Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:21-10-2015 01 Uruchomiony przez MSI (administrator) MSI-KOMPUTER (23-10-2015 14:41:57) Uruchomiony z C:\Users\MSI\Downloads Załadowane profile: MSI (Dostępne profile: MSI) Platform: Windows 7 Professional Service Pack 1 (X64) Język: Polski (Polska) Internet Explorer Wersja 11 (Domyślna przeglądarka: FF) Tryb startu: Normal Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesy (filtrowane) ================= (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avp.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\SCM\MSIService.exe (MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe (Micro-Star International) C:\MSI\Smart Utilities\SuperRAIDSvc.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avpui.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (MSI) C:\Program Files (x86)\SCM\SCM.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe (MSI) C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe () C:\Program Files (x86)\ZTE MF823\CheckNDISPort_df.exe () C:\Program Files (x86)\ZTE MF823\CancelAutoPlay_df.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\Dragon Gaming Center\Dragon Gaming Center.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe () C:\Program Files (x86)\ZTE MF823\ShowTip.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (TeamSpeak Systems GmbH) C:\Users\MSI\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe ==================== Rejestr (filtrowane) =========================== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2857200 2015-01-17] (Synaptics Incorporated) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13675736 2015-01-17] (Realtek Semiconductor) HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [405504 2014-11-06] (MSI) HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64 HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2654512 2015-10-04] (NVIDIA Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2015-01-17] (Intel Corporation) HKLM-x32\...\Run: [Sound Blaster Cinema 2] => C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe [1440768 2014-02-24] (Creative Technology Ltd) HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1014736 2014-07-22] (MSI) HKLM-x32\...\Run: [CheckNDISPortF0ac70] => C:\Program Files (x86)\ZTE MF823\CheckNDISPort_df.exe [417536 2013-03-19] () HKLM-x32\...\Run: [CancelAutoPlay_df] => C:\Program Files (x86)\ZTE MF823\CancelAutoPlay_df.exe [446720 2013-02-25] () HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132224 2014-09-18] (Atheros Communications) HKU\S-1-5-21-1417399276-1781013818-3003496812-1000\...\Run: [SteelSeries Engine] => C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [87040 2014-06-26] (SteelSeries ApS) HKU\S-1-5-21-1417399276-1781013818-3003496812-1000\...\MountPoints2: {d49cb423-0dde-11e5-82c5-448a5bec6cc1} - H:\AutoRun.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2015-09-03] ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{A32F7F52-0DC5-40EF-84BD-7D30CC20D157}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC) GroupPolicyScripts: Ograniczenia <======= UWAGA ==================== Internet (filtrowane) ==================== (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{38C82A8A-49D9-4422-AE4C-79E889D6DEE7}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{7CCCA67C-3E37-46D2-BDE1-116A8ACE498D}: [DhcpNameServer] 37.8.214.2 31.11.202.254 Tcpip\..\Interfaces\{887F2EA4-9C57-4CB7-B319-9B27897202B9}: [DhcpNameServer] 192.168.0.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1417399276-1781013818-3003496812-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1417399276-1781013818-3003496812-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp BHO: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) BHO: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO) BHO: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-21] (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) BHO-x32: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO) BHO-x32: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-21] (Oracle Corporation) FireFox: ======== FF ProfilePath: C:\Users\MSI\AppData\Roaming\Mozilla\Firefox\Profiles\j6y8151y.default-1431953739520 FF DefaultSearchEngine: DuckDuckGo FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-09] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-09] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-21] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-21] (Oracle Corporation) FF Plugin-x32: @kaspersky.com/content_blocker_663BE84DBCC949E88C7600F63CA7F098 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com [2015-04-06] () FF Plugin-x32: @kaspersky.com/online_banking_08806E753BE44495B44E90AA2513BDC5 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com [2015-04-06] () FF Plugin-x32: @kaspersky.com/virtual_keyboard_07402848C2F6470194F131B0F3DE025E -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015-04-06] () FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku] FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-10-03] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-10-03] (NVIDIA Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1417399276-1781013818-3003496812-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2015-01-27] (Ubisoft) FF user.js: detected! => C:\Users\MSI\AppData\Roaming\Mozilla\Firefox\Profiles\j6y8151y.default-1431953739520\user.js [2015-05-18] FF Extension: Ghostery - C:\Users\MSI\AppData\Roaming\Mozilla\Firefox\Profiles\j6y8151y.default-1431953739520\Extensions\firefox@ghostery.com.xpi [2015-09-18] FF Extension: uBlock - C:\Users\MSI\AppData\Roaming\Mozilla\Firefox\Profiles\j6y8151y.default-1431953739520\Extensions\{2b10c1c8-a11f-4bad-fe9c-1c11e82cac42}.xpi [2015-09-30] FF HKLM-x32\...\Firefox\Extensions: [content_blocker_663BE84DBCC949E88C7600F63CA7F098@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com [2015-04-06] [Brak podpisu cyfrowego] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_07402848C2F6470194F131B0F3DE025E@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015-04-06] [Brak podpisu cyfrowego] FF HKLM-x32\...\Firefox\Extensions: [online_banking_08806E753BE44495B44E90AA2513BDC5@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com [2015-04-06] [Brak podpisu cyfrowego] Chrome: ======= CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - hxxps://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - hxxps://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho ==================== Usługi (filtrowane) ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [315520 2014-09-18] (Windows (R) Win 7 DDK provider) [Brak podpisu cyfrowego] R2 AVP15.0.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avp.exe [194000 2015-06-23] (Kaspersky Lab ZAO) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-24] (NVIDIA Corporation) S2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Brak podpisu cyfrowego] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-09] (Intel Corporation) R2 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2014-11-06] (Micro-Star International Co., Ltd.) [Brak podpisu cyfrowego] R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [162800 2014-03-17] (MSI) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-10-04] (NVIDIA Corporation) S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568816 2015-10-04] (NVIDIA Corporation) R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [387584 2014-09-19] (Qualcomm Atheros) [Brak podpisu cyfrowego] R2 SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [29648 2014-08-13] (Micro-Star International) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2014-08-07] (Intel(R) Corporation) ===================== Sterowniki (filtrowane) ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) R3 AcpiCtlDrv; C:\Windows\System32\DRIVERS\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation) R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [97968 2014-09-12] (Qualcomm Atheros, Inc.) S3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [74368 2014-09-18] (Qualcomm Atheros) R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [247016 2015-06-23] (Kaspersky Lab UK Ltd) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [28912 2014-06-18] (Intel Corporation) S3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [129200 2014-03-27] (Qualcomm Atheros, Inc.) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-23] (Kaspersky Lab ZAO) R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [64368 2015-06-23] (Kaspersky Lab ZAO) R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [159960 2015-06-23] (Kaspersky Lab ZAO) R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [225976 2015-06-29] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [831672 2015-10-05] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [39280 2015-06-23] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [40304 2015-06-23] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [39280 2015-06-23] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [24944 2015-06-23] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [65208 2015-06-23] (Kaspersky Lab ZAO) R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [85360 2015-06-23] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [190648 2015-10-05] (Kaspersky Lab ZAO) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2013-12-09] (Intel Corporation) R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI) R3 NTIOLib_MSI_RAID; C:\MSI\Smart Utilities\NTIOLib_X64.sys [13808 2014-03-17] (MSI) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-10-04] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation) S3 Qcamain; C:\Windows\System32\DRIVERS\Qcamain7x64.sys [2229760 2014-09-18] (Qualcomm Atheros, Inc.) R3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [466648 2015-01-17] (Realsil Semiconductor Corporation) S3 SAlphamHid; C:\Windows\System32\DRIVERS\SAlpham64.sys [39168 2014-05-27] (SteelSeries Corporation) R3 SAlphaPS2; C:\Windows\System32\DRIVERS\SAlphaPS264.sys [27520 2014-05-16] (SteelSeries Corporation) R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31472 2015-01-17] (Synaptics Incorporated) R3 WINIO; C:\Program Files (x86)\MSI\Dragon Gaming Center\winio64.sys [15160 2010-06-07] () ==================== NetSvcs (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Jeden miesiąc - utworzone pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-10-23 14:41 - 2015-10-23 14:41 - 00018832 _____ C:\Users\MSI\Downloads\FRST.txt 2015-10-23 14:41 - 2015-10-23 14:41 - 00000000 ____D C:\FRST 2015-10-23 14:40 - 2015-10-23 14:40 - 02196480 _____ (Farbar) C:\Users\MSI\Downloads\FRST64.exe 2015-10-23 14:33 - 2015-10-23 14:33 - 00306944 _____ C:\Windows\system32\FNTCACHE.DAT 2015-10-23 14:33 - 2015-10-23 14:33 - 00067736 _____ C:\Users\MSI\AppData\Local\GDIPFONTCACHEV1.DAT 2015-10-23 14:33 - 2015-10-23 14:33 - 00000056 _____ C:\Windows\setupact.log 2015-10-23 14:33 - 2015-10-23 14:33 - 00000000 _____ C:\Windows\setuperr.log 2015-10-22 10:28 - 2015-10-22 10:28 - 00000000 ____D C:\Users\MSI\Documents\EA Games 2015-10-21 17:43 - 2015-10-21 17:43 - 00000221 _____ C:\Users\MSI\Desktop\Mirror's Edge.url 2015-10-17 11:25 - 2015-10-17 14:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-10-14 10:15 - 2015-10-22 10:28 - 00000000 ____D C:\Users\MSI\AppData\Roaming\NVIDIA 2015-10-14 10:00 - 2015-10-23 14:33 - 00000000 ____D C:\ProgramData\NVIDIA 2015-10-14 10:00 - 2015-10-03 07:06 - 00112944 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2015-10-14 10:00 - 2015-10-03 07:06 - 00105080 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2015-10-14 10:00 - 2015-10-03 04:49 - 06358648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2015-10-14 10:00 - 2015-10-03 04:49 - 02982520 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2015-10-14 10:00 - 2015-10-03 04:49 - 02554488 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2015-10-14 10:00 - 2015-10-03 04:49 - 00938800 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2015-10-14 10:00 - 2015-10-03 04:49 - 00385328 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2015-10-14 10:00 - 2015-10-03 04:49 - 00062768 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2015-10-14 10:00 - 2015-10-03 04:18 - 00102520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2015-10-14 10:00 - 2015-10-01 11:33 - 05284082 _____ C:\Windows\system32\nvcoproc.bin 2015-10-14 09:59 - 2015-10-03 07:06 - 42914096 _____ C:\Windows\system32\nvcompiler.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 37882488 _____ C:\Windows\SysWOW64\nvcompiler.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 22306936 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 18359928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 17395512 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 16541040 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 15716648 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 15002304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 14832968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 13518496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 12769408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 12032200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 11114616 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2015-10-14 09:59 - 2015-10-03 07:06 - 03573832 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 03154104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 02869880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 02489976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 01905456 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435850.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 01567576 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 01564976 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435850.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 00877176 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 00861816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 00689456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 00673912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 00512720 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 00422240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 00414000 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 00369272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 00204648 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2015-10-14 09:59 - 2015-10-03 07:06 - 00040280 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2015-10-14 09:59 - 2015-10-03 07:06 - 00033507 _____ C:\Windows\system32\nvinfo.pb 2015-10-14 09:59 - 2015-08-11 06:52 - 00072504 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2015-10-14 09:59 - 2015-08-11 06:52 - 00069416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2015-10-14 09:59 - 2015-08-11 06:52 - 00050472 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2015-10-12 18:53 - 2015-10-23 14:39 - 00477890 _____ C:\Windows\WindowsUpdate.log 2015-10-12 09:47 - 2015-10-12 09:47 - 00002144 _____ C:\Users\Public\Desktop\Brother Creative Center.lnk 2015-10-12 09:47 - 2015-10-12 09:47 - 00000404 _____ C:\Windows\BRWMARK.INI 2015-10-12 09:46 - 2015-10-12 09:46 - 00000050 _____ C:\Windows\system32\bridf08b.dat 2015-10-12 09:46 - 2009-05-19 17:39 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll 2015-10-12 09:46 - 2009-04-07 12:02 - 01560576 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrWia09b.dll 2015-10-12 09:46 - 2009-02-24 10:37 - 00050176 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrUsi09a.dll 2015-10-12 09:46 - 2009-01-19 09:29 - 00057344 _____ (Brother Industries Ltd.) C:\Windows\SysWOW64\brprtink.dll 2015-10-12 09:46 - 2008-06-17 15:33 - 00167936 ____N (brother) C:\Windows\SysWOW64\NSSearch.dll 2015-10-12 09:46 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll 2015-10-12 09:46 - 2007-12-13 22:16 - 00004608 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll 2015-10-12 09:46 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll 2015-10-11 14:32 - 2015-10-11 14:32 - 00000000 ____D C:\Users\MSI\AppData\Local\Apps\2.0 ==================== Jeden miesiąc - zmodyfikowane pliki i foldery ======== (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.) 2015-10-23 14:41 - 2009-07-14 06:45 - 00021904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-10-23 14:41 - 2009-07-14 06:45 - 00021904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-10-23 14:39 - 2015-01-20 19:12 - 00000000 ____D C:\Users\MSI\AppData\Roaming\TS3Client 2015-10-23 14:38 - 2011-04-12 15:21 - 00740348 _____ C:\Windows\system32\perfh015.dat 2015-10-23 14:38 - 2011-04-12 15:21 - 00155890 _____ C:\Windows\system32\perfc015.dat 2015-10-23 14:38 - 2009-07-14 07:13 - 01669190 _____ C:\Windows\system32\PerfStringBackup.INI 2015-10-23 14:37 - 2015-01-20 20:27 - 00000000 ____D C:\Users\MSI\AppData\Local\Adobe 2015-10-23 14:33 - 2015-04-06 07:04 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2015-10-23 14:33 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-10-23 14:32 - 2015-01-20 19:32 - 00000000 ____D C:\Program Files (x86)\Steam 2015-10-23 14:32 - 2015-01-18 13:13 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2015-10-23 14:25 - 2015-02-06 16:42 - 00003888 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-10-23 14:19 - 2015-01-20 23:54 - 00000000 ____D C:\Users\MSI\AppData\Local\CrashDumps 2015-10-23 12:15 - 2015-01-20 19:12 - 00000000 ____D C:\Users\MSI\AppData\Local\TeamSpeak 3 Client 2015-10-21 14:26 - 2015-01-16 15:09 - 00000000 ____D C:\Users\MSI\AppData\Local\NVIDIA 2015-10-20 22:52 - 2015-01-16 15:08 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2015-10-20 22:52 - 2015-01-16 15:07 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2015-10-19 22:01 - 2015-01-18 13:07 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-10-18 19:36 - 2009-07-14 07:08 - 00002770 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-10-17 15:46 - 2015-09-13 17:18 - 00000028 _____ C:\Users\MSI\Desktop\Nowy dokument tekstowy (2).txt 2015-10-17 14:53 - 2015-01-15 18:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-10-14 10:01 - 2015-01-16 15:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-10-14 10:00 - 2015-01-16 15:07 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2015-10-14 10:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help 2015-10-12 10:37 - 2015-04-29 13:18 - 00000000 ____D C:\Program Files (x86)\ZTE MF823 2015-10-12 10:37 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX 2015-10-12 10:37 - 2015-01-28 14:03 - 00000000 ____D C:\Program Files (x86)\Proste Faktury 2015-10-12 10:37 - 2015-01-20 19:29 - 00000000 ___HD C:\SuperChargerProfile 2015-10-12 10:37 - 2015-01-20 19:25 - 00000000 ____D C:\Users\MSI\AppData\Local\MSI 2015-10-12 10:37 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy 2015-10-12 10:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\security 2015-10-12 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2015-10-12 09:46 - 2015-06-03 18:15 - 00000000 ____D C:\Program Files (x86)\Brother 2015-10-12 09:38 - 2015-01-15 18:28 - 00000000 ____D C:\Users\MSI 2015-10-11 15:14 - 2015-05-21 22:53 - 00001650 __RSH C:\ProgramData\ntuser.pol 2015-10-08 11:20 - 2015-02-19 10:44 - 00000000 ____D C:\Users\MSI\AppData\Local\Steam 2015-10-05 12:25 - 2014-12-13 18:21 - 00831672 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2015-10-05 12:25 - 2014-11-10 17:48 - 00190648 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys 2015-09-23 14:49 - 2015-01-22 12:15 - 00000000 ____D C:\Users\MSI\Documents\my games 2015-09-23 14:47 - 2015-01-30 16:14 - 00000000 ____D C:\Users\MSI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games ==================== Pliki w katalogu głównym wybranych folderów ======= 2015-01-17 14:06 - 2015-09-03 14:28 - 0000000 _____ () C:\Users\MSI\AppData\Local\Driver_11ACPresent.flag 2015-01-17 14:06 - 2015-09-03 14:28 - 0000000 _____ () C:\Users\MSI\AppData\Local\Driver_LOM_8161Present.flag 2015-08-26 17:24 - 2015-08-26 17:25 - 0000600 _____ () C:\Users\MSI\AppData\Local\PUTTY.RND ==================== Bamital & volsnap ================= (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.) C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo C:\Windows\explorer.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo C:\Windows\system32\services.exe => Plik podpisany cyfrowo C:\Windows\system32\User32.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo LastRegBack: 2015-10-21 09:47 ==================== Koniec FRST.txt ============================