Wirus w autorun mp3

[michu47]

Witam nie wiem czy dobry dział, mam problem z odtwarzaczem Speedo wodoodpornym Mp3 podłączam do komputera słychac dzwięk podączenia za chwile antywirus pokazuje, że jest wirus Autorun plik i nastepuje same rozłączenie i tak co chwile wykrywa system mp3 i rozłącza. proszę o pomoc

[Łowca Androidów]

Na początek Odepnij wszystkie pamięci USBPobierz >>>MCShield Anti-Malware USB<<< i zainstaluj.
Po uruchomieniu kliknij pozycję General[b] -> [b]Language i tu możesz zmienić język na PL
Teraz przejdź do pozycji Skaner -> i tutaj zaznacz pozycje Zawsze pokazuj ukryte pliki na pamięci...
Teraz podepnij pendrive (lub/oraz inne pamięci USB)
Program przeskanuje i usunie zagrożenia.
W pozycji Logi będzie info o wykonanych działaniach.
Skopiuj i wklej tu na forum.
Zaraportowałem, aby teamt został przeniesiony do działu Bezpieczeństwo - tam zakładamy wątki dotyczące infekcji itp.

[michu47]

>>> MCShield AllScans.txt <<<

-----------------------------




MCShield ::Anti-Malware Tool:: http://www.mcshield.net/

>>> v 3.0.5.28 / DB: 2014.6.1.1 / Windows 7 <<<


2014-06-01 20:01:29 > Dysk C: - rozpoczęto skanowanie (bez etykiety ~344 GB, NTFS HDD )...



=> Nie znaleziono infekcji


2014-06-01 20:01:29 > Dysk E: - rozpoczęto skanowanie (Nowy ~586 GB, NTFS HDD )...



=> Nie znaleziono infekcji





MCShield ::Anti-Malware Tool:: http://www.mcshield.net/

>>> v 3.0.5.28 / DB: 2014.6.1.1 / Windows 7 <<<


2014-06-01 20:02:08 > Dysk H: - rozpoczęto skanowanie (SPEEDO MP3 ~941 MB, FAT32 dysk przenośny )...

>>> H:\autorun.inf > Akcja nie powiodła się. Odmowa dostępu - dostęp zablokowany przez twojego antywirusa lub aktywne malware!!!


=> Podejrzanych plików : 0/1 przemianuj.

____________________________________________

::::: Czas skanowania: 1sek ::::::::::::::::
____________________________________________

[Łowca Androidów]

OK - jeszcze raz - wypnij mp3kę.
Wyłacz antywirusa - ale nie chodzi o zamknięcie programu - wyłacz ochronę antywirusową.
Wyłacz również wszelkie programy typu antyspyware czy antymalware i podepnij ponownie ta mp3kę i daj loga.

[michu47]

MCShield ::Anti-Malware Tool:: http://www.mcshield.net/

>>> v 3.0.5.28 / DB: 2014.6.1.1 / Windows 7 <<<


2014-06-02 13:27:43 > Dysk H: - rozpoczęto skanowanie (SPEEDO MP3 ~941 MB, FAT32 dysk przenośny )...

>>> H:\autorun.inf > Podejrzany > Przemianowany. (MD5: d7fab31df7f54b750c1eb54582681c63)


=> Podejrzanych plików : 1/1 przemianuj.

____________________________________________

::::: Czas skanowania: 1sek ::::::::::::::::
____________________________________________

Proszę

[Łowca Androidów]

Program wyleczył Twoją mp3kę, ale pasowałoby dla jasności sprawdzić resztę Twojego komputera w tym celu:
Pobierz >>>FRST (x86x64)<<< zgodny z architekturą Twoejgo systemu (x64 lub x86)
Zapisz na pulpicie, uruchomprawym myszy i opcja Uruchom jako administrator -> kliknij przycisk SCAN -
Program wygeneruje dwa logi (FRST i Addition) - oba proszę załączyć na forum w [code] czy [spoiler] lub jako załącznik

[michu47]

Ale nadal nie mogę jej podłczyc zaraz przeskanuje Komputer

Dodano Dzisiaj, 13:14:

Kod: Zaznacz wszystko

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-06-2014 01
Ran by MSI (administrator) on MSI-KOMPUTER on 02-06-2014 14:12:24
Running from C:\Users\MSI\Downloads
Platform: Windows 7 Home Premium (X64) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\AvrcpService.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ESET) C:\Program Files\ESET\ESET Endpoint Security\egui.exe
() C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\OscarEditor.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIILE.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
(BinarySense, Inc.) C:\Program Files (x86)\BinarySense\HDDlife 4\HDDlifePro.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(BinarySense, Inc.) C:\Program Files (x86)\BinarySense\HDDlife 4\HDDlifePro.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\RtkBleServ.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(BinarySense, Inc.) C:\Program Files (x86)\Common Files\BinarySense\hldasvc.exe
(BinarySense, Inc.) C:\Program Files (x86)\Common Files\BinarySense\hldasvc.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\SkypePlugin.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(MyCity) C:\Program Files (x86)\MCShield\MCShieldRTM.exe
(SRWare) C:\Program Files (x86)\SRWare Iron\chrome.exe
(SRWare) C:\Program Files (x86)\SRWare Iron\chrome.exe
(SRWare) C:\Program Files (x86)\SRWare Iron\chrome.exe
(SRWare) C:\Program Files (x86)\SRWare Iron\chrome.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(SRWare) C:\Program Files (x86)\SRWare Iron\chrome.exe
() C:\Program Files (x86)\SCAR Divi 3.22\scar.exe
(SRWare) C:\Program Files (x86)\SRWare Iron\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-03-22] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13538376 2013-05-21] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [253440 2013-04-23] (Realtek Semiconductor Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-26] (NVIDIA Corporation)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2889072 2013-04-25] (ELAN Microelectronics Corp.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Endpoint Security\egui.exe [4148664 2013-10-07] (ESET)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Onet.pl AutoUpdate] => "C:\Program Files (x86)\Common Files\Onet.pl\NewAutoUpdate.exe" /updateexetsr
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3724049871-3139413189-3085514938-1000\...\Run: [OscarXG] => C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\OscarEditor.exe [3515904 2011-09-02] ()
HKU\S-1-5-21-3724049871-3139413189-3085514938-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIILE.EXE [283232 2012-02-29] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3724049871-3139413189-3085514938-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3724049871-3139413189-3085514938-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3724049871-3139413189-3085514938-1000\...\Run: [MCShield Monitor] => C:\Program Files (x86)\MCShield\mcshieldrtm.exe [650816 2014-04-11] (MyCity)
HKU\S-1-5-21-3724049871-3139413189-3085514938-1000\...\MountPoints2: {28de5e39-9e79-11e3-9755-806e6f6e6963} - D:\CDSetup.exe
HKU\S-1-5-21-3724049871-3139413189-3085514938-1000\...\MountPoints2: {b6c51db4-a2d5-11e3-8c5d-448a5b40cfd5} - F:\setup.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [245872 2013-07-30] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [201576 2013-07-30] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk
ShortcutTarget: Qualcomm Atheros Killer Network Manager.lnk -> C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe ()
Startup: C:\Users\MSI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HDDlife.lnk
ShortcutTarget: HDDlife.lnk -> C:\Program Files (x86)\BinarySense\HDDlife 4\HDDlifePro.exe (BinarySense, Inc.)
Startup: C:\Users\MSI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 01 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 02 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 03 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 04 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 16 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 01 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 02 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 03 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 04 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 16 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Tcpip\Parameters: [DhcpNameServer] 217.172.224.170 89.231.1.206
Tcpip\..\Interfaces\{5ACF7BAE-5086-4FD1-A4F1-B6E81A05EE2E}: [NameServer]8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{A441F7C3-42B8-43A8-BDC3-6FCCBF65DFF9}: [NameServer]8.8.8.8,8.8.4.4

FireFox:
========
FF ProfilePath: C:\Users\MSI\AppData\Roaming\Mozilla\Firefox\Profiles\dh6r5rih.default
FF Homepage: hxxp://www.onet.pl
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\MSI\AppData\Roaming\Mozilla\Firefox\Profiles\dh6r5rih.default\user.js
FF Extension: Rock Turner - C:\Users\MSI\AppData\Roaming\Mozilla\Firefox\Profiles\dh6r5rih.default\Extensions\firefox@rockturner.biz.xpi [2014-03-18]
FF Extension: Adblock Plus - C:\Users\MSI\AppData\Roaming\Mozilla\Firefox\Profiles\dh6r5rih.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-25]
FF Extension: FiddlerHook - C:\Program Files (x86)\Fiddler2\FiddlerHook [2014-04-24]
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2014-05-31]
FF HKLM-x32\...\Firefox\Extensions: [fiddlerhook@fiddler2.com] - C:\Program Files (x86)\Fiddler2\FiddlerHook
FF Extension: FiddlerHook - C:\Program Files (x86)\Fiddler2\FiddlerHook [2014-04-24]
FF HKLM-x32\...\Firefox\Extensions: [quiknowledge@quiknowledge.com] - C:\Program Files (x86)\Mozilla Firefox\extensions\quiknowledge@quiknowledge.com
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2014-05-31]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird
FF Extension: ESET Endpoint Security Extension - C:\Program Files\ESET\ESET Endpoint Security\Mozilla Thunderbird [2014-02-25]

==================== Services (Whitelisted) =================

R2 AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [35328 2013-04-02] (Realtek Semiconductor Corporation)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [47104 2013-04-25] ()
S3 EhttpSrv; C:\Program Files\ESET\ESET Endpoint Security\EHttpSrv.exe [42048 2013-10-07] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Endpoint Security\x86\ekrn.exe [1025584 2013-10-07] (ESET)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
S3 ESHASRV; C:\Program Files\ESET\ESET Endpoint Security\EShaSrv.exe [191368 2013-10-07] (ESET)
R2 HDDlife HDD Access service; C:\Program Files (x86)\Common Files\BinarySense\hldasvc.exe [2070792 2013-10-25] (BinarySense, Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-03-22] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-03-12] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [98560 2014-02-16] (Overwolf LTD)
R2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [503296 2013-05-16] ()
R2 RtkBleServ; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\RtkBleServ.exe [42496 2013-04-25] (Realtek Semiconductor Corporation)
S2 rqpbhevlkc64; C:\Program Files\004\rqpbhevlkc64.exe run options=01100010040000000000000000000000 sourceguid=C78087A8-C960-4464-A618-3D351DF6C0D7 [X]

==================== Drivers (Whitelisted) ====================

R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [66928 2013-05-16] (Qualcomm Atheros, Inc.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-05-22] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [219184 2013-10-25] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [185224 2013-09-09] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [155896 2013-09-09] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [198096 2013-09-09] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [40512 2013-09-09] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [59064 2013-09-09] (ESET)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-03-22] (Intel Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [165824 2013-05-16] (Qualcomm Atheros, Inc.)
R3 RtkA2dp; C:\Windows\System32\drivers\RtkA2dp.sys [177736 2013-04-18] (Realtek Semiconductor Corporation)
R3 RtkAvrcpCtrlr; C:\Windows\System32\DRIVERS\RtkAvrcpCtrlr.sys [66376 2013-04-08] (Realtek Semiconductor Corporation)
R3 RtkBtFilter; C:\Windows\System32\DRIVERS\RtkBtfilter.sys [535624 2013-03-28] (Realtek Semiconductor Corporation)
R3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [407112 2013-04-28] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [1514568 2013-05-02] (Realtek Semiconductor Corporation                           )
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [845560 2014-03-01] (Duplex Secure Ltd.)
S1 qknfd; system32\drivers\qknfd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-02 14:12 - 2014-06-02 14:12 - 00018219 _____ () C:\Users\MSI\Downloads\FRST.txt
2014-06-02 14:12 - 2014-06-02 14:12 - 00000000 ____D () C:\FRST
2014-06-02 14:11 - 2014-06-02 14:12 - 02067456 _____ (Farbar) C:\Users\MSI\Downloads\FRST64 (1).exe
2014-06-02 14:11 - 2014-06-02 14:11 - 02067456 _____ (Farbar) C:\Users\MSI\Downloads\FRST64.exe
2014-06-02 13:20 - 2014-06-02 13:20 - 00000000 ____H () C:\ProgramData\cm-lock
2014-06-01 20:01 - 2014-06-02 13:28 - 00000000 ____D () C:\ProgramData\MCShield
2014-06-01 20:01 - 2014-06-01 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCShield
2014-06-01 20:01 - 2014-06-01 20:01 - 00000000 ____D () C:\Program Files (x86)\MCShield
2014-06-01 20:00 - 2014-06-01 20:00 - 02856736 _____ (MyCity) C:\Users\MSI\Downloads\MCShield-Setup.exe
2014-06-01 16:06 - 2014-06-01 16:06 - 00000000 ____D () C:\Users\MSI\AppData\Local\Apps\2.0
2014-06-01 15:04 - 2014-06-01 15:04 - 00072257 _____ () C:\Users\MSI\Downloads\CheckUDisk_v54.rar
2014-06-01 15:03 - 2014-06-02 14:12 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-01 15:03 - 2014-06-01 15:03 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\BinarySense
2014-06-01 15:03 - 2014-06-01 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HDDlife
2014-06-01 15:03 - 2014-06-01 15:03 - 00000000 ____D () C:\ProgramData\Licenses
2014-06-01 15:03 - 2014-06-01 15:03 - 00000000 ____D () C:\Program Files (x86)\BinarySense
2014-06-01 15:00 - 2014-06-01 15:00 - 08683520 _____ () C:\Users\MSI\Downloads\HDDlifePro 4.0.195.msi
2014-06-01 09:12 - 2014-06-01 09:12 - 05553470 _____ () C:\Users\MSI\Downloads\CustomClientEditedByOsvaldo9.0.rar
2014-06-01 09:12 - 2014-06-01 09:12 - 00000000 ____D () C:\Users\MSI\Downloads\CustomClientEditedByOsvaldo9.0
2014-06-01 09:11 - 2014-06-01 09:11 - 00076463 _____ () C:\Users\MSI\Downloads\RShinyBot_v1.5 (1).scar
2014-05-31 21:32 - 2014-05-31 21:32 - 00003128 _____ () C:\Windows\System32\Tasks\{F39267AB-0A9E-4C66-9045-A209128C6ED6}
2014-05-31 10:38 - 2011-03-15 03:03 - 00083968 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_ID4BILE.DLL
2014-05-31 10:38 - 2007-04-10 01:06 - 00010752 _____ (SEIKO EPSON CORP.) C:\Windows\system32\E_GCINST.DLL
2014-05-31 10:33 - 2014-05-31 10:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2014-05-29 19:01 - 2014-06-01 09:52 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\Kamerzysta
2014-05-29 19:01 - 2014-05-29 19:01 - 00001206 _____ () C:\Users\UpdatusUser\Desktop\OnetCzat.lnk
2014-05-29 19:01 - 2014-05-29 19:01 - 00001134 _____ () C:\Users\UpdatusUser\Desktop\Kamerzysta.lnk
2014-05-29 19:01 - 2014-05-29 19:01 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\AutoUpdate
2014-05-29 19:01 - 2014-05-29 19:01 - 00000000 ____D () C:\temp
2014-05-29 19:01 - 2014-05-29 19:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kamerzysta
2014-05-29 19:01 - 2014-05-29 19:01 - 00000000 ____D () C:\Program Files (x86)\Onet
2014-05-29 19:00 - 2014-05-31 11:53 - 00000000 ____D () C:\Program Files\004
2014-05-29 19:00 - 2014-05-29 19:00 - 00003258 _____ () C:\Windows\System32\Tasks\Opera D7
2014-05-29 19:00 - 2014-05-29 19:00 - 00003258 _____ () C:\Windows\System32\Tasks\Opera D6
2014-05-29 19:00 - 2014-05-29 19:00 - 00003258 _____ () C:\Windows\System32\Tasks\Opera D5
2014-05-29 19:00 - 2014-05-29 19:00 - 00003258 _____ () C:\Windows\System32\Tasks\Opera D4
2014-05-29 19:00 - 2014-05-29 19:00 - 00001139 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-05-29 19:00 - 2014-05-29 19:00 - 00001139 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-05-29 19:00 - 2014-05-29 19:00 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\Opera Software
2014-05-29 19:00 - 2014-05-29 19:00 - 00000000 ____D () C:\Users\MSI\AppData\Local\Opera Software
2014-05-29 19:00 - 2014-05-29 19:00 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-05-29 17:33 - 2014-05-31 11:55 - 00000000 ____D () C:\Program Files (x86)\Rock Turner
2014-05-29 14:45 - 2014-05-29 19:29 - 00003718 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2014-05-29 14:45 - 2014-05-29 14:45 - 00003476 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2014-05-29 14:44 - 2014-05-29 14:44 - 00000000 ____D () C:\ProgramData\Intel(R) Update Manager
2014-05-28 14:21 - 2014-05-28 14:21 - 00001142 _____ () C:\Users\UpdatusUser\Desktop\CZATeriaKam.lnk
2014-05-28 14:21 - 2014-05-28 14:21 - 00001142 _____ () C:\Users\MSI\Desktop\CZATeriaKam.lnk
2014-05-28 14:21 - 2014-05-28 14:21 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\INTERIA.PL
2014-05-25 15:27 - 2014-05-25 17:00 - 00000000 ____D () C:\Users\MSI\Downloads\Po prostu
2014-05-25 15:27 - 2014-05-25 15:35 - 00000000 ____D () C:\Users\MSI\Downloads\[   NETEMX.PL   ]  Po prostu walcz 2
2014-05-24 18:59 - 2014-05-28 14:21 - 00000000 ____D () C:\Program Files (x86)\INTERIAPL
2014-05-24 18:59 - 2014-05-24 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\INTERIA.PL
2014-05-24 11:55 - 2014-05-24 13:00 - 00050991 _____ () C:\Users\MSI\Desktop\gra.gb1
2014-05-23 19:52 - 2014-05-24 11:16 - 00000000 ____D () C:\Users\MSI\Downloads\COD 2
2014-05-23 19:50 - 2014-05-24 13:50 - 00000000 ____D () C:\Users\MSI\Downloads\COD Black Ops
2014-05-23 15:04 - 2014-06-01 14:30 - 00001380 _____ () C:\Windows\PFRO.log
2014-05-22 18:04 - 2014-05-22 18:04 - 00000883 _____ () C:\Users\MSI\Desktop\Call of Duty Modern Warfare 4.lnk
2014-05-22 18:04 - 2014-05-22 18:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O22y Inc
2014-05-22 17:47 - 2014-05-22 17:47 - 00001954 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-05-22 17:46 - 2014-05-22 17:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-05-22 17:46 - 2014-05-22 17:46 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-05-22 17:46 - 2014-05-22 17:46 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-05-20 17:07 - 2014-05-20 17:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-20 17:07 - 2014-05-20 17:07 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-20 17:07 - 2014-05-20 17:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-20 17:07 - 2014-05-20 17:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-20 17:07 - 2014-05-20 17:07 - 00000000 ____D () C:\ProgramData\Sun
2014-05-20 17:07 - 2014-05-20 17:07 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-20 17:07 - 2014-05-20 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-20 17:07 - 2014-05-20 17:07 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-20 17:06 - 2014-05-20 17:06 - 00921512 _____ (Oracle Corporation) C:\Users\MSI\Downloads\jxpiinstall.exe
2014-05-20 14:41 - 2014-05-20 14:41 - 00147403 _____ () C:\Users\MSI\Downloads\kartymemo.zip
2014-05-20 14:31 - 2014-05-20 14:31 - 00001909 _____ () C:\Users\MSI\Desktop\Game_Maker — skrót (2).lnk
2014-05-20 14:30 - 2014-05-20 14:30 - 00000000 ____D () C:\Users\MSI\Desktop\Chase_byHuder
2014-05-18 10:39 - 2014-05-18 16:12 - 00000000 ____D () C:\Users\MSI\Downloads\Call.Of.Duty.4.Modern.Warfare.2007.POLiSH.RePACK.O22y
2014-05-18 02:10 - 2014-05-18 02:11 - 00292536 _____ () C:\Windows\Minidump\051814-21091-01.dmp
2014-05-15 20:24 - 2014-05-16 13:04 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\TeamViewer
2014-05-15 20:24 - 2014-05-15 20:24 - 00001178 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-15 20:24 - 2014-05-15 20:24 - 00001166 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-15 20:24 - 2014-05-15 20:24 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-05-15 20:22 - 2014-05-15 20:23 - 06212704 _____ (TeamViewer GmbH) C:\Users\MSI\Downloads\TeamViewer_Setup_pl.exe
2014-05-13 14:37 - 2014-05-13 14:37 - 00000987 _____ () C:\Users\UpdatusUser\Desktop\CDex.lnk
2014-05-13 14:37 - 2014-05-13 14:37 - 00000987 _____ () C:\Users\MSI\Desktop\CDex.lnk
2014-05-13 14:37 - 2014-05-13 14:37 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CDex
2014-05-13 14:37 - 2014-05-13 14:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDex
2014-05-13 14:37 - 2014-05-13 14:37 - 00000000 ____D () C:\Program Files (x86)\CDex_150
2014-05-13 14:36 - 2014-05-13 14:36 - 02000324 _____ () C:\Users\MSI\Downloads\CDex 1.51.exe
2014-05-11 08:55 - 2014-05-11 08:55 - 00003506 _____ () C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-MSI-Komputer-MSI
2014-05-11 08:55 - 2014-05-11 08:55 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-05-11 08:52 - 2014-05-11 08:52 - 00000913 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2014-05-11 08:51 - 2014-05-11 08:51 - 00000868 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2014-05-11 08:50 - 2014-05-11 08:50 - 00000887 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2014-05-11 08:50 - 2014-05-11 08:50 - 00000842 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2014-05-11 08:47 - 2014-05-11 08:47 - 00001523 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2014-05-11 08:47 - 2014-05-11 08:47 - 00000962 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2014-05-11 08:45 - 2014-05-11 08:52 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-05-10 21:11 - 2014-05-29 18:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-06 15:48 - 2014-05-06 15:48 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\EurekaLog
2014-05-03 16:14 - 2014-05-03 16:14 - 00000000 ____D () C:\Users\MSI\Downloads\RBonusMapBot_v1.3
2014-05-03 16:13 - 2014-05-03 16:13 - 00034183 _____ () C:\Users\MSI\Downloads\BM Bot 1.1.scar
2014-05-03 16:00 - 2014-05-03 16:00 - 00000000 ____D () C:\Users\MSI\Downloads\CustomClientEditedByOsvaldo4.0

==================== One Month Modified Files and Folders =======

2014-06-02 14:12 - 2014-06-02 14:12 - 00018219 _____ () C:\Users\MSI\Downloads\FRST.txt
2014-06-02 14:12 - 2014-06-02 14:12 - 00000000 ____D () C:\FRST
2014-06-02 14:12 - 2014-06-02 14:11 - 02067456 _____ (Farbar) C:\Users\MSI\Downloads\FRST64 (1).exe
2014-06-02 14:12 - 2014-06-01 15:03 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-02 14:12 - 2014-02-26 02:08 - 00000000 ____D () C:\Users\MSI\AppData\Local\Temp
2014-06-02 14:11 - 2014-06-02 14:11 - 02067456 _____ (Farbar) C:\Users\MSI\Downloads\FRST64.exe
2014-06-02 13:45 - 2014-02-25 19:35 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-02 13:30 - 2009-07-14 19:55 - 00738518 _____ () C:\Windows\system32\perfh015.dat
2014-06-02 13:30 - 2009-07-14 19:55 - 00154672 _____ () C:\Windows\system32\perfc015.dat
2014-06-02 13:30 - 2009-07-14 07:13 - 01664654 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-02 13:29 - 2014-02-25 19:51 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\TS3Client
2014-06-02 13:28 - 2014-06-01 20:01 - 00000000 ____D () C:\ProgramData\MCShield
2014-06-02 13:27 - 2009-07-14 06:45 - 00017408 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-02 13:27 - 2009-07-14 06:45 - 00017408 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-02 13:22 - 2014-04-04 06:19 - 00033986 _____ () C:\Windows\setupact.log
2014-06-02 13:20 - 2014-06-02 13:20 - 00000000 ____H () C:\ProgramData\cm-lock
2014-06-02 13:20 - 2014-04-03 21:35 - 01693708 _____ () C:\Windows\WindowsUpdate.log
2014-06-02 13:20 - 2014-02-25 19:47 - 00007856 _____ () C:\Users\MSI\AppData\Local\BTServer.log
2014-06-02 13:20 - 2014-02-25 19:23 - 00000000 ____D () C:\ProgramData\Realtek
2014-06-02 13:20 - 2014-02-25 19:19 - 00000000 ____D () C:\ProgramData\Bigfoot Networks
2014-06-02 13:19 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-01 20:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-01 20:01 - 2014-06-01 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCShield
2014-06-01 20:01 - 2014-06-01 20:01 - 00000000 ____D () C:\Program Files (x86)\MCShield
2014-06-01 20:00 - 2014-06-01 20:00 - 02856736 _____ (MyCity) C:\Users\MSI\Downloads\MCShield-Setup.exe
2014-06-01 16:06 - 2014-06-01 16:06 - 00000000 ____D () C:\Users\MSI\AppData\Local\Apps\2.0
2014-06-01 15:04 - 2014-06-01 15:04 - 00072257 _____ () C:\Users\MSI\Downloads\CheckUDisk_v54.rar
2014-06-01 15:03 - 2014-06-01 15:03 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\BinarySense
2014-06-01 15:03 - 2014-06-01 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HDDlife
2014-06-01 15:03 - 2014-06-01 15:03 - 00000000 ____D () C:\ProgramData\Licenses
2014-06-01 15:03 - 2014-06-01 15:03 - 00000000 ____D () C:\Program Files (x86)\BinarySense
2014-06-01 15:03 - 2014-02-26 02:08 - 00000000 ___RD () C:\Users\MSI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-01 15:00 - 2014-06-01 15:00 - 08683520 _____ () C:\Users\MSI\Downloads\HDDlifePro 4.0.195.msi
2014-06-01 14:32 - 2014-02-27 21:05 - 00000000 ____D () C:\Users\MSI\AppData\Local\Adobe
2014-06-01 14:30 - 2014-05-23 15:04 - 00001380 _____ () C:\Windows\PFRO.log
2014-06-01 09:52 - 2014-05-29 19:01 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\Kamerzysta
2014-06-01 09:12 - 2014-06-01 09:12 - 05553470 _____ () C:\Users\MSI\Downloads\CustomClientEditedByOsvaldo9.0.rar
2014-06-01 09:12 - 2014-06-01 09:12 - 00000000 ____D () C:\Users\MSI\Downloads\CustomClientEditedByOsvaldo9.0
2014-06-01 09:11 - 2014-06-01 09:11 - 00076463 _____ () C:\Users\MSI\Downloads\RShinyBot_v1.5 (1).scar
2014-05-31 21:32 - 2014-05-31 21:32 - 00003128 _____ () C:\Windows\System32\Tasks\{F39267AB-0A9E-4C66-9045-A209128C6ED6}
2014-05-31 21:32 - 2014-04-12 16:43 - 00000000 ____D () C:\Program Files (x86)\IPTool
2014-05-31 21:32 - 2014-03-22 17:37 - 00000000 ____D () C:\Program Files (x86)\PowerDataRecovery
2014-05-31 11:55 - 2014-05-29 17:33 - 00000000 ____D () C:\Program Files (x86)\Rock Turner
2014-05-31 11:53 - 2014-05-29 19:00 - 00000000 ____D () C:\Program Files\004
2014-05-31 10:39 - 2014-03-23 12:01 - 00000000 ____D () C:\Program Files (x86)\EPSON Software
2014-05-31 10:39 - 2014-03-08 12:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2014-05-31 10:33 - 2014-05-31 10:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2014-05-31 08:47 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-05-31 07:51 - 2014-02-25 19:24 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Temp
2014-05-29 19:29 - 2014-05-29 14:45 - 00003718 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2014-05-29 19:29 - 2014-02-25 19:11 - 00000000 ____D () C:\ProgramData\Intel
2014-05-29 19:01 - 2014-05-29 19:01 - 00001206 _____ () C:\Users\UpdatusUser\Desktop\OnetCzat.lnk
2014-05-29 19:01 - 2014-05-29 19:01 - 00001134 _____ () C:\Users\UpdatusUser\Desktop\Kamerzysta.lnk
2014-05-29 19:01 - 2014-05-29 19:01 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\AutoUpdate
2014-05-29 19:01 - 2014-05-29 19:01 - 00000000 ____D () C:\temp
2014-05-29 19:01 - 2014-05-29 19:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kamerzysta
2014-05-29 19:01 - 2014-05-29 19:01 - 00000000 ____D () C:\Program Files (x86)\Onet
2014-05-29 19:01 - 2014-02-26 02:08 - 00000000 ____D () C:\Users\MSI
2014-05-29 19:00 - 2014-05-29 19:00 - 00003258 _____ () C:\Windows\System32\Tasks\Opera D7
2014-05-29 19:00 - 2014-05-29 19:00 - 00003258 _____ () C:\Windows\System32\Tasks\Opera D6
2014-05-29 19:00 - 2014-05-29 19:00 - 00003258 _____ () C:\Windows\System32\Tasks\Opera D5
2014-05-29 19:00 - 2014-05-29 19:00 - 00003258 _____ () C:\Windows\System32\Tasks\Opera D4
2014-05-29 19:00 - 2014-05-29 19:00 - 00001139 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-05-29 19:00 - 2014-05-29 19:00 - 00001139 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-05-29 19:00 - 2014-05-29 19:00 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\Opera Software
2014-05-29 19:00 - 2014-05-29 19:00 - 00000000 ____D () C:\Users\MSI\AppData\Local\Opera Software
2014-05-29 19:00 - 2014-05-29 19:00 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-05-29 18:59 - 2014-05-10 21:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-29 14:45 - 2014-05-29 14:45 - 00003476 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2014-05-29 14:45 - 2014-02-25 19:10 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-05-29 14:44 - 2014-05-29 14:44 - 00000000 ____D () C:\ProgramData\Intel(R) Update Manager
2014-05-29 14:44 - 2014-02-25 19:11 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-05-28 15:23 - 2014-02-25 19:35 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-28 15:23 - 2014-02-25 19:35 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-28 15:23 - 2014-02-25 19:35 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-28 14:21 - 2014-05-28 14:21 - 00001142 _____ () C:\Users\UpdatusUser\Desktop\CZATeriaKam.lnk
2014-05-28 14:21 - 2014-05-28 14:21 - 00001142 _____ () C:\Users\MSI\Desktop\CZATeriaKam.lnk
2014-05-28 14:21 - 2014-05-28 14:21 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\INTERIA.PL
2014-05-28 14:21 - 2014-05-24 18:59 - 00000000 ____D () C:\Program Files (x86)\INTERIAPL
2014-05-25 19:11 - 2014-02-26 16:02 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\uTorrent
2014-05-25 17:00 - 2014-05-25 15:27 - 00000000 ____D () C:\Users\MSI\Downloads\Po prostu
2014-05-25 15:35 - 2014-05-25 15:27 - 00000000 ____D () C:\Users\MSI\Downloads\[   NETEMX.PL   ]  Po prostu walcz 2
2014-05-24 18:59 - 2014-05-24 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\INTERIA.PL
2014-05-24 16:02 - 2014-03-23 19:44 - 00000000 ____D () C:\Users\MSI\AppData\Local\Google
2014-05-24 16:02 - 2014-03-23 19:44 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-24 13:50 - 2014-05-23 19:50 - 00000000 ____D () C:\Users\MSI\Downloads\COD Black Ops
2014-05-24 13:06 - 2014-03-03 19:43 - 00000000 ____D () C:\Users\MSI\Desktop\Szkoła
2014-05-24 13:00 - 2014-05-24 11:55 - 00050991 _____ () C:\Users\MSI\Desktop\gra.gb1
2014-05-24 11:16 - 2014-05-23 19:52 - 00000000 ____D () C:\Users\MSI\Downloads\COD 2
2014-05-22 18:04 - 2014-05-22 18:04 - 00000883 _____ () C:\Users\MSI\Desktop\Call of Duty Modern Warfare 4.lnk
2014-05-22 18:04 - 2014-05-22 18:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O22y Inc
2014-05-22 17:47 - 2014-05-22 17:47 - 00001954 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-05-22 17:47 - 2014-05-22 17:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-05-22 17:46 - 2014-05-22 17:46 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-05-22 17:46 - 2014-05-22 17:46 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-05-22 17:30 - 2014-02-27 15:45 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\DAEMON Tools Lite
2014-05-20 17:07 - 2014-05-20 17:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-05-20 17:07 - 2014-05-20 17:07 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-05-20 17:07 - 2014-05-20 17:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-05-20 17:07 - 2014-05-20 17:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-20 17:07 - 2014-05-20 17:07 - 00000000 ____D () C:\ProgramData\Sun
2014-05-20 17:07 - 2014-05-20 17:07 - 00000000 ____D () C:\ProgramData\Oracle
2014-05-20 17:07 - 2014-05-20 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-05-20 17:07 - 2014-05-20 17:07 - 00000000 ____D () C:\Program Files (x86)\Java
2014-05-20 17:06 - 2014-05-20 17:06 - 00921512 _____ (Oracle Corporation) C:\Users\MSI\Downloads\jxpiinstall.exe
2014-05-20 14:48 - 2014-03-29 09:42 - 00000000 ____D () C:\Users\MSI\GameMaker 8.1
2014-05-20 14:41 - 2014-05-20 14:41 - 00147403 _____ () C:\Users\MSI\Downloads\kartymemo.zip
2014-05-20 14:31 - 2014-05-20 14:31 - 00001909 _____ () C:\Users\MSI\Desktop\Game_Maker — skrót (2).lnk
2014-05-20 14:30 - 2014-05-20 14:30 - 00000000 ____D () C:\Users\MSI\Desktop\Chase_byHuder
2014-05-20 14:29 - 2014-02-25 19:47 - 00000000 ____D () C:\Users\MSI\Documents\My Bluetooth
2014-05-18 16:12 - 2014-05-18 10:39 - 00000000 ____D () C:\Users\MSI\Downloads\Call.Of.Duty.4.Modern.Warfare.2007.POLiSH.RePACK.O22y
2014-05-18 02:11 - 2014-05-18 02:10 - 00292536 _____ () C:\Windows\Minidump\051814-21091-01.dmp
2014-05-18 02:10 - 2014-04-13 15:49 - 770783290 _____ () C:\Windows\MEMORY.DMP
2014-05-18 02:10 - 2014-02-28 23:55 - 00000000 ____D () C:\Windows\Minidump
2014-05-18 02:08 - 2014-03-22 11:59 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-05-16 13:04 - 2014-05-15 20:24 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\TeamViewer
2014-05-16 13:04 - 2009-07-14 06:45 - 05080992 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-15 20:34 - 2014-02-25 19:12 - 00123600 _____ () C:\Users\MSI\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-15 20:24 - 2014-05-15 20:24 - 00001178 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-15 20:24 - 2014-05-15 20:24 - 00001166 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-15 20:24 - 2014-05-15 20:24 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-05-15 20:23 - 2014-05-15 20:22 - 06212704 _____ (TeamViewer GmbH) C:\Users\MSI\Downloads\TeamViewer_Setup_pl.exe
2014-05-14 15:47 - 2014-03-12 15:45 - 17938608 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-05-13 14:37 - 2014-05-13 14:37 - 00000987 _____ () C:\Users\UpdatusUser\Desktop\CDex.lnk
2014-05-13 14:37 - 2014-05-13 14:37 - 00000987 _____ () C:\Users\MSI\Desktop\CDex.lnk
2014-05-13 14:37 - 2014-05-13 14:37 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CDex
2014-05-13 14:37 - 2014-05-13 14:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDex
2014-05-13 14:37 - 2014-05-13 14:37 - 00000000 ____D () C:\Program Files (x86)\CDex_150
2014-05-13 14:36 - 2014-05-13 14:36 - 02000324 _____ () C:\Users\MSI\Downloads\CDex 1.51.exe
2014-05-12 13:45 - 2014-02-27 21:04 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-11 08:55 - 2014-05-11 08:55 - 00003506 _____ () C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-MSI-Komputer-MSI
2014-05-11 08:55 - 2014-05-11 08:55 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-05-11 08:55 - 2014-02-25 19:38 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\Adobe
2014-05-11 08:52 - 2014-05-11 08:52 - 00000913 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2014-05-11 08:52 - 2014-05-11 08:45 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-05-11 08:51 - 2014-05-11 08:51 - 00000868 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2014-05-11 08:50 - 2014-05-11 08:50 - 00000887 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2014-05-11 08:50 - 2014-05-11 08:50 - 00000842 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2014-05-11 08:47 - 2014-05-11 08:47 - 00001523 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2014-05-11 08:47 - 2014-05-11 08:47 - 00000962 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2014-05-11 08:47 - 2014-02-27 21:04 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-11 08:34 - 2014-02-25 19:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-06 15:48 - 2014-05-06 15:48 - 00000000 ____D () C:\Users\MSI\AppData\Roaming\EurekaLog
2014-05-03 16:14 - 2014-05-03 16:14 - 00000000 ____D () C:\Users\MSI\Downloads\RBonusMapBot_v1.3
2014-05-03 16:13 - 2014-05-03 16:13 - 00034183 _____ () C:\Users\MSI\Downloads\BM Bot 1.1.scar
2014-05-03 16:00 - 2014-05-03 16:00 - 00000000 ____D () C:\Users\MSI\Downloads\CustomClientEditedByOsvaldo4.0
2014-05-03 09:10 - 2014-05-02 15:45 - 00000000 ____D () C:\Users\MSI\Downloads\[WWW.MAXI-TORRENTS.PL] Europa Report (2013)
2014-05-03 09:09 - 2014-05-02 15:44 - 00000000 ____D () C:\Users\MSI\Downloads\[WWW.SKAYTORRENT.PL] Southland Tales 2006 PL

Files to move or delete:
====================
C:\ProgramData\pdfdoc2.dll


Some content of TEMP:
====================
C:\Users\MSI\AppData\Local\Temp\nsz963.tmp.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-06-01 17:09

==================== End Of Log ============================

Dodano Dzisiaj, 13:14:

Kod: Zaznacz wszystko

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-06-2014 01
Ran by MSI at 2014-06-02 14:12:45
Running from C:\Users\MSI\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: ESET Endpoint Security 5.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Endpoint Security 5.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: Zapora osobista (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

«Metro. Last Light - Complete Edition» v.1.0.0.14 (HKLM-x32\...\«Metro. Last Light - Complete Edition»_is1) (Version:  - Deep Silver)
µTorrent (HKCU\...\uTorrent) (Version: 3.4.1.30888 - BitTorrent Inc.)
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-A95000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)
Aktualizacje NVIDIA 7.2.17 (Version: 7.2.17 - NVIDIA Corporation) Hidden
Call of Duty Modern Warfare 4 (HKLM-x32\...\Call of Duty Modern Warfare 4_is1) (Version: Call of Duty Modern Warfare 4 - )
CCleaner (HKLM\...\CCleaner) (Version: 4.11 - Piriform)
CDex extraction audio (HKLM-x32\...\CDex) (Version:  - )
Corel Graphics - Windows Shell Extension (HKLM-x32\...\_{72DB27D3-FE05-4227-AF5A-11CD101ECF09}) (Version: 15.1.0.588 - Corel Corporation)
Corel Graphics - Windows Shell Extension (x32 Version: 15.1.588 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Capture (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Common (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Connect (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Custom Data (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Draw (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Filters (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - FontNav (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - IPM (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - PHOTO-PAINT (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Photozoom Plugin (x32 Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - PL (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Redist (x32 Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Setup Files (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - VBA (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - VideoBrowser (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - VSTA (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Windows Shell Extension 64 Bit (Version: 15.1.588 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - WT (x32 Version: 15.1 -  Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 (x32 Version: 15.1 - Corel Corporation) Hidden
CorelDRAW(R) Graphics Suite X5 (HKLM-x32\...\_{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}) (Version: 15.1.0.588 - Corel Corporation)
CZATeriaKam 2.6.7 (HKLM-x32\...\CZATeriaKam) (Version: 2.6.7 - INTERIA.PL)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.2.0 - SEIKO EPSON CORPORATION)
Epson E-Web Print (HKLM-x32\...\{CEC98C2A-9ED5-49DA-9F3A-92434E0A4FA3}) (Version: 1.19.0000 - SEIKO EPSON CORPORATION)
EPSON Printer Finder (HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
ESET Endpoint Security (HKLM\...\{293963CD-7331-40E6-BC86-DC17B885658B}) (Version: 5.0.2225.1 - ESET, spol. s r.o.)
ETDWare PS/2-X64 11.13.3.3_WHQL (HKLM\...\Elantech) (Version: 11.13.3.3 - ELAN Microelectronic Corp.)
Fiddler (HKLM-x32\...\Fiddler2) (Version: 4.4.8.0 - Telerik)
HDDlife Pro 4.0 (HKLM-x32\...\{15A1B712-EFA9-46D4-BE87-F2D92A9116C3}) (Version: 4.0.195 - BinarySense Inc.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3272 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.5.0.1066 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.5.0.1066 - Intel Corporation) Hidden
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Kamerzysta (deinstalacja) (HKLM-x32\...\Kamerzysta) (Version:  - )
K-Lite Codec Pack 10.4.5 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.4.5 - )
MCShield ::Anti-Malware Tool:: (HKLM-x32\...\MCShield) (Version: 3.0.5.28 - MyCity)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Polish) 2007 (Version: 12.0.4518.1020 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Mozilla Firefox 29.0.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 pl)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
NVIDIA Install Application (Version: 2.1002.131.854 - NVIDIA Corporation) Hidden
NVIDIA Optimus 7.2.17 (Version: 7.2.17 - NVIDIA Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 312.29 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 312.29 - NVIDIA Corporation)
NVIDIA Update Components (Version: 7.2.17 - NVIDIA Corporation) Hidden
Odinstaluj drukarkę EPSON XP-205 207 Series (HKLM\...\EPSON XP-205 207 Series) (Version:  - SEIKO EPSON Corporation)
Ontrack EasyRecovery Professional (HKLM-x32\...\{668CC71A-C2AD-4D56-866D-CF300BD1D5BE}_is1) (Version: 11.0.2.0 - Kroll Ontrack Inc.)
OpenOffice.org 3.4.1 (HKLM-x32\...\{18192D3F-5537-4560-AD89-D695F72AF91D}) (Version: 3.41.9593 - Apache Software Foundation)
Opera Stable 21.0.1432.67 (HKLM-x32\...\Opera 21.0.1432.67) (Version: 21.0.1432.67 - Opera Software ASA)
Overwolf (HKLM-x32\...\{FE8E927E-8099-4C6B-A337-1CAB00E213C7}) (Version: 0.50.310 - Overwolf)
Panel sterowania NVIDIA 312.29 (Version: 312.29 - NVIDIA Corporation) Hidden
PAP 4.0 (HKLM-x32\...\PAP 4.0_is1) (Version:  - )
PAP project files (HKLM-x32\...\PAP project files_is1) (Version:  - )
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PhotoStage Slideshow Producer (HKLM-x32\...\PhotoStage) (Version: 2.41 - NCH Software)
POV-Ray for Windows v3.7 (HKCU\...\POV-Ray for Windows v3.7) (Version: 3.7 - Persistence of Vision Raytracer Pty. Ltd.)
Qualcomm Atheros Killer Network Manager (HKLM-x32\...\InstallShield_{DF446558-ADF7-4884-9B2D-281979CCE71F}) (Version: 6.1.0.596 - Qualcomm Atheros)
Qualcomm Atheros Killer Network Manager (Version: 6.1.0.596 - Qualcomm Atheros) Hidden
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.728.728.042813 - REALTEK Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.21228 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6914 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0212 - REALTEK Semiconductor Corp.)
SCAR Divi CDE 3.22 (HKLM-x32\...\SCAR Divi 3.22_is1) (Version:  - Frédéric Hannes)
Software Updater (HKLM-x32\...\{C09D747A-BD47-42A9-915E-CEB6B1BB7C11}) (Version: 4.2.7 - SEIKO EPSON CORPORATION)
SRWare Iron wersja SRWare Iron 32.0.1750.1 (HKLM-x32\...\{C59CF2CE-B302-4833-AA35-E0E07D8EBC52}_is1) (Version: SRWare Iron 32.0.1750.1 - SRWare)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.50 - Ghisler Software GmbH)
UltraISO Premium V9.53 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Visual Basic for Applications (R) Core - English (x32 Version: 6.4.99.69 - Microsoft Corporation) Hidden
Visual Basic for Applications (R) Core (x32 Version: 6.4.99.69 - Microsoft Corporation) Hidden
WinRAR 5.01 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Wireless 5-Mode Oscar Editor (HKLM-x32\...\InstallShield_{02DABD91-7EB6-4168-B596-3FB9DCA34BAB}) (Version: 11.09.0002 - Nazwa firmy)
Wireless 5-Mode Oscar Editor (x32 Version: 11.09.0002 - Nazwa firmy) Hidden

==================== Restore Points  =========================

02-05-2014 17:42:07 Zaplanowany punkt kontrolny
17-05-2014 23:34:50 Zaplanowany punkt kontrolny
20-05-2014 15:06:59 Installed Java 7 Update 55
22-05-2014 15:40:09 Instalacja pakietu sterownika urządzenia: DT Soft Ltd Urządzenia systemowe
22-05-2014 15:41:50 Instalacja pakietu sterownika urządzenia: DT Soft Ltd Urządzenia systemowe
22-05-2014 15:42:19 Instalacja pakietu sterownika urządzenia: DT Soft Ltd Urządzenia systemowe
22-05-2014 15:46:26 Instalacja pakietu sterownika urządzenia: DT Soft Ltd Urządzenia systemowe
31-05-2014 08:33:04 Installed Software Updater
31-05-2014 08:38:28 Instalacja pakietu sterownika urządzenia: EPSON Drukarki
01-06-2014 13:02:46 Installed HDDlife Pro 4.0

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {041B87A3-3AEA-4DD1-85BA-DC53E785A462} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {2CDE78CA-F868-496F-8CF1-6A42CD67AB37} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-02-20] (Piriform Ltd)
Task: {38856E60-4677-4F8C-8A8E-2EC48D68355F} - System32\Tasks\{20511420-7E88-497E-A291-F3EA42C05650} => C:\Users\MSI\Downloads\Civilization II\Civilization II\CIV2.EXE
Task: {6A560630-B131-49DA-8C50-D4B9AE933DB1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-28] (Adobe Systems Incorporated)
Task: {7D65D069-B56A-4490-8AB7-E9A250465BB9} - System32\Tasks\AdobeAAMUpdater-1.0-MSI-Komputer-MSI => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {8C860637-0B8B-4498-9023-7190110129B8} - System32\Tasks\Opera D5 => C:\Program Files (x86)\Opera\launcher.exe [2014-05-12] (Opera Software)
Task: {901263FA-E4AC-4A91-88A4-9046B42F702D} - System32\Tasks\{091FFF00-4F73-45D3-8F37-AFBB2CC7A7C7} => C:\Users\MSI\Downloads\Civilization II - Multiplayer Gold Edition\Civilization II\Civilization II Multiplayer Gold Edition\civ2.exe
Task: {B3432BA2-C28A-4F61-84EC-2FF853FC9F66} - System32\Tasks\{48A34896-119E-4199-B108-FFBD703DE14B} => C:\Users\MSI\Downloads\Civilization II\Civilization II\CIV2.EXE
Task: {D591F407-F201-492F-A762-CE8ECFF00BF9} - System32\Tasks\Opera D4 => C:\Program Files (x86)\Opera\launcher.exe [2014-05-12] (Opera Software)
Task: {DAD48ECC-BB1D-4754-80E3-3375C61EEC8A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {F512974D-3D6F-46E6-9836-8BB7BD2C09FA} - System32\Tasks\Opera D7 => C:\Program Files (x86)\Opera\launcher.exe [2014-05-12] (Opera Software)
Task: {FE3A97D5-F601-4A52-8071-67A221B200B0} - System32\Tasks\Opera D6 => C:\Program Files (x86)\Opera\launcher.exe [2014-05-12] (Opera Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-02-25 19:23 - 2013-07-30 21:39 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-02-27 21:15 - 2005-03-12 10:07 - 00087040 _____ () C:\Windows\System32\pdfmonnt.dll
2014-02-25 19:23 - 2013-04-25 17:32 - 00047104 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
2011-09-02 10:05 - 2011-09-02 10:05 - 03515904 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\OscarEditor.exe
2013-05-16 18:30 - 2013-05-16 18:30 - 00554496 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
2011-05-09 21:46 - 2011-05-09 21:46 - 02760192 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\QtCore4.dll
2011-05-09 21:56 - 2011-05-09 21:56 - 09856000 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\QtGui4.dll
2011-05-09 21:48 - 2011-05-09 21:48 - 00990720 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\QtNetwork4.dll
2011-05-09 21:47 - 2011-05-09 21:47 - 00416256 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\QtXml4.dll
2013-05-16 18:30 - 2013-05-16 18:30 - 00217600 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFCommon.dll
2011-05-10 13:32 - 2011-05-10 13:32 - 00731648 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\qwt5.dll
2013-05-16 18:30 - 2013-05-16 18:30 - 00404992 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modApplications.dll
2013-05-16 18:30 - 2013-05-16 18:30 - 00036864 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modFeatures.dll
2013-05-16 18:30 - 2013-05-16 18:30 - 00025088 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modFraps.dll
2013-05-16 18:30 - 2013-05-16 18:30 - 00240128 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modGraph.dll
2013-05-16 18:30 - 2013-05-16 18:30 - 00062464 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modlcd.dll
2013-05-16 18:30 - 2013-05-16 18:30 - 00291328 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modNetwork.dll
2013-05-16 18:30 - 2013-05-16 18:30 - 00184832 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modNpu.dll
2013-05-16 18:30 - 2013-05-16 18:30 - 00211456 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modOptions.dll
2013-05-16 18:30 - 2013-05-16 18:30 - 00064000 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modOverview.dll
2013-05-16 18:30 - 2013-05-16 18:30 - 00317440 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\plugins\modSystemInfo.dll
2013-05-16 18:30 - 2013-05-16 18:30 - 00503296 _____ () C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
2014-02-25 19:23 - 2013-04-09 15:42 - 00265728 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\SkypePlugin.exe
2014-03-15 20:14 - 2014-03-15 20:14 - 00173568 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2014-03-15 20:14 - 2014-03-15 20:14 - 01080832 _____ () C:\Program Files\TeamSpeak 3 Client\platforms\qwindows.dll
2014-03-15 20:14 - 2014-03-15 20:14 - 00833024 _____ () C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2013-10-23 14:15 - 2014-03-15 20:14 - 00102344 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2013-10-23 14:15 - 2014-03-15 20:14 - 00108488 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2014-03-15 20:14 - 2014-03-15 20:14 - 00030208 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qgif.dll
2014-03-15 20:14 - 2014-03-15 20:14 - 00233984 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg.dll
2013-10-23 14:15 - 2014-03-15 20:14 - 00563656 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2013-10-23 14:15 - 2014-03-15 20:14 - 00577480 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-03-15 20:14 - 2014-03-15 20:14 - 00159232 _____ () C:\Program Files\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll
2014-02-25 20:48 - 2009-11-11 13:45 - 01771008 _____ () C:\Program Files (x86)\SCAR Divi 3.22\scar.exe
2010-12-02 18:56 - 2010-12-02 18:56 - 00815104 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\Data\XG\Forms\OSD_Text\OSD_Text.dll
2011-01-09 21:45 - 2011-01-09 21:45 - 00088064 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\DLL\DLL_MouseDeviceManager.dll
2011-04-06 17:06 - 2011-04-06 17:06 - 00067072 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\DLL\DLL_PenSuit.dll
2011-06-22 11:54 - 2011-06-22 11:54 - 02328064 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\Data\XG\Forms\ScreenCapture\ScreenCapture.dll
2011-03-21 20:33 - 2011-03-21 20:33 - 00999424 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\Data\XG\Forms\TrayIconWebAdvertisement\TrayIconWebAdvertisement.dll
2011-05-20 17:52 - 2011-05-20 17:52 - 00901632 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\Data\XG\Forms\ProfileHint\ProfileHint.dll
2010-12-03 15:43 - 2010-12-03 15:43 - 00943104 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\Data\XG\Forms\KeySettingRemind\KeySettingRemind.dll
2010-09-20 15:18 - 2010-09-20 15:18 - 00085504 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\DLL\DLL_ZoomControl.dll
2010-09-20 15:18 - 2010-09-20 15:18 - 00054272 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\DLL\DLL_ScrollbarControl.dll
2011-04-12 16:14 - 2011-04-12 16:14 - 00063488 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\DLL\DLL_AnalyzeGesturesInRight.dll
2010-11-01 21:16 - 2010-11-01 21:16 - 00062976 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\DLL\DLL_AnalyzeGesturesInOne.dll
2011-08-10 14:43 - 2011-08-10 14:43 - 00118272 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\DLL\DLL_Wheel4D.dll
2011-06-24 18:31 - 2011-06-24 18:31 - 00891392 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\Data\XG\Forms\KeyboardLEDForm\KeyboardLEDForm.dll
2010-03-31 19:44 - 2010-03-31 19:44 - 00516096 _____ () C:\Program Files (x86)\Wireless 5-Mode Oscar Editor\Data\XG\Forms\MouseTextForm\MouseTextForm.dll
2011-08-17 16:04 - 2011-08-17 16:04 - 00040960 _____ () C:\Program Files (x86)\BinarySense\HDDlife 4\laRTLu.dll
2013-01-18 14:20 - 2013-01-18 14:20 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2013-01-18 14:20 - 2013-01-18 14:20 - 00170496 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxslt.dll
2014-02-25 19:11 - 2013-03-12 14:19 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-02-25 21:49 - 2014-01-30 00:38 - 00902144 _____ () C:\Program Files (x86)\SRWare Iron\libglesv2.dll
2014-02-25 21:49 - 2014-01-30 00:38 - 00102912 _____ () C:\Program Files (x86)\SRWare Iron\libegl.dll
2014-02-25 21:49 - 2014-01-30 00:52 - 00883200 _____ () C:\Program Files (x86)\SRWare Iron\ffmpegsumo.dll
2014-05-14 15:47 - 2014-05-14 16:07 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:55B41E6A

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: qknfd
Description: qknfd
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: qknfd
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Teredo Tunneling Pseudo-Interface
Description: Karta tunelowania Teredo firmy Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/02/2014 01:51:29 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (540) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546.

Error: (06/02/2014 01:51:29 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (540) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546.

Error: (06/02/2014 01:51:29 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (540) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546.

Error: (06/02/2014 01:51:29 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (540) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546.

Error: (06/02/2014 01:21:29 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (540) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546.

Error: (06/02/2014 01:21:29 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (540) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546.

Error: (06/02/2014 01:21:29 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (540) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546.

Error: (06/02/2014 01:21:29 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (540) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546.

Error: (06/02/2014 01:20:45 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (540) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546.

Error: (06/02/2014 01:20:45 PM) (Source: ESENT) (EventID: 412) (User: )
Description: wuaueng.dll (540) SUS20ClientDataStore: Nie można odczytać nagłówka pliku dziennika C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log. Błąd -546.


System errors:
=============
Error: (06/02/2014 01:27:10 PM) (Source: Disk) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk1\DR28.

Error: (06/02/2014 01:26:04 PM) (Source: Disk) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk1\DR21.

Error: (06/02/2014 01:24:12 PM) (Source: Disk) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk1\DR11.

Error: (06/02/2014 01:23:33 PM) (Source: Disk) (EventID: 11) (User: )
Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk1\DR7.

Error: (06/02/2014 01:20:26 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Nie można załadować następujących sterowników startu rozruchowego lub systemowego:
qknfd
sptd

Error: (06/02/2014 01:20:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi rqpbhevlkc64 z powodu następującego błędu:
%%2

Error: (06/02/2014 01:20:09 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Usługa HDDlife HDD Access service zakończyła działanie; wystąpił następujący błąd:
%%-2147417831

Error: (06/02/2014 01:19:42 PM) (Source: sptd) (EventID: 4) (User: )
Description: Sterownik wykrył błąd wewnętrzny w swoich strukturach danych dla .

Error: (06/02/2014 08:01:14 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Nie można załadować następujących sterowników startu rozruchowego lub systemowego:
qknfd
sptd

Error: (06/02/2014 08:01:08 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi rqpbhevlkc64 z powodu następującego błędu:
%%2


Microsoft Office Sessions:
=========================
Error: (02/27/2014 09:08:20 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1071 seconds with 60 seconds of active time.  This session ended with a crash.


==================== Memory info ===========================

Percentage of memory in use: 28%
Total physical RAM: 12198.08 MB
Available physical RAM: 8755.72 MB
Total Pagefile: 24394.31 MB
Available Pagefile: 20709.18 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:343.71 GB) (Free:252.41 GB) NTFS
Drive e: (Nowy) (Fixed) (Total:585.94 GB) (Free:542.4 GB) NTFS
Drive g: (COD4b) (CDROM) (Total:1.62 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 057BC308)
Partition 1: (Active) - (Size=2 GB) - (Type=0B)
Partition 2: (Not Active) - (Size=344 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=586 GB) - (Type=07 NTFS)

==================== End Of Log ============================

[Łowca Androidów]

Pobierz plik fixlist.txt z załącznika i zapisz obok FRST
Uruchom ponownie (jako administrator) program FRST i tym razam kliknij przycisk FIX
Pokaż raport po fixie - fixlog

DODATKOWO:

Pobierz >>>AdwCleaner<<<
Uruchom Jako administrator -> po uruchomieniu klikamy przycisk akceptujący umowę (ten z lewej).
Teraz kliknij przycisk Szukaj, a po zakończeniu skanowania przycisk Usuń - nastąpi ponowne uruchomienie komputera.
Po ponownym uruchomieniu wyświetli się log - podaj go tu na forum w [code], [spoiler] lub jako załącznik.

Pobierz >>>Junkware Removal Tool (JRT)<<<.
Uruchom i poczekaj cierpliwie.
Po ukończeniu pojawi się raport - załącz go tu na forum
w [code], [spoiler] lub jako załącznik

[michu47]

Kod: Zaznacz wszystko

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-06-2014
Ran by MSI at 2014-06-03 14:13:03 Run:1
Running from C:\Users\MSI\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
S2 rqpbhevlkc64; C:\Program Files\004\rqpbhevlkc64.exe run options=01100010040000000000000000000000 sourceguid=C78087A8-C960-4464-A618-3D351DF6C0D7
C:\Program Files\004
C:\ProgramData\pdfdoc2.dll
C:\Users\MSI\AppData\Local\Temp\nsz963.tmp.exe
S1 qknfd; system32\drivers\qknfd.sys [X]
c:\windows\system32\drivers\qknfd.sys
*****************

rqpbhevlkc64 => Service deleted successfully.
C:\Program Files\004 => Moved successfully.
C:\ProgramData\pdfdoc2.dll => Moved successfully.
C:\Users\MSI\AppData\Local\Temp\nsz963.tmp.exe => Moved successfully.
qknfd => Service deleted successfully.
"c:\windows\system32\drivers\qknfd.sys" => File/Directory not found.

==== End of Fixlog ====

Dodano Dzisiaj, 13:18:

Kod: Zaznacz wszystko

# AdwCleaner v3.211 - Log utworzony 03/06/2014 o 14:15:40
# Aktualizacja 26/05/2014 przez Xplode
# System operacyjny : Windows 7 Home Premium  (64 bits)
# Użytkownik : MSI - MSI-KOMPUTER
# Ścieżka : C:\Users\MSI\Downloads\adwcleaner_3.211.exe
# Opcja : Usuń

***** [ Usługi ] *****

[#] Usługa Usunięto : qknfd

***** [ Pliki / Foldery ] *****

Plik Usunięto : C:\Users\MSI\AppData\Roaming\Mozilla\Firefox\Profiles\dh6r5rih.default\user.js

***** [ Skróty ] *****


***** [ Rejestr ] *****

Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Klucz Usunięto : HKLM\SOFTWARE\Classes\CLSID\{10AD2C61-0898-4348-8600-14A342F22AC3}
Klucz Usunięto : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Klucz Usunięto : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Klucz Usunięto : HKLM\SOFTWARE\Classes\CLSID\{6F0D3DEC-9246-4B6F-A5E3-C1C169493EEF}
Klucz Usunięto : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Klucz Usunięto : HKCU\Software\InstallCore
Klucz Usunięto : HKCU\Software\AppDataLow\Software
Klucz Usunięto : [x64] HKLM\SOFTWARE\LevelQualityWatcher

***** [ Przeglądarki internetowe ] *****

-\\ Internet Explorer v8.0.7600.16385


-\\ Mozilla Firefox v29.0.1 (pl)

[ Plik : C:\Users\MSI\AppData\Roaming\Mozilla\Firefox\Profiles\dh6r5rih.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [1686 octets] - [03/06/2014 14:15:11]
AdwCleaner[S0].txt - [1524 octets] - [03/06/2014 14:15:40]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1584 octets] ##########


Dodano Dzisiaj, 14:28:

Kod: Zaznacz wszystko

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by MSI on 2014-06-03 at 15:13:31,48
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\quiknowledge@quiknowledge.com
Emptied folder: C:\Users\MSI\AppData\Roaming\mozilla\firefox\profiles\dh6r5rih.default\minidumps [45 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 2014-06-03 at 15:20:17,55
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


[Łowca Androidów]

Jakaś poprawa?

[michu47]

Po podłączeniu Mp3 nie wyświetla już ze jest wirus ale rozłącza ja po chwili i załącza znów i tak cały czas

[Łowca Androidów]

A inne urządzenia USB (pendrive, komórka)?
Pobierz >>>Hiren's BootCD<<< - wypakuj i wypal na CD, zabootuj z tej CD i z menu wyiberz Mini Windows XP. Po załadowaniu MiniXP podepnij MP3ke i sprawdź jak się zachowuje.

[michu47]

Inne urządzenia dzialaja poprawnie pod innym komputerem mp3 tak samo sie zachowuje

[Łowca Androidów]

Z innym kablem próbowałeś?

[michu475]

Tak jest to samo

[Łowca Androidów]

Czy pobrałeś jak pisałem MiniXP żeby sprawdzić jak się mp3 zachowa pod LiveCD?

[michu47]

Tak właśnie sprawdziłem i objaw jest ten sam na chwile wykrywa mp3 i wylacza i tak co chwile

[Łowca Androidów]

Ja bym tu bardziej obstawiał uszkodzenie mp3ki niż infekcję.

[michu47]

Dzieki za pomoc no trudno