API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 5th, 2015
346
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 30.64 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:04-07-2015
  2. Ran by Chwałek (administrator) on KK-STCP on 05-07-2015 13:15:33
  3. Running from C:\Users\Chwałek\Downloads
  4. Loaded Profiles: Chwałek (Available Profiles: Chwałek)
  5. Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Polski (Polska)
  6. Internet Explorer Version 9 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  15. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  16. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  17. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  18. (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avp.exe
  19. () C:\ProgramData\MobileBrServ\mbbService.exe
  20. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  21. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  22. (LogMeIn Inc.) D:\Programy\LogMeIn Hamachi\hamachi-2.exe
  23. (LogMeIn, Inc.) D:\Programy\LogMeIn Hamachi\LMIGuardianSvc.exe
  24. (Microsoft Corporation) C:\Windows\System32\rundll32.exe
  25. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  26. (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avpui.exe
  27. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  28. (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
  29. (Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
  30. (Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
  31. (LogMeIn Inc.) D:\Programy\LogMeIn Hamachi\hamachi-2-ui.exe
  32. (Microsoft Corporation) C:\Windows\System32\alg.exe
  33. (LogMeIn, Inc.) D:\Programy\LogMeIn Hamachi\LMIGuardianSvc.exe
  34. (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
  35. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  36. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  37. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  38. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  39. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  40. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  41. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  42. (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
  43. (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\plugin-nm-server.exe
  44. (Microsoft Corporation) C:\Windows\splwow64.exe
  45. (Microsoft Corporation) C:\Windows\System32\msiexec.exe
  46. (Microsoft Corporation) C:\Windows\System32\cmd.exe
  47. (Microsoft Corporation) C:\Windows\System32\PresentationHost.exe
  48. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  49. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  50. (Microsoft Corporation) C:\Windows\System32\cmd.exe
  51. (Microsoft Corporation) C:\Windows\System32\msiexec.exe
  52. (Microsoft Corporation) C:\Windows\System32\msiexec.exe
  53. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  54.  
  55.  
  56. ==================== Registry (Whitelisted) ==================
  57.  
  58. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  59.  
  60. HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
  61. HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  62. HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
  63. HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139776 2014-06-16] (Brother Industries, Ltd.)
  64. HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
  65. HKU\S-1-5-21-832729102-1943323292-371352395-1000\...\MountPoints2: F - F:\setup.exe
  66. HKU\S-1-5-21-832729102-1943323292-371352395-1000\...\MountPoints2: {0c5899d6-ba5e-11e3-b865-bebd3ee1dc4e} - F:\AutoRun.exe
  67. HKU\S-1-5-21-832729102-1943323292-371352395-1000\...\MountPoints2: {6ecb0461-3334-11e4-8432-001d7dd44c85} - K:\Startme.exe
  68. HKU\S-1-5-21-832729102-1943323292-371352395-1000\...\MountPoints2: {832c8111-8817-11e3-8817-001d7dd44c85} - F:\AutoRun.exe
  69. HKU\S-1-5-21-832729102-1943323292-371352395-1000\...\MountPoints2: {832c8116-8817-11e3-8817-001d7dd44c85} - F:\AutoRun.exe
  70. HKU\S-1-5-21-832729102-1943323292-371352395-1000\...\MountPoints2: {b7fad2bd-bfab-11e3-9e95-f9bac6413f41} - F:\AutoRun.exe
  71. HKU\S-1-5-21-832729102-1943323292-371352395-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
  72. HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-05-07] (Microsoft Corporation)
  73. ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Chwałek\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
  74. ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Chwałek\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
  75. ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Chwałek\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
  76. ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Chwałek\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.)
  77. ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
  78. ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
  79. ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
  80. ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
  81. ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Chwałek\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.)
  82. ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Chwałek\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.)
  83. ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Chwałek\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.)
  84.  
  85. ==================== Internet (Whitelisted) ====================
  86.  
  87. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  88.  
  89. HKU\S-1-5-21-832729102-1943323292-371352395-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
  90. BHO: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
  91. BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2011-02-12] (Microsoft Corporation)
  92. BHO: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
  93. BHO: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
  94. BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
  95. BHO-x32: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
  96. BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> D:\Programy\Microsoft Office\Office14\GROOVEEX.DLL [2011-02-12] (Microsoft Corporation)
  97. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-21] (Oracle Corporation)
  98. BHO-x32: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
  99. BHO-x32: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
  100. BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\Programy\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
  101. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-21] (Oracle Corporation)
  102. DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
  103. Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
  104. Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
  105. Tcpip\..\Interfaces\{82D27556-1FF2-4D7A-8ED3-EB09D7E17032}: [DhcpNameServer] 192.168.42.129
  106. Tcpip\..\Interfaces\{C738F338-18CF-474E-98AF-8692891F444B}: [DhcpNameServer] 192.168.1.1 192.168.1.1
  107. Tcpip\..\Interfaces\{CE5712BA-D5CE-48C1-B647-5BB3030C73F5}: [DhcpNameServer] 192.168.2.1
  108. Tcpip\..\Interfaces\{CF386B4B-E221-4A01-B3C2-71F284DE6879}: [DhcpNameServer] 192.168.42.129
  109. Tcpip\..\Interfaces\{FF098AAA-F7CE-4D76-A0C0-9609726D9920}: [DhcpNameServer] 192.168.1.1 192.168.1.1
  110.  
  111. FireFox:
  112. ========
  113. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_194.dll [2015-06-24] ()
  114. FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  115. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_194.dll [2015-06-24] ()
  116. FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-21] (Oracle Corporation)
  117. FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-21] (Oracle Corporation)
  118. FF Plugin-x32: @kaspersky.com/content_blocker_663BE84DBCC949E88C7600F63CA7F098 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\content_blocker@kaspersky.com [2015-07-04] ()
  119. FF Plugin-x32: @kaspersky.com/virtual_keyboard_07402848C2F6470194F131B0F3DE025E -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015-07-04] ()
  120. FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> D:\Programy\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  121. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> D:\Programy\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
  122. FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-12-19] (NVIDIA Corporation)
  123. FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-12-19] (NVIDIA Corporation)
  124. FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
  125. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
  126. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
  127. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
  128. FF HKLM-x32\...\Firefox\Extensions: [content_blocker_663BE84DBCC949E88C7600F63CA7F098@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\content_blocker@kaspersky.com
  129. FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\content_blocker@kaspersky.com [2015-07-04]
  130. FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_07402848C2F6470194F131B0F3DE025E@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\virtual_keyboard@kaspersky.com
  131. FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015-07-04]
  132.  
  133. Chrome:
  134. =======
  135. CHR Profile: C:\Users\Chwałek\AppData\Local\Google\Chrome\User Data\Default
  136. CHR Extension: (Google Docs) - C:\Users\Chwałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-28]
  137. CHR Extension: (Google Drive) - C:\Users\Chwałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-28]
  138. CHR Extension: (YouTube) - C:\Users\Chwałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-28]
  139. CHR Extension: (Google Search) - C:\Users\Chwałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-28]
  140. CHR Extension: (Kaspersky Protection) - C:\Users\Chwałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2015-07-04]
  141. CHR Extension: (AdBlock) - C:\Users\Chwałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-05-28]
  142. CHR Extension: (AntiGameOrigin) - C:\Users\Chwałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldbahlcmhmlpomdepooifmhnalokdhgm [2014-01-29]
  143. CHR Extension: (Lazarus: Form Recovery) - C:\Users\Chwałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\loljledaigphbcpfhfmgopdkppkifgno [2015-04-18]
  144. CHR Extension: (Google Wallet) - C:\Users\Chwałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-28]
  145. CHR Extension: (Gmail) - C:\Users\Chwałek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-28]
  146. CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
  147. CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
  148.  
  149. ==================== Services (Whitelisted) =================
  150.  
  151. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  152.  
  153. R2 AVP15.0.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avp.exe [194000 2015-07-04] (Kaspersky Lab ZAO)
  154. R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
  155. R2 Hamachi2Svc; D:\Programy\LogMeIn Hamachi\hamachi-2.exe [2490216 2015-03-30] (LogMeIn Inc.)
  156. R2 Huawei E3272; C:\ProgramData\MobileBrServ\mbbservice.exe [240720 2013-12-03] ()
  157. S3 Microsoft SharePoint Workspace Audit Service; D:\Programy\Microsoft Office\Office14\GROOVE.EXE [31124344 2010-12-27] (Microsoft Corporation)
  158. R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
  159. R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
  160. S3 Origin Client Service; D:\Programy\Origin\OriginClientService.exe [1931632 2015-05-08] (Electronic Arts)
  161. S3 Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [836288 2015-04-14] (Valve Corporation) [File not signed]
  162. R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
  163.  
  164. ==================== Drivers (Whitelisted) ====================
  165.  
  166. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  167.  
  168. R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [247016 2015-07-04] (Kaspersky Lab UK Ltd)
  169. R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-04-09] (Disc Soft Ltd)
  170. S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [30424 2014-09-03] (Sony Mobile Communications)
  171. R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-07-04] (Kaspersky Lab ZAO)
  172. R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [64368 2015-07-04] (Kaspersky Lab ZAO)
  173. R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [159960 2015-07-04] (Kaspersky Lab ZAO)
  174. R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [225976 2015-07-04] (Kaspersky Lab ZAO)
  175. R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [850608 2015-07-04] (Kaspersky Lab ZAO)
  176. R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [39280 2015-07-04] (Kaspersky Lab ZAO)
  177. R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [40304 2015-07-04] (Kaspersky Lab ZAO)
  178. R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [39280 2015-07-04] (Kaspersky Lab ZAO)
  179. R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [24944 2015-07-04] (Kaspersky Lab ZAO)
  180. R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [65208 2015-07-04] (Kaspersky Lab ZAO)
  181. R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [85360 2015-07-04] (Kaspersky Lab ZAO)
  182. R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [190648 2015-07-04] (Kaspersky Lab ZAO)
  183. R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
  184. S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [X]
  185. S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
  186. S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
  187. S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
  188. S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
  189. U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]
  190.  
  191. ==================== NetSvcs (Whitelisted) ===================
  192.  
  193. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  194.  
  195.  
  196. ==================== One Month Created files and folders ========
  197.  
  198. (If an entry is included in the fixlist, the file/folder will be moved.)
  199.  
  200. 2015-07-05 13:15 - 2015-07-05 13:17 - 00019271 _____ C:\Users\Chwałek\Downloads\FRST.txt
  201. 2015-07-05 13:11 - 2015-07-05 13:15 - 00000000 ____D C:\FRST
  202. 2015-07-05 13:11 - 2015-07-05 13:11 - 02112512 _____ (Farbar) C:\Users\Chwałek\Downloads\FRST64.exe
  203. 2015-07-05 00:59 - 2015-07-05 00:59 - 00000000 ____D C:\Windows\pss
  204. 2015-07-04 02:33 - 2015-07-04 02:33 - 00002051 _____ C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk
  205. 2015-07-04 02:33 - 2015-07-04 02:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
  206. 2015-07-04 02:32 - 2015-07-05 12:58 - 00000000 ____D C:\ProgramData\Kaspersky Lab
  207. 2015-07-04 02:32 - 2015-07-04 02:32 - 00000000 ____D C:\Windows\ELAMBKUP
  208. 2015-07-04 02:32 - 2015-07-04 02:32 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
  209. 2015-07-04 02:32 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
  210. 2015-07-04 02:20 - 2015-07-04 02:31 - 208047672 _____ (Kaspersky Lab) C:\Users\Chwałek\Downloads\kav15.0.2.361pl-pl.exe
  211. 2015-07-02 13:18 - 2015-07-02 13:19 - 00000000 ___HD C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}
  212. 2015-06-29 13:43 - 2015-06-29 13:43 - 03407382 _____ C:\Users\Chwałek\Downloads\GridWars.zip
  213. 2015-06-29 13:43 - 2015-06-29 13:43 - 00000000 ____D C:\Users\Chwałek\Desktop\Grid Wars
  214. 2015-06-24 14:46 - 2015-06-24 14:39 - 00003871 _____ C:\Users\Chwałek\Desktop\config.json
  215. 2015-06-24 14:30 - 2015-06-24 14:30 - 00000000 ____D C:\Users\Chwałek\Desktop\serwer terraria
  216. 2015-06-24 14:29 - 2015-06-24 14:29 - 05693630 _____ C:\Users\Chwałek\Downloads\tshock_4.2.10.zip
  217. 2015-06-24 14:29 - 2015-06-24 14:29 - 01094457 _____ C:\Users\Chwałek\Downloads\TShock-4.2.10.zip
  218. 2015-06-20 10:08 - 2015-06-20 10:08 - 00000308 _____ C:\Users\Chwałek\Desktop\Tipsy.txt
  219. 2015-06-18 15:42 - 2015-06-18 15:42 - 00012635 _____ C:\Users\Chwałek\AppData\Local\recently-used.xbel
  220. 2015-06-18 10:33 - 2015-06-18 10:33 - 00000000 ____D C:\Users\Chwałek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
  221. 2015-06-18 10:32 - 2015-07-05 01:37 - 00001170 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-832729102-1943323292-371352395-1000UA.job
  222. 2015-06-18 10:32 - 2015-07-04 10:37 - 00001118 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-832729102-1943323292-371352395-1000Core.job
  223. 2015-06-18 10:32 - 2015-06-18 10:32 - 00004144 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-832729102-1943323292-371352395-1000UA
  224. 2015-06-18 10:32 - 2015-06-18 10:32 - 00003748 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-832729102-1943323292-371352395-1000Core
  225. 2015-06-18 10:32 - 2015-06-18 10:32 - 00000000 ____D C:\Users\Chwałek\AppData\Local\Dropbox
  226. 2015-06-18 10:32 - 2015-06-18 10:32 - 00000000 ____D C:\ProgramData\Dropbox
  227. 2015-06-16 11:05 - 2015-06-16 11:05 - 00037553 _____ C:\Users\Chwałek\Downloads\pobrane
  228. 2015-06-14 08:30 - 2015-06-14 08:30 - 00156902 _____ C:\Users\Chwałek\Downloads\DamageLog 0.1.2 beta by GambitER ENG.rar
  229. 2015-06-14 08:30 - 2015-06-14 08:30 - 00003723 _____ C:\Users\Chwałek\Downloads\DamageLogWithBlockedCounter.7z
  230. 2015-06-14 08:25 - 2015-06-14 08:25 - 00535296 _____ C:\Users\Chwałek\Downloads\SessionStatistic_detailed_loca_981.zip
  231. 2015-06-10 19:21 - 2015-06-10 19:21 - 00000566 _____ C:\Users\Chwałek\Desktop\RecWar — skrót.lnk
  232. 2015-06-10 19:08 - 2015-06-10 19:08 - 01905706 _____ C:\Users\Chwałek\Downloads\RecWar (1).exe
  233. 2015-06-05 19:17 - 2015-06-10 18:12 - 00000000 ____D C:\Users\Chwałek\.scorched3d
  234. 2015-06-05 19:15 - 2015-06-05 19:15 - 00000000 ____D C:\Users\Chwałek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Scorched3D
  235. 2015-06-05 18:53 - 2015-06-05 18:56 - 37581912 _____ C:\Users\Chwałek\Downloads\Scorched3D-44.exe
  236. 2015-06-05 18:26 - 2015-06-05 18:26 - 01905706 _____ C:\Users\Chwałek\Downloads\RecWar.exe
  237.  
  238. ==================== One Month Modified files and folders ========
  239.  
  240. (If an entry is included in the fixlist, the file/folder will be moved.)
  241.  
  242. 2015-07-05 13:14 - 2014-01-28 13:03 - 01355359 _____ C:\Windows\WindowsUpdate.log
  243. 2015-07-05 13:09 - 2014-02-26 16:59 - 00000000 ____D C:\Users\Chwałek\AppData\Roaming\Skype
  244. 2015-07-05 13:05 - 2009-07-14 06:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  245. 2015-07-05 13:05 - 2009-07-14 06:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  246. 2015-07-05 13:04 - 2009-07-14 19:55 - 00737942 _____ C:\Windows\system32\perfh015.dat
  247. 2015-07-05 13:04 - 2009-07-14 19:55 - 00154630 _____ C:\Windows\system32\perfc015.dat
  248. 2015-07-05 13:04 - 2009-07-14 07:13 - 01663412 _____ C:\Windows\system32\PerfStringBackup.INI
  249. 2015-07-05 12:59 - 2014-01-29 03:16 - 00000000 ____D C:\Users\Chwałek\AppData\Roaming\GG
  250. 2015-07-05 12:58 - 2015-01-06 22:14 - 00000000 ____D C:\Users\Chwałek\AppData\Local\LogMeIn Hamachi
  251. 2015-07-05 12:57 - 2014-01-29 01:38 - 00000000 ____D C:\ProgramData\NVIDIA
  252. 2015-07-05 12:57 - 2014-01-28 20:26 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  253. 2015-07-05 12:57 - 2009-07-14 07:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
  254. 2015-07-05 12:57 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
  255. 2015-07-05 12:57 - 2009-07-14 06:51 - 00195466 _____ C:\Windows\setupact.log
  256. 2015-07-05 02:29 - 2014-01-28 20:26 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  257. 2015-07-05 01:54 - 2015-01-25 13:06 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
  258. 2015-07-05 00:57 - 2014-02-18 12:10 - 00000000 ___RD C:\Users\Chwałek\Dropbox
  259. 2015-07-05 00:57 - 2014-02-18 12:07 - 00000000 ____D C:\Users\Chwałek\AppData\Roaming\Dropbox
  260. 2015-07-04 12:10 - 2014-01-28 13:16 - 00000000 ____D C:\Users\Chwałek
  261. 2015-07-04 12:05 - 2014-06-24 01:43 - 12569483 _____ C:\Users\Chwałek\Downloads\Binary_rev632.rar
  262. 2015-07-04 02:51 - 2014-11-22 14:12 - 00085360 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwtp.sys
  263. 2015-07-04 02:51 - 2014-11-10 17:48 - 00190648 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
  264. 2015-07-04 02:51 - 2014-10-10 17:02 - 00039280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys
  265. 2015-07-04 02:51 - 2014-10-09 12:31 - 00065208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
  266. 2015-07-04 02:51 - 2014-08-19 12:31 - 00064368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kldisk.sys
  267. 2015-07-04 02:51 - 2014-03-31 10:47 - 00478392 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
  268. 2015-07-04 02:51 - 2013-04-12 14:34 - 00024944 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klpd.sys
  269. 2015-07-04 02:35 - 2014-12-13 18:21 - 00850608 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
  270. 2015-07-04 02:35 - 2014-11-28 18:19 - 00159960 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
  271. 2015-07-04 02:35 - 2014-10-30 04:22 - 00040304 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
  272. 2015-07-04 02:35 - 2014-10-22 21:13 - 00225976 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys
  273. 2015-07-04 02:35 - 2013-08-08 16:11 - 00039280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys
  274. 2015-07-04 02:35 - 2013-01-14 20:10 - 00247016 _____ (Kaspersky Lab UK Ltd) C:\Windows\system32\Drivers\cm_km_w.sys
  275. 2015-07-04 00:18 - 2014-10-27 04:11 - 00000000 ____D C:\Users\Chwałek\AppData\Local\Battle.net
  276. 2015-06-27 16:57 - 2015-05-19 13:29 - 00003511 _____ C:\Users\Chwałek\Desktop\schemat raportu sws.txt
  277. 2015-06-24 14:37 - 2015-05-02 16:05 - 00000000 ____D C:\Users\Chwałek\AppData\Roaming\Notepad++
  278. 2015-06-24 12:54 - 2015-01-25 13:06 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
  279. 2015-06-24 12:54 - 2014-02-28 15:50 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  280. 2015-06-24 12:54 - 2014-02-28 15:50 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  281. 2015-06-23 01:23 - 2014-02-02 11:21 - 00000000 ____D C:\Users\Chwałek\AppData\Roaming\TS3Client
  282. 2015-06-22 22:34 - 2014-01-28 20:35 - 00002149 _____ C:\Users\Public\Desktop\Google Chrome.lnk
  283. 2015-06-22 14:25 - 2014-10-27 04:11 - 00000000 ____D C:\Users\Chwałek\AppData\Roaming\Battle.net
  284. 2015-06-20 10:04 - 2014-01-26 20:11 - 00000000 ____D C:\Users\Chwałek\Documents\SWS
  285. 2015-06-18 15:42 - 2014-02-18 11:53 - 00000000 ____D C:\Users\Chwałek\AppData\Local\gtk-2.0
  286. 2015-06-18 15:42 - 2014-02-18 11:48 - 00000000 ____D C:\Users\Chwałek\.gimp-2.8
  287. 2015-06-17 13:45 - 2014-03-03 11:28 - 00000000 ____D C:\Users\Chwałek\AppData\Local\Adobe
  288. 2015-06-14 08:27 - 2015-05-28 07:27 - 00000000 ____D C:\Users\Chwałek\Desktop\SessionStatistic_detailed_loca_981
  289. 2015-06-13 09:02 - 2014-02-26 15:51 - 00000000 ____D C:\ProgramData\Origin
  290. 2015-06-07 00:45 - 2014-02-26 16:58 - 00000000 ____D C:\ProgramData\Skype
  291. 2015-06-05 23:23 - 2014-02-18 17:56 - 00001009 _____ C:\Users\Chwałek\Desktop\adres dropbox.txt
  292.  
  293. ==================== Files in the root of some directories =======
  294.  
  295. 2014-06-01 13:30 - 2014-06-01 13:39 - 0000735 _____ () C:\Users\Chwałek\AppData\Roaming\MPQEditor.ini
  296. 2015-06-18 15:42 - 2015-06-18 15:42 - 0012635 _____ () C:\Users\Chwałek\AppData\Local\recently-used.xbel
  297. 2015-03-26 11:57 - 2015-03-26 11:57 - 0000000 _____ () C:\Users\Chwałek\AppData\Local\{51ACE2F5-BD16-4309-BFBA-7A45C15A3D34}
  298.  
  299. Some files in TEMP:
  300. ====================
  301. C:\Users\Chwałek\AppData\Local\Temp\bitool.dll
  302. C:\Users\Chwałek\AppData\Local\Temp\CoHMultiPatch.exe
  303. C:\Users\Chwałek\AppData\Local\Temp\drm_dyndata_7390006.dll
  304. C:\Users\Chwałek\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfql8qn.dll
  305. C:\Users\Chwałek\AppData\Local\Temp\FINALISE.exe
  306. C:\Users\Chwałek\AppData\Local\Temp\ggdrive-menu.exe
  307. C:\Users\Chwałek\AppData\Local\Temp\ggdrive-overlay.exe
  308. C:\Users\Chwałek\AppData\Local\Temp\GURA38E.exe
  309. C:\Users\Chwałek\AppData\Local\Temp\installstats.exe
  310. C:\Users\Chwałek\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
  311. C:\Users\Chwałek\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
  312. C:\Users\Chwałek\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
  313. C:\Users\Chwałek\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
  314. C:\Users\Chwałek\AppData\Local\Temp\jre-8u31-windows-au.exe
  315. C:\Users\Chwałek\AppData\Local\Temp\npp.6.7.9.2.Installer.exe
  316. C:\Users\Chwałek\AppData\Local\Temp\ose00000.exe
  317. C:\Users\Chwałek\AppData\Local\Temp\patchw32.dll
  318. C:\Users\Chwałek\AppData\Local\Temp\SkypeSetup.exe
  319. C:\Users\Chwałek\AppData\Local\Temp\swt-win32-3349.dll
  320. C:\Users\Chwałek\AppData\Local\Temp\xmlUpdater.exe
  321. C:\Users\Chwałek\AppData\Local\Temp\_isA822.exe
  322. C:\Users\Chwałek\AppData\Local\Temp\_isEFBC.exe
  323. C:\Users\Chwałek\AppData\Local\Temp\_isF8F0.exe
  324.  
  325.  
  326. ==================== Bamital & volsnap Check =================
  327.  
  328. (There is no automatic fix for files that do not pass verification.)
  329.  
  330. C:\Windows\System32\winlogon.exe => File is digitally signed
  331. C:\Windows\System32\wininit.exe => File is digitally signed
  332. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  333. C:\Windows\explorer.exe => File is digitally signed
  334. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  335. C:\Windows\System32\svchost.exe => File is digitally signed
  336. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  337. C:\Windows\System32\services.exe => File is digitally signed
  338. C:\Windows\System32\User32.dll => File is digitally signed
  339. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  340. C:\Windows\System32\userinit.exe => File is digitally signed
  341. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  342. C:\Windows\System32\rpcss.dll => File is digitally signed
  343. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  344.  
  345.  
  346. LastRegBack: 2015-06-28 14:22
  347.  
  348. ==================== End of log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!