signed
C:\Windows\System32\wininit.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\wininit.exe = & gt; File is digitally signed
C:\Windows\explorer.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\explorer.exe = & gt; File is digitally signed
C:\Windows\System32\svchost.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\svchost.exe = & gt; File is digitally signed
C:\Windows\System32\services.exe = & gt; File is digitally signed
C:\Windows\System32\User32.dll = & gt; MD5 is legit
C:\Windows\SysWOW64\User32.dll = & gt; MD5 is legit
C:\Windows\System32\userinit.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\userinit.exe = & gt; File is digitally signed
C:\Windows\System32\rpcss.dll = & gt; File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys = & gt; File is digitally signed
LastRegBack: 2014-09-16 08:03
==================== End Of Log ============================