Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:23-08-2015
Ran by HYPER (administrator) on HYPER-KOMPUTER (23-08-2015 17:56:19)
Running from C:\Users\HYPER\Desktop
Loaded Profiles: HYPER (Available Profiles: HYPER & UpdatusUser & sunset & Administrator & Gość)
Platform: Microsoft Windows 7 Ultimate  (X86) Language: Polski (Polska)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files\Clarus\Samsung SecretZone\MSSvc.exe
() C:\Windows\System32\PnkBstrA.exe
(StarWind Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Users\HYPER\AppData\Local\Google\Update\GoogleUpdate.exe
(DT Soft Ltd) C:\Programy\DAEMON Tools Lite\DTLite.exe
(GG Network S.A.) C:\Users\HYPER\AppData\Local\GG\Application\gghub.exe
(GG Network S.A.) C:\Users\HYPER\AppData\Local\GG\Application\ggapp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(GG Network S.A.) C:\Users\HYPER\AppData\Local\GG\Application\ggdrive\ggdrive.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox 4.0 Beta 10\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12021464 2014-05-09] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5088456 2015-01-28] (ESET)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Run: [RGSC] => D:\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe [305064 2008-11-14] (Take-Two Interactive Software, Inc.)
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Run: [Google Update] => C:\Users\HYPER\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-30] (Google Inc.)
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Run: [AlcoholAutomount] => C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Run: [DAEMON Tools Lite] => C:\Programy\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Run: [GG] => C:\Users\HYPER\AppData\Local\GG\Application\gghub.exe [4078144 2015-04-21] (GG Network S.A.)
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Policies\Explorer: [HideSCAHealth] 1
Startup: C:\Users\HYPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk [2014-04-15]
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe (No File)
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://wyborcza.pl/0,0.html?p=139
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3231952852-421943317-2037577364-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.firetab.org/?type=ds3hp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3231952852-421943317-2037577364-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=UP21DF&PC=UP21&dt=050313&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3231952852-421943317-2037577364-1000 -> {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = 
SearchScopes: HKU\S-1-5-21-3231952852-421943317-2037577364-1000 -> {ECBA0070-A9C2-4785-A9B3-AB79FA2F4BCD} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-23] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} ->  No File
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-23] (Oracle Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2014-03-27] (DVDVideoSoft Ltd.)
Toolbar: HKLM - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_60-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0060-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_60-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_60-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.)
Winsock: Catalog5 01 C:\Windows\system32\mswsock.dll [232448 2009-07-14] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{269D4EBB-3481-46C5-A504-9E0ECAA6E248}: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\HYPER\AppData\Roaming\Mozilla\Firefox\Profiles\wdw9r6i3.default-1394971919367
FF SelectedSearchEngine: Search
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-12] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1206147.dll [2013-11-25] (Adobe Systems, Inc.)
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.5.0\\npsitesafety.dll [No File]
FF Plugin: @esn/npbattlelog,version=2.3.1 -> C:\Program Files\Battlelog Web Plugins\2.3.1\npbattlelog.dll [No File]
FF Plugin: @esn/npbattlelog,version=2.4.0 -> C:\Program Files\Battlelog Web Plugins\2.4.0\npbattlelog.dll [No File]
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-23] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2012-12-01] (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2012-12-01] (NVIDIA Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin: @real.com/nprphtml5videoshim;version=12.0.1.609 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2011-01-03] (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: @onlive.com/OnLiveGameClientDetector,version=1.0.0 -> C:\Program Files\OnLive\Plugin\npolgdet.dll No File
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: @tools.google.com/Google Update;version=3 -> C:\Users\HYPER\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: @tools.google.com/Google Update;version=9 -> C:\Users\HYPER\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\HYPER\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-06-30] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: electronicarts.com/GameFacePlugin -> C:\Users\HYPER\AppData\Roaming\Electronic Arts\Game Face\npGameFacePlugin.dll [2012-12-20] (Electronic Arts)
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: pokki.com/PokkiDownloadHelper -> C:\Users\HYPER\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.2.0.78.dll [2013-07-12] (Pokki)
FF Plugin HKU\S-1-5-21-3231952852-421943317-2037577364-1000: ubisoft.com/uplaypc -> D:\231312\datapack\orbit\npuplaypc.dll [2013-03-18] (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2011-01-03] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2011-01-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2011-01-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2011-01-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2011-01-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2011-01-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2011-01-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2011-01-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprjplug.dll [2011-01-03] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpjplug.dll [2011-01-03] (RealNetworks, Inc.)
FF SearchPlugin: C:\Users\HYPER\AppData\Roaming\Mozilla\Firefox\Profiles\wdw9r6i3.default-1394971919367\searchplugins\db1839da-d2e5-4470-96e1-7e3c1c774e5c.xml [2015-05-21]
FF Extension: PriceSparrow - C:\Users\HYPER\AppData\Roaming\Mozilla\Firefox\Profiles\c579hl8n.default-1373223264373\Extensions\extension@pricesparrow.com [2015-05-21]
FF Extension: PriceSparrow - C:\Users\HYPER\AppData\Roaming\Mozilla\Firefox\Profiles\wdw9r6i3.default-1394971919367\Extensions\extension@pricesparrow.com.xpi [2015-05-21]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-05-23]
FF HKLM\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff [2013-05-11]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.5.0.909
FF HKLM\...\Firefox\Extensions: [dnshelp@dnshelp.com] - C:\Users\HYPER\AppData\Roaming\Helper
FF Extension: Helper - C:\Users\HYPER\AppData\Roaming\Helper [2015-05-21]
FF HKU\S-1-5-21-3231952852-421943317-2037577364-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff

Chrome: 
=======
CHR Profile: C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-18]
CHR Extension: (Google Search) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-18]
CHR Extension: (DNSHelper) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaffpnfojcdkcdimoobneboagdnnenbo [2015-05-21]
CHR Extension: (Skype Click to Call) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2011-08-17]
CHR Extension: (Tiësto) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmeobddjkkgkglnogihcaejaleikhdh [2013-01-28]
CHR Extension: (Minibar) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpcknfcdcgpffjddjeceioobdelceffo [2011-08-07]
CHR Extension: (Chrome Web Store Payments) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Gmail) - C:\Users\HYPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-18]
CHR HKLM\...\Chrome\Extension: [gaffpnfojcdkcdimoobneboagdnnenbo] - C:\Users\HYPER\AppData\Roaming\DNSHelper Chrome\DNSHelper.crx [2015-05-21]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <no Path\update_url>
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]
StartMenuInternet: Google Chrome - C:\Users\HYPER\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 AxAutoMntSrv; C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1349576 2015-01-28] (ESET)
S4 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [235696 2015-06-26] (McAfee, Inc.)
R2 MSR Service; C:\Program Files\Clarus\Samsung SecretZone\MSSvc.exe [114688 2010-03-13] () [File not signed]
S4 npggsvc; C:\Windows\system32\GameMon.des [4135800 2011-05-15] (INCA Internet Co., Ltd.) [File not signed]
S4 Origin Client Service; C:\Program Files\Origin\OriginClientService.exe [2007048 2015-07-30] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-11-17] ()
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [1523712 2009-08-18] (Microsoft Corporation) [File not signed]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BVRPMPR5; C:\Windows\system32\drivers\BVRPMPR5.SYS [49904 2008-12-15] (Avanquest Software) [File not signed]
S3 DroidCam; C:\Windows\System32\drivers\droidcam.sys [22656 2012-01-28] (Dev47Apps)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2012-11-29] (DT Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [193464 2015-02-23] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [135808 2015-02-23] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [123424 2015-02-23] (ESET)
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [File not signed]
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
S3 Loader; C:\Windows\system32\Loader.sys [8704 2011-08-12] () [File not signed]
R1 mdf15; C:\Program Files\Clarus\Samsung SecretZone\mdf15.sys [12800 2009-04-21] () [File not signed]
R1 mvd20; C:\Program Files\Clarus\Samsung SecretZone\mvd20.sys [64000 2009-10-30] () [File not signed]
R0 speedfan; C:\Windows\System32\speedfan.sys [25240 2011-03-18] (Almico Software)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [466008 2013-02-24] (Duplex Secure Ltd.)
S3 ST330; C:\Windows\System32\drivers\st330.sys [30464 2010-10-22] (THOMSON Telecom Belgium)
S3 STBUS; C:\Windows\System32\drivers\stbus.sys [12672 2010-10-22] (THOMSON Telecom Belgium)
S3 stppp; C:\Windows\System32\DRIVERS\stppp.sys [32000 2010-10-22] (THOMSON Telecom Belgium)
S3 V0260VID; C:\Windows\System32\DRIVERS\V0260Vid.sys [154784 2007-07-18] (Creative Technology Ltd.)
U3 a5ve5ew3; C:\Windows\system32\Drivers\a5ve5ew3.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)
U3 antj7uh2; C:\Windows\system32\Drivers\antj7uh2.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

NETSVC: {F1E897F5-AEE2-43EB-8127A6926AE02A5D} -> no path.
NETSVC: {1E9BEE46-4790-42FB-818AB7FE3A7EE9DD} -> no path.

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-23 17:48 - 2015-08-23 17:48 - 00007652 _____ C:\Users\HYPER\fixlist.txt
2015-08-23 17:27 - 2015-08-23 17:27 - 00036265 _____ C:\Users\HYPER\Desktop\frst.rar
2015-08-23 17:19 - 2015-08-23 17:56 - 00000564 _____ C:\Users\HYPER\Desktop\FRST.txt
2015-08-23 17:18 - 2015-08-23 17:18 - 00000000 ____D C:\Users\HYPER\Desktop\FRST-OlderVersion
2015-08-23 14:43 - 2015-08-23 17:53 - 00000224 _____ C:\Windows\setupact.log
2015-08-23 14:43 - 2015-08-23 14:43 - 00000000 _____ C:\Windows\setuperr.log
2015-08-23 14:36 - 2015-08-23 14:36 - 06611176 _____ (Piriform Ltd) C:\Users\HYPER\Downloads\ccsetup508pro.exe
2015-08-23 14:27 - 2015-08-23 14:27 - 00000000 ____D C:\Program Files\Common Files\Java
2015-08-23 14:26 - 2015-08-23 14:26 - 00000000 ____D C:\Users\HYPER\AppData\Roaming\Sun
2015-08-23 14:26 - 2015-08-23 14:26 - 00000000 ____D C:\Users\HYPER\.oracle_jre_usage
2015-08-23 14:21 - 2015-08-23 14:21 - 00584288 _____ (Oracle Corporation) C:\Users\HYPER\Downloads\jre-8u60-windows-i586-iftw.exe
2015-08-22 20:52 - 2015-08-22 20:52 - 00000199 _____ C:\Users\sunset\Desktop\Counter-Strike Global Offensive.url
2015-08-22 20:51 - 2015-08-22 20:51 - 00000606 _____ C:\Users\sunset\Desktop\Steam.lnk
2015-08-21 21:34 - 2015-08-23 14:51 - 00000000 ____D C:\Users\sunset\AppData\Roaming\GG
2015-08-21 21:34 - 2015-08-21 21:35 - 00000000 ____D C:\Users\sunset\AppData\Local\GG
2015-08-21 20:27 - 2015-08-21 20:27 - 00000000 ____D C:\błąd
2015-08-21 17:40 - 2015-08-21 17:40 - 00000000 ____D C:\Users\sunset\048298C9A4D3490B9FF9AB023A9238F3.TMP
2015-08-17 17:36 - 2015-08-23 14:28 - 00000000 ____D C:\Program Files\Mozilla Firefox 4.0 Beta 10
2015-08-14 19:09 - 2015-08-14 19:09 - 00000000 ____D C:\Users\sunset\AppData\Roaming\TS3Client
2015-08-14 19:08 - 2015-08-14 19:08 - 01385504 _____ (Skype Technologies S.A.) C:\Users\sunset\Downloads\SkypeSetup.exe
2015-08-09 22:56 - 2015-08-22 20:45 - 00000000 ____D C:\Users\sunset\AppData\Local\Mozilla Firefox
2015-08-07 12:05 - 2015-08-07 12:05 - 00000000 ____D C:\Users\sunset\AppData\Roaming\Winamp
2015-07-27 15:44 - 2015-07-27 15:44 - 00118111 _____ C:\Users\HYPER\Downloads\aim_bania.zip
2015-07-25 17:57 - 2015-07-25 17:57 - 00000000 ____D C:\Users\sunset\AppData\Local\CEF
2015-07-25 12:54 - 2015-07-25 12:54 - 00000000 ____D C:\Users\HYPER\AppData\Local\CEF
2015-07-24 19:08 - 2015-07-24 19:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-07-24 19:08 - 2015-07-24 19:08 - 00000000 ____D C:\Program Files\McAfee Security Scan

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-23 17:56 - 2015-07-01 02:05 - 00000000 ____D C:\FRST
2015-08-23 17:54 - 2014-04-21 12:05 - 00000362 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_0414c_rmv.job
2015-08-23 17:54 - 2014-04-21 12:05 - 00000362 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_0414c_rel.job
2015-08-23 17:54 - 2011-09-02 17:38 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-23 17:54 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\tracing
2015-08-23 17:53 - 2010-10-22 15:00 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2015-08-23 17:53 - 2010-10-12 15:40 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-23 17:53 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-23 17:48 - 2010-10-12 14:34 - 00000000 ____D C:\Users\HYPER
2015-08-23 17:33 - 2015-07-16 03:28 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0bf66a78c7755.job
2015-08-23 17:33 - 2011-09-02 17:38 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-23 17:33 - 2011-02-09 21:05 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3231952852-421943317-2037577364-1000UA.job
2015-08-23 17:23 - 2009-07-14 06:34 - 00014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-23 17:23 - 2009-07-14 06:34 - 00014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-23 17:21 - 2012-11-02 13:15 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-23 17:18 - 2015-07-01 01:57 - 01677824 _____ (Farbar) C:\Users\HYPER\Desktop\FRST.exe
2015-08-23 17:16 - 2014-02-05 19:53 - 00000000 ____D C:\Users\HYPER\AppData\Roaming\GG
2015-08-23 17:07 - 2010-10-12 18:18 - 00000000 ____D C:\Steam
2015-08-23 14:50 - 2011-11-22 23:54 - 00000000 ____D C:\Windows\pss
2015-08-23 14:29 - 2014-02-21 18:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-23 14:29 - 2010-10-23 15:04 - 00000000 ____D C:\Program Files\Java
2015-08-23 14:25 - 2014-02-21 18:48 - 00274016 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-08-23 14:25 - 2014-02-21 18:48 - 00097888 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-08-23 14:25 - 2014-02-21 18:48 - 00000000 ____D C:\ProgramData\Oracle
2015-08-23 14:04 - 2009-07-14 06:53 - 00032562 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-08-22 22:33 - 2015-07-15 22:28 - 00001006 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3231952852-421943317-2037577364-1000Core1d0bf3cca65655e.job
2015-08-22 22:33 - 2011-02-09 21:05 - 00001006 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3231952852-421943317-2037577364-1000Core.job
2015-08-22 20:52 - 2014-05-02 16:19 - 00000000 ____D C:\Users\sunset\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-22 16:27 - 2010-10-13 08:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan
2015-08-22 13:03 - 2011-02-09 21:08 - 00002378 _____ C:\Users\HYPER\Desktop\Google Chrome.lnk
2015-08-21 17:40 - 2013-07-20 19:47 - 00000000 ____D C:\Users\sunset
2015-08-21 17:40 - 2010-11-25 22:13 - 00000000 ____D C:\Windows\system32\appmgmt
2015-08-21 17:40 - 2010-10-12 18:18 - 00000000 ____D C:\Program Files\Common Files\Steam
2015-08-17 21:29 - 2012-05-31 17:25 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-08-14 19:09 - 2013-10-12 12:51 - 00000000 ____D C:\Users\sunset\AppData\Local\Skype
2015-08-14 19:09 - 2010-10-19 22:16 - 00000000 ____D C:\ProgramData\Skype
2015-08-12 14:21 - 2012-11-02 13:15 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-08-12 14:21 - 2011-07-23 02:43 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-07-31 00:24 - 2012-09-28 19:23 - 00000000 ____D C:\ProgramData\Origin
2015-07-30 17:48 - 2012-10-02 17:38 - 00000000 ____D C:\Program Files\Origin
2015-07-24 19:08 - 2015-02-15 18:05 - 00002015 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-07-24 19:08 - 2015-02-15 18:05 - 00000000 ____D C:\ProgramData\McAfee Security Scan

==================== Files in the root of some directories =======

2010-10-12 19:37 - 2013-11-16 19:26 - 0138056 _____ () C:\Users\HYPER\AppData\Roaming\PnkBstrK.sys
2011-10-24 15:39 - 2012-08-20 00:24 - 0000132 _____ () C:\Users\HYPER\AppData\Roaming\Preferencje Adobe CS5 dla formatu GIF
2010-11-28 11:35 - 2013-12-05 20:43 - 0000132 _____ () C:\Users\HYPER\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG
2013-01-22 02:40 - 2013-01-22 15:05 - 0000004 _____ () C:\Users\HYPER\AppData\Roaming\skype.ini
2011-06-08 23:34 - 2014-04-21 13:45 - 0005120 _____ () C:\Users\HYPER\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-07-18 23:24 - 2011-07-18 23:24 - 0000600 _____ () C:\Users\HYPER\AppData\Local\PUTTY.RND
2012-12-15 13:18 - 2012-12-15 13:18 - 0007666 _____ () C:\Users\HYPER\AppData\Local\Resmon.ResmonCfg
2008-02-05 13:28 - 2008-02-05 13:28 - 0000051 _____ () C:\Users\HYPER\AppData\Local\setup.txt
2012-01-28 14:26 - 2012-01-28 14:26 - 0017408 _____ () C:\Users\HYPER\AppData\Local\WebpageIcons.db
2011-11-22 17:52 - 2011-11-22 17:52 - 0000000 _____ () C:\Users\HYPER\AppData\Local\{145DDD62-D4B0-4443-B461-F2483531BEFB}
2011-11-22 15:11 - 2011-11-22 15:11 - 0000000 _____ () C:\Users\HYPER\AppData\Local\{48110CBC-F1C0-4C7F-A63E-E524F04CE96B}
2011-11-22 17:42 - 2011-11-22 17:42 - 0000000 _____ () C:\Users\HYPER\AppData\Local\{D6B2AC6A-B5C2-4600-9FD3-35ACC3E82196}
2012-01-28 12:35 - 2013-05-23 22:26 - 0000031 _____ () C:\ProgramData\droidcam-settings
2013-06-18 14:25 - 2013-06-26 12:07 - 0000000 _____ () C:\ProgramData\qbxbvpsagvwynrx
2015-07-04 11:50 - 2015-07-04 11:50 - 0001534 _____ () C:\ProgramData\ss.ini
2013-06-26 12:04 - 2013-06-26 12:04 - 0178176 _____ () C:\ProgramData\upikdrphwbptejd
2013-06-21 06:22 - 2013-06-21 06:22 - 0028160 _____ () C:\ProgramData\wiupymvtxevnrhq

ZeroAccess:
C:\Users\HYPER\AppData\Local\f46bf428
C:\Users\HYPER\AppData\Local\f46bf428\@
C:\Users\HYPER\AppData\Local\f46bf428\loader.tlb

Files to move or delete:
====================
C:\Users\HYPER\AppData\Roaming\skype.ini


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-22 15:09

==================== End of log ============================